* RIPEMD-160 final digest */

* RIPEMD-160 context setup */

* Check for the consistency of all fields in an RSA private key context */

* Export CRT parameters * This must also be implemented if CRT is not used, for being able to * write DER encoded RSA keys. The helper function mb

* Check if a hash proposed by the peer is in our list. * Return 0 if we're willing to use it, -1 otherwise. */

* Convert from MBEDTLS_SSL_HASH_XXX to MBEDTLS_MD_XXX */

* To be called when the last message of an outgoing flight is send. */

Find an entry in a signature-hash set matching a given hash algorithm. */

* Load one or more certificates and add them to the chained list */

* Get signature algorithm from alg OID and optional parameters */

* Helper for writing signature algorithms */

* XTEA encrypt function */

Implementation that should never be optimized out by the compiler */

Implementation that should never be optimized out by the compiler */

* Small divisors test (X must be positive) * * Return values: * 0: no small factor (possible prime, more tests needed) * 1: certain prime *

* Convert an ASCII character to digit value */

* Miller-Rabin pseudo-primality test (HAC 4.24) */

* Apple LLVM version 4.2 (clang-425.0.24) (based on LLVM 3.2svn) * appears to need this to prevent bad ARM code generation at -O3. */

* Helper for mbedtls_mpi subtraction */

* Check if the requested operation would be blocking on a non-blocking socket * and thus 'failed' with a negative return value. */

* Decrypt with AES-XXX-CBC, using PBKDF1 for key derivation */

* Read a 16-byte hex string and convert it to binary */

* Parse a PKCS#1 encoded private RSA key */

* Parse an unencrypted PKCS#8 encoded private key * * Notes: * * - This function does not own the key buffer. It is the * responsibility o

* Parse a SEC1 encoded private EC key */

* Use EC parameters to initialise an EC group * * ECParameters ::= CHOICE { * namedCurve OBJECT IDENTIFIER * specifiedCurve Sp

* Generate/update a key */

* Check md_alg against profile * Return 0 if md_alg acceptable for this profile, -1 otherwise */

=========================================================================== * Flush the bits in the bit buffer to pending output (leaves at most 7 b

=========================================================================== * Send a stored block */

========================================================================= */

=========================================================================== * Flush the bit buffer, keeping at most 7 bits in it. */

=========================================================================== * Reverse the first len bits of a code, using straightforward code (a fa

=========================================================================== * Flush the bit buffer and align the output on a byte boundary */

* Authenticated encryption or decryption */

* Generate subkeys * * - as specified by RFC 4493, section 2.3 Subkey Generation Algorithm */

* Multiplication by u in the Galois field of GF(2^n) * * As explained in NIST SP 800-38B, this can be computed: * * If MSB(p) = 0, then p =

=========================================================================== * Send the block data compressed using the given Huffman trees */

========================================================================= */

* Compute the sum of three points R = A + B + C */

* Compute hash for ZKP (7.4.2.2.2.1) */

* Generate an ECJPAKEKeyKP * Output: the serialized structure, plus private/public key pair */

* Compute R = +/- X * S mod N, taking care not to leak S */

Load my private keys and generate the correponding public keys */

* Generate ZKP (7.4.2.3.2) and write it as ECSchnorrZKP (7.4.2.2.2) */

* Normalize jacobian coordinates of an array of (pointers to) points, * using Montgomery's trick to perform only one inversion mod P. * (See for e

* Conditional point inversion: Q -> -Q = (Q.X, -Q.Y, Q.Z) without leak. * "inv" must be 0 (don't invert) or 1 (invert) or the result will be invalid

* Select precomputed point: R = sign(i) * T[ abs(i) / 2 ] */