mirror of
https://github.com/seigler/dash-docs
synced 2025-07-27 09:46:12 +00:00
410 lines
944 KiB
HTML
410 lines
944 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
|
<meta name="generator" content="Doxygen 1.8.14"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>Dash Core: src/secp256k1/src/tests.c Source File</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="jquery.js"></script>
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
|
<link href="navtree.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="resize.js"></script>
|
|
<script type="text/javascript" src="navtreedata.js"></script>
|
|
<script type="text/javascript" src="navtree.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(document).ready(initResizable);
|
|
/* @license-end */</script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr style="height: 56px;">
|
|
<td id="projectlogo"><img alt="Logo" src="bitcoin_logo_doxygen.png"/></td>
|
|
<td id="projectalign" style="padding-left: 0.5em;">
|
|
<div id="projectname">Dash Core
|
|
 <span id="projectnumber">0.12.2.1</span>
|
|
</div>
|
|
<div id="projectbrief">P2P Digital Currency</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.8.14 -->
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
var searchBox = new SearchBox("searchBox", "search",false,'Search');
|
|
/* @license-end */
|
|
</script>
|
|
<script type="text/javascript" src="menudata.js"></script>
|
|
<script type="text/javascript" src="menu.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(function() {
|
|
initMenu('',true,false,'search.php','Search');
|
|
$(document).ready(function() { init_search(); });
|
|
});
|
|
/* @license-end */</script>
|
|
<div id="main-nav"></div>
|
|
</div><!-- top -->
|
|
<div id="side-nav" class="ui-resizable side-nav-resizable">
|
|
<div id="nav-tree">
|
|
<div id="nav-tree-contents">
|
|
<div id="nav-sync" class="sync"></div>
|
|
</div>
|
|
</div>
|
|
<div id="splitbar" style="-moz-user-select:none;"
|
|
class="ui-resizable-handle">
|
|
</div>
|
|
</div>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(document).ready(function(){initNavTree('tests_8c_source.html','');});
|
|
/* @license-end */
|
|
</script>
|
|
<div id="doc-content">
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div class="header">
|
|
<div class="headertitle">
|
|
<div class="title">tests.c</div> </div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<a href="tests_8c.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="comment">/**********************************************************************</span></div><div class="line"><a name="l00002"></a><span class="lineno"> 2</span> <span class="comment"> * Copyright (c) 2013, 2014, 2015 Pieter Wuille, Gregory Maxwell *</span></div><div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="comment"> * Distributed under the MIT software license, see the accompanying *</span></div><div class="line"><a name="l00004"></a><span class="lineno"> 4</span> <span class="comment"> * file COPYING or http://www.opensource.org/licenses/mit-license.php.*</span></div><div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="comment"> **********************************************************************/</span></div><div class="line"><a name="l00006"></a><span class="lineno"> 6</span> </div><div class="line"><a name="l00007"></a><span class="lineno"> 7</span> <span class="preprocessor">#if defined HAVE_CONFIG_H</span></div><div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="preprocessor">#include "<a class="code" href="libsecp256k1-config_8h.html">libsecp256k1-config.h</a>"</span></div><div class="line"><a name="l00009"></a><span class="lineno"> 9</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00010"></a><span class="lineno"> 10</span> </div><div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="preprocessor">#include <stdio.h></span></div><div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="preprocessor">#include <stdlib.h></span></div><div class="line"><a name="l00013"></a><span class="lineno"> 13</span> </div><div class="line"><a name="l00014"></a><span class="lineno"> 14</span> <span class="preprocessor">#include <time.h></span></div><div class="line"><a name="l00015"></a><span class="lineno"> 15</span> </div><div class="line"><a name="l00016"></a><span class="lineno"> 16</span> <span class="preprocessor">#include "<a class="code" href="secp256k1_8c.html">secp256k1.c</a>"</span></div><div class="line"><a name="l00017"></a><span class="lineno"> 17</span> <span class="preprocessor">#include "<a class="code" href="secp256k1_8h.html">include/secp256k1.h</a>"</span></div><div class="line"><a name="l00018"></a><span class="lineno"> 18</span> <span class="preprocessor">#include "<a class="code" href="testrand__impl_8h.html">testrand_impl.h</a>"</span></div><div class="line"><a name="l00019"></a><span class="lineno"> 19</span> </div><div class="line"><a name="l00020"></a><span class="lineno"> 20</span> <span class="preprocessor">#ifdef ENABLE_OPENSSL_TESTS</span></div><div class="line"><a name="l00021"></a><span class="lineno"> 21</span> <span class="preprocessor">#include "openssl/bn.h"</span></div><div class="line"><a name="l00022"></a><span class="lineno"> 22</span> <span class="preprocessor">#include "openssl/ec.h"</span></div><div class="line"><a name="l00023"></a><span class="lineno"> 23</span> <span class="preprocessor">#include "openssl/ecdsa.h"</span></div><div class="line"><a name="l00024"></a><span class="lineno"> 24</span> <span class="preprocessor">#include "openssl/obj_mac.h"</span></div><div class="line"><a name="l00025"></a><span class="lineno"> 25</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00026"></a><span class="lineno"> 26</span> </div><div class="line"><a name="l00027"></a><span class="lineno"> 27</span> <span class="preprocessor">#include "<a class="code" href="lax__der__parsing_8c.html">contrib/lax_der_parsing.c</a>"</span></div><div class="line"><a name="l00028"></a><span class="lineno"> 28</span> <span class="preprocessor">#include "<a class="code" href="lax__der__privatekey__parsing_8c.html">contrib/lax_der_privatekey_parsing.c</a>"</span></div><div class="line"><a name="l00029"></a><span class="lineno"> 29</span> </div><div class="line"><a name="l00030"></a><span class="lineno"> 30</span> <span class="preprocessor">#if !defined(VG_CHECK)</span></div><div class="line"><a name="l00031"></a><span class="lineno"> 31</span> <span class="preprocessor"># if defined(VALGRIND)</span></div><div class="line"><a name="l00032"></a><span class="lineno"> 32</span> <span class="preprocessor"># include <valgrind/memcheck.h></span></div><div class="line"><a name="l00033"></a><span class="lineno"> 33</span> <span class="preprocessor"># define VG_UNDEF(x,y) VALGRIND_MAKE_MEM_UNDEFINED((x),(y))</span></div><div class="line"><a name="l00034"></a><span class="lineno"> 34</span> <span class="preprocessor"># define VG_CHECK(x,y) VALGRIND_CHECK_MEM_IS_DEFINED((x),(y))</span></div><div class="line"><a name="l00035"></a><span class="lineno"> 35</span> <span class="preprocessor"># else</span></div><div class="line"><a name="l00036"></a><span class="lineno"><a class="line" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20"> 36</a></span> <span class="preprocessor"># define VG_UNDEF(x,y)</span></div><div class="line"><a name="l00037"></a><span class="lineno"><a class="line" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04"> 37</a></span> <span class="preprocessor"># define VG_CHECK(x,y)</span></div><div class="line"><a name="l00038"></a><span class="lineno"> 38</span> <span class="preprocessor"># endif</span></div><div class="line"><a name="l00039"></a><span class="lineno"> 39</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00040"></a><span class="lineno"> 40</span> </div><div class="line"><a name="l00041"></a><span class="lineno"><a class="line" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf"> 41</a></span> <span class="keyword">static</span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a> = 64;</div><div class="line"><a name="l00042"></a><span class="lineno"><a class="line" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842"> 42</a></span> <span class="keyword">static</span> <a class="code" href="structsecp256k1__context__struct.html">secp256k1_context</a> *<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a> = NULL;</div><div class="line"><a name="l00043"></a><span class="lineno"> 43</span> </div><div class="line"><a name="l00044"></a><span class="lineno"><a class="line" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d"> 44</a></span> <span class="keyword">static</span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a>(<span class="keyword">const</span> <span class="keywordtype">char</span>* str, <span class="keywordtype">void</span>* <a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>) {</div><div class="line"><a name="l00045"></a><span class="lineno"> 45</span>  <span class="comment">/* Dummy callback function that just counts. */</span></div><div class="line"><a name="l00046"></a><span class="lineno"> 46</span>  int32_t *<a class="code" href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">p</a>;</div><div class="line"><a name="l00047"></a><span class="lineno"> 47</span>  (void)str;</div><div class="line"><a name="l00048"></a><span class="lineno"> 48</span>  <a class="code" href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">p</a> = <a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>;</div><div class="line"><a name="l00049"></a><span class="lineno"> 49</span>  (*p)++;</div><div class="line"><a name="l00050"></a><span class="lineno"> 50</span> }</div><div class="line"><a name="l00051"></a><span class="lineno"> 51</span> </div><div class="line"><a name="l00052"></a><span class="lineno"><a class="line" href="tests_8c.html#acd831563a1c9edb9b7be83b206b51e4b"> 52</a></span> <span class="keyword">static</span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#acd831563a1c9edb9b7be83b206b51e4b">uncounting_illegal_callback_fn</a>(<span class="keyword">const</span> <span class="keywordtype">char</span>* str, <span class="keywordtype">void</span>* <a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>) {</div><div class="line"><a name="l00053"></a><span class="lineno"> 53</span>  <span class="comment">/* Dummy callback function that just counts (backwards). */</span></div><div class="line"><a name="l00054"></a><span class="lineno"> 54</span>  int32_t *<a class="code" href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">p</a>;</div><div class="line"><a name="l00055"></a><span class="lineno"> 55</span>  (void)str;</div><div class="line"><a name="l00056"></a><span class="lineno"> 56</span>  <a class="code" href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">p</a> = <a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>;</div><div class="line"><a name="l00057"></a><span class="lineno"> 57</span>  (*p)--;</div><div class="line"><a name="l00058"></a><span class="lineno"> 58</span> }</div><div class="line"><a name="l00059"></a><span class="lineno"> 59</span> </div><div class="line"><a name="l00060"></a><span class="lineno"><a class="line" href="tests_8c.html#af038dec65d22bf5050a82de7b4ad4bca"> 60</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#af038dec65d22bf5050a82de7b4ad4bca">random_field_element_test</a>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *fe) {</div><div class="line"><a name="l00061"></a><span class="lineno"> 61</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l00062"></a><span class="lineno"> 62</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> b32[32];</div><div class="line"><a name="l00063"></a><span class="lineno"> 63</span>  <a class="code" href="testrand_8h.html#ac7dd7cc19d5d0ae9b50791656b57af7b">secp256k1_rand256_test</a>(b32);</div><div class="line"><a name="l00064"></a><span class="lineno"> 64</span>  <span class="keywordflow">if</span> (<a class="code" href="field_8h.html#a5c86a65052e3b135919c00fe2233a43d">secp256k1_fe_set_b32</a>(fe, b32)) {</div><div class="line"><a name="l00065"></a><span class="lineno"> 65</span>  <span class="keywordflow">break</span>;</div><div class="line"><a name="l00066"></a><span class="lineno"> 66</span>  }</div><div class="line"><a name="l00067"></a><span class="lineno"> 67</span>  } <span class="keywordflow">while</span>(1);</div><div class="line"><a name="l00068"></a><span class="lineno"> 68</span> }</div><div class="line"><a name="l00069"></a><span class="lineno"> 69</span> </div><div class="line"><a name="l00070"></a><span class="lineno"><a class="line" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953"> 70</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *fe) {</div><div class="line"><a name="l00071"></a><span class="lineno"> 71</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> zero;</div><div class="line"><a