jiigen666/i2pd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

set random two highest bits

Browse Source
This commit is contained in:
orignal
2020-01-21 12:18:31 -05:00
parent 0e666e7d6a
commit f497a74ec4
2 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
libi2pd/Elligator.cpp
View File

@@ -1,3 +1,4 @@
#include <openssl/rand.h>
#include "Crypto.h"
#include "Elligator.h"
@@ -39,8 +40,8 @@ namespace crypto
BN_free (u); BN_free (iu);
}
bool Elligator2::Encode (const uint8_t * key, uint8_t * encoded, bool highY) const
{
bool Elligator2::Encode (const uint8_t * key, uint8_t * encoded) const
{
bool ret = true;
BN_CTX * ctx = BN_CTX_new ();
BN_CTX_start (ctx);
@@ -61,7 +62,11 @@ namespace crypto
BN_mod_mul (uxxA, uxxA, xA, p, ctx);
if (Legendre (uxxA, ctx) != -1)
{
{
uint8_t randByte; // random highest bits and high y
RAND_bytes (&randByte, 1);
bool highY = randByte & 0x01;
BIGNUM * r = BN_CTX_get (ctx);
if (highY)
{
@@ -78,6 +83,7 @@ namespace crypto
SquareRoot (r, r, ctx);
bn2buf (r, encoded, 32);
encoded[0] |= (randByte & 0xC0); // copy two highest bits from randByte
for (size_t i = 0; i < 16; i++) // To Little Endian
{
uint8_t tmp = encoded[i];
@@ -105,6 +111,7 @@ namespace crypto
encoded1[i] = encoded[31 - i];
encoded1[31 - i] = encoded[i];
}
encoded1[0] &= 0x3F; // drop two highest bits
BIGNUM * r = BN_CTX_get (ctx); BN_bin2bn (encoded1, 32, r);