1196 lines
54 KiB
Java
1196 lines
54 KiB
Java
|
package org.bouncycastle.math.ec;
|
||
|
|
|
||
|
|
import java.math.BigInteger;
|
||
|
|
import java.util.Hashtable;
|
||
|
|
import org.bouncycastle.math.ec.ECFieldElement;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public abstract class ECPoint {
|
||
|
|
protected static ECFieldElement[] EMPTY_ZS = new ECFieldElement[0];
|
||
|
|
public ECCurve curve;
|
||
|
|
protected Hashtable preCompTable;
|
||
|
|
public boolean withCompression;
|
||
|
|
public ECFieldElement x;
|
||
|
|
public ECFieldElement y;
|
||
|
|
public ECFieldElement[] zs;
|
||
|
|
|
||
|
|
public abstract ECPoint add(ECPoint eCPoint);
|
||
|
|
|
||
|
|
protected abstract ECPoint detach();
|
||
|
|
|
||
|
|
protected abstract boolean getCompressionYTilde();
|
||
|
|
|
||
|
|
public abstract ECPoint negate();
|
||
|
|
|
||
|
|
protected abstract boolean satisfiesCurveEquation();
|
||
|
|
|
||
|
|
public abstract ECPoint subtract(ECPoint eCPoint);
|
||
|
|
|
||
|
|
public abstract ECPoint twice();
|
||
|
|
|
||
|
|
public ECPoint twicePlus(ECPoint eCPoint) {
|
||
|
|
return twice().add(eCPoint);
|
||
|
|
}
|
||
|
|
|
||
|
|
public String toString() {
|
||
|
|
if (isInfinity()) {
|
||
|
|
return "INF";
|
||
|
|
}
|
||
|
|
StringBuffer stringBuffer = new StringBuffer("(");
|
||
|
|
stringBuffer.append(getRawXCoord());
|
||
|
|
stringBuffer.append(',');
|
||
|
|
stringBuffer.append(getRawYCoord());
|
||
|
|
for (int i = 0; i < this.zs.length; i++) {
|
||
|
|
stringBuffer.append(',');
|
||
|
|
stringBuffer.append(this.zs[i]);
|
||
|
|
}
|
||
|
|
stringBuffer.append(')');
|
||
|
|
return stringBuffer.toString();
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECPoint timesPow2(int i) {
|
||
|
|
if (i < 0) {
|
||
|
|
throw new IllegalArgumentException("'e' cannot be negative");
|
||
|
|
}
|
||
|
|
ECPoint eCPoint = this;
|
||
|
|
while (true) {
|
||
|
|
i--;
|
||
|
|
if (i < 0) {
|
||
|
|
return eCPoint;
|
||
|
|
}
|
||
|
|
eCPoint = eCPoint.twice();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECPoint threeTimes() {
|
||
|
|
return twicePlus(this);
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECPoint scaleY(ECFieldElement eCFieldElement) {
|
||
|
|
return isInfinity() ? this : getCurve().createRawPoint(getRawXCoord(), getRawYCoord().multiply(eCFieldElement), getRawZCoords(), this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECPoint scaleX(ECFieldElement eCFieldElement) {
|
||
|
|
return isInfinity() ? this : getCurve().createRawPoint(getRawXCoord().multiply(eCFieldElement), getRawYCoord(), getRawZCoords(), this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
/* JADX INFO: Access modifiers changed from: protected */
|
||
|
|
public boolean satisfiesCofactor() {
|
||
|
|
BigInteger cofactor = this.curve.getCofactor();
|
||
|
|
return cofactor == null || cofactor.equals(ECConstants.ONE) || !ECAlgorithms.referenceMultiply(this, cofactor).isInfinity();
|
||
|
|
}
|
||
|
|
|
||
|
|
/* JADX INFO: Access modifiers changed from: package-private */
|
||
|
|
public ECPoint normalize(ECFieldElement eCFieldElement) {
|
||
|
|
int curveCoordinateSystem = getCurveCoordinateSystem();
|
||
|
|
if (curveCoordinateSystem != 1) {
|
||
|
|
if (curveCoordinateSystem == 2 || curveCoordinateSystem == 3 || curveCoordinateSystem == 4) {
|
||
|
|
ECFieldElement square = eCFieldElement.square();
|
||
|
|
return createScaledPoint(square, square.multiply(eCFieldElement));
|
||
|
|
}
|
||
|
|
if (curveCoordinateSystem != 6) {
|
||
|
|
throw new IllegalStateException("not a projective coordinate system");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return createScaledPoint(eCFieldElement, eCFieldElement);
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECPoint normalize() {
|
||
|
|
int curveCoordinateSystem;
|
||
|
|
if (isInfinity() || (curveCoordinateSystem = getCurveCoordinateSystem()) == 0 || curveCoordinateSystem == 5) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECFieldElement zCoord = getZCoord(0);
|
||
|
|
return zCoord.isOne() ? this : normalize(zCoord.invert());
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECPoint multiply(BigInteger bigInteger) {
|
||
|
|
return getCurve().getMultiplier().multiply(this, bigInteger);
|
||
|
|
}
|
||
|
|
|
||
|
|
public boolean isValid() {
|
||
|
|
return isInfinity() || getCurve() == null || (satisfiesCurveEquation() && satisfiesCofactor());
|
||
|
|
}
|
||
|
|
|
||
|
|
public boolean isNormalized() {
|
||
|
|
int curveCoordinateSystem = getCurveCoordinateSystem();
|
||
|
|
return curveCoordinateSystem == 0 || curveCoordinateSystem == 5 || isInfinity() || this.zs[0].isOne();
|
||
|
|
}
|
||
|
|
|
||
|
|
public boolean isInfinity() {
|
||
|
|
if (this.x != null && this.y != null) {
|
||
|
|
ECFieldElement[] eCFieldElementArr = this.zs;
|
||
|
|
if (eCFieldElementArr.length <= 0 || !eCFieldElementArr[0].isZero()) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
public boolean isCompressed() {
|
||
|
|
return this.withCompression;
|
||
|
|
}
|
||
|
|
|
||
|
|
public int hashCode() {
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
int i = curve == null ? 0 : ~curve.hashCode();
|
||
|
|
if (isInfinity()) {
|
||
|
|
return i;
|
||
|
|
}
|
||
|
|
ECPoint normalize = normalize();
|
||
|
|
return (i ^ (normalize.getXCoord().hashCode() * 17)) ^ (normalize.getYCoord().hashCode() * 257);
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECFieldElement[] getZCoords() {
|
||
|
|
ECFieldElement[] eCFieldElementArr = this.zs;
|
||
|
|
int length = eCFieldElementArr.length;
|
||
|
|
if (length == 0) {
|
||
|
|
return EMPTY_ZS;
|
||
|
|
}
|
||
|
|
ECFieldElement[] eCFieldElementArr2 = new ECFieldElement[length];
|
||
|
|
System.arraycopy(eCFieldElementArr, 0, eCFieldElementArr2, 0, length);
|
||
|
|
return eCFieldElementArr2;
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECFieldElement getZCoord(int i) {
|
||
|
|
if (i >= 0) {
|
||
|
|
ECFieldElement[] eCFieldElementArr = this.zs;
|
||
|
|
if (i < eCFieldElementArr.length) {
|
||
|
|
return eCFieldElementArr[i];
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECFieldElement getYCoord() {
|
||
|
|
return this.y;
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECFieldElement getY() {
|
||
|
|
return normalize().getYCoord();
|
||
|
|
}
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public static class Fp extends AbstractFp {
|
||
|
|
protected ECFieldElement two(ECFieldElement eCFieldElement) {
|
||
|
|
return eCFieldElement.add(eCFieldElement);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint twicePlus(ECPoint eCPoint) {
|
||
|
|
if (this == eCPoint) {
|
||
|
|
return threeTimes();
|
||
|
|
}
|
||
|
|
if (isInfinity()) {
|
||
|
|
return eCPoint;
|
||
|
|
}
|
||
|
|
if (eCPoint.isInfinity()) {
|
||
|
|
return twice();