name="l00072"></a><span class="lineno"> 72</span>  <span class="keywordtype">int</span> <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a> = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(9);</div><div class="line"><a name="l00073"></a><span class="lineno"> 73</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(fe);</div><div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  <span class="keywordflow">if</span> (<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a> == 0) {</div><div class="line"><a name="l00075"></a><span class="lineno"> 75</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l00076"></a><span class="lineno"> 76</span>  }</div><div class="line"><a name="l00077"></a><span class="lineno"> 77</span>  <a class="code" href="field__10x26__impl_8h.html#aa213f05a02544f894a8829f672b6e4ea">secp256k1_fe_clear</a>(&zero);</div><div class="line"><a name="l00078"></a><span class="lineno"> 78</span>  <a class="code" href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a>(&zero, &zero, 0);</div><div class="line"><a name="l00079"></a><span class="lineno"> 79</span>  <a class="code" href="field_8h.html#a3f7b55267ed0d5135530283da6314416">secp256k1_fe_mul_int</a>(&zero, <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a> - 1);</div><div class="line"><a name="l00080"></a><span class="lineno"> 80</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(fe, &zero);</div><div class="line"><a name="l00081"></a><span class="lineno"> 81</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aca8ac5ae73fd966db106de59160a178b">VERIFY_CHECK</a>(fe->magnitude == <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>);</div><div class="line"><a name="l00082"></a><span class="lineno"> 82</span> }</div><div class="line"><a name="l00083"></a><span class="lineno"> 83</span> </div><div class="line"><a name="l00084"></a><span class="lineno"><a class="line" href="tests_8c.html#a63a7c68b6b72356c59cfdaaab131c73b"> 84</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a63a7c68b6b72356c59cfdaaab131c73b">random_group_element_test</a>(<a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *ge) {</div><div class="line"><a name="l00085"></a><span class="lineno"> 85</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> fe;</div><div class="line"><a name="l00086"></a><span class="lineno"> 86</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l00087"></a><span class="lineno"> 87</span>  <a class="code" href="tests_8c.html#af038dec65d22bf5050a82de7b4ad4bca">random_field_element_test</a>(&fe);</div><div class="line"><a name="l00088"></a><span class="lineno"> 88</span>  <span class="keywordflow">if</span> (<a class="code" href="group_8h.html#a3c3d9154b093bb4ed48ba55e4c28a0b5">secp256k1_ge_set_xo_var</a>(ge, &fe, <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1))) {</div><div class="line"><a name="l00089"></a><span class="lineno"> 89</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&ge-><a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>);</div><div class="line"><a name="l00090"></a><span class="lineno"> 90</span>  <span class="keywordflow">break</span>;</div><div class="line"><a name="l00091"></a><span class="lineno"> 91</span>  }</div><div class="line"><a name="l00092"></a><span class="lineno"> 92</span>  } <span class="keywordflow">while</span>(1);</div><div class="line"><a name="l00093"></a><span class="lineno"> 93</span> }</div><div class="line"><a name="l00094"></a><span class="lineno"> 94</span> </div><div class="line"><a name="l00095"></a><span class="lineno"><a class="line" href="tests_8c.html#a92dafcbafa2a878e07b5ff22f573be7f"> 95</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a92dafcbafa2a878e07b5ff22f573be7f">random_group_element_jacobian_test</a>(<a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *gej, <span class="keyword">const</span> <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *ge) {</div><div class="line"><a name="l00096"></a><span class="lineno"> 96</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> z2, z3;</div><div class="line"><a name="l00097"></a><span class="lineno"> 97</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  <a class="code" href="tests_8c.html#af038dec65d22bf5050a82de7b4ad4bca">random_field_element_test</a>(&gej-><a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>);</div><div class="line"><a name="l00099"></a><span class="lineno"> 99</span>  <span class="keywordflow">if</span> (!<a class="code" href="field_8h.html#a619ec4805df6cc54d70e6682ceebd098">secp256k1_fe_is_zero</a>(&gej-><a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>)) {</div><div class="line"><a name="l00100"></a><span class="lineno"> 100</span>  <span class="keywordflow">break</span>;</div><div class="line"><a name="l00101"></a><span class="lineno"> 101</span>  }</div><div class="line"><a name="l00102"></a><span class="lineno"> 102</span>  } <span class="keywordflow">while</span>(1);</div><div class="line"><a name="l00103"></a><span class="lineno"> 103</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&z2, &gej-><a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>);</div><div class="line"><a name="l00104"></a><span class="lineno"> 104</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&z3, &z2, &gej-><a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>);</div><div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&gej-><a class="code" href="structsecp256k1__gej.html#a7d2451c89411d62628ac466eb28c8ff5">x</a>, &ge-><a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, &z2);</div><div class="line"><a name="l00106"></a><span class="lineno"> 106</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&gej-><a class="code" href="structsecp256k1__gej.html#a29d5184060ad790d85a0c89a13820e0d">y</a>, &ge-><a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>, &z3);</div><div class="line"><a name="l00107"></a><span class="lineno"> 107</span>  gej-><a class="code" href="structsecp256k1__gej.html#ab3ec8168caf27aa3a092d512eaadaad9">infinity</a> = ge-><a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>;</div><div class="line"><a name="l00108"></a><span class="lineno"> 108</span> }</div><div class="line"><a name="l00109"></a><span class="lineno"> 109</span> </div><div class="line"><a name="l00110"></a><span class="lineno"><a class="line" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7"> 110</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(<a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *num) {</div><div class="line"><a name="l00111"></a><span class="lineno"> 111</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l00112"></a><span class="lineno"> 112</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> b32[32];</div><div class="line"><a name="l00113"></a><span class="lineno"> 113</span>  <span class="keywordtype">int</span> overflow = 0;</div><div class="line"><a name="l00114"></a><span class="lineno"> 114</span>  <a class="code" href="testrand_8h.html#ac7dd7cc19d5d0ae9b50791656b57af7b">secp256k1_rand256_test</a>(b32);</div><div class="line"><a name="l00115"></a><span class="lineno"> 115</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(num, b32, &overflow);</div><div class="line"><a name="l00116"></a><span class="lineno"> 116</span>  <span class="keywordflow">if</span> (overflow || <a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(num)) {</div><div class="line"><a name="l00117"></a><span class="lineno"> 117</span>  <span class="keywordflow">continue</span>;</div><div class="line"><a name="l00118"></a><span class="lineno"> 118</span>  }</div><div class="line"><a name="l00119"></a><span class="lineno"> 119</span>  <span class="keywordflow">break</span>;</div><div class="line"><a name="l00120"></a><span class="lineno"> 120</span>  } <span class="keywordflow">while</span>(1);</div><div class="line"><a name="l00121"></a><span class="lineno"> 121</span> }</div><div class="line"><a name="l00122"></a><span class="lineno"> 122</span> </div><div class="line"><a name="l00123"></a><span class="lineno"><a class="line" href="tests_8c.html#a01cf4b4fc9b4ab8cb3e04fd3dc2ff57f"> 123</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a01cf4b4fc9b4ab8cb3e04fd3dc2ff57f">random_scalar_order</a>(<a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *num) {</div><div class="line"><a name="l00124"></a><span class="lineno"> 124</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l00125"></a><span class="lineno"> 125</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> b32[32];</div><div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  <span class="keywordtype">int</span> overflow = 0;</div><div class="line"><a name="l00127"></a><span class="lineno"> 127</span>  <a class="code" href="testrand_8h.html#ac6eab6443f98bba198f7df69e658173c">secp256k1_rand256</a>(b32);</div><div class="line"><a name="l00128"></a><span class="lineno"> 128</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(num, b32, &overflow);</div><div class="line"><a name="l00129"></a><span class="lineno"> 129</span>  <span class="keywordflow">if</span> (overflow || <a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(num)) {</div><div class="line"><a name="l00130"></a><span class="lineno"> 130</span>  <span class="keywordflow">continue</span>;</div><div class="line"><a name="l00131"></a><span class="lineno"> 131</span>  }</div><div class="line"><a name="l00132"></a><span class="lineno"> 132</span>  <span class="keywordflow">break</span>;</div><div class="line"><a name="l00133"></a><span class="lineno"> 133</span>  } <span class="keywordflow">while</span>(1);</div><div class="line"><a name="l00134"></a><span class="lineno"> 134</span> }</div><div class="line"><a name="l00135"></a><span class="lineno"> 135</span> </div><div class="line"><a name="l00136"></a><span class="lineno"><a class="line" href="tests_8c.html#a2f9713526b1e988694c6e2026a6fce69"> 136</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a2f9713526b1e988694c6e2026a6fce69">run_context_tests</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00137"></a><span class="lineno"> 137</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey;</div><div class="line"><a name="l00138"></a><span class="lineno"> 138</span>  <a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a> sig;</div><div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> ctmp[32];</div><div class="line"><a name="l00140"></a><span class="lineno"> 140</span>  int32_t ecount;</div><div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  int32_t ecount2;</div><div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  <a class="code" href="structsecp256k1__context__struct.html">secp256k1_context</a> *none = <a class="code" href="secp256k1_8h.html#a769d478f352afbb55200e33970533a3c">secp256k1_context_create</a>(<a class="code" href="secp256k1_8h.html#a4f7b286aa714c2e0fb279c180f67e9b3">SECP256K1_CONTEXT_NONE</a>);</div><div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  <a class="code" href="structsecp256k1__context__struct.html">secp256k1_context</a> *sign = <a class="code" href="secp256k1_8h.html#a769d478f352afbb55200e33970533a3c">secp256k1_context_create</a>(<a class="code" href="secp256k1_8h.html#a0d34fe6baa73d3145f2e376e43de0b15">SECP256K1_CONTEXT_SIGN</a>);</div><div class="line"><a name="l00144"></a><span class="lineno"> 144</span>  <a class="code" href="structsecp256k1__context__struct.html">secp256k1_context</a> *vrfy = <a class="code" href="secp256k1_8h.html#a769d478f352afbb55200e33970533a3c">secp256k1_context_create</a>(<a class="code" href="secp256k1_8h.html#add20a6c320e247ca7bd524cbc4259d64">SECP256K1_CONTEXT_VERIFY</a>);</div><div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  <a class="code" href="structsecp256k1__context__struct.html">secp256k1_context</a> *both = <a class="code" href="secp256k1_8h.html#a769d478f352afbb55200e33970533a3c">secp256k1_context_create</a>(<a class="code" href="secp256k1_8h.html#a0d34fe6baa73d3145f2e376e43de0b15">SECP256K1_CONTEXT_SIGN</a> | <a class="code" href="secp256k1_8h.html#add20a6c320e247ca7bd524cbc4259d64">SECP256K1_CONTEXT_VERIFY</a>);</div><div class="line"><a name="l00146"></a><span class="lineno"> 146</span> </div><div class="line"><a name="l00147"></a><span class="lineno"> 147</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> pubj;</div><div class="line"><a name="l00148"></a><span class="lineno"> 148</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> pub;</div><div class="line"><a name="l00149"></a><span class="lineno"> 149</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, nonce;</div><div class="line"><a name="l00150"></a><span class="lineno"> 150</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sigr, sigs;</div><div class="line"><a name="l00151"></a><span class="lineno"> 151</span> </div><div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  ecount = 0;</div><div class="line"><a name="l00153"></a><span class="lineno"> 153</span>  ecount2 = 10;</div><div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(vrfy, <a class="code" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a>, &ecount);</div><div class="line"><a name="l00155"></a><span class="lineno"> 155</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(sign, <a class="code" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a>, &ecount2);</div><div class="line"><a name="l00156"></a><span class="lineno"> 156</span>  <a class="code" href="secp256k1_8h.html#a35106efb325f03468bcf5faa524c1cc4">secp256k1_context_set_error_callback</a>(sign, <a class="code" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a>, NULL);</div><div class="line"><a name="l00157"></a><span class="lineno"> 157</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(vrfy-><a class="code" href="structsecp256k1__context__struct.html#aa34a996f869676899e8625adfb6c6f1d">error_callback</a>.