SAE: Add support for ECC group 21 (521-bit random ECP group)
In addition to the trivial change in adding the new group ientifier, this required changes to KDF and random number generation to support cases where the length of the prime in bits is not a multiple of eight. The binary presentation of the value needs to be shifted so that the unused most significant bits are the zero padding rather than the extra bits in the end of the array. Signed-hostap: Jouni Malinen <j@w1.fi>
This commit is contained in:
parent
bf14657b9f
commit
cd9c2714e7
6 changed files with 88 additions and 14 deletions
|
@ -917,6 +917,9 @@ struct crypto_ec * crypto_ec_init(int group)
|
|||
case 20:
|
||||
nid = NID_secp384r1;
|
||||
break;
|
||||
case 21:
|
||||
nid = NID_secp521r1;
|
||||
break;
|
||||
case 25:
|
||||
nid = NID_X9_62_prime192v1;
|
||||
break;
|
||||
|
@ -972,6 +975,12 @@ size_t crypto_ec_prime_len(struct crypto_ec *e)
|
|||
}
|
||||
|
||||
|
||||
size_t crypto_ec_prime_len_bits(struct crypto_ec *e)
|
||||
{
|
||||
return BN_num_bits(e->prime);
|
||||
}
|
||||
|
||||
|
||||
const struct crypto_bignum * crypto_ec_get_prime(struct crypto_ec *e)
|
||||
{
|
||||
return (const struct crypto_bignum *) e->prime;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue