grpc 1.26.0 → 1.30.0

data/third_party/boringssl/include/openssl/dsa.h

@@ -1,441 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.]
- *
- * The DSS routines are based on patches supplied by
- * Steven Schoch <schoch@sheba.arc.nasa.gov>. */
-
-#ifndef OPENSSL_HEADER_DSA_H
-#define OPENSSL_HEADER_DSA_H
-
-#include <openssl/base.h>
-
-#include <openssl/engine.h>
-#include <openssl/ex_data.h>
-#include <openssl/thread.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// DSA contains functions for signing and verifying with the Digital Signature
-// Algorithm.
-//
-// This module is deprecated and retained for legacy reasons only. It is not
-// considered a priority for performance or hardening work. Do not use it in
-// new code. Use Ed25519, ECDSA with P-256, or RSA instead.
-
-
-// Allocation and destruction.
-
-// DSA_new returns a new, empty DSA object or NULL on error.
-OPENSSL_EXPORT DSA *DSA_new(void);
-
-// DSA_free decrements the reference count of |dsa| and frees it if the
-// reference count drops to zero.
-OPENSSL_EXPORT void DSA_free(DSA *dsa);
-
-// DSA_up_ref increments the reference count of |dsa| and returns one.
-OPENSSL_EXPORT int DSA_up_ref(DSA *dsa);
-
-
-// Properties.
-
-// DSA_get0_key sets |*out_pub_key| and |*out_priv_key|, if non-NULL, to |dsa|'s
-// public and private key, respectively. If |dsa| is a public key, the private
-// key will be set to NULL.
-OPENSSL_EXPORT void DSA_get0_key(const DSA *dsa, const BIGNUM **out_pub_key,
-                                 const BIGNUM **out_priv_key);
-
-// DSA_get0_pqg sets |*out_p|, |*out_q|, and |*out_g|, if non-NULL, to |dsa|'s
-// p, q, and g parameters, respectively.
-OPENSSL_EXPORT void DSA_get0_pqg(const DSA *dsa, const BIGNUM **out_p,
-                                 const BIGNUM **out_q, const BIGNUM **out_g);
-
-// DSA_set0_key sets |dsa|'s public and private key to |pub_key| and |priv_key|,
-// respectively, if non-NULL. On success, it takes ownership of each argument
-// and returns one. Otherwise, it returns zero.
-//
-// |priv_key| may be NULL, but |pub_key| must either be non-NULL or already
-// configured on |dsa|.
-OPENSSL_EXPORT int DSA_set0_key(DSA *dsa, BIGNUM *pub_key, BIGNUM *priv_key);
-
-// DSA_set0_pqg sets |dsa|'s parameters to |p|, |q|, and |g|, if non-NULL, and
-// takes ownership of them. On success, it takes ownership of each argument and
-// returns one. Otherwise, it returns zero.
-//
-// Each argument must either be non-NULL or already configured on |dsa|.
-OPENSSL_EXPORT int DSA_set0_pqg(DSA *dsa, BIGNUM *p, BIGNUM *q, BIGNUM *g);
-
-
-// Parameter generation.
-
-// DSA_generate_parameters_ex generates a set of DSA parameters by following
-// the procedure given in FIPS 186-4, appendix A.
-// (http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf)
-//
-// The larger prime will have a length of |bits| (e.g. 2048). The |seed| value
-// allows others to generate and verify the same parameters and should be
-// random input which is kept for reference. If |out_counter| or |out_h| are
-// not NULL then the counter and h value used in the generation are written to
-// them.
-//
-// The |cb| argument is passed to |BN_generate_prime_ex| and is thus called
-// during the generation process in order to indicate progress. See the
-// comments for that function for details. In addition to the calls made by
-// |BN_generate_prime_ex|, |DSA_generate_parameters_ex| will call it with
-// |event| equal to 2 and 3 at different stages of the process.
-//
-// It returns one on success and zero otherwise.
-OPENSSL_EXPORT int DSA_generate_parameters_ex(DSA *dsa, unsigned bits,
-                                              const uint8_t *seed,
-                                              size_t seed_len, int *out_counter,
-                                              unsigned long *out_h,
-                                              BN_GENCB *cb);
-
-// DSAparams_dup returns a freshly allocated |DSA| that contains a copy of the
-// parameters from |dsa|. It returns NULL on error.
-OPENSSL_EXPORT DSA *DSAparams_dup(const DSA *dsa);
-
-
-// Key generation.
-
-// DSA_generate_key generates a public/private key pair in |dsa|, which must
-// already have parameters setup. It returns one on success and zero on
-// error.
-OPENSSL_EXPORT int DSA_generate_key(DSA *dsa);
-
-
-// Signatures.
-
-// DSA_SIG_st (aka |DSA_SIG|) contains a DSA signature as a pair of integers.