<a class="code" href="structsecp256k1__callback.html#ab53dda8f586b668b302a0955de4de44c">fn</a> != sign-><a class="code" href="structsecp256k1__context__struct.html#aa34a996f869676899e8625adfb6c6f1d">error_callback</a>.<a class="code" href="structsecp256k1__callback.html#ab53dda8f586b668b302a0955de4de44c">fn</a>);</div><div class="line"><a name="l00158"></a><span class="lineno"> 158</span> </div><div class="line"><a name="l00159"></a><span class="lineno"> 159</span>  <span class="comment">/*** clone and destroy all of them to make sure cloning was complete ***/</span></div><div class="line"><a name="l00160"></a><span class="lineno"> 160</span>  {</div><div class="line"><a name="l00161"></a><span class="lineno"> 161</span>  <a class="code" href="structsecp256k1__context__struct.html">secp256k1_context</a> *ctx_tmp;</div><div class="line"><a name="l00162"></a><span class="lineno"> 162</span> </div><div class="line"><a name="l00163"></a><span class="lineno"> 163</span>  ctx_tmp = none; none = <a class="code" href="secp256k1_8h.html#a74bdea41233e26f6348ebab5c660db90">secp256k1_context_clone</a>(none); <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(ctx_tmp);</div><div class="line"><a name="l00164"></a><span class="lineno"> 164</span>  ctx_tmp = sign; sign = <a class="code" href="secp256k1_8h.html#a74bdea41233e26f6348ebab5c660db90">secp256k1_context_clone</a>(sign); <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(ctx_tmp);</div><div class="line"><a name="l00165"></a><span class="lineno"> 165</span>  ctx_tmp = vrfy; vrfy = <a class="code" href="secp256k1_8h.html#a74bdea41233e26f6348ebab5c660db90">secp256k1_context_clone</a>(vrfy); <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(ctx_tmp);</div><div class="line"><a name="l00166"></a><span class="lineno"> 166</span>  ctx_tmp = both; both = <a class="code" href="secp256k1_8h.html#a74bdea41233e26f6348ebab5c660db90">secp256k1_context_clone</a>(both); <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(ctx_tmp);</div><div class="line"><a name="l00167"></a><span class="lineno"> 167</span>  }</div><div class="line"><a name="l00168"></a><span class="lineno"> 168</span> </div><div class="line"><a name="l00169"></a><span class="lineno"> 169</span>  <span class="comment">/* Verify that the error callback makes it across the clone. */</span></div><div class="line"><a name="l00170"></a><span class="lineno"> 170</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(vrfy-><a class="code" href="structsecp256k1__context__struct.html#aa34a996f869676899e8625adfb6c6f1d">error_callback</a>.<a class="code" href="structsecp256k1__callback.html#ab53dda8f586b668b302a0955de4de44c">fn</a> != sign-><a class="code" href="structsecp256k1__context__struct.html#aa34a996f869676899e8625adfb6c6f1d">error_callback</a>.<a class="code" href="structsecp256k1__callback.html#ab53dda8f586b668b302a0955de4de44c">fn</a>);</div><div class="line"><a name="l00171"></a><span class="lineno"> 171</span>  <span class="comment">/* And that it resets back to default. */</span></div><div class="line"><a name="l00172"></a><span class="lineno"> 172</span>  <a class="code" href="secp256k1_8h.html#a35106efb325f03468bcf5faa524c1cc4">secp256k1_context_set_error_callback</a>(sign, NULL, NULL);</div><div class="line"><a name="l00173"></a><span class="lineno"> 173</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(vrfy-><a class="code" href="structsecp256k1__context__struct.html#aa34a996f869676899e8625adfb6c6f1d">error_callback</a>.<a class="code" href="structsecp256k1__callback.html#ab53dda8f586b668b302a0955de4de44c">fn</a> == sign-><a class="code" href="structsecp256k1__context__struct.html#aa34a996f869676899e8625adfb6c6f1d">error_callback</a>.<a class="code" href="structsecp256k1__callback.html#ab53dda8f586b668b302a0955de4de44c">fn</a>);</div><div class="line"><a name="l00174"></a><span class="lineno"> 174</span> </div><div class="line"><a name="l00175"></a><span class="lineno"> 175</span>  <span class="comment">/*** attempt to use them ***/</span></div><div class="line"><a name="l00176"></a><span class="lineno"> 176</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>);</div><div class="line"><a name="l00177"></a><span class="lineno"> 177</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l00178"></a><span class="lineno"> 178</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&both-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &pubj, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l00179"></a><span class="lineno"> 179</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&pub, &pubj);</div><div class="line"><a name="l00180"></a><span class="lineno"> 180</span> </div><div class="line"><a name="l00181"></a><span class="lineno"> 181</span>  <span class="comment">/* Verify context-type checking illegal-argument errors. */</span></div><div class="line"><a name="l00182"></a><span class="lineno"> 182</span>  memset(ctmp, 1, 32);</div><div class="line"><a name="l00183"></a><span class="lineno"> 183</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(vrfy, &pubkey, ctmp) == 0);</div><div class="line"><a name="l00184"></a><span class="lineno"> 184</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l00185"></a><span class="lineno"> 185</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l00186"></a><span class="lineno"> 186</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(sign, &pubkey, ctmp) == 1);</div><div class="line"><a name="l00187"></a><span class="lineno"> 187</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l00188"></a><span class="lineno"> 188</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(vrfy, &sig, ctmp, ctmp, NULL, NULL) == 0);</div><div class="line"><a name="l00189"></a><span class="lineno"> 189</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l00190"></a><span class="lineno"> 190</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&sig, <span class="keyword">sizeof</span>(sig));</div><div class="line"><a name="l00191"></a><span class="lineno"> 191</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(sign, &sig, ctmp, ctmp, NULL, NULL) == 1);</div><div class="line"><a name="l00192"></a><span class="lineno"> 192</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&sig, <span class="keyword">sizeof</span>(sig));</div><div class="line"><a name="l00193"></a><span class="lineno"> 193</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount2 == 10);</div><div class="line"><a name="l00194"></a><span class="lineno"> 194</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(sign, &sig, ctmp, &pubkey) == 0);</div><div class="line"><a name="l00195"></a><span class="lineno"> 195</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount2 == 11);</div><div class="line"><a name="l00196"></a><span class="lineno"> 196</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(vrfy, &sig, ctmp, &pubkey) == 1);</div><div class="line"><a name="l00197"></a><span class="lineno"> 197</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l00198"></a><span class="lineno"> 198</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(sign, &pubkey, ctmp) == 0);</div><div class="line"><a name="l00199"></a><span class="lineno"> 199</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount2 == 12);</div><div class="line"><a name="l00200"></a><span class="lineno"> 200</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(vrfy, &pubkey, ctmp) == 1);</div><div class="line"><a name="l00201"></a><span class="lineno"> 201</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l00202"></a><span class="lineno"> 202</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(sign, &pubkey, ctmp) == 0);</div><div class="line"><a name="l00203"></a><span class="lineno"> 203</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount2 == 13);</div><div class="line"><a name="l00204"></a><span class="lineno"> 204</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(vrfy, &pubkey, ctmp) == 1);</div><div class="line"><a name="l00205"></a><span class="lineno"> 205</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l00206"></a><span class="lineno"> 206</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a1b81d70feb6ed24dc902cbbd5ba569e7">secp256k1_context_randomize</a>(vrfy, ctmp) == 0);</div><div class="line"><a name="l00207"></a><span class="lineno"> 207</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l00208"></a><span class="lineno"> 208</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a1b81d70feb6ed24dc902cbbd5ba569e7">secp256k1_context_randomize</a>(sign, NULL) == 1);</div><div class="line"><a name="l00209"></a><span class="lineno"> 209</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount2 == 13);</div><div class="line"><a name="l00210"></a><span class="lineno"> 210</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(vrfy, NULL, NULL);</div><div class="line"><a name="l00211"></a><span class="lineno"> 211</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(sign, NULL, NULL);</div><div class="line"><a name="l00212"></a><span class="lineno"> 212</span> </div><div class="line"><a name="l00213"></a><span class="lineno"> 213</span>  <span class="comment">/* This shouldn't leak memory, due to already-set tests. */</span></div><div class="line"><a name="l00214"></a><span class="lineno"> 214</span>  <a class="code" href="ecmult__gen_8h.html#afaf90b2a6554053187cdc89df0dafd21">secp256k1_ecmult_gen_context_build</a>(&sign-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, NULL);</div><div class="line"><a name="l00215"></a><span class="lineno"> 215</span>  <a class="code" href="ecmult_8h.html#acc2494f319c79f6cc15982f43e7a6f00">secp256k1_ecmult_context_build</a>(&vrfy-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, NULL);</div><div class="line"><a name="l00216"></a><span class="lineno"> 216</span> </div><div class="line"><a name="l00217"></a><span class="lineno"> 217</span>  <span class="comment">/* obtain a working nonce */</span></div><div class="line"><a name="l00218"></a><span class="lineno"> 218</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l00219"></a><span class="lineno"> 219</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&nonce);</div><div class="line"><a name="l00220"></a><span class="lineno"> 220</span>  } <span class="keywordflow">while</span>(!