[6a3a178] | 1 | // Named EC curves
|
---|
| 2 |
|
---|
| 3 | // Requires ec.js, jsbn.js, and jsbn2.js
|
---|
| 4 | var BigInteger = require('jsbn').BigInteger
|
---|
| 5 | var ECCurveFp = require('./ec.js').ECCurveFp
|
---|
| 6 |
|
---|
| 7 |
|
---|
| 8 | // ----------------
|
---|
| 9 | // X9ECParameters
|
---|
| 10 |
|
---|
| 11 | // constructor
|
---|
| 12 | function X9ECParameters(curve,g,n,h) {
|
---|
| 13 | this.curve = curve;
|
---|
| 14 | this.g = g;
|
---|
| 15 | this.n = n;
|
---|
| 16 | this.h = h;
|
---|
| 17 | }
|
---|
| 18 |
|
---|
| 19 | function x9getCurve() {
|
---|
| 20 | return this.curve;
|
---|
| 21 | }
|
---|
| 22 |
|
---|
| 23 | function x9getG() {
|
---|
| 24 | return this.g;
|
---|
| 25 | }
|
---|
| 26 |
|
---|
| 27 | function x9getN() {
|
---|
| 28 | return this.n;
|
---|
| 29 | }
|
---|
| 30 |
|
---|
| 31 | function x9getH() {
|
---|
| 32 | return this.h;
|
---|
| 33 | }
|
---|
| 34 |
|
---|
| 35 | X9ECParameters.prototype.getCurve = x9getCurve;
|
---|
| 36 | X9ECParameters.prototype.getG = x9getG;
|
---|
| 37 | X9ECParameters.prototype.getN = x9getN;
|
---|
| 38 | X9ECParameters.prototype.getH = x9getH;
|
---|
| 39 |
|
---|
| 40 | // ----------------
|
---|
| 41 | // SECNamedCurves
|
---|
| 42 |
|
---|
| 43 | function fromHex(s) { return new BigInteger(s, 16); }
|
---|
| 44 |
|
---|
| 45 | function secp128r1() {
|
---|
| 46 | // p = 2^128 - 2^97 - 1
|
---|
| 47 | var p = fromHex("FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFF");
|
---|
| 48 | var a = fromHex("FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFC");
|
---|
| 49 | var b = fromHex("E87579C11079F43DD824993C2CEE5ED3");
|
---|
| 50 | //byte[] S = Hex.decode("000E0D4D696E6768756151750CC03A4473D03679");
|
---|
| 51 | var n = fromHex("FFFFFFFE0000000075A30D1B9038A115");
|
---|
| 52 | var h = BigInteger.ONE;
|
---|
| 53 | var curve = new ECCurveFp(p, a, b);
|
---|
| 54 | var G = curve.decodePointHex("04"
|
---|
| 55 | + "161FF7528B899B2D0C28607CA52C5B86"
|
---|
| 56 | + "CF5AC8395BAFEB13C02DA292DDED7A83");
|
---|
| 57 | return new X9ECParameters(curve, G, n, h);
|
---|
| 58 | }
|
---|
| 59 |
|
---|
| 60 | function secp160k1() {
|
---|
| 61 | // p = 2^160 - 2^32 - 2^14 - 2^12 - 2^9 - 2^8 - 2^7 - 2^3 - 2^2 - 1
|
---|
| 62 | var p = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73");
|
---|
| 63 | var a = BigInteger.ZERO;
|
---|
| 64 | var b = fromHex("7");
|
---|
| 65 | //byte[] S = null;
|
---|
| 66 | var n = fromHex("0100000000000000000001B8FA16DFAB9ACA16B6B3");
|
---|
| 67 | var h = BigInteger.ONE;
|
---|
| 68 | var curve = new ECCurveFp(p, a, b);
|
---|
| 69 | var G = curve.decodePointHex("04"
|
---|
| 70 | + "3B4C382CE37AA192A4019E763036F4F5DD4D7EBB"
|
---|
| 71 | + "938CF935318FDCED6BC28286531733C3F03C4FEE");
|
---|
| 72 | return new X9ECParameters(curve, G, n, h);
|
---|
| 73 | }
|
---|
| 74 |
|
---|
| 75 | function secp160r1() {
|
---|
| 76 | // p = 2^160 - 2^31 - 1
|
---|
| 77 | var p = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFF");
|
---|
| 78 | var a = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFC");
|
---|
| 79 | var b = fromHex("1C97BEFC54BD7A8B65ACF89F81D4D4ADC565FA45");
|
---|
| 80 | //byte[] S = Hex.decode("1053CDE42C14D696E67687561517533BF3F83345");
|
---|
| 81 | var n = fromHex("0100000000000000000001F4C8F927AED3CA752257");
|
---|
| 82 | var h = BigInteger.ONE;
|
---|
| 83 | var curve = new ECCurveFp(p, a, b);
|
---|
| 84 | var G = curve.decodePointHex("04"
|
---|
| 85 | + "4A96B5688EF573284664698968C38BB913CBFC82"
|
---|
| 86 | + "23A628553168947D59DCC912042351377AC5FB32");
|
---|
| 87 | return new X9ECParameters(curve, G, n, h);
|
---|
| 88 | }
|
---|
| 89 |
|
---|
| 90 | function secp192k1() {
|
---|
| 91 | // p = 2^192 - 2^32 - 2^12 - 2^8 - 2^7 - 2^6 - 2^3 - 1
|
---|
| 92 | var p = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFEE37");
|
---|
| 93 | var a = BigInteger.ZERO;
|
---|
| 94 | var b = fromHex("3");
|
---|
| 95 | //byte[] S = null;
|
---|
| 96 | var n = fromHex("FFFFFFFFFFFFFFFFFFFFFFFE26F2FC170F69466A74DEFD8D");