-struct DSA_SIG_st {
-  BIGNUM *r, *s;
-};
-
-// DSA_SIG_new returns a freshly allocated, DIG_SIG structure or NULL on error.
-// Both |r| and |s| in the signature will be NULL.
-OPENSSL_EXPORT DSA_SIG *DSA_SIG_new(void);
-
-// DSA_SIG_free frees the contents of |sig| and then frees |sig| itself.
-OPENSSL_EXPORT void DSA_SIG_free(DSA_SIG *sig);
-
-// DSA_do_sign returns a signature of the hash in |digest| by the key in |dsa|
-// and returns an allocated, DSA_SIG structure, or NULL on error.
-OPENSSL_EXPORT DSA_SIG *DSA_do_sign(const uint8_t *digest, size_t digest_len,
-                                    const DSA *dsa);
-
-// DSA_do_verify verifies that |sig| is a valid signature, by the public key in
-// |dsa|, of the hash in |digest|. It returns one if so, zero if invalid and -1
-// on error.
-//
-// WARNING: do not use. This function returns -1 for error, 0 for invalid and 1
-// for valid. However, this is dangerously different to the usual OpenSSL
-// convention and could be a disaster if a user did |if (DSA_do_verify(...))|.
-// Because of this, |DSA_check_signature| is a safer version of this.
-//
-// TODO(fork): deprecate.
-OPENSSL_EXPORT int DSA_do_verify(const uint8_t *digest, size_t digest_len,
-                                 DSA_SIG *sig, const DSA *dsa);
-
-// DSA_do_check_signature sets |*out_valid| to zero. Then it verifies that |sig|
-// is a valid signature, by the public key in |dsa| of the hash in |digest|
-// and, if so, it sets |*out_valid| to one.
-//
-// It returns one if it was able to verify the signature as valid or invalid,
-// and zero on error.
-OPENSSL_EXPORT int DSA_do_check_signature(int *out_valid, const uint8_t *digest,
-                                          size_t digest_len, DSA_SIG *sig,
-                                          const DSA *dsa);
-
-
-// ASN.1 signatures.
-//
-// These functions also perform DSA signature operations, but deal with ASN.1
-// encoded signatures as opposed to raw |BIGNUM|s. If you don't know what
-// encoding a DSA signature is in, it's probably ASN.1.
-
-// DSA_sign signs |digest| with the key in |dsa| and writes the resulting
-// signature, in ASN.1 form, to |out_sig| and the length of the signature to
-// |*out_siglen|. There must be, at least, |DSA_size(dsa)| bytes of space in
-// |out_sig|. It returns one on success and zero otherwise.
-//
-// (The |type| argument is ignored.)
-OPENSSL_EXPORT int DSA_sign(int type, const uint8_t *digest, size_t digest_len,
-                            uint8_t *out_sig, unsigned int *out_siglen,
-                            const DSA *dsa);
-
-// DSA_verify verifies that |sig| is a valid, ASN.1 signature, by the public
-// key in |dsa|, of the hash in |digest|. It returns one if so, zero if invalid
-// and -1 on error.
-//
-// (The |type| argument is ignored.)
-//
-// WARNING: do not use. This function returns -1 for error, 0 for invalid and 1
-// for valid. However, this is dangerously different to the usual OpenSSL
-// convention and could be a disaster if a user did |if (DSA_do_verify(...))|.
-// Because of this, |DSA_check_signature| is a safer version of this.
-//
-// TODO(fork): deprecate.
-OPENSSL_EXPORT int DSA_verify(int type, const uint8_t *digest,
-                              size_t digest_len, const uint8_t *sig,
-                              size_t sig_len, const DSA *dsa);
-
-// DSA_check_signature sets |*out_valid| to zero. Then it verifies that |sig|
-// is a valid, ASN.1 signature, by the public key in |dsa|, of the hash in
-// |digest|. If so, it sets |*out_valid| to one.
-//
-// It returns one if it was able to verify the signature as valid or invalid,
-// and zero on error.
-OPENSSL_EXPORT int DSA_check_signature(int *out_valid, const uint8_t *digest,
-                                       size_t digest_len, const uint8_t *sig,
-                                       size_t sig_len, const DSA *dsa);
-
-// DSA_size returns the size, in bytes, of an ASN.1 encoded, DSA signature
-// generated by |dsa|. Parameters must already have been setup in |dsa|.
-OPENSSL_EXPORT int DSA_size(const DSA *dsa);
-
-
-// ASN.1 encoding.
-
-// DSA_SIG_parse parses a DER-encoded DSA-Sig-Value structure from |cbs| and
-// advances |cbs|. It returns a newly-allocated |DSA_SIG| or NULL on error.
-OPENSSL_EXPORT DSA_SIG *DSA_SIG_parse(CBS *cbs);
-
-// DSA_SIG_marshal marshals |sig| as a DER-encoded DSA-Sig-Value and appends the
-// result to |cbb|. It returns one on success and zero on error.