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement = this.y;
|
||
|
|
if (eCFieldElement.isZero()) {
|
||
|
|
return eCPoint;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
if (coordinateSystem != 0) {
|
||
|
|
return (coordinateSystem != 4 ? twice() : twiceJacobianModified(false)).add(eCPoint);
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement2 = this.x;
|
||
|
|
ECFieldElement eCFieldElement3 = eCPoint.x;
|
||
|
|
ECFieldElement eCFieldElement4 = eCPoint.y;
|
||
|
|
ECFieldElement subtract = eCFieldElement3.subtract(eCFieldElement2);
|
||
|
|
ECFieldElement subtract2 = eCFieldElement4.subtract(eCFieldElement);
|
||
|
|
if (subtract.isZero()) {
|
||
|
|
return subtract2.isZero() ? threeTimes() : this;
|
||
|
|
}
|
||
|
|
ECFieldElement square = subtract.square();
|
||
|
|
ECFieldElement subtract3 = square.multiply(two(eCFieldElement2).add(eCFieldElement3)).subtract(subtract2.square());
|
||
|
|
if (subtract3.isZero()) {
|
||
|
|
return curve.getInfinity();
|
||
|
|
}
|
||
|
|
ECFieldElement invert = subtract3.multiply(subtract).invert();
|
||
|
|
ECFieldElement multiply = subtract3.multiply(invert).multiply(subtract2);
|
||
|
|
ECFieldElement subtract4 = two(eCFieldElement).multiply(square).multiply(subtract).multiply(invert).subtract(multiply);
|
||
|
|
ECFieldElement add = subtract4.subtract(multiply).multiply(multiply.add(subtract4)).add(eCFieldElement3);
|
||
|
|
return new Fp(curve, add, eCFieldElement2.subtract(add).multiply(subtract4).subtract(eCFieldElement), this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
protected Fp twiceJacobianModified(boolean z) {
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
ECFieldElement eCFieldElement2 = this.y;
|
||
|
|
ECFieldElement eCFieldElement3 = this.zs[0];
|
||
|
|
ECFieldElement jacobianModifiedW = getJacobianModifiedW();
|
||
|
|
ECFieldElement add = three(eCFieldElement.square()).add(jacobianModifiedW);
|
||
|
|
ECFieldElement two = two(eCFieldElement2);
|
||
|
|
ECFieldElement multiply = two.multiply(eCFieldElement2);
|
||
|
|
ECFieldElement two2 = two(eCFieldElement.multiply(multiply));
|
||
|
|
ECFieldElement subtract = add.square().subtract(two(two2));
|
||
|
|
ECFieldElement two3 = two(multiply.square());
|
||
|
|
ECFieldElement subtract2 = add.multiply(two2.subtract(subtract)).subtract(two3);
|
||
|
|
ECFieldElement two4 = z ? two(two3.multiply(jacobianModifiedW)) : null;
|
||
|
|
if (!eCFieldElement3.isOne()) {
|
||
|
|
two = two.multiply(eCFieldElement3);
|
||
|
|
}
|
||
|
|
return new Fp(getCurve(), subtract, subtract2, new ECFieldElement[]{two, two4}, this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint twice() {
|
||
|
|
ECFieldElement add;
|
||
|
|
ECFieldElement multiply;
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
ECFieldElement eCFieldElement = this.y;
|
||
|
|
if (eCFieldElement.isZero()) {
|
||
|
|
return curve.getInfinity();
|
||
|
|
}
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
ECFieldElement eCFieldElement2 = this.x;
|
||
|
|
if (coordinateSystem == 0) {
|
||
|
|
ECFieldElement divide = three(eCFieldElement2.square()).add(getCurve().getA()).divide(two(eCFieldElement));
|
||
|
|
ECFieldElement subtract = divide.square().subtract(two(eCFieldElement2));
|
||
|
|
return new Fp(curve, subtract, divide.multiply(eCFieldElement2.subtract(subtract)).subtract(eCFieldElement), this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem == 1) {
|
||
|
|
ECFieldElement eCFieldElement3 = this.zs[0];
|
||
|
|
boolean isOne = eCFieldElement3.isOne();
|
||
|
|
ECFieldElement a = curve.getA();
|
||
|
|
if (!a.isZero() && !isOne) {
|
||
|
|
a = a.multiply(eCFieldElement3.square());
|
||
|
|
}
|
||
|
|
ECFieldElement add2 = a.add(three(eCFieldElement2.square()));
|
||
|
|
ECFieldElement multiply2 = isOne ? eCFieldElement : eCFieldElement.multiply(eCFieldElement3);
|
||
|
|
ECFieldElement square = isOne ? eCFieldElement.square() : multiply2.multiply(eCFieldElement);
|
||
|
|
ECFieldElement four = four(eCFieldElement2.multiply(square));
|
||
|
|
ECFieldElement subtract2 = add2.square().subtract(two(four));
|
||
|
|
ECFieldElement two = two(multiply2);
|
||
|
|
ECFieldElement multiply3 = subtract2.multiply(two);
|
||
|
|
ECFieldElement two2 = two(square);
|
||
|
|
return new Fp(curve, multiply3, four.subtract(subtract2).multiply(add2).subtract(two(two2.square())), new ECFieldElement[]{two(isOne ? two(two2) : two.square()).multiply(multiply2)}, this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem != 2) {
|
||
|
|
if (coordinateSystem == 4) {
|
||
|
|
return twiceJacobianModified(true);
|
||
|
|
}
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement4 = this.zs[0];
|
||
|
|
boolean isOne2 = eCFieldElement4.isOne();
|
||
|
|
ECFieldElement square2 = eCFieldElement.square();
|
||
|
|
ECFieldElement square3 = square2.square();
|
||
|
|
ECFieldElement a2 = curve.getA();
|
||
|
|
ECFieldElement negate = a2.negate();
|
||
|
|
if (negate.toBigInteger().equals(BigInteger.valueOf(3L))) {
|
||
|
|
ECFieldElement square4 = isOne2 ? eCFieldElement4 : eCFieldElement4.square();
|
||
|
|
add = three(eCFieldElement2.add(square4).multiply(eCFieldElement2.subtract(square4)));
|
||
|
|
multiply = square2.multiply(eCFieldElement2);
|
||
|
|
} else {
|
||
|
|
ECFieldElement three = three(eCFieldElement2.square());
|
||
|
|
if (!isOne2) {
|
||
|
|
if (a2.isZero()) {
|
||
|
|
add = three;
|
||
|
|
} else {
|
||
|
|
ECFieldElement square5 = eCFieldElement4.square().square();
|
||
|
|
if (negate.bitLength() < a2.bitLength()) {
|
||
|
|
add = three.subtract(square5.multiply(negate));
|
||
|
|
} else {
|
||
|
|
a2 = square5.multiply(a2);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
multiply = eCFieldElement2.multiply(square2);
|
||
|
|
}
|
||
|
|
add = three.add(a2);
|
||
|
|
multiply = eCFieldElement2.multiply(square2);
|
||
|
|
}
|
||
|
|
ECFieldElement four2 = four(multiply);
|
||
|
|
ECFieldElement subtract3 = add.square().subtract(two(four2));
|
||
|
|
ECFieldElement subtract4 = four2.subtract(subtract3).multiply(add).subtract(eight(square3));
|
||
|
|
ECFieldElement two3 = two(eCFieldElement);
|
||
|
|
if (!isOne2) {
|
||
|
|
two3 = two3.multiply(eCFieldElement4);
|
||
|
|
}
|
||
|
|
return new Fp(curve, subtract3, subtract4, new ECFieldElement[]{two3}, this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint timesPow2(int i) {
|
||
|
|
ECFieldElement square;
|
||
|
|
if (i < 0) {
|
||
|
|
throw new IllegalArgumentException("'e' cannot be negative");
|
||
|
|
}
|
||
|
|
if (i == 0 || isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
if (i == 1) {
|
||
|
|
return twice();
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
ECFieldElement eCFieldElement = this.y;
|
||
|
|
if (eCFieldElement.isZero()) {
|
||
|
|
return curve.getInfinity();
|
||
|
|
}
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
