using System; namespace Org.BouncyCastle.Math.EC.Multiplier { public class FixedPointCombMultiplier : AbstractECMultiplier { protected override ECPoint MultiplyPositive(ECPoint p, BigInteger k) { ECCurve c = p.Curve; int size = FixedPointUtilities.GetCombSize(c); if (k.BitLength > size) { /* * TODO The comb works best when the scalars are less than the (possibly unknown) order. * Still, if we want to handle larger scalars, we could allow customization of the comb * size, or alternatively we could deal with the 'extra' bits either by running the comb * multiple times as necessary, or by using an alternative multiplier as prelude. */ throw new InvalidOperationException("fixed-point comb doesn't support scalars larger than the curve order"); } // TODO Call method to let subclasses select width int width = size > 257 ? 6 : 5; FixedPointPreCompInfo info = FixedPointUtilities.Precompute(p, width); ECPoint[] lookupTable = info.PreComp; int d = (size + width - 1) / width; ECPoint R = c.Infinity; int top = d * width - 1; for (int i = 0; i < d; ++i) { int index = 0; for (int j = top - i; j >= 0; j -= d) { index <<= 1; if (k.TestBit(j)) { index |= 1; } } R = R.TwicePlus(lookupTable[index]); } return R; } } }