Path: blob/main/contrib/bearssl/src/int/i15_reduce.c
39483 views
/*1* Copyright (c) 2017 Thomas Pornin <[email protected]>2*3* Permission is hereby granted, free of charge, to any person obtaining4* a copy of this software and associated documentation files (the5* "Software"), to deal in the Software without restriction, including6* without limitation the rights to use, copy, modify, merge, publish,7* distribute, sublicense, and/or sell copies of the Software, and to8* permit persons to whom the Software is furnished to do so, subject to9* the following conditions:10*11* The above copyright notice and this permission notice shall be12* included in all copies or substantial portions of the Software.13*14* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,15* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF16* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND17* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS18* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN19* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN20* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE21* SOFTWARE.22*/2324#include "inner.h"2526/* see inner.h */27void28br_i15_reduce(uint16_t *x, const uint16_t *a, const uint16_t *m)29{30uint32_t m_bitlen, a_bitlen;31size_t mlen, alen, u;3233m_bitlen = m[0];34mlen = (m_bitlen + 15) >> 4;3536x[0] = m_bitlen;37if (m_bitlen == 0) {38return;39}4041/*42* If the source is shorter, then simply copy all words from a[]43* and zero out the upper words.44*/45a_bitlen = a[0];46alen = (a_bitlen + 15) >> 4;47if (a_bitlen < m_bitlen) {48memcpy(x + 1, a + 1, alen * sizeof *a);49for (u = alen; u < mlen; u ++) {50x[u + 1] = 0;51}52return;53}5455/*56* The source length is at least equal to that of the modulus.57* We must thus copy N-1 words, and input the remaining words58* one by one.59*/60memcpy(x + 1, a + 2 + (alen - mlen), (mlen - 1) * sizeof *a);61x[mlen] = 0;62for (u = 1 + alen - mlen; u > 0; u --) {63br_i15_muladd_small(x, a[u], m);64}65}666768