diff options
| author | Peter Dettman <peter.dettman@bouncycastle.org> | 2018-10-06 16:44:01 +0700 |
|---|---|---|
| committer | Peter Dettman <peter.dettman@bouncycastle.org> | 2018-10-06 16:44:01 +0700 |
| commit | f5078e451501d43882308d8322b9c8863e2a2723 (patch) | |
| tree | 6fe93ae3363b7a7492e099a363286fee29bc8115 /crypto/src/math/ec/rfc7748/X25519.cs | |
| parent | Fix initialization checks (diff) | |
| download | BouncyCastle.NET-ed25519-f5078e451501d43882308d8322b9c8863e2a2723.tar.xz | |
RFC 7748: Exclude all-zeroes agreement value
Diffstat (limited to 'crypto/src/math/ec/rfc7748/X25519.cs')
| -rw-r--r-- | crypto/src/math/ec/rfc7748/X25519.cs | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/crypto/src/math/ec/rfc7748/X25519.cs b/crypto/src/math/ec/rfc7748/X25519.cs index d63cc5a3e..6b6acdecd 100644 --- a/crypto/src/math/ec/rfc7748/X25519.cs +++ b/crypto/src/math/ec/rfc7748/X25519.cs @@ -2,6 +2,8 @@ using System.Diagnostics; using System.Runtime.CompilerServices; +using Org.BouncyCastle.Utilities; + namespace Org.BouncyCastle.Math.EC.Rfc7748 { public abstract class X25519 @@ -21,6 +23,12 @@ namespace Org.BouncyCastle.Math.EC.Rfc7748 private static int[] precompBase = null; + public static bool CalculateAgreement(byte[] k, int kOff, byte[] u, int uOff, byte[] r, int rOff) + { + ScalarMult(k, kOff, u, uOff, r, rOff); + return !Arrays.AreAllZeroes(r, rOff, PointSize); + } + private static uint Decode32(byte[] bs, int off) { uint n = bs[off]; |