<a class="code" href="ecdsa_8h.html#a5bf6905e00ae8571465a52e3165c6e6e">secp256k1_ecdsa_sig_sign</a>(&both-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &sigr, &sigs, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &nonce, NULL));</div><div class="line"><a name="l00221"></a><span class="lineno"> 221</span> </div><div class="line"><a name="l00222"></a><span class="lineno"> 222</span>  <span class="comment">/* try signing */</span></div><div class="line"><a name="l00223"></a><span class="lineno"> 223</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a5bf6905e00ae8571465a52e3165c6e6e">secp256k1_ecdsa_sig_sign</a>(&sign-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &sigr, &sigs, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &nonce, NULL));</div><div class="line"><a name="l00224"></a><span class="lineno"> 224</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a5bf6905e00ae8571465a52e3165c6e6e">secp256k1_ecdsa_sig_sign</a>(&both-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &sigr, &sigs, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &nonce, NULL));</div><div class="line"><a name="l00225"></a><span class="lineno"> 225</span> </div><div class="line"><a name="l00226"></a><span class="lineno"> 226</span>  <span class="comment">/* try verifying */</span></div><div class="line"><a name="l00227"></a><span class="lineno"> 227</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&vrfy-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sigr, &sigs, &pub, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>));</div><div class="line"><a name="l00228"></a><span class="lineno"> 228</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&both-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sigr, &sigs, &pub, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>));</div><div class="line"><a name="l00229"></a><span class="lineno"> 229</span> </div><div class="line"><a name="l00230"></a><span class="lineno"> 230</span>  <span class="comment">/* cleanup */</span></div><div class="line"><a name="l00231"></a><span class="lineno"> 231</span>  <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(none);</div><div class="line"><a name="l00232"></a><span class="lineno"> 232</span>  <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(sign);</div><div class="line"><a name="l00233"></a><span class="lineno"> 233</span>  <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(vrfy);</div><div class="line"><a name="l00234"></a><span class="lineno"> 234</span>  <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(both);</div><div class="line"><a name="l00235"></a><span class="lineno"> 235</span>  <span class="comment">/* Defined as no-op. */</span></div><div class="line"><a name="l00236"></a><span class="lineno"> 236</span>  <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(NULL);</div><div class="line"><a name="l00237"></a><span class="lineno"> 237</span> }</div><div class="line"><a name="l00238"></a><span class="lineno"> 238</span> </div><div class="line"><a name="l00239"></a><span class="lineno"> 239</span> <span class="comment">/***** HASH TESTS *****/</span></div><div class="line"><a name="l00240"></a><span class="lineno"> 240</span> </div><div class="line"><a name="l00241"></a><span class="lineno"><a class="line" href="tests_8c.html#a2d74e805d6154620fef868e2319c99c9"> 241</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a2d74e805d6154620fef868e2319c99c9">run_sha256_tests</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00242"></a><span class="lineno"> 242</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">char</span> *inputs[8] = {</div><div class="line"><a name="l00243"></a><span class="lineno"> 243</span>  <span class="stringliteral">""</span>, <span class="stringliteral">"abc"</span>, <span class="stringliteral">"message digest"</span>, <span class="stringliteral">"secure hash algorithm"</span>, <span class="stringliteral">"SHA256 is considered to be safe"</span>,</div><div class="line"><a name="l00244"></a><span class="lineno"> 244</span>  <span class="stringliteral">"abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"</span>,</div><div class="line"><a name="l00245"></a><span class="lineno"> 245</span>  <span class="stringliteral">"For this sample, this 63-byte string will be used as input data"</span>,</div><div class="line"><a name="l00246"></a><span class="lineno"> 246</span>  <span class="stringliteral">"This is exactly 64 bytes long, not counting the terminating byte"</span></div><div class="line"><a name="l00247"></a><span class="lineno"> 247</span>  };</div><div class="line"><a name="l00248"></a><span class="lineno"> 248</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> outputs[8][32] = {</div><div class="line"><a name="l00249"></a><span class="lineno"> 249</span>  {0xe3, 0xb0, 0xc4, 0x42, 0x98, 0xfc, 0x1c, 0x14, 0x9a, 0xfb, 0xf4, 0xc8, 0x99, 0x6f, 0xb9, 0x24, 0x27, 0xae, 0x41, 0xe4, 0x64, 0x9b, 0x93, 0x4c, 0xa4, 0x95, 0x99, 0x1b, 0x78, 0x52, 0xb8, 0x55},</div><div class="line"><a name="l00250"></a><span class="lineno"> 250</span>  {0xba, 0x78, 0x16, 0xbf, 0x8f, 0x01, 0xcf, 0xea, 0x41, 0x41, 0x40, 0xde, 0x5d, 0xae, 0x22, 0x23, 0xb0, 0x03, 0x61, 0xa3, 0x96, 0x17, 0x7a, 0x9c, 0xb4, 0x10, 0xff, 0x61, 0xf2, 0x00, 0x15, 0xad},</div><div class="line"><a name="l00251"></a><span class="lineno"> 251</span>  {0xf7, 0x84, 0x6f, 0x55, 0xcf, 0x23, 0xe1, 0x4e, 0xeb, 0xea, 0xb5, 0xb4, 0xe1, 0x55, 0x0c, 0xad, 0x5b, 0x50, 0x9e, 0x33, 0x48, 0xfb, 0xc4, 0xef, 0xa3, 0xa1, 0x41, 0x3d, 0x39, 0x3c, 0xb6, 0x50},</div><div class="line"><a name="l00252"></a><span class="lineno"> 252</span>  {0xf3, 0x0c, 0xeb, 0x2b, 0xb2, 0x82, 0x9e, 0x79, 0xe4, 0xca, 0x97, 0x53, 0xd3, 0x5a, 0x8e, 0xcc, 0x00, 0x26, 0x2d, 0x16, 0x4c, 0xc0, 0x77, 0x08, 0x02, 0x95, 0x38, 0x1c, 0xbd, 0x64, 0x3f, 0x0d},</div><div class="line"><a name="l00253"></a><span class="lineno"> 253</span>  {0x68, 0x19, 0xd9, 0x15, 0xc7, 0x3f, 0x4d, 0x1e, 0x77, 0xe4, 0xe1, 0xb5, 0x2d, 0x1f, 0xa0, 0xf9, 0xcf, 0x9b, 0xea, 0xea, 0xd3, 0x93, 0x9f, 0x15, 0x87, 0x4b, 0xd9, 0x88, 0xe2, 0xa2, 0x36, 0x30},</div><div class="line"><a name="l00254"></a><span class="lineno"> 254</span>  {0x24, 0x8d, 0x6a, 0x61, 0xd2, 0x06, 0x38, 0xb8, 0xe5, 0xc0, 0x26, 0x93, 0x0c, 0x3e, 0x60, 0x39, 0xa3, 0x3c, 0xe4, 0x59, 0x64, 0xff, 0x21, 0x67, 0xf6, 0xec, 0xed, 0xd4, 0x19, 0xdb, 0x06, 0xc1},</div><div class="line"><a name="l00255"></a><span class="lineno"> 255</span>  {0xf0, 0x8a, 0x78, 0xcb, 0xba, 0xee, 0x08, 0x2b, 0x05, 0x2a, 0xe0, 0x70, 0x8f, 0x32, 0xfa, 0x1e, 0x50, 0xc5, 0xc4, 0x21, 0xaa, 0x77, 0x2b, 0xa5, 0xdb, 0xb4, 0x06, 0xa2, 0xea, 0x6b, 0xe3, 0x42},</div><div class="line"><a name="l00256"></a><span class="lineno"> 256</span>  {0xab, 0x64, 0xef, 0xf7, 0xe8, 0x8e, 0x2e, 0x46, 0x16, 0x5e, 0x29, 0xf2, 0xbc, 0xe4, 0x18, 0x26, 0xbd, 0x4c, 0x7b, 0x35, 0x52, 0xf6, 0xb3, 0x82, 0xa9, 0xe7, 0xd3, 0xaf, 0x47, 0xc2, 0x45, 0xf8}</div><div class="line"><a name="l00257"></a><span class="lineno"> 257</span>  };</div><div class="line"><a name="l00258"></a><span class="lineno"> 258</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00259"></a><span class="lineno"> 259</span>  <span class="keywordflow">for</span> (i = 0; i < 8; i++) {</div><div class="line"><a name="l00260"></a><span class="lineno"> 260</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>[32];</div><div class="line"><a name="l00261"></a><span class="lineno"> 261</span>  <a class="code" href="structsecp256k1__sha256__t.html">secp256k1_sha256_t</a> hasher;</div><div class="line"><a name="l00262"></a><span class="lineno"> 262</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#abcb6a95ed605c2bfb19eda1ced4a8f7e">secp256k1_sha256_initialize</a>(&hasher);</div><div class="line"><a name="l00263"></a><span class="lineno"> 263</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#adfccd8d918a52e1cec42ea89a4c3f8ab">secp256k1_sha256_write</a>(&hasher, (<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>*)(inputs[i]), strlen(inputs[i]));</div><div class="line"><a name="l00264"></a><span class="lineno"> 264</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#ab88a555e2b13d6d06e20a6a459abae08">secp256k1_sha256_finalize</a>(&hasher, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>);</div><div class="line"><a name="l00265"></a><span class="lineno"> 265</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, outputs[i], 32) == 0);</div><div class="line"><a name="l00266"></a><span class="lineno"> 266</span>  <span class="keywordflow">if</span> (strlen(inputs[i]) > 0) {</div><div class="line"><a name="l00267"></a><span class="lineno"> 267</span>  <span class="keywordtype">int</span> split = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(strlen(inputs[i]));</div><div class="line"><a name="l00268"></a><span class="lineno"> 268</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#abcb6a95ed605c2bfb19eda1ced4a8f7e">secp256k1_sha256_initialize</a>(&hasher);</div><div class="line"><a name="l00269"></a><span class="lineno"> 269</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#adfccd8d918a52e1cec42ea89a4c3f8ab">secp256k1_sha256_write</a>(&hasher, (<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>*)(inputs[i]), split);</div><div class="line"><a name="l00270"></a><span class="lineno"> 270</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#adfccd8d918a52e1cec42ea89a4c3f8ab">secp256k1_sha256_write</a>(&hasher, (<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>*)(inputs[i] + split), strlen(inputs[i]) - split);</div><div class="line"><a name="l00271"></a><span class="lineno"> 271</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#ab88a555e2b13d6d06e20a6a459abae08">secp256k1_sha256_finalize</a>(&hasher, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>);</div><div class="line"><a name="l00272"></a><span class="lineno"> 272</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, outputs[i], 32) == 0);</div><div class="line"><a name="l00273"></a><span class="lineno"> 273</span>  }</div><div class="line"><a name="l00274"></a><span class="lineno"> 274</span>  }</div><div class="line"><a name="l00275"></a><span class="lineno"> 275</span> }</div><div class="line"><a name="l00276"></a><span class="lineno"> 276</span> </div><div class="line"><a name="l00277"></a><span class="lineno"><a class="line" href="tests_8c.html#a696245307bfe2110594f353cf47dad17"> 277</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a696245307bfe2110594f353cf47dad17">run_hmac_sha256_tests</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00278"></a><span class="lineno"> 278</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">char</span> *keys[6] = {</div><div class="line"><a name="l00279"></a><span class="lineno"> 279</span>  <span class="stringliteral">"\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b"</span>,</div><div class="line"><a name="l00280"></a><span class="lineno"> 280</span>  <span class="stringliteral">"\x4a\x65\x66\x65"</span>,</div><div class="line"><a name="l00281"></a><span class="lineno"> 281</span>  <span class="stringliteral">"\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa"</span>,</div><div class="line"><a name="l00282"></a><span class="lineno"> 282</span>  <span class="stringliteral">"\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19"</span>,</div><div class="line"><a name="l00283"></a><span class="lineno"> 283</span>  <span class="stringliteral">"\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa"</span>,</div><div class="line"><a name="l00284"></a><span class="lineno"> 284</span>  <span class="stringliteral">"\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa"</span></div><div class="line"><a name="l00285"></a><span class="lineno"> 285</span>  };</div><div class="line"><a name="l00286"></a><span class="lineno"> 286</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">char</span> *inputs[6] = {</div><div class="line"><a name="l00287"></a><span class="lineno"> 287</span>  <span class="stringliteral">"\x48\x69\x20\x54\x68\x65\x72\x65"</span>,</div><div class="line"><a name="l00288"></a><span class="lineno"> 288</span>  <span class="stringliteral">"\x77\x68\x61\x74\x20\x64\x6f\x20\x79\x61\x20\x77\x61\x6e\x74\x20\x66\x6f\x72\x20\x6e\x6f\x74\x68\x69\x6e\x67\x3f"</span>,</div><div class="line"><a name="l00289"></a><span class="lineno"> 289</span>  <span class="stringliteral">"\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd\xdd"</span>,</div><div class="line"><a name="l00290"></a><span class="lineno"> 290</span>  <span class="stringliteral">"\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd\xcd"</span>,</div><div class="line"><a name="l00291"></a><span class="lineno"> 291</span>  <span class="stringliteral">"\x54\x65\x73\x74\x20\x55\x73\x69\x6e\x67\x20\x4c\x61\x72\x67\x65\x72\x20\x54\x68\x61\x6e\x20\x42\x6c\x6f\x63\x6b\x2d\x53\x69\x7a\x65\x20\x4b\x65\x79\x20\x2d\x20\x48\x61\x73\x68\x20\x4b\x65\x79\x20\x46\x69\x72\x73\x74"</span>,</div><div class="line"><a name="l00292"></a><span class="lineno"> 292</span>  <span class="stringliteral">"\x54\x68\x69\x73\x20\x69\x73\x20\x61\x20\x74\x65\x73\x74\x20\x75\x73\x69\x6e\x67\x20\x61\x20\x6c\x61\x72\x67\x65\x72\x20\x74\x68\x61\x6e\x20\x62\x6c\x6f\x63\x6b\x2d\x73\x69\x7a\x65\x20\x6b\x65\x79\x20\x61\x6e\x64\x20\x61\x20\x6c\x61\x72\x67\x65\x72\x20\x74\x68\x61\x6e\x20\x62\x6c\x6f\x63\x6b\x2d\x73\x69\x7a\x65\x20\x64\x61\x74\x61\x2e\x20\x54\x68\x65\x20\x6b\x65\x79\x20\x6e\x65\x65\x64\x73\x20\x74\x6f\x20\x62\x65\x20\x68\x61\x73\x68\x65\x64\x20\x62\x65\x66\x6f\x72\x65\x20\x62\x65\x69\x6e\x67\x20\x75\x73\x65\x64\x20\x62\x79\x20\x74\x68\x65\x20\x48\x4d\x41\x43\x20\x61\x6c\x67\x6f\x72\x69\x74\x68\x6d\x2e"</span></div><div class="line"><a name="l00293"></a><span class="lineno"> 293</span>  };</div><div class="line"><a name="l00294"></a><span class="lineno"> 294</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> outputs[6][32] = {</div><div class="line"><a name="l00295"></a><span class="lineno"> 295</span>  {0xb0, 0x34, 0x4c, 0x61, 0xd8, 0xdb, 0x38, 0x53, 0x5c, 0xa8, 0xaf, 0xce, 0xaf, 0x0b, 0xf1, 0x2b, 0x88, 0x1d, 0xc2, 0x00, 0xc9, 0x83, 0x3d, 0xa7, 0x26, 0xe9, 0x37, 0x6c, 0x2e, 0x32, 0xcf, 0xf7},</div><div class="line"><a name="l00296"></a><span class="lineno"> 296</span>  {0x5b, 0xdc, 0xc1, 0x46, 0xbf, 0x60, 0x75, 0x4e, 0x6a, 0x04, 0x24, 0x26, 0x08, 0x95, 0x75, 0xc7, 0x5a, 0x00, 0x3f, 0x08, 0x9d, 0x27, 0x39, 0x83, 0x9d, 0xec, 0x58, 0xb9, 0x64, 0xec, 0x38, 0x43},</div><div class="line"><a name="l00297"></a><span class="lineno"> 297</span>  {0x77, 0x3e, 