ECFieldElement a = curve.getA();
|
||
|
|
ECFieldElement eCFieldElement2 = this.x;
|
||
|
|
int i2 = 0;
|
||
|
|
ECFieldElement fromBigInteger = this.zs.length <= 0 ? curve.fromBigInteger(ECConstants.ONE) : this.zs[0];
|
||
|
|
if (!fromBigInteger.isOne() && coordinateSystem != 0) {
|
||
|
|
if (coordinateSystem == 1) {
|
||
|
|
square = fromBigInteger.square();
|
||
|
|
eCFieldElement2 = eCFieldElement2.multiply(fromBigInteger);
|
||
|
|
eCFieldElement = eCFieldElement.multiply(square);
|
||
|
|
} else if (coordinateSystem == 2) {
|
||
|
|
square = null;
|
||
|
|
} else {
|
||
|
|
if (coordinateSystem != 4) {
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
a = getJacobianModifiedW();
|
||
|
|
}
|
||
|
|
a = calculateJacobianModifiedW(fromBigInteger, square);
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement3 = a;
|
||
|
|
ECFieldElement eCFieldElement4 = eCFieldElement;
|
||
|
|
ECFieldElement eCFieldElement5 = eCFieldElement2;
|
||
|
|
ECFieldElement eCFieldElement6 = eCFieldElement3;
|
||
|
|
while (i2 < i) {
|
||
|
|
if (eCFieldElement4.isZero()) {
|
||
|
|
return curve.getInfinity();
|
||
|
|
}
|
||
|
|
ECFieldElement three = three(eCFieldElement5.square());
|
||
|
|
ECFieldElement two = two(eCFieldElement4);
|
||
|
|
ECFieldElement multiply = two.multiply(eCFieldElement4);
|
||
|
|
ECFieldElement two2 = two(eCFieldElement5.multiply(multiply));
|
||
|
|
ECFieldElement two3 = two(multiply.square());
|
||
|
|
if (!eCFieldElement6.isZero()) {
|
||
|
|
three = three.add(eCFieldElement6);
|
||
|
|
eCFieldElement6 = two(two3.multiply(eCFieldElement6));
|
||
|
|
}
|
||
|
|
ECFieldElement subtract = three.square().subtract(two(two2));
|
||
|
|
eCFieldElement4 = three.multiply(two2.subtract(subtract)).subtract(two3);
|
||
|
|
fromBigInteger = fromBigInteger.isOne() ? two : two.multiply(fromBigInteger);
|
||
|
|
i2++;
|
||
|
|
eCFieldElement5 = subtract;
|
||
|
|
}
|
||
|
|
if (coordinateSystem == 0) {
|
||
|
|
ECFieldElement invert = fromBigInteger.invert();
|
||
|
|
ECFieldElement square2 = invert.square();
|
||
|
|
return new Fp(curve, eCFieldElement5.multiply(square2), eCFieldElement4.multiply(square2.multiply(invert)), this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem == 1) {
|
||
|
|
return new Fp(curve, eCFieldElement5.multiply(fromBigInteger), eCFieldElement4, new ECFieldElement[]{fromBigInteger.multiply(fromBigInteger.square())}, this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem == 2) {
|
||
|
|
return new Fp(curve, eCFieldElement5, eCFieldElement4, new ECFieldElement[]{fromBigInteger}, this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem == 4) {
|
||
|
|
return new Fp(curve, eCFieldElement5, eCFieldElement4, new ECFieldElement[]{fromBigInteger, eCFieldElement6}, this.withCompression);
|
||
|
|
}
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint threeTimes() {
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement = this.y;
|
||
|
|
if (eCFieldElement.isZero()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
if (coordinateSystem != 0) {
|
||
|
|
return coordinateSystem != 4 ? twice().add(this) : twiceJacobianModified(false).add(this);
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement2 = this.x;
|
||
|
|
ECFieldElement two = two(eCFieldElement);
|
||
|
|
ECFieldElement square = two.square();
|
||
|
|
ECFieldElement add = three(eCFieldElement2.square()).add(getCurve().getA());
|
||
|
|
ECFieldElement subtract = three(eCFieldElement2).multiply(square).subtract(add.square());
|
||
|
|
if (subtract.isZero()) {
|
||
|
|
return getCurve().getInfinity();
|
||
|
|
}
|
||
|
|
ECFieldElement invert = subtract.multiply(two).invert();
|
||
|
|
ECFieldElement multiply = subtract.multiply(invert).multiply(add);
|
||
|
|
ECFieldElement subtract2 = square.square().multiply(invert).subtract(multiply);
|
||
|
|
ECFieldElement add2 = subtract2.subtract(multiply).multiply(multiply.add(subtract2)).add(eCFieldElement2);
|
||
|
|
return new Fp(curve, add2, eCFieldElement2.subtract(add2).multiply(subtract2).subtract(eCFieldElement), this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECFieldElement three(ECFieldElement eCFieldElement) {
|
||
|
|
return two(eCFieldElement).add(eCFieldElement);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint negate() {
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
return curve.getCoordinateSystem() != 0 ? new Fp(curve, this.x, this.y.negate(), this.zs, this.withCompression) : new Fp(curve, this.x, this.y.negate(), this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECFieldElement getZCoord(int i) {
|
||
|
|
return (i == 1 && 4 == getCurveCoordinateSystem()) ? getJacobianModifiedW() : super.getZCoord(i);
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECFieldElement getJacobianModifiedW() {
|
||
|
|
ECFieldElement eCFieldElement = this.zs[1];
|
||
|
|
if (eCFieldElement != null) {
|
||
|
|
return eCFieldElement;
|
||
|
|
}
|
||
|
|
ECFieldElement[] eCFieldElementArr = this.zs;
|
||
|
|
ECFieldElement calculateJacobianModifiedW = calculateJacobianModifiedW(this.zs[0], null);
|
||
|
|
eCFieldElementArr[1] = calculateJacobianModifiedW;
|
||
|
|
return calculateJacobianModifiedW;
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECFieldElement four(ECFieldElement eCFieldElement) {
|
||
|
|
return two(two(eCFieldElement));
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECFieldElement eight(ECFieldElement eCFieldElement) {
|
||
|
|
return four(two(eCFieldElement));
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECFieldElement doubleProductFromSquares(ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2, ECFieldElement eCFieldElement3, ECFieldElement eCFieldElement4) {
|
||
|
|
return eCFieldElement.add(eCFieldElement2).square().subtract(eCFieldElement3).subtract(eCFieldElement4);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
protected ECPoint detach() {
|
||
|
|
return new Fp(null, getAffineXCoord(), getAffineYCoord());
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECFieldElement calculateJacobianModifiedW(ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2) {
|
||
|
|
ECFieldElement a = getCurve().getA();
|
||
|
|
if (a.isZero() || eCFieldElement.isOne()) {
|
||
|
|
return a;
|
||
|
|
}
|
||
|
|
if (eCFieldElement2 == null) {
|
||
|
|
eCFieldElement2 = eCFieldElement.square();
|
||
|
|
}
|
||
|
|
ECFieldElement square = eCFieldElement2.square();
|
||
|
|
ECFieldElement negate = a.negate();
|
||
|
|
return negate.bitLength() < a.bitLength() ? square.multiply(negate).negate() : square.multiply(a);
|
||
|
|
}
|
||
|
|
|
||
|
|
/* JADX WARN: Removed duplicated region for block: B:35:0x0123 */
|
||
|
|
/* JADX WARN: Removed duplicated region for block: B:38:0x012c */
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
/*
|
||
|
|
Code decompiled incorrectly, please refer to instructions dump.