-OPENSSL_EXPORT int DSA_SIG_marshal(CBB *cbb, const DSA_SIG *sig);
-
-// DSA_parse_public_key parses a DER-encoded DSA public key from |cbs| and
-// advances |cbs|. It returns a newly-allocated |DSA| or NULL on error.
-OPENSSL_EXPORT DSA *DSA_parse_public_key(CBS *cbs);
-
-// DSA_marshal_public_key marshals |dsa| as a DER-encoded DSA public key and
-// appends the result to |cbb|. It returns one on success and zero on
-// failure.
-OPENSSL_EXPORT int DSA_marshal_public_key(CBB *cbb, const DSA *dsa);
-
-// DSA_parse_private_key parses a DER-encoded DSA private key from |cbs| and
-// advances |cbs|. It returns a newly-allocated |DSA| or NULL on error.
-OPENSSL_EXPORT DSA *DSA_parse_private_key(CBS *cbs);
-
-// DSA_marshal_private_key marshals |dsa| as a DER-encoded DSA private key and
-// appends the result to |cbb|. It returns one on success and zero on
-// failure.
-OPENSSL_EXPORT int DSA_marshal_private_key(CBB *cbb, const DSA *dsa);
-
-// DSA_parse_parameters parses a DER-encoded Dss-Parms structure (RFC 3279)
-// from |cbs| and advances |cbs|. It returns a newly-allocated |DSA| or NULL on
-// error.
-OPENSSL_EXPORT DSA *DSA_parse_parameters(CBS *cbs);
-
-// DSA_marshal_parameters marshals |dsa| as a DER-encoded Dss-Parms structure
-// (RFC 3447) and appends the result to |cbb|. It returns one on success and
-// zero on failure.
-OPENSSL_EXPORT int DSA_marshal_parameters(CBB *cbb, const DSA *dsa);
-
-
-// Conversion.
-
-// DSA_dup_DH returns a |DH| constructed from the parameters of |dsa|. This is
-// sometimes needed when Diffie-Hellman parameters are stored in the form of
-// DSA parameters. It returns an allocated |DH| on success or NULL on error.
-OPENSSL_EXPORT DH *DSA_dup_DH(const DSA *dsa);
-
-
-// ex_data functions.
-//
-// See |ex_data.h| for details.
-
-OPENSSL_EXPORT int DSA_get_ex_new_index(long argl, void *argp,
-                                        CRYPTO_EX_unused *unused,
-                                        CRYPTO_EX_dup *dup_unused,
-                                        CRYPTO_EX_free *free_func);
-OPENSSL_EXPORT int DSA_set_ex_data(DSA *dsa, int idx, void *arg);
-OPENSSL_EXPORT void *DSA_get_ex_data(const DSA *dsa, int idx);
-
-
-// Deprecated functions.
-
-// d2i_DSA_SIG parses an ASN.1, DER-encoded, DSA signature from |len| bytes at
-// |*inp|. If |out_sig| is not NULL then, on exit, a pointer to the result is
-// in |*out_sig|. Note that, even if |*out_sig| is already non-NULL on entry, it
-// will not be written to. Rather, a fresh |DSA_SIG| is allocated and the
-// previous one is freed. On successful exit, |*inp| is advanced past the DER
-// structure. It returns the result or NULL on error.
-//
-// Use |DSA_SIG_parse| instead.
-OPENSSL_EXPORT DSA_SIG *d2i_DSA_SIG(DSA_SIG **out_sig, const uint8_t **inp,
-                                    long len);
-
-// i2d_DSA_SIG marshals |in| to an ASN.1, DER structure. If |outp| is not NULL
-// then the result is written to |*outp| and |*outp| is advanced just past the
-// output. It returns the number of bytes in the result, whether written or not,
-// or a negative value on error.
-//
-// Use |DSA_SIG_marshal| instead.
-OPENSSL_EXPORT int i2d_DSA_SIG(const DSA_SIG *in, uint8_t **outp);
-
-// d2i_DSAPublicKey parses an ASN.1, DER-encoded, DSA public key from |len|
-// bytes at |*inp|. If |out| is not NULL then, on exit, a pointer to the result
-// is in |*out|. Note that, even if |*ou| is already non-NULL on entry, it will
-// not be written to. Rather, a fresh |DSA| is allocated and the previous one is
-// freed. On successful exit, |*inp| is advanced past the DER structure. It
-// returns the result or NULL on error.
-//
-// Use |DSA_parse_public_key| instead.
-OPENSSL_EXPORT DSA *d2i_DSAPublicKey(DSA **out, const uint8_t **inp, long len);
-
-// i2d_DSAPublicKey marshals a public key from |in| to an ASN.1, DER structure.
-// If |outp| is not NULL then the result is written to |*outp| and |*outp| is
-// advanced just past the output. It returns the number of bytes in the result,
-// whether written or not, or a negative value on error.