0xa9, 0x1e, 0x36, 0x80, 0x0e, 0x46, 0x85, 0x4d, 0xb8, 0xeb, 0xd0, 0x91, 0x81, 0xa7, 0x29, 0x59, 0x09, 0x8b, 0x3e, 0xf8, 0xc1, 0x22, 0xd9, 0x63, 0x55, 0x14, 0xce, 0xd5, 0x65, 0xfe},</div><div class="line"><a name="l00298"></a><span class="lineno"> 298</span>  {0x82, 0x55, 0x8a, 0x38, 0x9a, 0x44, 0x3c, 0x0e, 0xa4, 0xcc, 0x81, 0x98, 0x99, 0xf2, 0x08, 0x3a, 0x85, 0xf0, 0xfa, 0xa3, 0xe5, 0x78, 0xf8, 0x07, 0x7a, 0x2e, 0x3f, 0xf4, 0x67, 0x29, 0x66, 0x5b},</div><div class="line"><a name="l00299"></a><span class="lineno"> 299</span>  {0x60, 0xe4, 0x31, 0x59, 0x1e, 0xe0, 0xb6, 0x7f, 0x0d, 0x8a, 0x26, 0xaa, 0xcb, 0xf5, 0xb7, 0x7f, 0x8e, 0x0b, 0xc6, 0x21, 0x37, 0x28, 0xc5, 0x14, 0x05, 0x46, 0x04, 0x0f, 0x0e, 0xe3, 0x7f, 0x54},</div><div class="line"><a name="l00300"></a><span class="lineno"> 300</span>  {0x9b, 0x09, 0xff, 0xa7, 0x1b, 0x94, 0x2f, 0xcb, 0x27, 0x63, 0x5f, 0xbc, 0xd5, 0xb0, 0xe9, 0x44, 0xbf, 0xdc, 0x63, 0x64, 0x4f, 0x07, 0x13, 0x93, 0x8a, 0x7f, 0x51, 0x53, 0x5c, 0x3a, 0x35, 0xe2}</div><div class="line"><a name="l00301"></a><span class="lineno"> 301</span>  };</div><div class="line"><a name="l00302"></a><span class="lineno"> 302</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00303"></a><span class="lineno"> 303</span>  <span class="keywordflow">for</span> (i = 0; i < 6; i++) {</div><div class="line"><a name="l00304"></a><span class="lineno"> 304</span>  <a class="code" href="structsecp256k1__hmac__sha256__t.html">secp256k1_hmac_sha256_t</a> hasher;</div><div class="line"><a name="l00305"></a><span class="lineno"> 305</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>[32];</div><div class="line"><a name="l00306"></a><span class="lineno"> 306</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#abc4bd0d379fd229865df44284d5cfc3b">secp256k1_hmac_sha256_initialize</a>(&hasher, (<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>*)(keys[i]), strlen(keys[i]));</div><div class="line"><a name="l00307"></a><span class="lineno"> 307</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a985f5f05c10dca7f592541d95c84081f">secp256k1_hmac_sha256_write</a>(&hasher, (<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>*)(inputs[i]), strlen(inputs[i]));</div><div class="line"><a name="l00308"></a><span class="lineno"> 308</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a6f85fe02b7546db62cc03adb03613d16">secp256k1_hmac_sha256_finalize</a>(&hasher, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>);</div><div class="line"><a name="l00309"></a><span class="lineno"> 309</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, outputs[i], 32) == 0);</div><div class="line"><a name="l00310"></a><span class="lineno"> 310</span>  <span class="keywordflow">if</span> (strlen(inputs[i]) > 0) {</div><div class="line"><a name="l00311"></a><span class="lineno"> 311</span>  <span class="keywordtype">int</span> split = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(strlen(inputs[i]));</div><div class="line"><a name="l00312"></a><span class="lineno"> 312</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#abc4bd0d379fd229865df44284d5cfc3b">secp256k1_hmac_sha256_initialize</a>(&hasher, (<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>*)(keys[i]), strlen(keys[i]));</div><div class="line"><a name="l00313"></a><span class="lineno"> 313</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a985f5f05c10dca7f592541d95c84081f">secp256k1_hmac_sha256_write</a>(&hasher, (<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>*)(inputs[i]), split);</div><div class="line"><a name="l00314"></a><span class="lineno"> 314</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a985f5f05c10dca7f592541d95c84081f">secp256k1_hmac_sha256_write</a>(&hasher, (<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>*)(inputs[i] + split), strlen(inputs[i]) - split);</div><div class="line"><a name="l00315"></a><span class="lineno"> 315</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a6f85fe02b7546db62cc03adb03613d16">secp256k1_hmac_sha256_finalize</a>(&hasher, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>);</div><div class="line"><a name="l00316"></a><span class="lineno"> 316</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, outputs[i], 32) == 0);</div><div class="line"><a name="l00317"></a><span class="lineno"> 317</span>  }</div><div class="line"><a name="l00318"></a><span class="lineno"> 318</span>  }</div><div class="line"><a name="l00319"></a><span class="lineno"> 319</span> }</div><div class="line"><a name="l00320"></a><span class="lineno"> 320</span> </div><div class="line"><a name="l00321"></a><span class="lineno"><a class="line" href="tests_8c.html#add06855ef2be3d3b6a4506590a7b468e"> 321</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#add06855ef2be3d3b6a4506590a7b468e">run_rfc6979_hmac_sha256_tests</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00322"></a><span class="lineno"> 322</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> key1[65] = {0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x00, 0x4b, 0xf5, 0x12, 0x2f, 0x34, 0x45, 0x54, 0xc5, 0x3b, 0xde, 0x2e, 0xbb, 0x8c, 0xd2, 0xb7, 0xe3, 0xd1, 0x60, 0x0a, 0xd6, 0x31, 0xc3, 0x85, 0xa5, 0xd7, 0xcc, 0xe2, 0x3c, 0x77, 0x85, 0x45, 0x9a, 0};</div><div class="line"><a name="l00323"></a><span class="lineno"> 323</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> out1[3][32] = {</div><div class="line"><a name="l00324"></a><span class="lineno"> 324</span>  {0x4f, 0xe2, 0x95, 0x25, 0xb2, 0x08, 0x68, 0x09, 0x15, 0x9a, 0xcd, 0xf0, 0x50, 0x6e, 0xfb, 0x86, 0xb0, 0xec, 0x93, 0x2c, 0x7b, 0xa4, 0x42, 0x56, 0xab, 0x32, 0x1e, 0x42, 0x1e, 0x67, 0xe9, 0xfb},</div><div class="line"><a name="l00325"></a><span class="lineno"> 325</span>  {0x2b, 0xf0, 0xff, 0xf1, 0xd3, 0xc3, 0x78, 0xa2, 0x2d, 0xc5, 0xde, 0x1d, 0x85, 0x65, 0x22, 0x32, 0x5c, 0x65, 0xb5, 0x04, 0x49, 0x1a, 0x0c, 0xbd, 0x01, 0xcb, 0x8f, 0x3a, 0xa6, 0x7f, 0xfd, 0x4a},</div><div class="line"><a name="l00326"></a><span class="lineno"> 326</span>  {0xf5, 0x28, 0xb4, 0x10, 0xcb, 0x54, 0x1f, 0x77, 0x00, 0x0d, 0x7a, 0xfb, 0x6c, 0x5b, 0x53, 0xc5, 0xc4, 0x71, 0xea, 0xb4, 0x3e, 0x46, 0x6d, 0x9a, 0xc5, 0x19, 0x0c, 0x39, 0xc8, 0x2f, 0xd8, 0x2e}</div><div class="line"><a name="l00327"></a><span class="lineno"> 327</span>  };</div><div class="line"><a name="l00328"></a><span class="lineno"> 328</span> </div><div class="line"><a name="l00329"></a><span class="lineno"> 329</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> key2[64] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xe3, 0xb0, 0xc4, 0x42, 0x98, 0xfc, 0x1c, 0x14, 0x9a, 0xfb, 0xf4, 0xc8, 0x99, 0x6f, 0xb9, 0x24, 0x27, 0xae, 0x41, 0xe4, 0x64, 0x9b, 0x93, 0x4c, 0xa4, 0x95, 0x99, 0x1b, 0x78, 0x52, 0xb8, 0x55};</div><div class="line"><a name="l00330"></a><span class="lineno"> 330</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> out2[3][32] = {</div><div class="line"><a name="l00331"></a><span class="lineno"> 331</span>  {0x9c, 0x23, 0x6c, 0x16, 0x5b, 0x82, 0xae, 0x0c, 0xd5, 0x90, 0x65, 0x9e, 0x10, 0x0b, 0x6b, 0xab, 0x30, 0x36, 0xe7, 0xba, 0x8b, 0x06, 0x74, 0x9b, 0xaf, 0x69, 0x81, 0xe1, 0x6f, 0x1a, 0x2b, 0x95},</div><div class="line"><a name="l00332"></a><span class="lineno"> 332</span>  {0xdf, 0x47, 0x10, 0x61, 0x62, 0x5b, 0xc0, 0xea, 0x14, 0xb6, 0x82, 0xfe, 0xee, 0x2c, 0x9c, 0x02, 0xf2, 0x35, 0xda, 0x04, 0x20, 0x4c, 0x1d, 0x62, 0xa1, 0x53, 0x6c, 0x6e, 0x17, 0xae, 0xd7, 0xa9},</div><div class="line"><a name="l00333"></a><span class="lineno"> 333</span>  {0x75, 0x97, 0x88, 0x7c, 0xbd, 0x76, 0x32, 0x1f, 0x32, 0xe3, 0x04, 0x40, 0x67, 0x9a, 0x22, 0xcf, 0x7f, 0x8d, 0x9d, 0x2e, 0xac, 0x39, 0x0e, 0x58, 0x1f, 0xea, 0x09, 0x1c, 0xe2, 0x02, 0xba, 0x94}</div><div class="line"><a name="l00334"></a><span class="lineno"> 334</span>  };</div><div class="line"><a name="l00335"></a><span class="lineno"> 335</span> </div><div class="line"><a name="l00336"></a><span class="lineno"> 336</span>  <a class="code" href="structsecp256k1__rfc6979__hmac__sha256__t.html">secp256k1_rfc6979_hmac_sha256_t</a> rng;</div><div class="line"><a name="l00337"></a><span class="lineno"> 337</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>[32];</div><div class="line"><a name="l00338"></a><span class="lineno"> 338</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00339"></a><span class="lineno"> 339</span> </div><div class="line"><a name="l00340"></a><span class="lineno"> 340</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a9dd561651b3373fe94e80295dfdd43a7">secp256k1_rfc6979_hmac_sha256_initialize</a>(&rng, key1, 64);</div><div class="line"><a name="l00341"></a><span class="lineno"> 341</span>  <span class="keywordflow">for</span> (i = 0; i < 3; i++) {</div><div class="line"><a name="l00342"></a><span class="lineno"> 342</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a993c3261472ef00e4738e0fe7a99b7cb">secp256k1_rfc6979_hmac_sha256_generate</a>(&rng, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, 32);</div><div class="line"><a name="l00343"></a><span class="lineno"> 343</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, out1[i], 32) == 0);</div><div class="line"><a name="l00344"></a><span class="lineno"> 344</span>  }</div><div class="line"><a name="l00345"></a><span class="lineno"> 345</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a27832ea2666bbf9e5c7a18559660e9da">secp256k1_rfc6979_hmac_sha256_finalize</a>(&rng);</div><div class="line"><a name="l00346"></a><span class="lineno"> 346</span> </div><div class="line"><a name="l00347"></a><span class="lineno"> 347</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a9dd561651b3373fe94e80295dfdd43a7">secp256k1_rfc6979_hmac_sha256_initialize</a>(&rng, key1, 65);</div><div class="line"><a name="l00348"></a><span class="lineno"> 348</span>  <span class="keywordflow">for</span> (i = 0; i < 3; i++) {</div><div class="line"><a name="l00349"></a><span class="lineno"> 349</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a993c3261472ef00e4738e0fe7a99b7cb">secp256k1_rfc6979_hmac_sha256_generate</a>(&rng, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, 32);</div><div class="line"><a name="l00350"></a><span class="lineno"> 350</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, out1[i], 32) != 0);</div><div class="line"><a name="l00351"></a><span class="lineno"> 351</span>  }</div><div class="line"><a name="l00352"></a><span class="lineno"> 352</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a27832ea2666bbf9e5c7a18559660e9da">secp256k1_rfc6979_hmac_sha256_finalize</a>(&rng);</div><div class="line"><a name="l00353"></a><span class="lineno"> 353</span> </div><div class="line"><a name="l00354"></a><span class="lineno"> 354</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a9dd561651b3373fe94e80295dfdd43a7">secp256k1_rfc6979_hmac_sha256_initialize</a>(&rng, key2, 64);</div><div class="line"><a name="l00355"></a><span class="lineno"> 355</span>  <span class="keywordflow">for</span> (i = 0; i < 3; i++) {</div><div class="line"><a name="l00356"></a><span class="lineno"> 356</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a993c3261472ef00e4738e0fe7a99b7cb">secp256k1_rfc6979_hmac_sha256_generate</a>(&rng, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, 32);</div><div class="line"><a name="l00357"></a><span class="lineno"> 357</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, out2[i], 32) == 0);</div><div class="line"><a name="l00358"></a><span class="lineno"> 358</span>  }</div><div class="line"><a name="l00359"></a><span class="lineno"> 359</span>  <a class="code" href="secp256k1_2src_2hash_8h.html#a27832ea2666bbf9e5c7a18559660e9da">secp256k1_rfc6979_hmac_sha256_finalize</a>(&rng);</div><div class="line"><a name="l00360"></a><span class="lineno"> 360</span> }</div><div class="line"><a name="l00361"></a><span class="lineno"> 361</span> </div><div class="line"><a name="l00362"></a><span class="lineno"> 362</span> <span class="comment">/***** RANDOM TESTS *****/</span></div><div class="line"><a name="l00363"></a><span class="lineno"> 363</span> </div><div class="line"><a name="l00364"></a><span class="lineno"><a class="line" href="tests_8c.html#afbb9dd769d4d12035edc846bb697a0a3"> 364</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#afbb9dd769d4d12035edc846bb697a0a3">test_rand_bits</a>(<span class="keywordtype">int</span> rand32, <span class="keywordtype">int</span> bits) {</div><div class="line"><a name="l00365"></a><span class="lineno"> 365</span>  <span class="comment">/* (1-1/2^B)^rounds[B] < 1/10^9, so rounds is the number of iterations to</span></div><div class="line"><a name="l00366"></a><span class="lineno"> 366</span> <span class="comment"> * get a false negative chance below once in a billion */</span></div><div class="line"><a name="l00367"></a><span class="lineno"> 367</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> rounds[7] = {1, 30, 73, 156, 322, 653, 1316};</div><div class="line"><a name="l00368"></a><span class="lineno"> 368</span>  <span class="comment">/* We try multiplying the results with various odd numbers, which shouldn't</span></div><div class="line"><a name="l00369"></a><span class="lineno"> 369</span> <span class="comment"> * influence the uniform distribution modulo a power of 2. */</span></div><div class="line"><a name="l00370"></a><span class="lineno"> 370</span>  <span class="keyword">static</span> <span class="keyword">const</span> uint32_t mults[6] = {1, 3, 21, 289, 0x9999, 0x80402011};</div><div class="line"><a name="l00371"></a><span class="lineno"> 371</span>  <span class="comment">/* We only select up to 6 bits from the output to analyse */</span></div><div class="line"><a name="l00372"></a><span class="lineno"> 372</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> usebits = bits > 6 ? 