visaljs 0.0.1 → 0.0.3

package/runtime/third_party/bearssl/src/rsa/rsa_i32_pss_sign.c

@@ -1,40 +0,0 @@
-/*
- * Copyright (c) 2018 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-/* see bearssl_rsa.h */
-uint32_t
-br_rsa_i32_pss_sign(const br_prng_class **rng,
-	const br_hash_class *hf_data, const br_hash_class *hf_mgf1,
-	const unsigned char *hash, size_t salt_len,
-	const br_rsa_private_key *sk, unsigned char *x)
-{
-	if (!br_rsa_pss_sig_pad(rng, hf_data, hf_mgf1, hash,
-		salt_len, sk->n_bitlen, x))
-	{
-		return 0;
-	}
-	return br_rsa_i32_private(x, sk);
-}

package/runtime/third_party/bearssl/src/rsa/rsa_i32_pss_vrfy.c

@@ -1,44 +0,0 @@
-/*
- * Copyright (c) 2018 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-/* see bearssl_rsa.h */
-uint32_t
-br_rsa_i32_pss_vrfy(const unsigned char *x, size_t xlen,
-	const br_hash_class *hf_data, const br_hash_class *hf_mgf1,
-	const void *hash, size_t salt_len, const br_rsa_public_key *pk)
-{
-	unsigned char sig[BR_MAX_RSA_SIZE >> 3];
-
-	if (xlen > (sizeof sig)) {
-		return 0;
-	}
-	memcpy(sig, x, xlen);
-	if (!br_rsa_i32_public(sig, xlen, pk)) {
-		return 0;
-	}
-	return br_rsa_pss_sig_unpad(hf_data, hf_mgf1,
-		hash, salt_len, pk, sig);
-}

package/runtime/third_party/bearssl/src/rsa/rsa_i32_pub.c

@@ -1,77 +0,0 @@
-/*
- * Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-/* see bearssl_rsa.h */
-uint32_t
-br_rsa_i32_public(unsigned char *x, size_t xlen,
-	const br_rsa_public_key *pk)
-{
-	const unsigned char *n;
-	size_t nlen;
-	uint32_t m[1 + (BR_MAX_RSA_SIZE >> 5)];
-	uint32_t a[1 + (BR_MAX_RSA_SIZE >> 5)];
-	uint32_t t1[1 + (BR_MAX_RSA_SIZE >> 5)];
-	uint32_t t2[1 + (BR_MAX_RSA_SIZE >> 5)];
-	uint32_t m0i, r;
-
-	/*
-	 * Get the actual length of the modulus, and see if it fits within
-	 * our stack buffer. We also check that the length of x[] is valid.
-	 */
-	n = pk->n;
-	nlen = pk->nlen;
-	while (nlen > 0 && *n == 0) {
-		n ++;
-		nlen --;
-	}
-	if (nlen == 0 || nlen > (BR_MAX_RSA_SIZE >> 3) || xlen != nlen) {
-		return 0;
-	}
-	br_i32_decode(m, n, nlen);
-	m0i = br_i32_ninv32(m[1]);
-
-	/*
-	 * Note: if m[] is even, then m0i == 0. Otherwise, m0i must be
-	 * an odd integer.
-	 */
-	r = m0i & 1;
-
-	/*
-	 * Decode x[] into a[]; we also check that its value is proper.
-	 */
-	r &= br_i32_decode_mod(a, x, xlen, m);
-
-	/*
-	 * Compute the modular exponentiation.
-	 */
-	br_i32_modpow(a, pk->e, pk->elen, m, m0i, t1, t2);
-
-	/*
-	 * Encode the result.
-	 */
-	br_i32_encode(x, xlen, a);
-	return r;
-}

package/runtime/third_party/bearssl/src/rsa/rsa_i62_keygen.c

@@ -1,57 +0,0 @@
-/*
- * Copyright (c) 2018 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-#if BR_INT128 || BR_UMUL128
-
-/* see bearssl_rsa.h */
-uint32_t
-br_rsa_i62_keygen(const br_prng_class **rng,
-	br_rsa_private_key *sk, void *kbuf_priv,
-	br_rsa_public_key *pk, void *kbuf_pub,
-	unsigned size, uint32_t pubexp)
-{
-	return br_rsa_i31_keygen_inner(rng,
-		sk, kbuf_priv, pk, kbuf_pub, size, pubexp,
-		&br_i62_modpow_opt_as_i31);
-}
-
-/* see bearssl_rsa.h */
-br_rsa_keygen
-br_rsa_i62_keygen_get(void)
-{
-	return &br_rsa_i62_keygen;
-}
-
-#else
-
-/* see bearssl_rsa.h */
-br_rsa_keygen
-br_rsa_i62_keygen_get(void)
-{
-	return 0;
-}
-
-#endif

