Split out Montgomery exponentation state

The existing Power_Mod classes are not thread safe so can't be used
in shared contexts.

1 files changed, 8 insertions, 107 deletions

diff --git a/src/lib/math/numbertheory/powm_mnt.cpp b/src/lib/math/numbertheory/powm_mnt.cpp
index d3b5805e4..81102188b 100644
--- a/src/lib/math/numbertheory/powm_mnt.cpp
+++ b/src/lib/math/numbertheory/powm_mnt.cpp
@@ -1,6 +1,6 @@
 /*
 * Montgomery Exponentiation
-* (C) 1999-2010,2012 Jack Lloyd
+* (C) 1999-2010,2012,2018 Jack Lloyd
 *     2016 Matthias Gierlings
 *
 * Botan is released under the Simplified BSD License (see license.txt)
@@ -9,131 +9,32 @@
 #include <botan/internal/def_powm.h>
 #include <botan/numthry.h>
 #include <botan/internal/mp_core.h>
+#include <botan/internal/monty_exp.h>
 
 namespace Botan {
 
-/*
-* Set the exponent
-*/
 void Montgomery_Exponentiator::set_exponent(const BigInt& exp)
    {
-   m_exp = exp;
-   m_exp_bits = exp.bits();
+   m_e = exp;
    }
 
-/*
-* Set the base
-*/
 void Montgomery_Exponentiator::set_base(const BigInt& base)
    {
-   m_window_bits = Power_Mod::window_bits(m_exp.bits(), base.bits(), m_hints);
-
-   m_g.resize(1U << m_window_bits);
-
-   BigInt z(BigInt::Positive, 2 * (m_mod_words + 1));
-   secure_vector<word> workspace(z.size());
-
-   m_g[0] = 1;
-
-   bigint_monty_mul(z, m_g[0], m_R2_mod,
-                    m_modulus.data(), m_mod_words, m_mod_prime,
-                    workspace.data());
-   m_g[0] = z;
-
-   m_g[1] = m_reducer.reduce(base);
-
-   bigint_monty_mul(z, m_g[1], m_R2_mod,
-                    m_modulus.data(), m_mod_words, m_mod_prime,
-                    workspace.data());
-
-   m_g[1] = z;
-
-   const BigInt& x = m_g[1];
-
-   for(size_t i = 2; i != m_g.size(); ++i)
-      {
-      const BigInt& y = m_g[i-1];
-
-      bigint_monty_mul(z, x, y, m_modulus.data(), m_mod_words, m_mod_prime,
-                       workspace.data());
-
-      m_g[i] = z;
-      m_g[i].shrink_to_fit();
-      m_g[i].grow_to(m_mod_words);
-      }
+   size_t window_bits = Power_Mod::window_bits(m_e.bits(), base.bits(), m_hints);
+   m_monty = monty_precompute(base, m_p, m_mod_p, window_bits);
    }
 
-/*
-* Compute the result
-*/
 BigInt Montgomery_Exponentiator::execute() const
    {
-   const size_t exp_nibbles = (m_exp_bits + m_window_bits - 1) / m_window_bits;
-
-   BigInt x = m_R_mod;
-
-   const size_t z_size = 2*(m_mod_words + 1);
-
-   BigInt z(BigInt::Positive, z_size);
-   secure_vector<word> workspace(z.size());
-   secure_vector<word> e(m_mod_words);
-
-   for(size_t i = exp_nibbles; i > 0; --i)
-      {
-      for(size_t k = 0; k != m_window_bits; ++k)
-         {
-         bigint_monty_sqr(z, x, m_modulus.data(), m_mod_words, m_mod_prime,
-                          workspace.data());
-
-         x = z;
-         }
-
-      const uint32_t nibble = m_exp.get_substring(m_window_bits*(i-1), m_window_bits);
-
-      BigInt::const_time_lookup(e, m_g, nibble);
-
-      bigint_mul(z.mutable_data(), z.size(),
-                 x.data(), x.size(), x.sig_words(),
-                 e.data(), m_mod_words, m_mod_words,
-                 workspace.data());
-
-      bigint_monty_redc(z.mutable_data(),
-                        m_modulus.data(), m_mod_words, m_mod_prime,
-                        workspace.data());
-
-      x = z;
-      }
-
-   x.grow_to(2*m_mod_words + 1);
-
-   bigint_monty_redc(x.mutable_data(),
-                     m_modulus.data(), m_mod_words, m_mod_prime,
-                     workspace.data());
-
-   return x;
+   return monty_execute(*m_monty, m_e);
    }
 
-/*
-* Montgomery_Exponentiator Constructor
-*/
 Montgomery_Exponentiator::Montgomery_Exponentiator(const BigInt& mod,
                                                    Power_Mod::Usage_Hints hints) :
-   m_modulus(mod),
-   m_reducer(m_modulus),
-   m_mod_words(m_modulus.sig_words()),
-   m_window_bits(1),
+   m_p(mod),
+   m_mod_p(mod),
    m_hints(hints)
    {
-   // Montgomery reduction only works for positive odd moduli
-   if(!m_modulus.is_positive() || m_modulus.is_even())
-      throw Invalid_Argument("Montgomery_Exponentiator: invalid modulus");
-
-   m_mod_prime = monty_inverse(mod.word_at(0));
-
-   const BigInt r = BigInt::power_of_2(m_mod_words * BOTAN_MP_WORD_BITS);
-   m_R_mod = m_reducer.reduce(r);
-   m_R2_mod = m_reducer.square(m_R_mod);
-   m_exp_bits = 0;
    }
 
 }