6 : bits;</div><div class="line"><a name="l00373"></a><span class="lineno"> 373</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> maxshift = bits - usebits;</div><div class="line"><a name="l00374"></a><span class="lineno"> 374</span>  <span class="comment">/* For each of the maxshift+1 usebits-bit sequences inside a bits-bit</span></div><div class="line"><a name="l00375"></a><span class="lineno"> 375</span> <span class="comment"> number, track all observed outcomes, one per bit in a uint64_t. */</span></div><div class="line"><a name="l00376"></a><span class="lineno"> 376</span>  uint64_t x[6][27] = {{0}};</div><div class="line"><a name="l00377"></a><span class="lineno"> 377</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> i, shift, <a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>;</div><div class="line"><a name="l00378"></a><span class="lineno"> 378</span>  <span class="comment">/* Multiply the output of all rand calls with the odd number m, which</span></div><div class="line"><a name="l00379"></a><span class="lineno"> 379</span> <span class="comment"> should not change the uniformity of its distribution. */</span></div><div class="line"><a name="l00380"></a><span class="lineno"> 380</span>  <span class="keywordflow">for</span> (i = 0; i < rounds[usebits]; i++) {</div><div class="line"><a name="l00381"></a><span class="lineno"> 381</span>  uint32_t r = (rand32 ? <a class="code" href="testrand_8h.html#a253bfecd8b27ee9e51ec9ae676c352be">secp256k1_rand32</a>() : <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(bits));</div><div class="line"><a name="l00382"></a><span class="lineno"> 382</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>((((uint64_t)r) >> bits) == 0);</div><div class="line"><a name="l00383"></a><span class="lineno"> 383</span>  <span class="keywordflow">for</span> (<a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a> = 0; <a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a> < <span class="keyword">sizeof</span>(mults) / <span class="keyword">sizeof</span>(mults[0]); <a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>++) {</div><div class="line"><a name="l00384"></a><span class="lineno"> 384</span>  uint32_t rm = r * mults[<a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>];</div><div class="line"><a name="l00385"></a><span class="lineno"> 385</span>  <span class="keywordflow">for</span> (shift = 0; shift <= maxshift; shift++) {</div><div class="line"><a name="l00386"></a><span class="lineno"> 386</span>  x[<a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>][shift] |= (((uint64_t)1) << ((rm >> shift) & ((1 << usebits) - 1)));</div><div class="line"><a name="l00387"></a><span class="lineno"> 387</span>  }</div><div class="line"><a name="l00388"></a><span class="lineno"> 388</span>  }</div><div class="line"><a name="l00389"></a><span class="lineno"> 389</span>  }</div><div class="line"><a name="l00390"></a><span class="lineno"> 390</span>  <span class="keywordflow">for</span> (<a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a> = 0; <a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a> < <span class="keyword">sizeof</span>(mults) / <span class="keyword">sizeof</span>(mults[0]); <a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>++) {</div><div class="line"><a name="l00391"></a><span class="lineno"> 391</span>  <span class="keywordflow">for</span> (shift = 0; shift <= maxshift; shift++) {</div><div class="line"><a name="l00392"></a><span class="lineno"> 392</span>  <span class="comment">/* Test that the lower usebits bits of x[shift] are 1 */</span></div><div class="line"><a name="l00393"></a><span class="lineno"> 393</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(((~x[<a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>][shift]) << (64 - (1 << usebits))) == 0);</div><div class="line"><a name="l00394"></a><span class="lineno"> 394</span>  }</div><div class="line"><a name="l00395"></a><span class="lineno"> 395</span>  }</div><div class="line"><a name="l00396"></a><span class="lineno"> 396</span> }</div><div class="line"><a name="l00397"></a><span class="lineno"> 397</span> </div><div class="line"><a name="l00398"></a><span class="lineno"> 398</span> <span class="comment">/* Subrange must be a whole divisor of range, and at most 64 */</span></div><div class="line"><a name="l00399"></a><span class="lineno"><a class="line" href="tests_8c.html#a72cd51f28d0b6b8e83edde291fb1bd75"> 399</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a72cd51f28d0b6b8e83edde291fb1bd75">test_rand_int</a>(uint32_t range, uint32_t subrange) {</div><div class="line"><a name="l00400"></a><span class="lineno"> 400</span>  <span class="comment">/* (1-1/subrange)^rounds < 1/10^9 */</span></div><div class="line"><a name="l00401"></a><span class="lineno"> 401</span>  <span class="keywordtype">int</span> rounds = (subrange * 2073) / 100;</div><div class="line"><a name="l00402"></a><span class="lineno"> 402</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00403"></a><span class="lineno"> 403</span>  uint64_t x = 0;</div><div class="line"><a name="l00404"></a><span class="lineno"> 404</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>((range % subrange) == 0);</div><div class="line"><a name="l00405"></a><span class="lineno"> 405</span>  <span class="keywordflow">for</span> (i = 0; i < rounds; i++) {</div><div class="line"><a name="l00406"></a><span class="lineno"> 406</span>  uint32_t r = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(range);</div><div class="line"><a name="l00407"></a><span class="lineno"> 407</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(r < range);</div><div class="line"><a name="l00408"></a><span class="lineno"> 408</span>  r = r % subrange;</div><div class="line"><a name="l00409"></a><span class="lineno"> 409</span>  x |= (((uint64_t)1) << r);</div><div class="line"><a name="l00410"></a><span class="lineno"> 410</span>  }</div><div class="line"><a name="l00411"></a><span class="lineno"> 411</span>  <span class="comment">/* Test that the lower subrange bits of x are 1. */</span></div><div class="line"><a name="l00412"></a><span class="lineno"> 412</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(((~x) << (64 - subrange)) == 0);</div><div class="line"><a name="l00413"></a><span class="lineno"> 413</span> }</div><div class="line"><a name="l00414"></a><span class="lineno"> 414</span> </div><div class="line"><a name="l00415"></a><span class="lineno"><a class="line" href="tests_8c.html#a90b7eac05cebf27de5b429888bb5beff"> 415</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a90b7eac05cebf27de5b429888bb5beff">run_rand_bits</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00416"></a><span class="lineno"> 416</span>  <span class="keywordtype">size_t</span> b;</div><div class="line"><a name="l00417"></a><span class="lineno"> 417</span>  <a class="code" href="tests_8c.html#afbb9dd769d4d12035edc846bb697a0a3">test_rand_bits</a>(1, 32);</div><div class="line"><a name="l00418"></a><span class="lineno"> 418</span>  <span class="keywordflow">for</span> (b = 1; b <= 32; b++) {</div><div class="line"><a name="l00419"></a><span class="lineno"> 419</span>  <a class="code" href="tests_8c.html#afbb9dd769d4d12035edc846bb697a0a3">test_rand_bits</a>(0, b);</div><div class="line"><a name="l00420"></a><span class="lineno"> 420</span>  }</div><div class="line"><a name="l00421"></a><span class="lineno"> 421</span> }</div><div class="line"><a name="l00422"></a><span class="lineno"> 422</span> </div><div class="line"><a name="l00423"></a><span class="lineno"><a class="line" href="tests_8c.html#a775a4718709171ff67d821ff4a97c9a7"> 423</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a775a4718709171ff67d821ff4a97c9a7">run_rand_int</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00424"></a><span class="lineno"> 424</span>  <span class="keyword">static</span> <span class="keyword">const</span> uint32_t ms[] = {1, 3, 17, 1000, 13771, 999999, 33554432};</div><div class="line"><a name="l00425"></a><span class="lineno"> 425</span>  <span class="keyword">static</span> <span class="keyword">const</span> uint32_t ss[] = {1, 3, 6, 9, 13, 31, 64};</div><div class="line"><a name="l00426"></a><span class="lineno"> 426</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>, s;</div><div class="line"><a name="l00427"></a><span class="lineno"> 427</span>  <span class="keywordflow">for</span> (<a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a> = 0; <a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a> < <span class="keyword">sizeof</span>(ms) / <span class="keyword">sizeof</span>(ms[0]); <a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>++) {</div><div class="line"><a name="l00428"></a><span class="lineno"> 428</span>  <span class="keywordflow">for</span> (s = 0; s < <span class="keyword">sizeof</span>(ss) / <span class="keyword">sizeof</span>(ss[0]); s++) {</div><div class="line"><a name="l00429"></a><span class="lineno"> 429</span>  <a class="code" href="tests_8c.html#a72cd51f28d0b6b8e83edde291fb1bd75">test_rand_int</a>(ms[<a class="code" href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">m</a>] * ss[s], ss[s]);</div><div class="line"><a name="l00430"></a><span class="lineno"> 430</span>  }</div><div class="line"><a name="l00431"></a><span class="lineno"> 431</span>  }</div><div class="line"><a name="l00432"></a><span class="lineno"> 432</span> }</div><div class="line"><a name="l00433"></a><span class="lineno"> 433</span> </div><div class="line"><a name="l00434"></a><span class="lineno"> 434</span> <span class="comment">/***** NUM TESTS *****/</span></div><div class="line"><a name="l00435"></a><span class="lineno"> 435</span> </div><div class="line"><a name="l00436"></a><span class="lineno"> 436</span> <span class="preprocessor">#ifndef USE_NUM_NONE</span></div><div class="line"><a name="l00437"></a><span class="lineno"><a class="line" href="tests_8c.html#a4affe0b607e5c6beab553c6668f9ab34"> 437</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a4affe0b607e5c6beab553c6668f9ab34">random_num_negate</a>(<a class="code" href="structsecp256k1__num.html">secp256k1_num</a> *num) {</div><div class="line"><a name="l00438"></a><span class="lineno"> 438</span>  <span class="keywordflow">if</span> (<a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1)) {</div><div class="line"><a name="l00439"></a><span class="lineno"> 439</span>  <a class="code" href="num_8h.html#a678834381238e96e24f63c317740df95">secp256k1_num_negate</a>(num);</div><div class="line"><a name="l00440"></a><span class="lineno"> 440</span>  }</div><div class="line"><a name="l00441"></a><span class="lineno"> 441</span> }</div><div class="line"><a name="l00442"></a><span class="lineno"> 442</span> </div><div class="line"><a name="l00443"></a><span class="lineno"><a class="line" href="tests_8c.html#ae0a527e6943a8aeeb762d6d386930148"> 443</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ae0a527e6943a8aeeb762d6d386930148">random_num_order_test</a>(<a class="code" href="structsecp256k1__num.html">secp256k1_num</a> *num) {</div><div class="line"><a name="l00444"></a><span class="lineno"> 444</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sc;</div><div class="line"><a name="l00445"></a><span class="lineno"> 445</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&sc);</div><div class="line"><a name="l00446"></a><span class="lineno"> 446</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(num, &sc);</div><div class="line"><a name="l00447"></a><span class="lineno"> 447</span> }</div><div class="line"><a name="l00448"></a><span class="lineno"> 448</span> </div><div class="line"><a name="l00449"></a><span class="lineno"><a class="line" href="tests_8c.html#a15c58dba0f6924a65cfd4441083dbba8"> 449</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a15c58dba0f6924a65cfd4441083dbba8">random_num_order</a>(<a class="code" href="structsecp256k1__num.html">secp256k1_num</a> *num) {</div><div class="line"><a name="l00450"></a><span class="lineno"> 