-//
-// Use |DSA_marshal_public_key| instead.
-OPENSSL_EXPORT int i2d_DSAPublicKey(const DSA *in, uint8_t **outp);
-
-// d2i_DSAPrivateKey parses an ASN.1, DER-encoded, DSA private key from |len|
-// bytes at |*inp|. If |out| is not NULL then, on exit, a pointer to the result
-// is in |*out|. Note that, even if |*out| is already non-NULL on entry, it will
-// not be written to. Rather, a fresh |DSA| is allocated and the previous one is
-// freed. On successful exit, |*inp| is advanced past the DER structure. It
-// returns the result or NULL on error.
-//
-// Use |DSA_parse_private_key| instead.
-OPENSSL_EXPORT DSA *d2i_DSAPrivateKey(DSA **out, const uint8_t **inp, long len);
-
-// i2d_DSAPrivateKey marshals a private key from |in| to an ASN.1, DER
-// structure. If |outp| is not NULL then the result is written to |*outp| and
-// |*outp| is advanced just past the output. It returns the number of bytes in
-// the result, whether written or not, or a negative value on error.
-//
-// Use |DSA_marshal_private_key| instead.
-OPENSSL_EXPORT int i2d_DSAPrivateKey(const DSA *in, uint8_t **outp);
-
-// d2i_DSAparams parses ASN.1, DER-encoded, DSA parameters from |len| bytes at
-// |*inp|. If |out| is not NULL then, on exit, a pointer to the result is in
-// |*out|. Note that, even if |*out| is already non-NULL on entry, it will not
-// be written to. Rather, a fresh |DSA| is allocated and the previous one is
-// freed. On successful exit, |*inp| is advanced past the DER structure. It
-// returns the result or NULL on error.
-//
-// Use |DSA_parse_parameters| instead.
-OPENSSL_EXPORT DSA *d2i_DSAparams(DSA **out, const uint8_t **inp, long len);
-
-// i2d_DSAparams marshals DSA parameters from |in| to an ASN.1, DER structure.
-// If |outp| is not NULL then the result is written to |*outp| and |*outp| is
-// advanced just past the output. It returns the number of bytes in the result,
-// whether written or not, or a negative value on error.
-//
-// Use |DSA_marshal_parameters| instead.
-OPENSSL_EXPORT int i2d_DSAparams(const DSA *in, uint8_t **outp);
-
-// DSA_generate_parameters is a deprecated version of
-// |DSA_generate_parameters_ex| that creates and returns a |DSA*|. Don't use
-// it.
-OPENSSL_EXPORT DSA *DSA_generate_parameters(int bits, unsigned char *seed,
-                                            int seed_len, int *counter_ret,
-                                            unsigned long *h_ret,
-                                            void (*callback)(int, int, void *),
-                                            void *cb_arg);
-
-
-struct dsa_st {
-  long version;
-  BIGNUM *p;
-  BIGNUM *q;  // == 20
-  BIGNUM *g;
-
-  BIGNUM *pub_key;   // y public key
-  BIGNUM *priv_key;  // x private key
-
-  int flags;
-  // Normally used to cache montgomery values
-  CRYPTO_MUTEX method_mont_lock;
-  BN_MONT_CTX *method_mont_p;
-  BN_MONT_CTX *method_mont_q;
-  CRYPTO_refcount_t references;
-  CRYPTO_EX_DATA ex_data;
-};
-
-
-#if defined(__cplusplus)
-}  // extern C
-
-extern "C++" {
-
-BSSL_NAMESPACE_BEGIN
-
-BORINGSSL_MAKE_DELETER(DSA, DSA_free)
-BORINGSSL_MAKE_UP_REF(DSA, DSA_up_ref)
-BORINGSSL_MAKE_DELETER(DSA_SIG, DSA_SIG_free)
-
-BSSL_NAMESPACE_END
-
-}  // extern C++
-
-#endif
-
-#define DSA_R_BAD_Q_VALUE 100
-#define DSA_R_MISSING_PARAMETERS 101
-#define DSA_R_MODULUS_TOO_LARGE 102
-#define DSA_R_NEED_NEW_SETUP_VALUES 103
-#define DSA_R_BAD_VERSION 104
-#define DSA_R_DECODE_ERROR 105
-#define DSA_R_ENCODE_ERROR 106
-#define DSA_R_INVALID_PARAMETERS 107
-
-#endif  // OPENSSL_HEADER_DSA_H

data/third_party/boringssl/include/openssl/ec.h

@@ -1,417 +0,0 @@
-/* Originally written by Bodo Moeller for the OpenSSL project.
- * ====================================================================
- * Copyright (c) 1998-2005 The OpenSSL Project.  All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- *
- * 1. Redistributions of source code must retain the above copyright
- *    notice, this list of conditions and the following disclaimer.