package/runtime/third_party/bearssl/src/rsa/rsa_i62_oaep_decrypt.c

@@ -1,61 +0,0 @@
-/*
- * Copyright (c) 2018 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-#if BR_INT128 || BR_UMUL128
-
-/* see bearssl_rsa.h */
-uint32_t
-br_rsa_i62_oaep_decrypt(const br_hash_class *dig,
-	const void *label, size_t label_len,
-	const br_rsa_private_key *sk, void *data, size_t *len)
-{
-	uint32_t r;
-
-	if (*len != ((sk->n_bitlen + 7) >> 3)) {
-		return 0;
-	}
-	r = br_rsa_i62_private(data, sk);
-	r &= br_rsa_oaep_unpad(dig, label, label_len, data, len);
-	return r;
-}
-
-/* see bearssl_rsa.h */
-br_rsa_oaep_decrypt
-br_rsa_i62_oaep_decrypt_get(void)
-{
-	return &br_rsa_i62_oaep_decrypt;
-}
-
-#else
-
-/* see bearssl_rsa.h */
-br_rsa_oaep_decrypt
-br_rsa_i62_oaep_decrypt_get(void)
-{
-	return 0;
-}
-
-#endif

package/runtime/third_party/bearssl/src/rsa/rsa_i62_oaep_encrypt.c

@@ -1,64 +0,0 @@
-/*
- * Copyright (c) 2018 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-#if BR_INT128 || BR_UMUL128
-
-/* see bearssl_rsa.h */
-size_t
-br_rsa_i62_oaep_encrypt(
-	const br_prng_class **rnd, const br_hash_class *dig,
-	const void *label, size_t label_len,
-	const br_rsa_public_key *pk,
-	void *dst, size_t dst_max_len,
-	const void *src, size_t src_len)
-{
-	size_t dlen;
-
-	dlen = br_rsa_oaep_pad(rnd, dig, label, label_len,
-		pk, dst, dst_max_len, src, src_len);
-	if (dlen == 0) {
-		return 0;
-	}
-	return dlen & -(size_t)br_rsa_i62_public(dst, dlen, pk);
-}
-
-/* see bearssl_rsa.h */
-br_rsa_oaep_encrypt
-br_rsa_i62_oaep_encrypt_get(void)
-{
-	return &br_rsa_i62_oaep_encrypt;
-}
-
-#else
-
-/* see bearssl_rsa.h */
-br_rsa_oaep_encrypt
-br_rsa_i62_oaep_encrypt_get(void)
-{
-	return 0;
-}
-
-#endif

package/runtime/third_party/bearssl/src/rsa/rsa_i62_pkcs1_sign.c

@@ -1,57 +0,0 @@
-/*
- * Copyright (c) 2017 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-#if BR_INT128 || BR_UMUL128
-
-/* see bearssl_rsa.h */
-uint32_t
-br_rsa_i62_pkcs1_sign(const unsigned char *hash_oid,
-	const unsigned char *hash, size_t hash_len,
-	const br_rsa_private_key *sk, unsigned char *x)
-{
-	if (!br_rsa_pkcs1_sig_pad(hash_oid, hash, hash_len, sk->n_bitlen, x)) {
-		return 0;
-	}
-	return br_rsa_i62_private(x, sk);
-}
-
-/* see bearssl_rsa.h */
-br_rsa_pkcs1_sign
-br_rsa_i62_pkcs1_sign_get(void)
-{
-	return &br_rsa_i62_pkcs1_sign;
-}
-
-#else
-
-/* see bearssl_rsa.h */
-br_rsa_pkcs1_sign
-br_rsa_i62_pkcs1_sign_get(void)
-{
-	return 0;
-}
-
-#endif