|
---|
| 97 | var h = BigInteger.ONE;
|
---|
| 98 | var curve = new ECCurveFp(p, a, b);
|
---|
| 99 | var G = curve.decodePointHex("04"
|
---|
| 100 | + "DB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D"
|
---|
| 101 | + "9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D");
|
---|
| 102 | return new X9ECParameters(curve, G, n, h);
|
---|
| 103 | }
|
---|
| 104 |
|
---|
| 105 | function secp192r1() {
|
---|
| 106 | // p = 2^192 - 2^64 - 1
|
---|
| 107 | var p = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF");
|
---|
| 108 | var a = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC");
|
---|
| 109 | var b = fromHex("64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1");
|
---|
| 110 | //byte[] S = Hex.decode("3045AE6FC8422F64ED579528D38120EAE12196D5");
|
---|
| 111 | var n = fromHex("FFFFFFFFFFFFFFFFFFFFFFFF99DEF836146BC9B1B4D22831");
|
---|
| 112 | var h = BigInteger.ONE;
|
---|
| 113 | var curve = new ECCurveFp(p, a, b);
|
---|
| 114 | var G = curve.decodePointHex("04"
|
---|
| 115 | + "188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF1012"
|
---|
| 116 | + "07192B95FFC8DA78631011ED6B24CDD573F977A11E794811");
|
---|
| 117 | return new X9ECParameters(curve, G, n, h);
|
---|
| 118 | }
|
---|
| 119 |
|
---|
| 120 | function secp224r1() {
|
---|
| 121 | // p = 2^224 - 2^96 + 1
|
---|
| 122 | var p = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF000000000000000000000001");
|
---|
| 123 | var a = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFE");
|
---|
| 124 | var b = fromHex("B4050A850C04B3ABF54132565044B0B7D7BFD8BA270B39432355FFB4");
|
---|
| 125 | //byte[] S = Hex.decode("BD71344799D5C7FCDC45B59FA3B9AB8F6A948BC5");
|
---|
| 126 | var n = fromHex("FFFFFFFFFFFFFFFFFFFFFFFFFFFF16A2E0B8F03E13DD29455C5C2A3D");
|
---|
| 127 | var h = BigInteger.ONE;
|
---|
| 128 | var curve = new ECCurveFp(p, a, b);
|
---|
| 129 | var G = curve.decodePointHex("04"
|
---|
| 130 | + "B70E0CBD6BB4BF7F321390B94A03C1D356C21122343280D6115C1D21"
|
---|
| 131 | + "BD376388B5F723FB4C22DFE6CD4375A05A07476444D5819985007E34");
|
---|
| 132 | return new X9ECParameters(curve, G, n, h);
|
---|
| 133 | }
|
---|
| 134 |
|
---|
| 135 | function secp256r1() {
|
---|
| 136 | // p = 2^224 (2^32 - 1) + 2^192 + 2^96 - 1
|
---|
| 137 | var p = fromHex("FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF");
|
---|
| 138 | var a = fromHex("FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFC");
|
---|
| 139 | var b = fromHex("5AC635D8AA3A93E7B3EBBD55769886BC651D06B0CC53B0F63BCE3C3E27D2604B");
|
---|
| 140 | //byte[] S = Hex.decode("C49D360886E704936A6678E1139D26B7819F7E90");
|
---|
| 141 | var n = fromHex("FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551");
|
---|
| 142 | var h = BigInteger.ONE;
|
---|
| 143 | var curve = new ECCurveFp(p, a, b);
|
---|
| 144 | var G = curve.decodePointHex("04"
|
---|
| 145 | + "6B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C296"
|
---|
| 146 | + "4FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5");
|
---|
| 147 | return new X9ECParameters(curve, G, n, h);
|
---|
| 148 | }
|
---|
| 149 |
|
---|
| 150 | // TODO: make this into a proper hashtable
|
---|
| 151 | function getSECCurveByName(name) {
|
---|
| 152 | if(name == "secp128r1") return secp128r1();
|
---|
| 153 | if(name == "secp160k1") return secp160k1();
|
---|
| 154 | if(name == "secp160r1") return secp160r1();
|
---|
| 155 | if(name == "secp192k1") return secp192k1();
|
---|
| 156 | if(name == "secp192r1") return secp192r1();
|
---|
| 157 | if(name == "secp224r1") return secp224r1();
|
---|
| 158 | if(name == "secp256r1") return secp256r1();
|
---|
| 159 | return null;
|
---|
| 160 | }
|
---|
| 161 |
|
---|
| 162 | module.exports = {
|
---|
| 163 | "secp128r1":secp128r1,
|
---|
| 164 | "secp160k1":secp160k1,
|
---|
| 165 | "secp160r1":secp160r1,
|
---|
| 166 | "secp192k1":secp192k1,
|
---|
| 167 | "secp192r1":secp192r1,
|
---|
| 168 | "secp224r1":secp224r1,
|
---|
| 169 | "secp256r1":secp256r1
|
---|
| 170 | }
|
---|