- *
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in
- *    the documentation and/or other materials provided with the
- *    distribution.
- *
- * 3. All advertising materials mentioning features or use of this
- *    software must display the following acknowledgment:
- *    "This product includes software developed by the OpenSSL Project
- *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
- *
- * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
- *    endorse or promote products derived from this software without
- *    prior written permission. For written permission, please contact
- *    openssl-core@openssl.org.
- *
- * 5. Products derived from this software may not be called "OpenSSL"
- *    nor may "OpenSSL" appear in their names without prior written
- *    permission of the OpenSSL Project.
- *
- * 6. Redistributions of any form whatsoever must retain the following
- *    acknowledgment:
- *    "This product includes software developed by the OpenSSL Project
- *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
- *
- * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
- * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
- * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
- * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
- * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
- * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
- * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
- * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
- * OF THE POSSIBILITY OF SUCH DAMAGE.
- * ====================================================================
- *
- * This product includes cryptographic software written by Eric Young
- * (eay@cryptsoft.com).  This product includes software written by Tim
- * Hudson (tjh@cryptsoft.com).
- *
- */
-/* ====================================================================
- * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
- *
- * Portions of the attached software ("Contribution") are developed by
- * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
- *
- * The Contribution is licensed pursuant to the OpenSSL open source
- * license provided above.
- *
- * The elliptic curve binary polynomial software is originally written by
- * Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems
- * Laboratories. */
-
-#ifndef OPENSSL_HEADER_EC_H
-#define OPENSSL_HEADER_EC_H
-
-#include <openssl/base.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// Low-level operations on elliptic curves.
-
-
-// point_conversion_form_t enumerates forms, as defined in X9.62 (ECDSA), for
-// the encoding of a elliptic curve point (x,y)
-typedef enum {
-  // POINT_CONVERSION_COMPRESSED indicates that the point is encoded as z||x,
-  // where the octet z specifies which solution of the quadratic equation y
-  // is.
-  POINT_CONVERSION_COMPRESSED = 2,
-
-  // POINT_CONVERSION_UNCOMPRESSED indicates that the point is encoded as
-  // z||x||y, where z is the octet 0x04.
-  POINT_CONVERSION_UNCOMPRESSED = 4,
-
-  // POINT_CONVERSION_HYBRID indicates that the point is encoded as z||x||y,
-  // where z specifies which solution of the quadratic equation y is. This is
-  // not supported by the code and has never been observed in use.
-  //
-  // TODO(agl): remove once node.js no longer references this.
-  POINT_CONVERSION_HYBRID = 6,
-} point_conversion_form_t;
-
-
-// Elliptic curve groups.
-
-// EC_GROUP_new_by_curve_name returns a fresh EC_GROUP object for the elliptic
-// curve specified by |nid|, or NULL on unsupported NID or allocation failure.
-//
-// The supported NIDs are:
-//   NID_secp224r1 (P-224),
-//   NID_X9_62_prime256v1 (P-256),
-//   NID_secp384r1 (P-384),
-//   NID_secp521r1 (P-521)
-//
-// If in doubt, use |NID_X9_62_prime256v1|, or see the curve25519.h header for
-// more modern primitives.
-OPENSSL_EXPORT EC_GROUP *EC_GROUP_new_by_curve_name(int nid);
-
-// EC_GROUP_free releases a reference to |group|.
-OPENSSL_EXPORT void EC_GROUP_free(EC_GROUP *group);
-
-// EC_GROUP_dup takes a reference to |a| and returns it.
-OPENSSL_EXPORT EC_GROUP *EC_GROUP_dup(const EC_GROUP *a);
-
-// EC_GROUP_cmp returns zero if |a| and |b| are the same group and non-zero
-// otherwise.
-OPENSSL_EXPORT int EC_GROUP_cmp(const EC_GROUP *a, const EC_GROUP *b,
-                                BN_CTX *ignored);
-
-// EC_GROUP_get0_generator returns a pointer to the internal |EC_POINT| object
-// in |group| that specifies the generator for the group.
-OPENSSL_EXPORT const EC_POINT *EC_GROUP_get0_generator(const EC_GROUP *group);
-
-// EC_GROUP_get0_order returns a pointer to the internal |BIGNUM| object in
-// |group| that specifies the order of the group.
-OPENSSL_EXPORT const BIGNUM *EC_GROUP_get0_order(const EC_GROUP *group);
-
-// EC_GROUP_order_bits returns the number of bits of the order of |group|.
-OPENSSL_EXPORT int EC_GROUP_order_bits(const EC_GROUP *group);
-
-// EC_GROUP_get_cofactor sets |*cofactor| to the cofactor of |group| using
-// |ctx|, if it's not NULL. It returns one on success and zero otherwise.