450</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sc;</div><div class="line"><a name="l00451"></a><span class="lineno"> 451</span>  <a class="code" href="tests_8c.html#a01cf4b4fc9b4ab8cb3e04fd3dc2ff57f">random_scalar_order</a>(&sc);</div><div class="line"><a name="l00452"></a><span class="lineno"> 452</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(num, &sc);</div><div class="line"><a name="l00453"></a><span class="lineno"> 453</span> }</div><div class="line"><a name="l00454"></a><span class="lineno"> 454</span> </div><div class="line"><a name="l00455"></a><span class="lineno"><a class="line" href="tests_8c.html#a6cccf1ffe3b4863fec653e8bae8c0cb0"> 455</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a6cccf1ffe3b4863fec653e8bae8c0cb0">test_num_negate</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00456"></a><span class="lineno"> 456</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> n1;</div><div class="line"><a name="l00457"></a><span class="lineno"> 457</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> n2;</div><div class="line"><a name="l00458"></a><span class="lineno"> 458</span>  <a class="code" href="tests_8c.html#ae0a527e6943a8aeeb762d6d386930148">random_num_order_test</a>(&n1); <span class="comment">/* n1 = R */</span></div><div class="line"><a name="l00459"></a><span class="lineno"> 459</span>  <a class="code" href="tests_8c.html#a4affe0b607e5c6beab553c6668f9ab34">random_num_negate</a>(&n1);</div><div class="line"><a name="l00460"></a><span class="lineno"> 460</span>  <a class="code" href="num_8h.html#a8e164da794a6a512b0bce7a2339d35f9">secp256k1_num_copy</a>(&n2, &n1); <span class="comment">/* n2 = R */</span></div><div class="line"><a name="l00461"></a><span class="lineno"> 461</span>  <a class="code" href="num_8h.html#ad5ad0fd05f4f7d29d75f92fa540ede0a">secp256k1_num_sub</a>(&n1, &n2, &n1); <span class="comment">/* n1 = n2-n1 = 0 */</span></div><div class="line"><a name="l00462"></a><span class="lineno"> 462</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#ad15ded36e7a6704a702666bd2fd5cbff">secp256k1_num_is_zero</a>(&n1));</div><div class="line"><a name="l00463"></a><span class="lineno"> 463</span>  <a class="code" href="num_8h.html#a8e164da794a6a512b0bce7a2339d35f9">secp256k1_num_copy</a>(&n1, &n2); <span class="comment">/* n1 = R */</span></div><div class="line"><a name="l00464"></a><span class="lineno"> 464</span>  <a class="code" href="num_8h.html#a678834381238e96e24f63c317740df95">secp256k1_num_negate</a>(&n1); <span class="comment">/* n1 = -R */</span></div><div class="line"><a name="l00465"></a><span class="lineno"> 465</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="num_8h.html#ad15ded36e7a6704a702666bd2fd5cbff">secp256k1_num_is_zero</a>(&n1));</div><div class="line"><a name="l00466"></a><span class="lineno"> 466</span>  <a class="code" href="num_8h.html#a2a2407a291e6646a94ade2d5c90f961b">secp256k1_num_add</a>(&n1, &n2, &n1); <span class="comment">/* n1 = n2+n1 = 0 */</span></div><div class="line"><a name="l00467"></a><span class="lineno"> 467</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#ad15ded36e7a6704a702666bd2fd5cbff">secp256k1_num_is_zero</a>(&n1));</div><div class="line"><a name="l00468"></a><span class="lineno"> 468</span>  <a class="code" href="num_8h.html#a8e164da794a6a512b0bce7a2339d35f9">secp256k1_num_copy</a>(&n1, &n2); <span class="comment">/* n1 = R */</span></div><div class="line"><a name="l00469"></a><span class="lineno"> 469</span>  <a class="code" href="num_8h.html#a678834381238e96e24f63c317740df95">secp256k1_num_negate</a>(&n1); <span class="comment">/* n1 = -R */</span></div><div class="line"><a name="l00470"></a><span class="lineno"> 470</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a15349a6540e199082bde2ce0466d82cb">secp256k1_num_is_neg</a>(&n1) != <a class="code" href="num_8h.html#a15349a6540e199082bde2ce0466d82cb">secp256k1_num_is_neg</a>(&n2));</div><div class="line"><a name="l00471"></a><span class="lineno"> 471</span>  <a class="code" href="num_8h.html#a678834381238e96e24f63c317740df95">secp256k1_num_negate</a>(&n1); <span class="comment">/* n1 = R */</span></div><div class="line"><a name="l00472"></a><span class="lineno"> 472</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&n1, &n2));</div><div class="line"><a name="l00473"></a><span class="lineno"> 473</span> }</div><div class="line"><a name="l00474"></a><span class="lineno"> 474</span> </div><div class="line"><a name="l00475"></a><span class="lineno"><a class="line" href="tests_8c.html#afee6025ad0daa3ed03a0e666a42bb0e7"> 475</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#afee6025ad0daa3ed03a0e666a42bb0e7">test_num_add_sub</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00476"></a><span class="lineno"> 476</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> n1;</div><div class="line"><a name="l00477"></a><span class="lineno"> 477</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> n2;</div><div class="line"><a name="l00478"></a><span class="lineno"> 478</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> n1p2, n2p1, n1m2, n2m1;</div><div class="line"><a name="l00479"></a><span class="lineno"> 479</span>  <a class="code" href="tests_8c.html#ae0a527e6943a8aeeb762d6d386930148">random_num_order_test</a>(&n1); <span class="comment">/* n1 = R1 */</span></div><div class="line"><a name="l00480"></a><span class="lineno"> 480</span>  <span class="keywordflow">if</span> (<a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1)) {</div><div class="line"><a name="l00481"></a><span class="lineno"> 481</span>  <a class="code" href="tests_8c.html#a4affe0b607e5c6beab553c6668f9ab34">random_num_negate</a>(&n1);</div><div class="line"><a name="l00482"></a><span class="lineno"> 482</span>  }</div><div class="line"><a name="l00483"></a><span class="lineno"> 483</span>  <a class="code" href="tests_8c.html#ae0a527e6943a8aeeb762d6d386930148">random_num_order_test</a>(&n2); <span class="comment">/* n2 = R2 */</span></div><div class="line"><a name="l00484"></a><span class="lineno"> 484</span>  <span class="keywordflow">if</span> (<a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1)) {</div><div class="line"><a name="l00485"></a><span class="lineno"> 485</span>  <a class="code" href="tests_8c.html#a4affe0b607e5c6beab553c6668f9ab34">random_num_negate</a>(&n2);</div><div class="line"><a name="l00486"></a><span class="lineno"> 486</span>  }</div><div class="line"><a name="l00487"></a><span class="lineno"> 487</span>  <a class="code" href="num_8h.html#a2a2407a291e6646a94ade2d5c90f961b">secp256k1_num_add</a>(&n1p2, &n1, &n2); <span class="comment">/* n1p2 = R1 + R2 */</span></div><div class="line"><a name="l00488"></a><span class="lineno"> 488</span>  <a class="code" href="num_8h.html#a2a2407a291e6646a94ade2d5c90f961b">secp256k1_num_add</a>(&n2p1, &n2, &n1); <span class="comment">/* n2p1 = R2 + R1 */</span></div><div class="line"><a name="l00489"></a><span class="lineno"> 489</span>  <a class="code" href="num_8h.html#ad5ad0fd05f4f7d29d75f92fa540ede0a">secp256k1_num_sub</a>(&n1m2, &n1, &n2); <span class="comment">/* n1m2 = R1 - R2 */</span></div><div class="line"><a name="l00490"></a><span class="lineno"> 490</span>  <a class="code" href="num_8h.html#ad5ad0fd05f4f7d29d75f92fa540ede0a">secp256k1_num_sub</a>(&n2m1, &n2, &n1); <span class="comment">/* n2m1 = R2 - R1 */</span></div><div class="line"><a name="l00491"></a><span class="lineno"> 491</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&n1p2, &n2p1));</div><div class="line"><a name="l00492"></a><span class="lineno"> 492</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&n1p2, &n1m2));</div><div class="line"><a name="l00493"></a><span class="lineno"> 493</span>  <a class="code" href="num_8h.html#a678834381238e96e24f63c317740df95">secp256k1_num_negate</a>(&n2m1); <span class="comment">/* n2m1 = -R2 + R1 */</span></div><div class="line"><a name="l00494"></a><span class="lineno"> 494</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&n2m1, &n1m2));</div><div class="line"><a name="l00495"></a><span class="lineno"> 495</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&n2m1, &n1));</div><div class="line"><a name="l00496"></a><span class="lineno"> 496</span>  <a class="code" href="num_8h.html#a2a2407a291e6646a94ade2d5c90f961b">secp256k1_num_add</a>(&n2m1, &n2m1, &n2); <span class="comment">/* n2m1 = -R2 + R1 + R2 = R1 */</span></div><div class="line"><a name="l00497"></a><span class="lineno"> 497</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&n2m1, &n1));</div><div class="line"><a name="l00498"></a><span class="lineno"> 498</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&n2p1, &n1));</div><div class="line"><a name="l00499"></a><span class="lineno"> 499</span>  <a class="code" href="num_8h.html#ad5ad0fd05f4f7d29d75f92fa540ede0a">secp256k1_num_sub</a>(&n2p1, &n2p1, &n2); <span class="comment">/* n2p1 = R2 + R1 - R2 = R1 */</span></div><div class="line"><a name="l00500"></a><span class="lineno"> 500</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&n2p1, &n1));</div><div class="line"><a name="l00501"></a><span class="lineno"> 501</span> }</div><div class="line"><a name="l00502"></a><span class="lineno"> 502</span> </div><div class="line"><a name="l00503"></a><span class="lineno"><a class="line" href="tests_8c.html#a6744389614cf74a9b2c10c29e2ddba5c"> 503</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a6744389614cf74a9b2c10c29e2ddba5c">run_num_smalltests</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00504"></a><span class="lineno"> 504</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00505"></a><span class="lineno"> 505</span>  <span class="keywordflow">for</span> (i = 0; i < 100*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l00506"></a><span class="lineno"> 506</span>  <a class="code" href="tests_8c.html#a6cccf1ffe3b4863fec653e8bae8c0cb0">test_num_negate</a>();</div><div class="line"><a name="l00507"></a><span class="lineno"> 507</span>  <a class="code" href="tests_8c.html#afee6025ad0daa3ed03a0e666a42bb0e7">test_num_add_sub</a>();</div><div class="line"><a name="l00508"></a><span class="lineno"> 508</span>  }</div><div class="line"><a name="l00509"></a><span class="lineno"> 509</span> }</div><div class="line"><a name="l00510"></a><span class="lineno"> 510</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00511"></a><span class="lineno"> 511</span> </div><div class="line"><a name="l00512"></a><span class="lineno"> 512</span> <span class="comment">/***** SCALAR TESTS *****/</span></div><div class="line"><a name="l00513"></a><span class="lineno"> 513</span> </div><div class="line"><a name="l00514"></a><span class="lineno"><a class="line" href="tests_8c.html#a0ac2e9ed5b8ba27e48fba5150cebfa82"> 514</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a0ac2e9ed5b8ba27e48fba5150cebfa82">scalar_test</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00515"></a><span class="lineno"> 515</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> s;</div><div class="line"><a name="l00516"></a><span class="lineno"> 516</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> s1;</div><div class="line"><a name="l00517"></a><span class="lineno"> 517</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> s2;</div><div class="line"><a name="l00518"></a><span class="lineno"> 518</span> <span class="preprocessor">#ifndef USE_NUM_NONE</span></div><div class="line"><a name="l00519"></a><span class="lineno"> 519</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> snum, s1num, s2num;</div><div class="line"><a name="l00520"></a><span class="lineno"> 520</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> order, half_order;</div><div class="line"><a name="l00521"></a><span class="lineno"> 521</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00522"></a><span class="lineno"> 522</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> c[32];</div><div class="line"><a name="l00523"></a><span class="lineno"> 523</span> </div><div class="line"><a name="l00524"></a><span class="lineno"> 524</span>  <span class="comment">/* Set 's' to a random scalar, with value 'snum'. */</span></div><div class="line"><a name="l00525"></a><span class="lineno"> 525</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&s);</div><div class="line"><a name="l00526"></a><span class="lineno"> 526</span> </div><div class="line"><a name="l00527"></a><span class="lineno"> 527</span>  <span class="comment">/* Set 's1' to a random scalar, with value 's1num'. */</span></div><div class="line"><a name="l00528"></a><span class="lineno"> 528</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&s1);</div><div class="line"><a name="l00529"></a><span class="lineno"> 529</span> </div><div class="line"><a name="l00530"></a><span class="lineno"> 530</span>  <span class="comment">/* Set 's2' to a random scalar, with value 'snum2', and byte array