|
||
|
|
To view partially-correct add '--show-bad-code' argument
|
||
|
|
*/
|
||
|
|
public org.bouncycastle.math.ec.ECPoint add(org.bouncycastle.math.ec.ECPoint r15) {
|
||
|
|
/*
|
||
|
|
Method dump skipped, instructions count: 524
|
||
|
|
To view this dump add '--comments-level debug' option
|
||
|
|
*/
|
||
|
|
throw new UnsupportedOperationException("Method not decompiled: org.bouncycastle.math.ec.ECPoint.Fp.add(org.bouncycastle.math.ec.ECPoint):org.bouncycastle.math.ec.ECPoint");
|
||
|
|
}
|
||
|
|
|
||
|
|
/* JADX INFO: Access modifiers changed from: package-private */
|
||
|
|
public Fp(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2, ECFieldElement[] eCFieldElementArr, boolean z) {
|
||
|
|
super(eCCurve, eCFieldElement, eCFieldElement2, eCFieldElementArr);
|
||
|
|
this.withCompression = z;
|
||
|
|
}
|
||
|
|
|
||
|
|
public Fp(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2, boolean z) {
|
||
|
|
super(eCCurve, eCFieldElement, eCFieldElement2);
|
||
|
|
if ((eCFieldElement == null) != (eCFieldElement2 == null)) {
|
||
|
|
throw new IllegalArgumentException("Exactly one of the field elements is null");
|
||
|
|
}
|
||
|
|
this.withCompression = z;
|
||
|
|
}
|
||
|
|
|
||
|
|
public Fp(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2) {
|
||
|
|
this(eCCurve, eCFieldElement, eCFieldElement2, false);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECFieldElement getXCoord() {
|
||
|
|
return this.x;
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECFieldElement getX() {
|
||
|
|
return normalize().getXCoord();
|
||
|
|
}
|
||
|
|
|
||
|
|
protected final ECFieldElement[] getRawZCoords() {
|
||
|
|
return this.zs;
|
||
|
|
}
|
||
|
|
|
||
|
|
public final ECFieldElement getRawYCoord() {
|
||
|
|
return this.y;
|
||
|
|
}
|
||
|
|
|
||
|
|
public final ECFieldElement getRawXCoord() {
|
||
|
|
return this.x;
|
||
|
|
}
|
||
|
|
|
||
|
|
public byte[] getEncoded(boolean z) {
|
||
|
|
if (isInfinity()) {
|
||
|
|
return new byte[1];
|
||
|
|
}
|
||
|
|
ECPoint normalize = normalize();
|
||
|
|
byte[] encoded = normalize.getXCoord().getEncoded();
|
||
|
|
if (z) {
|
||
|
|
byte[] bArr = new byte[encoded.length + 1];
|
||
|
|
bArr[0] = (byte) (normalize.getCompressionYTilde() ? 3 : 2);
|
||
|
|
System.arraycopy(encoded, 0, bArr, 1, encoded.length);
|
||
|
|
return bArr;
|
||
|
|
}
|
||
|
|
byte[] encoded2 = normalize.getYCoord().getEncoded();
|
||
|
|
byte[] bArr2 = new byte[encoded.length + encoded2.length + 1];
|
||
|
|
bArr2[0] = 4;
|
||
|
|
System.arraycopy(encoded, 0, bArr2, 1, encoded.length);
|
||
|
|
System.arraycopy(encoded2, 0, bArr2, encoded.length + 1, encoded2.length);
|
||
|
|
return bArr2;
|
||
|
|
}
|
||
|
|
|
||
|
|
public byte[] getEncoded() {
|
||
|
|
return getEncoded(this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
public final ECPoint getDetachedPoint() {
|
||
|
|
return normalize().detach();
|
||
|
|
}
|
||
|
|
|
||
|
|
protected int getCurveCoordinateSystem() {
|
||
|
|
ECCurve eCCurve = this.curve;
|
||
|
|
if (eCCurve == null) {
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
return eCCurve.getCoordinateSystem();
|
||
|
|
}
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public static class F2m extends AbstractF2m {
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint twicePlus(ECPoint eCPoint) {
|
||
|
|
if (isInfinity()) {
|
||
|
|
return eCPoint;
|
||
|
|
}
|
||
|
|
if (eCPoint.isInfinity()) {
|
||
|
|
return twice();
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
if (eCFieldElement.isZero()) {
|
||
|
|
return eCPoint;
|
||
|
|
}
|
||
|
|
if (curve.getCoordinateSystem() != 6) {
|
||
|
|
return twice().add(eCPoint);
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement2 = eCPoint.x;
|
||
|
|
ECFieldElement eCFieldElement3 = eCPoint.zs[0];
|
||
|
|
if (eCFieldElement2.isZero() || !eCFieldElement3.isOne()) {
|
||
|
|
return twice().add(eCPoint);
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement4 = this.y;
|
||
|
|
ECFieldElement eCFieldElement5 = this.zs[0];
|
||
|
|
ECFieldElement eCFieldElement6 = eCPoint.y;
|
||
|
|
ECFieldElement square = eCFieldElement.square();
|
||
|
|
ECFieldElement square2 = eCFieldElement4.square();
|
||
|
|
ECFieldElement square3 = eCFieldElement5.square();
|
||
|
|
ECFieldElement add = curve.getA().multiply(square3).add(square2).add(eCFieldElement4.multiply(eCFieldElement5));
|
||
|
|
ECFieldElement addOne = eCFieldElement6.addOne();
|
||
|
|
ECFieldElement multiplyPlusProduct = curve.getA().add(addOne).multiply(square3).add(square2).multiplyPlusProduct(add, square, square3);
|
||
|
|
ECFieldElement multiply = eCFieldElement2.multiply(square3);
|
||
|
|
ECFieldElement square4 = multiply.add(add).square();
|
||
|
|
if (square4.isZero()) {
|
||
|
|
return multiplyPlusProduct.isZero() ? eCPoint.twice() : curve.getInfinity();
|
||
|
|
}
|
||
|
|
if (multiplyPlusProduct.isZero()) {
|
||
|
|
return new F2m(curve, multiplyPlusProduct, curve.getB().sqrt(), this.withCompression);
|
||
|
|
}
|
||
|
|
ECFieldElement multiply2 = multiplyPlusProduct.square().multiply(multiply);
|
||
|
|
ECFieldElement multiply3 = multiplyPlusProduct.multiply(square4).multiply(square3);
|
||
|
|
return new F2m(curve, multiply2, multiplyPlusProduct.add(square4).square().multiplyPlusProduct(add, addOne, multiply3), new ECFieldElement[]{multiply3}, this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint twice() {
|
||
|
|
ECFieldElement add;
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
if (eCFieldElement.isZero()) {
|
||
|
|
return curve.getInfinity();
|
||
|
|
}
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
if (coordinateSystem == 0) {
|
||
|
|
ECFieldElement add2 = this.y.divide(eCFieldElement).add(eCFieldElement);
|
||
|
|
ECFieldElement add3 = add2.square().add(add2).add(curve.getA());
|
||
|
|
return new F2m(curve, add3, eCFieldElement.squarePlusProduct(add3, add2.addOne()), this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem == 1) {
|
||
|
|
ECFieldElement eCFieldElement2 = this.y;