-OPENSSL_EXPORT int EC_GROUP_get_cofactor(const EC_GROUP *group,
-                                         BIGNUM *cofactor, BN_CTX *ctx);
-
-// EC_GROUP_get_curve_GFp gets various parameters about a group. It sets
-// |*out_p| to the order of the coordinate field and |*out_a| and |*out_b| to
-// the parameters of the curve when expressed as y² = x³ + ax + b. Any of the
-// output parameters can be NULL. It returns one on success and zero on
-// error.
-OPENSSL_EXPORT int EC_GROUP_get_curve_GFp(const EC_GROUP *group, BIGNUM *out_p,
-                                          BIGNUM *out_a, BIGNUM *out_b,
-                                          BN_CTX *ctx);
-
-// EC_GROUP_get_curve_name returns a NID that identifies |group|.
-OPENSSL_EXPORT int EC_GROUP_get_curve_name(const EC_GROUP *group);
-
-// EC_GROUP_get_degree returns the number of bits needed to represent an
-// element of the field underlying |group|.
-OPENSSL_EXPORT unsigned EC_GROUP_get_degree(const EC_GROUP *group);
-
-// EC_curve_nid2nist returns the NIST name of the elliptic curve specified by
-// |nid|, or NULL if |nid| is not a NIST curve. For example, it returns "P-256"
-// for |NID_X9_62_prime256v1|.
-OPENSSL_EXPORT const char *EC_curve_nid2nist(int nid);
-
-// EC_curve_nist2nid returns the NID of the elliptic curve specified by the NIST
-// name |name|, or |NID_undef| if |name| is not a recognized name. For example,
-// it returns |NID_X9_62_prime256v1| for "P-256".
-OPENSSL_EXPORT int EC_curve_nist2nid(const char *name);
-
-
-// Points on elliptic curves.
-
-// EC_POINT_new returns a fresh |EC_POINT| object in the given group, or NULL
-// on error.
-OPENSSL_EXPORT EC_POINT *EC_POINT_new(const EC_GROUP *group);
-
-// EC_POINT_free frees |point| and the data that it points to.
-OPENSSL_EXPORT void EC_POINT_free(EC_POINT *point);
-
-// EC_POINT_copy sets |*dest| equal to |*src|. It returns one on success and
-// zero otherwise.
-OPENSSL_EXPORT int EC_POINT_copy(EC_POINT *dest, const EC_POINT *src);
-
-// EC_POINT_dup returns a fresh |EC_POINT| that contains the same values as
-// |src|, or NULL on error.
-OPENSSL_EXPORT EC_POINT *EC_POINT_dup(const EC_POINT *src,
-                                      const EC_GROUP *group);
-
-// EC_POINT_set_to_infinity sets |point| to be the "point at infinity" for the
-// given group.
-OPENSSL_EXPORT int EC_POINT_set_to_infinity(const EC_GROUP *group,
-                                            EC_POINT *point);
-
-// EC_POINT_is_at_infinity returns one iff |point| is the point at infinity and
-// zero otherwise.
-OPENSSL_EXPORT int EC_POINT_is_at_infinity(const EC_GROUP *group,
-                                           const EC_POINT *point);
-
-// EC_POINT_is_on_curve returns one if |point| is an element of |group| and
-// and zero otherwise or when an error occurs. This is different from OpenSSL,
-// which returns -1 on error. If |ctx| is non-NULL, it may be used.
-OPENSSL_EXPORT int EC_POINT_is_on_curve(const EC_GROUP *group,
-                                        const EC_POINT *point, BN_CTX *ctx);
-
-// EC_POINT_cmp returns zero if |a| is equal to |b|, greater than zero if
-// not equal and -1 on error. If |ctx| is not NULL, it may be used.
-OPENSSL_EXPORT int EC_POINT_cmp(const EC_GROUP *group, const EC_POINT *a,
-                                const EC_POINT *b, BN_CTX *ctx);
-
-
-// Point conversion.
-
-// EC_POINT_get_affine_coordinates_GFp sets |x| and |y| to the affine value of
-// |point| using |ctx|, if it's not NULL. It returns one on success and zero
-// otherwise.
-//
-// Either |x| or |y| may be NULL to skip computing that coordinate. This is
-// slightly faster in the common case where only the x-coordinate is needed.
-OPENSSL_EXPORT int EC_POINT_get_affine_coordinates_GFp(const EC_GROUP *group,
-                                                       const EC_POINT *point,
-                                                       BIGNUM *x, BIGNUM *y,
-                                                       BN_CTX *ctx);
-
-// EC_POINT_set_affine_coordinates_GFp sets the value of |point| to be
-// (|x|, |y|). The |ctx| argument may be used if not NULL. It returns one
-// on success or zero on error. Note that, unlike with OpenSSL, it's
-// considered an error if the point is not on the curve.