package/runtime/third_party/bearssl/src/rsa/rsa_i62_pkcs1_vrfy.c

@@ -1,63 +0,0 @@
-/*
- * Copyright (c) 2017 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-#if BR_INT128 || BR_UMUL128
-
-/* see bearssl_rsa.h */
-uint32_t
-br_rsa_i62_pkcs1_vrfy(const unsigned char *x, size_t xlen,
-	const unsigned char *hash_oid, size_t hash_len,
-	const br_rsa_public_key *pk, unsigned char *hash_out)
-{
-	unsigned char sig[BR_MAX_RSA_SIZE >> 3];
-
-	if (xlen > (sizeof sig)) {
-		return 0;
-	}
-	memcpy(sig, x, xlen);
-	if (!br_rsa_i62_public(sig, xlen, pk)) {
-		return 0;
-	}
-	return br_rsa_pkcs1_sig_unpad(sig, xlen, hash_oid, hash_len, hash_out);
-}
-
-/* see bearssl_rsa.h */
-br_rsa_pkcs1_vrfy
-br_rsa_i62_pkcs1_vrfy_get(void)
-{
-	return &br_rsa_i62_pkcs1_vrfy;
-}
-
-#else
-
-/* see bearssl_rsa.h */
-br_rsa_pkcs1_vrfy
-br_rsa_i62_pkcs1_vrfy_get(void)
-{
-	return 0;
-}
-
-#endif