|
||
|
|
ECFieldElement eCFieldElement3 = this.zs[0];
|
||
|
|
boolean isOne = eCFieldElement3.isOne();
|
||
|
|
ECFieldElement multiply = isOne ? eCFieldElement : eCFieldElement.multiply(eCFieldElement3);
|
||
|
|
if (!isOne) {
|
||
|
|
eCFieldElement2 = eCFieldElement2.multiply(eCFieldElement3);
|
||
|
|
}
|
||
|
|
ECFieldElement square = eCFieldElement.square();
|
||
|
|
ECFieldElement add4 = square.add(eCFieldElement2);
|
||
|
|
ECFieldElement square2 = multiply.square();
|
||
|
|
ECFieldElement add5 = add4.add(multiply);
|
||
|
|
ECFieldElement multiplyPlusProduct = add5.multiplyPlusProduct(add4, square2, curve.getA());
|
||
|
|
return new F2m(curve, multiply.multiply(multiplyPlusProduct), square.square().multiplyPlusProduct(multiply, multiplyPlusProduct, add5), new ECFieldElement[]{multiply.multiply(square2)}, this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem != 6) {
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement4 = this.y;
|
||
|
|
ECFieldElement eCFieldElement5 = this.zs[0];
|
||
|
|
boolean isOne2 = eCFieldElement5.isOne();
|
||
|
|
ECFieldElement multiply2 = isOne2 ? eCFieldElement4 : eCFieldElement4.multiply(eCFieldElement5);
|
||
|
|
ECFieldElement square3 = isOne2 ? eCFieldElement5 : eCFieldElement5.square();
|
||
|
|
ECFieldElement a = curve.getA();
|
||
|
|
ECFieldElement multiply3 = isOne2 ? a : a.multiply(square3);
|
||
|
|
ECFieldElement add6 = eCFieldElement4.square().add(multiply2).add(multiply3);
|
||
|
|
if (add6.isZero()) {
|
||
|
|
return new F2m(curve, add6, curve.getB().sqrt(), this.withCompression);
|
||
|
|
}
|
||
|
|
ECFieldElement square4 = add6.square();
|
||
|
|
ECFieldElement multiply4 = isOne2 ? add6 : add6.multiply(square3);
|
||
|
|
ECFieldElement b = curve.getB();
|
||
|
|
if (b.bitLength() < (curve.getFieldSize() >> 1)) {
|
||
|
|
ECFieldElement square5 = eCFieldElement4.add(eCFieldElement).square();
|
||
|
|
add = square5.add(add6).add(square3).multiply(square5).add(b.isOne() ? multiply3.add(square3).square() : multiply3.squarePlusProduct(b, square3.square())).add(square4);
|
||
|
|
if (!a.isZero()) {
|
||
|
|
if (!a.isOne()) {
|
||
|
|
add = add.add(a.addOne().multiply(multiply4));
|
||
|
|
}
|
||
|
|
return new F2m(curve, square4, add, new ECFieldElement[]{multiply4}, this.withCompression);
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
if (!isOne2) {
|
||
|
|
eCFieldElement = eCFieldElement.multiply(eCFieldElement5);
|
||
|
|
}
|
||
|
|
add = eCFieldElement.squarePlusProduct(add6, multiply2).add(square4);
|
||
|
|
}
|
||
|
|
add = add.add(multiply4);
|
||
|
|
return new F2m(curve, square4, add, new ECFieldElement[]{multiply4}, this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint negate() {
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
if (eCFieldElement.isZero()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
int curveCoordinateSystem = getCurveCoordinateSystem();
|
||
|
|
if (curveCoordinateSystem == 0) {
|
||
|
|
return new F2m(this.curve, eCFieldElement, this.y.add(eCFieldElement), this.withCompression);
|
||
|
|
}
|
||
|
|
if (curveCoordinateSystem == 1) {
|
||
|
|
return new F2m(this.curve, eCFieldElement, this.y.add(eCFieldElement), new ECFieldElement[]{this.zs[0]}, this.withCompression);
|
||
|
|
}
|
||
|
|
if (curveCoordinateSystem == 5) {
|
||
|
|
return new F2m(this.curve, eCFieldElement, this.y.addOne(), this.withCompression);
|
||
|
|
}
|
||
|
|
if (curveCoordinateSystem != 6) {
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement2 = this.y;
|
||
|
|
ECFieldElement eCFieldElement3 = this.zs[0];
|
||
|
|
return new F2m(this.curve, eCFieldElement, eCFieldElement2.add(eCFieldElement3), new ECFieldElement[]{eCFieldElement3}, this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECFieldElement getYCoord() {
|
||
|
|
int curveCoordinateSystem = getCurveCoordinateSystem();
|
||
|
|
if (curveCoordinateSystem != 5 && curveCoordinateSystem != 6) {
|
||
|
|
return this.y;
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
ECFieldElement eCFieldElement2 = this.y;
|
||
|
|
if (isInfinity() || eCFieldElement.isZero()) {
|
||
|
|
return eCFieldElement2;
|
||
|
|
}
|
||
|
|
ECFieldElement multiply = eCFieldElement2.add(eCFieldElement).multiply(eCFieldElement);
|
||
|
|
if (6 != curveCoordinateSystem) {
|
||
|
|
return multiply;
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement3 = this.zs[0];
|
||
|
|
return !eCFieldElement3.isOne() ? multiply.divide(eCFieldElement3) : multiply;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
protected boolean getCompressionYTilde() {
|
||
|
|
ECFieldElement rawXCoord = getRawXCoord();
|
||
|
|
if (rawXCoord.isZero()) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
ECFieldElement rawYCoord = getRawYCoord();
|
||
|
|
int curveCoordinateSystem = getCurveCoordinateSystem();
|
||
|
|
return (curveCoordinateSystem == 5 || curveCoordinateSystem == 6) ? rawYCoord.testBitZero() != rawXCoord.testBitZero() : rawYCoord.divide(rawXCoord).testBitZero();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
protected ECPoint detach() {
|
||
|
|
return new F2m(null, getAffineXCoord(), getAffineYCoord());
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint add(ECPoint eCPoint) {
|
||
|
|
ECFieldElement eCFieldElement;
|
||
|
|
ECFieldElement eCFieldElement2;
|
||
|
|
ECFieldElement eCFieldElement3;
|
||
|
|
ECFieldElement multiply;
|
||
|
|
ECFieldElement eCFieldElement4;
|
||
|
|
ECFieldElement eCFieldElement5;
|
||
|
|
if (isInfinity()) {
|
||
|
|
return eCPoint;
|
||
|
|
}
|
||
|
|
if (eCPoint.isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
ECFieldElement eCFieldElement6 = this.x;
|
||
|
|
ECFieldElement eCFieldElement7 = eCPoint.x;
|
||
|
|
if (coordinateSystem == 0) {
|
||
|
|
ECFieldElement eCFieldElement8 = this.y;
|
||
|
|
ECFieldElement eCFieldElement9 = eCPoint.y;
|
||
|
|
ECFieldElement add = eCFieldElement6.add(eCFieldElement7);
|
||
|
|
ECFieldElement add2 = eCFieldElement8.add(eCFieldElement9);
|
||
|
|
if (add.isZero()) {
|
||
|
|
