root/crypto/libecc/include/libecc/sig/bip0340.h
/*
 *  Copyright (C) 2022 - This file is part of libecc project
 *
 *  Authors:
 *      Ryad BENADJILA <ryadbenadjila@gmail.com>
 *      Arnaud EBALARD <arnaud.ebalard@ssi.gouv.fr>
 *
 *  This software is licensed under a dual BSD and GPL v2 license.
 *  See LICENSE file at the root folder of the project.
 */
#include <libecc/lib_ecc_config.h>
#include <libecc/lib_ecc_types.h>
#ifdef WITH_SIG_BIP0340

#ifndef __BIP0340_H__
#define __BIP0340_H__

#include <libecc/sig/ec_key.h>
#include <libecc/utils/utils.h>
#include <libecc/hash/hash_algs.h>
#include <libecc/curves/curves.h>

#define BIP0340_R_LEN(p_bit_len) (BYTECEIL(p_bit_len))
#define BIP0340_S_LEN(q_bit_len) (BYTECEIL(q_bit_len))
#define BIP0340_SIGLEN(p_bit_len, q_bit_len) (BIP0340_R_LEN(p_bit_len) + \
                                              BIP0340_S_LEN(q_bit_len))
#define BIP0340_MAX_SIGLEN BIP0340_SIGLEN(CURVES_MAX_P_BIT_LEN, CURVES_MAX_Q_BIT_LEN)

/*
 * Compute max signature length for all the mechanisms enabled
 * in the library (see lib_ecc_config.h). Having that done during
 * preprocessing sadly requires some verbosity.
 */
#ifndef EC_MAX_SIGLEN
#define EC_MAX_SIGLEN 0
#endif
#if ((EC_MAX_SIGLEN) < (BIP0340_MAX_SIGLEN))
#undef EC_MAX_SIGLEN
#define EC_MAX_SIGLEN BIP0340_MAX_SIGLEN
#endif

ATTRIBUTE_WARN_UNUSED_RET int bip0340_init_pub_key(ec_pub_key *out_pub, const ec_priv_key *in_priv);

ATTRIBUTE_WARN_UNUSED_RET int bip0340_siglen(u16 p_bit_len, u16 q_bit_len, u8 hsize, u8 blocksize,
                  u8 *siglen);

ATTRIBUTE_WARN_UNUSED_RET int _bip0340_sign(u8 *sig, u8 siglen, const ec_key_pair *key_pair,
                                            const u8 *m, u32 mlen, int (*rand) (nn_t out, nn_src_t q),
                                            ec_alg_type sig_type, hash_alg_type hash_type,
                                            const u8 *adata, u16 adata_len);

typedef struct {
        hash_context h_ctx;
        fp r;
        nn s;
        word_t magic;
} bip0340_verify_data;

ATTRIBUTE_WARN_UNUSED_RET int _bip0340_verify_init(struct ec_verify_context *ctx,
                        const u8 *sig, u8 siglen);

ATTRIBUTE_WARN_UNUSED_RET int _bip0340_verify_update(struct ec_verify_context *ctx,
                          const u8 *chunk, u32 chunklen);

ATTRIBUTE_WARN_UNUSED_RET int _bip0340_verify_finalize(struct ec_verify_context *ctx);

ATTRIBUTE_WARN_UNUSED_RET int bip0340_verify_batch(const u8 **s, const u8 *s_len, const ec_pub_key **pub_keys,
                                                   const u8 **m, const u32 *m_len, u32 num, ec_alg_type sig_type,
                                                   hash_alg_type hash_type, const u8 **adata, const u16 *adata_len,
                                                   verify_batch_scratch_pad *scratch_pad_area, u32 *scratch_pad_area_len);

#endif /* __BIP0340_H__ */
#endif /* WITH_SIG_BIP0340 */