package/runtime/third_party/bearssl/src/rsa/rsa_i62_priv.c

@@ -1,223 +0,0 @@
-/*
- * Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
- *
- * Permission is hereby granted, free of charge, to any person obtaining 
- * a copy of this software and associated documentation files (the
- * "Software"), to deal in the Software without restriction, including
- * without limitation the rights to use, copy, modify, merge, publish,
- * distribute, sublicense, and/or sell copies of the Software, and to
- * permit persons to whom the Software is furnished to do so, subject to
- * the following conditions:
- *
- * The above copyright notice and this permission notice shall be 
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-#include "inner.h"
-
-#if BR_INT128 || BR_UMUL128
-
-#define U      (2 + ((BR_MAX_RSA_FACTOR + 30) / 31))
-#define TLEN   (4 * U)  /* TLEN is counted in 64-bit words */
-
-/* see bearssl_rsa.h */
-uint32_t
-br_rsa_i62_private(unsigned char *x, const br_rsa_private_key *sk)
-{
-	const unsigned char *p, *q;
-	size_t plen, qlen;
-	size_t fwlen;
-	uint32_t p0i, q0i;
-	size_t xlen, u;
-	uint64_t tmp[TLEN];
-	long z;
-	uint32_t *mp, *mq, *s1, *s2, *t1, *t2, *t3;
-	uint32_t r;
-
-	/*
-	 * Compute the actual lengths of p and q, in bytes.
-	 * These lengths are not considered secret (we cannot really hide
-	 * them anyway in constant-time code).
-	 */
-	p = sk->p;
-	plen = sk->plen;
-	while (plen > 0 && *p == 0) {
-		p ++;
-		plen --;
-	}
-	q = sk->q;
-	qlen = sk->qlen;
-	while (qlen > 0 && *q == 0) {
-		q ++;
-		qlen --;
-	}
-
-	/*
-	 * Compute the maximum factor length, in words.
-	 */
-	z = (long)(plen > qlen ? plen : qlen) << 3;
-	fwlen = 1;
-	while (z > 0) {
-		z -= 31;
-		fwlen ++;
-	}
-
-	/*
-	 * Convert size to 62-bit words.
-	 */
-	fwlen = (fwlen + 1) >> 1;
-
-	/*
-	 * We need to fit at least 6 values in the stack buffer.
-	 */
-	if (6 * fwlen > TLEN) {
-		return 0;
-	}
-
-	/*
-	 * Compute signature length (in bytes).
-	 */
-	xlen = (sk->n_bitlen + 7) >> 3;
-
-	/*
-	 * Decode q.
-	 */
-	mq = (uint32_t *)tmp;
-	br_i31_decode(mq, q, qlen);
-
-	/*
-	 * Decode p.
-	 */
-	t1 = (uint32_t *)(tmp + fwlen);
-	br_i31_decode(t1, p, plen);
-
-	/*
-	 * Compute the modulus (product of the two factors), to compare
-	 * it with the source value. We use br_i31_mulacc(), since it's
-	 * already used later on.
-	 */
-	t2 = (uint32_t *)(tmp + 2 * fwlen);
-	br_i31_zero(t2, mq[0]);
-	br_i31_mulacc(t2, mq, t1);
-
-	/*
-	 * We encode the modulus into bytes, to perform the comparison
-	 * with bytes. We know that the product length, in bytes, is
-	 * exactly xlen.
-	 * The comparison actually computes the carry when subtracting
-	 * the modulus from the source value; that carry must be 1 for
-	 * a value in the correct range. We keep it in r, which is our
-	 * accumulator for the error code.
-	 */
-	t3 = (uint32_t *)(tmp + 4 * fwlen);
-	br_i31_encode(t3, xlen, t2);
-	u = xlen;
-	r = 0;
-	while (u > 0) {
-		uint32_t wn, wx;
-
-		u --;
-		wn = ((unsigned char *)t3)[u];
-		wx = x[u];
-		r = ((wx - (wn + r)) >> 8) & 1;
-	}
-
-	/*
-	 * Move the decoded p to another temporary buffer.
-	 */
-	mp = (uint32_t *)(tmp + 2 * fwlen);
-	memmove(mp, t1, 2 * fwlen * sizeof *t1);
-
-	/*
-	 * Compute s2 = x^dq mod q.
-	 */
-	q0i = br_i31_ninv31(mq[1]);
-	s2 = (uint32_t *)(tmp + fwlen);
-	br_i31_decode_reduce(s2, x, xlen, mq);
-	r &= br_i62_modpow_opt(s2, sk->dq, sk->dqlen, mq, q0i,
-		tmp + 3 * fwlen, TLEN - 3 * fwlen);
-
-	/*
-	 * Compute s1 = x^dp mod p.
-	 */
-	p0i = br_i31_ninv31(mp[1]);
-	s1 = (uint32_t *)(tmp + 3 * fwlen);
-	br_i31_decode_reduce(s1, x, xlen, mp);
-	r &= br_i62_modpow_opt(s1, sk->dp, sk->dplen, mp, p0i,
-		tmp + 4 * fwlen, TLEN - 4 * fwlen);
-
-	/*
-	 * Compute:
-	 *   h = (s1 - s2)*(1/q) mod p
-	 * s1 is an integer modulo p, but s2 is modulo q. PKCS#1 is
-	 * unclear about whether p may be lower than q (some existing,
-	 * widely deployed implementations of RSA don't tolerate p < q),
-	 * but we want to support that occurrence, so we need to use the
-	 * reduction function.
-	 *
-	 * Since we use br_i31_decode_reduce() for iq (purportedly, the
-	 * inverse of q modulo p), we also tolerate improperly large
-	 * values for this parameter.
-	 */
-	t1 = (uint32_t *)(tmp + 4 * fwlen);
-	t2 = (uint32_t *)(tmp + 5 * fwlen);
-	br_i31_reduce(t2, s2, mp);
-	br_i31_add(s1, mp, br_i31_sub(s1, t2, 1));
-	br_i31_to_monty(s1, mp);
-	br_i31_decode_reduce(t1, sk->iq, sk->iqlen, mp);
-	br_i31_montymul(t2, s1, t1, mp, p0i);
-
-	/*
-	 * h is now in t2. We compute the final result:
-	 *   s = s2 + q*h
-	 * All these operations are non-modular.
-	 *
-	 * We need mq, s2 and t2. We use the t3 buffer as destination.
-	 * The buffers mp, s1 and t1 are no longer needed, so we can
-	 * reuse them for t3. Moreover, the first step of the computation
-	 * is to copy s2 into t3, after which s2 is not needed. Right
-	 * now, mq is in slot 0, s2 is in slot 1, and t2 is in slot 5.
-	 * Therefore, we have ample room for t3 by simply using s2.
-	 */
-	t3 = s2;
-	br_i31_mulacc(t3, mq, t2);
-
-	/*
-	 * Encode the result. Since we already checked the value of xlen,
-	 * we can just use it right away.
-	 */
-	br_i31_encode(x, xlen, t3);
-
-	/*
-	 * The only error conditions remaining at that point are invalid
-	 * values for p and q (even integers).
-	 */
-	return p0i & q0i & r;
-}
-
-/* see bearssl_rsa.h */
-br_rsa_private
-br_rsa_i62_private_get(void)
-{
-	return &br_rsa_i62_private;
-}
-
-#else
-
-/* see bearssl_rsa.h */
-br_rsa_private
-br_rsa_i62_private_get(void)
-{
-	return 0;
-}
-
-#endif