return add2.isZero() ? twice() : curve.getInfinity();
|
||
|
|
}
|
||
|
|
ECFieldElement divide = add2.divide(add);
|
||
|
|
ECFieldElement add3 = divide.square().add(divide).add(add).add(curve.getA());
|
||
|
|
return new F2m(curve, add3, divide.multiply(eCFieldElement6.add(add3)).add(add3).add(eCFieldElement8), this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem == 1) {
|
||
|
|
ECFieldElement eCFieldElement10 = this.y;
|
||
|
|
ECFieldElement eCFieldElement11 = this.zs[0];
|
||
|
|
ECFieldElement eCFieldElement12 = eCPoint.y;
|
||
|
|
ECFieldElement eCFieldElement13 = eCPoint.zs[0];
|
||
|
|
boolean isOne = eCFieldElement13.isOne();
|
||
|
|
ECFieldElement add4 = eCFieldElement11.multiply(eCFieldElement12).add(isOne ? eCFieldElement10 : eCFieldElement10.multiply(eCFieldElement13));
|
||
|
|
ECFieldElement add5 = eCFieldElement11.multiply(eCFieldElement7).add(isOne ? eCFieldElement6 : eCFieldElement6.multiply(eCFieldElement13));
|
||
|
|
if (add5.isZero()) {
|
||
|
|
return add4.isZero() ? twice() : curve.getInfinity();
|
||
|
|
}
|
||
|
|
ECFieldElement square = add5.square();
|
||
|
|
ECFieldElement multiply2 = square.multiply(add5);
|
||
|
|
if (!isOne) {
|
||
|
|
eCFieldElement11 = eCFieldElement11.multiply(eCFieldElement13);
|
||
|
|
}
|
||
|
|
ECFieldElement add6 = add4.add(add5);
|
||
|
|
ECFieldElement add7 = add6.multiplyPlusProduct(add4, square, curve.getA()).multiply(eCFieldElement11).add(multiply2);
|
||
|
|
ECFieldElement multiply3 = add5.multiply(add7);
|
||
|
|
if (!isOne) {
|
||
|
|
square = square.multiply(eCFieldElement13);
|
||
|
|
}
|
||
|
|
return new F2m(curve, multiply3, add4.multiplyPlusProduct(eCFieldElement6, add5, eCFieldElement10).multiplyPlusProduct(square, add6, add7), new ECFieldElement[]{multiply2.multiply(eCFieldElement11)}, this.withCompression);
|
||
|
|
}
|
||
|
|
if (coordinateSystem != 6) {
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
if (eCFieldElement6.isZero()) {
|
||
|
|
return eCFieldElement7.isZero() ? curve.getInfinity() : eCPoint.add(this);
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement14 = this.y;
|
||
|
|
ECFieldElement eCFieldElement15 = this.zs[0];
|
||
|
|
ECFieldElement eCFieldElement16 = eCPoint.y;
|
||
|
|
ECFieldElement eCFieldElement17 = eCPoint.zs[0];
|
||
|
|
boolean isOne2 = eCFieldElement15.isOne();
|
||
|
|
if (isOne2) {
|
||
|
|
eCFieldElement = eCFieldElement7;
|
||
|
|
eCFieldElement2 = eCFieldElement16;
|
||
|
|
} else {
|
||
|
|
eCFieldElement = eCFieldElement7.multiply(eCFieldElement15);
|
||
|
|
eCFieldElement2 = eCFieldElement16.multiply(eCFieldElement15);
|
||
|
|
}
|
||
|
|
boolean isOne3 = eCFieldElement17.isOne();
|
||
|
|
if (isOne3) {
|
||
|
|
eCFieldElement3 = eCFieldElement14;
|
||
|
|
} else {
|
||
|
|
eCFieldElement6 = eCFieldElement6.multiply(eCFieldElement17);
|
||
|
|
eCFieldElement3 = eCFieldElement14.multiply(eCFieldElement17);
|
||
|
|
}
|
||
|
|
ECFieldElement add8 = eCFieldElement3.add(eCFieldElement2);
|
||
|
|
ECFieldElement add9 = eCFieldElement6.add(eCFieldElement);
|
||
|
|
if (add9.isZero()) {
|
||
|
|
return add8.isZero() ? twice() : curve.getInfinity();
|
||
|
|
}
|
||
|
|
if (eCFieldElement7.isZero()) {
|
||
|
|
ECPoint normalize = normalize();
|
||
|
|
ECFieldElement xCoord = normalize.getXCoord();
|
||
|
|
ECFieldElement yCoord = normalize.getYCoord();
|
||
|
|
ECFieldElement divide2 = yCoord.add(eCFieldElement16).divide(xCoord);
|
||
|
|
eCFieldElement5 = divide2.square().add(divide2).add(xCoord).add(curve.getA());
|
||
|
|
if (eCFieldElement5.isZero()) {
|
||
|
|
return new F2m(curve, eCFieldElement5, curve.getB().sqrt(), this.withCompression);
|
||
|
|
}
|
||
|
|
ECFieldElement add10 = divide2.multiply(xCoord.add(eCFieldElement5)).add(eCFieldElement5).add(yCoord).divide(eCFieldElement5).add(eCFieldElement5);
|
||
|
|
multiply = curve.fromBigInteger(ECConstants.ONE);
|
||
|
|
eCFieldElement4 = add10;
|
||
|
|
} else {
|
||
|
|
ECFieldElement square2 = add9.square();
|
||
|
|
ECFieldElement multiply4 = add8.multiply(eCFieldElement6);
|
||
|
|
ECFieldElement multiply5 = add8.multiply(eCFieldElement);
|
||
|
|
ECFieldElement multiply6 = multiply4.multiply(multiply5);
|
||
|
|
if (multiply6.isZero()) {
|
||
|
|
return new F2m(curve, multiply6, curve.getB().sqrt(), this.withCompression);
|
||
|
|
}
|
||
|
|
ECFieldElement multiply7 = add8.multiply(square2);
|
||
|
|
if (!isOne3) {
|
||
|
|
multiply7 = multiply7.multiply(eCFieldElement17);
|
||
|
|
}
|
||
|
|
ECFieldElement squarePlusProduct = multiply5.add(square2).squarePlusProduct(multiply7, eCFieldElement14.add(eCFieldElement15));
|
||
|
|
multiply = !isOne2 ? multiply7.multiply(eCFieldElement15) : multiply7;
|
||
|
|
eCFieldElement4 = squarePlusProduct;
|
||
|
|
eCFieldElement5 = multiply6;
|
||
|
|
}
|
||
|
|
return new F2m(curve, eCFieldElement5, eCFieldElement4, new ECFieldElement[]{multiply}, this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
/* JADX INFO: Access modifiers changed from: package-private */
|
||
|
|
public F2m(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2, ECFieldElement[] eCFieldElementArr, boolean z) {
|
||
|
|
super(eCCurve, eCFieldElement, eCFieldElement2, eCFieldElementArr);
|
||
|
|
this.withCompression = z;
|
||
|
|
}
|
||
|
|
|
||
|
|
public F2m(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2, boolean z) {
|
||
|
|
super(eCCurve, eCFieldElement, eCFieldElement2);
|
||
|
|
if ((eCFieldElement == null) != (eCFieldElement2 == null)) {
|
||
|
|
throw new IllegalArgumentException("Exactly one of the field elements is null");
|
||
|
|
}
|
||
|
|
if (eCFieldElement != null) {
|
||
|
|
ECFieldElement.F2m.checkFieldElements(this.x, this.y);
|
||
|
|
if (eCCurve != null) {
|
||
|
|
ECFieldElement.F2m.checkFieldElements(this.x, this.curve.getA());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
this.withCompression = z;
|
||
|
|
}
|
||
|
|
|
||
|
|
public F2m(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2) {
|
||
|
|
this(eCCurve, eCFieldElement, eCFieldElement2, false);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECCurve getCurve() {
