Deconstify PK_Ops. It's quite reasonable that some op will want to

precompute only as needed, or will want to access some other expensive
resource or etc.

Change how the secret for generating blinding is done in cases where a
PRNG isn't available. Use the operations public op to hide the secret,
for instance the seed for a DH blinding variable is 2^x mod p.

Make use of being able to mutate internal structures in the RW signer,
since that does have access to a PRNG, so use it to initialize the
blinder on first call to sign().

1 files changed, 1 insertions, 36 deletions

diff --git a/src/pubkey/ecdh/ecdh.cpp b/src/pubkey/ecdh/ecdh.cpp
index d3688fa5c..bf8a57b3b 100644
--- a/src/pubkey/ecdh/ecdh.cpp
+++ b/src/pubkey/ecdh/ecdh.cpp
@@ -19,7 +19,7 @@ ECDH_KA_Operation::ECDH_KA_Operation(const ECDH_PrivateKey& key) :
                   key.private_value();
    }
 
-SecureVector<byte> ECDH_KA_Operation::agree(const byte w[], u32bit w_len) const
+SecureVector<byte> ECDH_KA_Operation::agree(const byte w[], u32bit w_len)
    {
    PointGFp point = OS2ECP(w, w_len, curve);
 
@@ -30,39 +30,4 @@ SecureVector<byte> ECDH_KA_Operation::agree(const byte w[], u32bit w_len) const
                               curve.get_p().bytes());
    }
 
-/**
-* Derive a key
-*/
-SecureVector<byte> ECDH_PrivateKey::derive_key(const byte key[],
-                                               u32bit key_len) const
-   {
-   PointGFp point = OS2ECP(key, key_len, public_point().get_curve());
-   return derive_key(point);
-   }
-
-/**
-* Derive a key
-*/
-SecureVector<byte> ECDH_PrivateKey::derive_key(const ECDH_PublicKey& key) const
-   {
-   return derive_key(key.public_point());
-   }
-
-/**
-* Derive a key
-*/
-SecureVector<byte> ECDH_PrivateKey::derive_key(const PointGFp& point) const
-   {
-   const BigInt& cofactor = domain().get_cofactor();
-   const BigInt& n = domain().get_order();
-
-   BigInt l = inverse_mod(cofactor, n); // can precompute this
-
-   PointGFp S = (cofactor * point) * (private_value() * l);
-   S.check_invariants();
-
-   return BigInt::encode_1363(S.get_affine_x(),
-                              point.get_curve().get_p().bytes());
-   }
-
 }