-OPENSSL_EXPORT int EC_POINT_set_affine_coordinates_GFp(const EC_GROUP *group,
-                                                       EC_POINT *point,
-                                                       const BIGNUM *x,
-                                                       const BIGNUM *y,
-                                                       BN_CTX *ctx);
-
-// EC_POINT_point2oct serialises |point| into the X9.62 form given by |form|
-// into, at most, |len| bytes at |buf|. It returns the number of bytes written
-// or zero on error if |buf| is non-NULL, else the number of bytes needed. The
-// |ctx| argument may be used if not NULL.
-OPENSSL_EXPORT size_t EC_POINT_point2oct(const EC_GROUP *group,
-                                         const EC_POINT *point,
-                                         point_conversion_form_t form,
-                                         uint8_t *buf, size_t len, BN_CTX *ctx);
-
-// EC_POINT_point2cbb behaves like |EC_POINT_point2oct| but appends the
-// serialised point to |cbb|. It returns one on success and zero on error.
-OPENSSL_EXPORT int EC_POINT_point2cbb(CBB *out, const EC_GROUP *group,
-                                      const EC_POINT *point,
-                                      point_conversion_form_t form,
-                                      BN_CTX *ctx);
-
-// EC_POINT_oct2point sets |point| from |len| bytes of X9.62 format
-// serialisation in |buf|. It returns one on success and zero otherwise. The
-// |ctx| argument may be used if not NULL.
-OPENSSL_EXPORT int EC_POINT_oct2point(const EC_GROUP *group, EC_POINT *point,
-                                      const uint8_t *buf, size_t len,
-                                      BN_CTX *ctx);
-
-// EC_POINT_set_compressed_coordinates_GFp sets |point| to equal the point with
-// the given |x| coordinate and the y coordinate specified by |y_bit| (see
-// X9.62). It returns one on success and zero otherwise.
-OPENSSL_EXPORT int EC_POINT_set_compressed_coordinates_GFp(
-    const EC_GROUP *group, EC_POINT *point, const BIGNUM *x, int y_bit,
-    BN_CTX *ctx);
-
-
-// Group operations.
-
-// EC_POINT_add sets |r| equal to |a| plus |b|. It returns one on success and
-// zero otherwise. If |ctx| is not NULL, it may be used.
-OPENSSL_EXPORT int EC_POINT_add(const EC_GROUP *group, EC_POINT *r,
-                                const EC_POINT *a, const EC_POINT *b,
-                                BN_CTX *ctx);
-
-// EC_POINT_dbl sets |r| equal to |a| plus |a|. It returns one on success and
-// zero otherwise. If |ctx| is not NULL, it may be used.
-OPENSSL_EXPORT int EC_POINT_dbl(const EC_GROUP *group, EC_POINT *r,
-                                const EC_POINT *a, BN_CTX *ctx);
-
-// EC_POINT_invert sets |a| equal to minus |a|. It returns one on success and
-// zero otherwise. If |ctx| is not NULL, it may be used.
-OPENSSL_EXPORT int EC_POINT_invert(const EC_GROUP *group, EC_POINT *a,
-                                   BN_CTX *ctx);
-
-// EC_POINT_mul sets r = generator*n + q*m. It returns one on success and zero
-// otherwise. If |ctx| is not NULL, it may be used.
-OPENSSL_EXPORT int EC_POINT_mul(const EC_GROUP *group, EC_POINT *r,
-                                const BIGNUM *n, const EC_POINT *q,
-                                const BIGNUM *m, BN_CTX *ctx);
-
-
-// Deprecated functions.
-
-// EC_GROUP_new_curve_GFp creates a new, arbitrary elliptic curve group based
-// on the equation y² = x³ + a·x + b. It returns the new group or NULL on
-// error.
-//
-// This new group has no generator. It is an error to use a generator-less group
-// with any functions except for |EC_GROUP_free|, |EC_POINT_new|,
-// |EC_POINT_set_affine_coordinates_GFp|, and |EC_GROUP_set_generator|.
-//
-// |EC_GROUP|s returned by this function will always compare as unequal via
-// |EC_GROUP_cmp| (even to themselves). |EC_GROUP_get_curve_name| will always
-// return |NID_undef|.
-//
-// Avoid using arbitrary curves and use |EC_GROUP_new_by_curve_name| instead.
-OPENSSL_EXPORT EC_GROUP *EC_GROUP_new_curve_GFp(const BIGNUM *p,
-                                                const BIGNUM *a,
-                                                const BIGNUM *b, BN_CTX *ctx);
-
-// EC_GROUP_set_generator sets the generator for |group| to |generator|, which
-// must have the given order and cofactor. It may only be used with |EC_GROUP|
-// objects returned by |EC_GROUP_new_curve_GFp| and may only be used once on
-// each group. |generator| must have been created using |group|.
-OPENSSL_EXPORT int EC_GROUP_set_generator(EC_GROUP *group,
-                                          const EC_POINT *generator,
-                                          const BIGNUM *order,
-                                          const BIGNUM *cofactor);
-
-// EC_GROUP_get_order sets |*order| to the order of |group|, if it's not
-// NULL. It returns one on success and zero otherwise. |ctx| is ignored. Use
-// |EC_GROUP_get0_order| instead.