|
||
|
|
return this.curve;
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECFieldElement getAffineYCoord() {
|
||
|
|
checkNormalized();
|
||
|
|
return getYCoord();
|
||
|
|
}
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public static abstract class AbstractF2m extends ECPoint {
|
||
|
|
public AbstractF2m tauPow(int i) {
|
||
|
|
ECPoint createRawPoint;
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
if (coordinateSystem != 0) {
|
||
|
|
if (coordinateSystem != 1) {
|
||
|
|
if (coordinateSystem != 5) {
|
||
|
|
if (coordinateSystem != 6) {
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
createRawPoint = curve.createRawPoint(eCFieldElement.squarePow(i), this.y.squarePow(i), new ECFieldElement[]{this.zs[0].squarePow(i)}, this.withCompression);
|
||
|
|
return (AbstractF2m) createRawPoint;
|
||
|
|
}
|
||
|
|
createRawPoint = curve.createRawPoint(eCFieldElement.squarePow(i), this.y.squarePow(i), this.withCompression);
|
||
|
|
return (AbstractF2m) createRawPoint;
|
||
|
|
}
|
||
|
|
|
||
|
|
public AbstractF2m tau() {
|
||
|
|
ECPoint createRawPoint;
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
if (coordinateSystem != 0) {
|
||
|
|
if (coordinateSystem != 1) {
|
||
|
|
if (coordinateSystem != 5) {
|
||
|
|
if (coordinateSystem != 6) {
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
createRawPoint = curve.createRawPoint(eCFieldElement.square(), this.y.square(), new ECFieldElement[]{this.zs[0].square()}, this.withCompression);
|
||
|
|
return (AbstractF2m) createRawPoint;
|
||
|
|
}
|
||
|
|
createRawPoint = curve.createRawPoint(eCFieldElement.square(), this.y.square(), this.withCompression);
|
||
|
|
return (AbstractF2m) createRawPoint;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint subtract(ECPoint eCPoint) {
|
||
|
|
return eCPoint.isInfinity() ? this : add(eCPoint.negate());
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint scaleY(ECFieldElement eCFieldElement) {
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
int curveCoordinateSystem = getCurveCoordinateSystem();
|
||
|
|
if (curveCoordinateSystem != 5 && curveCoordinateSystem != 6) {
|
||
|
|
return super.scaleY(eCFieldElement);
|
||
|
|
}
|
||
|
|
ECFieldElement rawXCoord = getRawXCoord();
|
||
|
|
return getCurve().createRawPoint(rawXCoord, getRawYCoord().add(rawXCoord).multiply(eCFieldElement).add(rawXCoord), getRawZCoords(), this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint scaleX(ECFieldElement eCFieldElement) {
|
||
|
|
if (isInfinity()) {
|
||
|
|
return this;
|
||
|
|
}
|
||
|
|
int curveCoordinateSystem = getCurveCoordinateSystem();
|
||
|
|
if (curveCoordinateSystem == 5) {
|
||
|
|
ECFieldElement rawXCoord = getRawXCoord();
|
||
|
|
ECFieldElement rawYCoord = getRawYCoord();
|
||
|
|
return getCurve().createRawPoint(rawXCoord, rawYCoord.add(rawXCoord).divide(eCFieldElement).add(rawXCoord.multiply(eCFieldElement)), getRawZCoords(), this.withCompression);
|
||
|
|
}
|
||
|
|
if (curveCoordinateSystem != 6) {
|
||
|
|
return super.scaleX(eCFieldElement);
|
||
|
|
}
|
||
|
|
ECFieldElement rawXCoord2 = getRawXCoord();
|
||
|
|
ECFieldElement rawYCoord2 = getRawYCoord();
|
||
|
|
ECFieldElement eCFieldElement2 = getRawZCoords()[0];
|
||
|
|
ECFieldElement multiply = rawXCoord2.multiply(eCFieldElement.square());
|
||
|
|
return getCurve().createRawPoint(multiply, rawYCoord2.add(rawXCoord2).add(multiply), new ECFieldElement[]{eCFieldElement2.multiply(eCFieldElement)}, this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
protected boolean satisfiesCurveEquation() {
|
||
|
|
ECFieldElement multiplyPlusProduct;
|
||
|
|
ECFieldElement squarePlusProduct;
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
ECFieldElement a = curve.getA();
|
||
|
|
ECFieldElement b = curve.getB();
|
||
|
|
int coordinateSystem = curve.getCoordinateSystem();
|
||
|
|
if (coordinateSystem != 6) {
|
||
|
|
ECFieldElement eCFieldElement2 = this.y;
|
||
|
|
ECFieldElement multiply = eCFieldElement2.add(eCFieldElement).multiply(eCFieldElement2);
|
||
|
|
if (coordinateSystem != 0) {
|
||
|
|
if (coordinateSystem != 1) {
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement3 = this.zs[0];
|
||
|
|
if (!eCFieldElement3.isOne()) {
|
||
|
|
ECFieldElement multiply2 = eCFieldElement3.multiply(eCFieldElement3.square());
|
||
|
|
multiply = multiply.multiply(eCFieldElement3);
|
||
|
|
a = a.multiply(eCFieldElement3);
|
||
|
|
b = b.multiply(multiply2);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return multiply.equals(eCFieldElement.add(a).multiply(eCFieldElement.square()).add(b));
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement4 = this.zs[0];
|
||
|
|
boolean isOne = eCFieldElement4.isOne();
|
||
|
|
if (eCFieldElement.isZero()) {
|
||
|
|
ECFieldElement square = this.y.square();
|
||
|
|
if (!isOne) {
|
||
|
|
b = b.multiply(eCFieldElement4.square());
|
||
|
|
}
|
||
|
|
return square.equals(b);
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement5 = this.y;
|
||
|
|
ECFieldElement square2 = eCFieldElement.square();
|
||
|
|
if (isOne) {
|
||
|
|
multiplyPlusProduct = eCFieldElement5.square().add(eCFieldElement5).add(a);
|
||
|
|
squarePlusProduct = square2.square().add(b);
|
||
|
|
} else {
|
||
|
|
ECFieldElement square3 = eCFieldElement4.square();
|
||
|
|
ECFieldElement square4 = square3.square();
|
||
|
|
multiplyPlusProduct = eCFieldElement5.add(eCFieldElement4).multiplyPlusProduct(eCFieldElement5, a, square3);
|
||
|
|
squarePlusProduct = square2.squarePlusProduct(b, square4);
|
||
|
|
}
|
||
|
|
return multiplyPlusProduct.multiply(square2).equals(squarePlusProduct);
|
||
|
|
}
|
||
|
|
|
||
|
|
public AbstractF2m(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2, ECFieldElement[] eCFieldElementArr) {
|
||
|
|
super(eCCurve, eCFieldElement, eCFieldElement2, eCFieldElementArr);
|
||
|
|
}
|
||
|
|
|
||
|
|
public AbstractF2m(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2) {
|
||
|
|