-OPENSSL_EXPORT int EC_GROUP_get_order(const EC_GROUP *group, BIGNUM *order,
-                                      BN_CTX *ctx);
-
-// EC_GROUP_set_asn1_flag does nothing.
-OPENSSL_EXPORT void EC_GROUP_set_asn1_flag(EC_GROUP *group, int flag);
-
-#define OPENSSL_EC_NAMED_CURVE 0
-#define OPENSSL_EC_EXPLICIT_CURVE 1
-
-typedef struct ec_method_st EC_METHOD;
-
-// EC_GROUP_method_of returns a dummy non-NULL pointer.
-OPENSSL_EXPORT const EC_METHOD *EC_GROUP_method_of(const EC_GROUP *group);
-
-// EC_METHOD_get_field_type returns NID_X9_62_prime_field.
-OPENSSL_EXPORT int EC_METHOD_get_field_type(const EC_METHOD *meth);
-
-// EC_GROUP_set_point_conversion_form aborts the process if |form| is not
-// |POINT_CONVERSION_UNCOMPRESSED| and otherwise does nothing.
-OPENSSL_EXPORT void EC_GROUP_set_point_conversion_form(
-    EC_GROUP *group, point_conversion_form_t form);
-
-// EC_builtin_curve describes a supported elliptic curve.
-typedef struct {
-  int nid;
-  const char *comment;
-} EC_builtin_curve;
-
-// EC_get_builtin_curves writes at most |max_num_curves| elements to
-// |out_curves| and returns the total number that it would have written, had
-// |max_num_curves| been large enough.
-//
-// The |EC_builtin_curve| items describe the supported elliptic curves.
-OPENSSL_EXPORT size_t EC_get_builtin_curves(EC_builtin_curve *out_curves,
-                                            size_t max_num_curves);
-
-// EC_POINT_clear_free calls |EC_POINT_free|.
-OPENSSL_EXPORT void EC_POINT_clear_free(EC_POINT *point);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-// Old code expects to get EC_KEY from ec.h.
-#include <openssl/ec_key.h>
-
-#if defined(__cplusplus)
-extern "C++" {
-
-BSSL_NAMESPACE_BEGIN
-
-BORINGSSL_MAKE_DELETER(EC_POINT, EC_POINT_free)
-BORINGSSL_MAKE_DELETER(EC_GROUP, EC_GROUP_free)
-
-BSSL_NAMESPACE_END
-
-}  // extern C++
-
-#endif
-
-#define EC_R_BUFFER_TOO_SMALL 100
-#define EC_R_COORDINATES_OUT_OF_RANGE 101
-#define EC_R_D2I_ECPKPARAMETERS_FAILURE 102
-#define EC_R_EC_GROUP_NEW_BY_NAME_FAILURE 103
-#define EC_R_GROUP2PKPARAMETERS_FAILURE 104
-#define EC_R_I2D_ECPKPARAMETERS_FAILURE 105
-#define EC_R_INCOMPATIBLE_OBJECTS 106
-#define EC_R_INVALID_COMPRESSED_POINT 107
-#define EC_R_INVALID_COMPRESSION_BIT 108
-#define EC_R_INVALID_ENCODING 109
-#define EC_R_INVALID_FIELD 110
-#define EC_R_INVALID_FORM 111
-#define EC_R_INVALID_GROUP_ORDER 112
-#define EC_R_INVALID_PRIVATE_KEY 113
-#define EC_R_MISSING_PARAMETERS 114
-#define EC_R_MISSING_PRIVATE_KEY 115
-#define EC_R_NON_NAMED_CURVE 116
-#define EC_R_NOT_INITIALIZED 117
-#define EC_R_PKPARAMETERS2GROUP_FAILURE 118
-#define EC_R_POINT_AT_INFINITY 119
-#define EC_R_POINT_IS_NOT_ON_CURVE 120
-#define EC_R_SLOT_FULL 121
-#define EC_R_UNDEFINED_GENERATOR 122
-#define EC_R_UNKNOWN_GROUP 123
-#define EC_R_UNKNOWN_ORDER 124
-#define EC_R_WRONG_ORDER 125
-#define EC_R_BIGNUM_OUT_OF_RANGE 126
-#define EC_R_WRONG_CURVE_PARAMETERS 127
-#define EC_R_DECODE_ERROR 128
-#define EC_R_ENCODE_ERROR 129
-#define EC_R_GROUP_MISMATCH 130
-#define EC_R_INVALID_COFACTOR 131
-#define EC_R_PUBLIC_KEY_VALIDATION_FAILED 132
-#define EC_R_INVALID_SCALAR 133
-
-#endif  // OPENSSL_HEADER_EC_H