super(eCCurve, eCFieldElement, eCFieldElement2);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public ECFieldElement getAffineXCoord() {
|
||
|
|
checkNormalized();
|
||
|
|
return getXCoord();
|
||
|
|
}
|
||
|
|
|
||
|
|
public boolean equals(ECPoint eCPoint) {
|
||
|
|
ECPoint eCPoint2;
|
||
|
|
if (eCPoint == null) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
ECCurve curve = getCurve();
|
||
|
|
ECCurve curve2 = eCPoint.getCurve();
|
||
|
|
boolean z = curve == null;
|
||
|
|
boolean z2 = curve2 == null;
|
||
|
|
boolean isInfinity = isInfinity();
|
||
|
|
boolean isInfinity2 = eCPoint.isInfinity();
|
||
|
|
if (isInfinity || isInfinity2) {
|
||
|
|
if (isInfinity && isInfinity2) {
|
||
|
|
return z || z2 || curve.equals(curve2);
|
||
|
|
}
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (!z || !z2) {
|
||
|
|
if (!z) {
|
||
|
|
if (z2) {
|
||
|
|
eCPoint2 = normalize();
|
||
|
|
} else {
|
||
|
|
if (!curve.equals(curve2)) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
ECPoint[] eCPointArr = {this, curve.importPoint(eCPoint)};
|
||
|
|
curve.normalizeAll(eCPointArr);
|
||
|
|
eCPoint2 = eCPointArr[0];
|
||
|
|
eCPoint = eCPointArr[1];
|
||
|
|
}
|
||
|
|
return eCPoint2.getXCoord().equals(eCPoint.getXCoord()) && eCPoint2.getYCoord().equals(eCPoint.getYCoord());
|
||
|
|
}
|
||
|
|
eCPoint = eCPoint.normalize();
|
||
|
|
}
|
||
|
|
eCPoint2 = this;
|
||
|
|
if (eCPoint2.getXCoord().equals(eCPoint.getXCoord())) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public boolean equals(Object obj) {
|
||
|
|
if (obj == this) {
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
if (obj instanceof ECPoint) {
|
||
|
|
return equals((ECPoint) obj);
|
||
|
|
}
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public static abstract class AbstractFp extends ECPoint {
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
public ECPoint subtract(ECPoint eCPoint) {
|
||
|
|
return eCPoint.isInfinity() ? this : add(eCPoint.negate());
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
protected boolean satisfiesCurveEquation() {
|
||
|
|
ECFieldElement eCFieldElement = this.x;
|
||
|
|
ECFieldElement eCFieldElement2 = this.y;
|
||
|
|
ECFieldElement a = this.curve.getA();
|
||
|
|
ECFieldElement b = this.curve.getB();
|
||
|
|
ECFieldElement square = eCFieldElement2.square();
|
||
|
|
int curveCoordinateSystem = getCurveCoordinateSystem();
|
||
|
|
if (curveCoordinateSystem != 0) {
|
||
|
|
if (curveCoordinateSystem == 1) {
|
||
|
|
ECFieldElement eCFieldElement3 = this.zs[0];
|
||
|
|
if (!eCFieldElement3.isOne()) {
|
||
|
|
ECFieldElement square2 = eCFieldElement3.square();
|
||
|
|
ECFieldElement multiply = eCFieldElement3.multiply(square2);
|
||
|
|
square = square.multiply(eCFieldElement3);
|
||
|
|
a = a.multiply(square2);
|
||
|
|
b = b.multiply(multiply);
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
if (curveCoordinateSystem != 2 && curveCoordinateSystem != 3 && curveCoordinateSystem != 4) {
|
||
|
|
throw new IllegalStateException("unsupported coordinate system");
|
||
|
|
}
|
||
|
|
ECFieldElement eCFieldElement4 = this.zs[0];
|
||
|
|
if (!eCFieldElement4.isOne()) {
|
||
|
|
ECFieldElement square3 = eCFieldElement4.square();
|
||
|
|
ECFieldElement square4 = square3.square();
|
||
|
|
ECFieldElement multiply2 = square3.multiply(square4);
|
||
|
|
a = a.multiply(square4);
|
||
|
|
b = b.multiply(multiply2);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return square.equals(eCFieldElement.square().add(a).multiply(eCFieldElement).add(b));
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.math.ec.ECPoint
|
||
|
|
protected boolean getCompressionYTilde() {
|
||
|
|
return getAffineYCoord().testBitZero();
|
||
|
|
}
|
||
|
|
|
||
|
|
public AbstractFp(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2, ECFieldElement[] eCFieldElementArr) {
|
||
|
|
super(eCCurve, eCFieldElement, eCFieldElement2, eCFieldElementArr);
|
||
|
|
}
|
||
|
|
|
||
|
|
public AbstractFp(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2) {
|
||
|
|
super(eCCurve, eCFieldElement, eCFieldElement2);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECPoint createScaledPoint(ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2) {
|
||
|
|
return getCurve().createRawPoint(getRawXCoord().multiply(eCFieldElement), getRawYCoord().multiply(eCFieldElement2), this.withCompression);
|
||
|
|
}
|
||
|
|
|
||
|
|
protected void checkNormalized() {
|
||
|
|
if (!isNormalized()) {
|
||
|
|
throw new IllegalStateException("point not in normal form");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
protected static ECFieldElement[] getInitialZCoords(ECCurve eCCurve) {
|
||
|
|
int coordinateSystem = eCCurve == null ? 0 : eCCurve.getCoordinateSystem();
|
||
|
|
if (coordinateSystem == 0 || coordinateSystem == 5) {
|
||
|
|
return EMPTY_ZS;
|
||
|
|
}
|
||
|
|
ECFieldElement fromBigInteger = eCCurve.fromBigInteger(ECConstants.ONE);
|
||
|
|
if (coordinateSystem != 1 && coordinateSystem != 2) {
|
||
|
|
if (coordinateSystem == 3) {
|
||
|
|
return new ECFieldElement[]{fromBigInteger, fromBigInteger, fromBigInteger};
|
||
|
|
}
|
||
|
|
if (coordinateSystem == 4) {
|
||
|
|
return new ECFieldElement[]{fromBigInteger, eCCurve.getA()};
|
||
|
|
}
|
||
|
|
if (coordinateSystem != 6) {
|
||
|
|
throw new IllegalArgumentException("unknown coordinate system");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return new ECFieldElement[]{fromBigInteger};
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECPoint(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2, ECFieldElement[] eCFieldElementArr) {
|
||
|
|
this.preCompTable = null;
|
||
|
|
this.curve = eCCurve;
|
||
|
|
this.x = eCFieldElement;
|
||
|
|
this.y = eCFieldElement2;
|
||
|
|
this.zs = eCFieldElementArr;
|
||
|
|
}
|
||
|
|
|
||
|
|
protected ECPoint(ECCurve eCCurve, ECFieldElement eCFieldElement, ECFieldElement eCFieldElement2) {
|
||
|
|
this(eCCurve, eCFieldElement, eCFieldElement2, getInitialZCoords(eCCurve));
|
||
|
|
}
|
||
|
|
}
|