representation 'c'. */</span></div><div class="line"><a name="l00531"></a><span class="lineno"> 531</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&s2);</div><div class="line"><a name="l00532"></a><span class="lineno"> 532</span>  <a class="code" href="scalar_8h.html#a4fa08f8af5a23f505b44c9ef1bec1831">secp256k1_scalar_get_b32</a>(c, &s2);</div><div class="line"><a name="l00533"></a><span class="lineno"> 533</span> </div><div class="line"><a name="l00534"></a><span class="lineno"> 534</span> <span class="preprocessor">#ifndef USE_NUM_NONE</span></div><div class="line"><a name="l00535"></a><span class="lineno"> 535</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(&snum, &s);</div><div class="line"><a name="l00536"></a><span class="lineno"> 536</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(&s1num, &s1);</div><div class="line"><a name="l00537"></a><span class="lineno"> 537</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(&s2num, &s2);</div><div class="line"><a name="l00538"></a><span class="lineno"> 538</span> </div><div class="line"><a name="l00539"></a><span class="lineno"> 539</span>  <a class="code" href="scalar_8h.html#a54e25150a9e06c01bcc4518b68aa288c">secp256k1_scalar_order_get_num</a>(&order);</div><div class="line"><a name="l00540"></a><span class="lineno"> 540</span>  half_order = order;</div><div class="line"><a name="l00541"></a><span class="lineno"> 541</span>  <a class="code" href="num_8h.html#adc4af999a060e6310b0fdeb99418b31c">secp256k1_num_shift</a>(&half_order, 1);</div><div class="line"><a name="l00542"></a><span class="lineno"> 542</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00543"></a><span class="lineno"> 543</span> </div><div class="line"><a name="l00544"></a><span class="lineno"> 544</span>  {</div><div class="line"><a name="l00545"></a><span class="lineno"> 545</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00546"></a><span class="lineno"> 546</span>  <span class="comment">/* Test that fetching groups of 4 bits from a scalar and recursing n(i)=16*n(i-1)+p(i) reconstructs it. */</span></div><div class="line"><a name="l00547"></a><span class="lineno"> 547</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>;</div><div class="line"><a name="l00548"></a><span class="lineno"> 548</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 0);</div><div class="line"><a name="l00549"></a><span class="lineno"> 549</span>  <span class="keywordflow">for</span> (i = 0; i < 256; i += 4) {</div><div class="line"><a name="l00550"></a><span class="lineno"> 550</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> t;</div><div class="line"><a name="l00551"></a><span class="lineno"> 551</span>  <span class="keywordtype">int</span> j;</div><div class="line"><a name="l00552"></a><span class="lineno"> 552</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&t, <a class="code" href="scalar_8h.html#a70d7af05e9c9a579ed5cb20d9f22eeba">secp256k1_scalar_get_bits</a>(&s, 256 - 4 - i, 4));</div><div class="line"><a name="l00553"></a><span class="lineno"> 553</span>  <span class="keywordflow">for</span> (j = 0; j < 4; j++) {</div><div class="line"><a name="l00554"></a><span class="lineno"> 554</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>);</div><div class="line"><a name="l00555"></a><span class="lineno"> 555</span>  }</div><div class="line"><a name="l00556"></a><span class="lineno"> 556</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &t);</div><div class="line"><a name="l00557"></a><span class="lineno"> 557</span>  }</div><div class="line"><a name="l00558"></a><span class="lineno"> 558</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &s));</div><div class="line"><a name="l00559"></a><span class="lineno"> 559</span>  }</div><div class="line"><a name="l00560"></a><span class="lineno"> 560</span> </div><div class="line"><a name="l00561"></a><span class="lineno"> 561</span>  {</div><div class="line"><a name="l00562"></a><span class="lineno"> 562</span>  <span class="comment">/* Test that fetching groups of randomly-sized bits from a scalar and recursing n(i)=b*n(i-1)+p(i) reconstructs it. */</span></div><div class="line"><a name="l00563"></a><span class="lineno"> 563</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>;</div><div class="line"><a name="l00564"></a><span class="lineno"> 564</span>  <span class="keywordtype">int</span> i = 0;</div><div class="line"><a name="l00565"></a><span class="lineno"> 565</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 0);</div><div class="line"><a name="l00566"></a><span class="lineno"> 566</span>  <span class="keywordflow">while</span> (i < 256) {</div><div class="line"><a name="l00567"></a><span class="lineno"> 567</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> t;</div><div class="line"><a name="l00568"></a><span class="lineno"> 568</span>  <span class="keywordtype">int</span> j;</div><div class="line"><a name="l00569"></a><span class="lineno"> 569</span>  <span class="keywordtype">int</span> now = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(15) + 1;</div><div class="line"><a name="l00570"></a><span class="lineno"> 570</span>  <span class="keywordflow">if</span> (now + i > 256) {</div><div class="line"><a name="l00571"></a><span class="lineno"> 571</span>  now = 256 - i;</div><div class="line"><a name="l00572"></a><span class="lineno"> 572</span>  }</div><div class="line"><a name="l00573"></a><span class="lineno"> 573</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&t, <a class="code" href="scalar_8h.html#abede7dbe3b5a38a51b388d46f4c5b52d">secp256k1_scalar_get_bits_var</a>(&s, 256 - now - i, now));</div><div class="line"><a name="l00574"></a><span class="lineno"> 574</span>  <span class="keywordflow">for</span> (j = 0; j < now; j++) {</div><div class="line"><a name="l00575"></a><span class="lineno"> 575</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>);</div><div class="line"><a name="l00576"></a><span class="lineno"> 576</span>  }</div><div class="line"><a name="l00577"></a><span class="lineno"> 577</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &t);</div><div class="line"><a name="l00578"></a><span class="lineno"> 578</span>  i += now;</div><div class="line"><a name="l00579"></a><span class="lineno"> 579</span>  }</div><div class="line"><a name="l00580"></a><span class="lineno"> 580</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, &s));</div><div class="line"><a name="l00581"></a><span class="lineno"> 581</span>  }</div><div class="line"><a name="l00582"></a><span class="lineno"> 582</span> </div><div class="line"><a name="l00583"></a><span class="lineno"> 583</span> <span class="preprocessor">#ifndef USE_NUM_NONE</span></div><div class="line"><a name="l00584"></a><span class="lineno"> 584</span>  {</div><div class="line"><a name="l00585"></a><span class="lineno"> 585</span>  <span class="comment">/* Test that adding the scalars together is equal to adding their numbers together modulo the order. */</span></div><div class="line"><a name="l00586"></a><span class="lineno"> 586</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> rnum;</div><div class="line"><a name="l00587"></a><span class="lineno"> 587</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> r2num;</div><div class="line"><a name="l00588"></a><span class="lineno"> 588</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r;</div><div class="line"><a name="l00589"></a><span class="lineno"> 589</span>  <a class="code" href="num_8h.html#a2a2407a291e6646a94ade2d5c90f961b">secp256k1_num_add</a>(&rnum, &snum, &s2num);</div><div class="line"><a name="l00590"></a><span class="lineno"> 590</span>  <a class="code" href="num_8h.html#af30b363582f76292c16da36d8240bbed">secp256k1_num_mod</a>(&rnum, &order);</div><div class="line"><a name="l00591"></a><span class="lineno"> 591</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r, &s, &s2);</div><div class="line"><a name="l00592"></a><span class="lineno"> 592</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(&r2num, &r);</div><div class="line"><a name="l00593"></a><span class="lineno"> 593</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&rnum, &r2num));</div><div class="line"><a name="l00594"></a><span class="lineno"> 594</span>  }</div><div class="line"><a name="l00595"></a><span class="lineno"> 595</span> </div><div class="line"><a name="l00596"></a><span class="lineno"> 596</span>  {</div><div class="line"><a name="l00597"></a><span class="lineno"> 597</span>  <span class="comment">/* Test that multiplying the scalars is equal to multiplying their numbers modulo the order. */</span></div><div class="line"><a name="l00598"></a><span class="lineno"> 598</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r;</div><div class="line"><a name="l00599"></a><span class="lineno"> 599</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> r2num;</div><div class="line"><a name="l00600"></a><span class="lineno"> 600</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> rnum;</div><div class="line"><a name="l00601"></a><span class="lineno"> 601</span>  <a class="code" href="num_8h.html#a3a5b983d5028a690f4446c10f78c2978">secp256k1_num_mul</a>(&rnum, &snum, &s2num);</div><div class="line"><a name="l00602"></a><span class="lineno"> 602</span>  <a class="code" href="num_8h.html#af30b363582f76292c16da36d8240bbed">secp256k1_num_mod</a>(&rnum, &order);</div><div class="line"><a name="l00603"></a><span class="lineno"> 603</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r, &s, &s2);</div><div class="line"><a name="l00604"></a><span class="lineno"> 604</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(&r2num, &r);</div><div class="line"><a name="l00605"></a><span class="lineno"> 605</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&rnum, &r2num));</div><div class="line"><a name="l00606"></a><span class="lineno"> 606</span>  <span class="comment">/* The result can only be zero if at least one of the factors was zero. */</span></div><div class="line"><a name="l00607"></a><span class="lineno"> 607</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&r) == (<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&s) || <a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&s2)));</div><div class="line"><a name="l00608"></a><span class="lineno"> 608</span>  <span class="comment">/* The results can only be equal to one of the factors if that factor was zero, or the other factor was one. */</span></div><div class="line"><a name="l00609"></a><span class="lineno"> 609</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&rnum, &snum) == (<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&s) || <a class="code" href="scalar_8h.html#aa1118b3273d3c9d15541f29373b93e97">secp256k1_scalar_is_one</a>(&s2)));</div><div class="line"><a name="l00610"></a><span class="lineno"> 610</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&rnum, &s2num) == (<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&s2) || <a class="code" href="scalar_8h.html#aa1118b3273d3c9d15541f29373b93e97">secp256k1_scalar_is_one</a>(&s)));</div><div class="line"><a name="l00611"></a><span class="lineno"> 611</span>  }</div><div class="line"><a name="l00612"></a><span class="lineno"> 612</span> </div><div class="line"><a name="l00613"></a><span class="lineno"> 613</span>  {</div><div class="line"><a name="l00614"></a><span class="lineno"> 614</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> neg;</div><div class="line"><a name="l00615"></a><span class="lineno"> 615</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> negnum;</div><div class="line"><a name="l00616"></a><span class="lineno"> 616</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> negnum2;</div><div class="line"><a name="l00617"></a><span class="lineno"> 617</span>  <span class="comment">/* Check that comparison with zero matches comparison with zero on the number. */</span></div><div class="line"><a name="l00618"></a><span class="lineno"> 618</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#ad15ded36e7a6704a702666bd2fd5cbff">secp256k1_num_is_zero</a>(&snum) == <a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&s));</div><div class="line"><a name="l00619"></a><span class="lineno"> 619</span>  <span class="comment">/* Check that comparison with the half order is equal to testing for high scalar. */</span></div><div class="line"><a name="l00620"></a><span class="lineno"> 620</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#aab66620cbbe49bec3c7c02f4a1219c05">secp256k1_scalar_is_high</a>(&s) == (<a class="code" href="num_8h.html#a2ede1c020471b52d634890089c5374be">secp256k1_num_cmp</a>(&snum, &half_order) > 0));</div><div class="line"><a name="l00621"></a><span class="lineno"> 621</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&neg, &s);</div><div class="line"><a name="l00622"></a><span class="lineno"> 622</span>  <a class="code" href="num_8h.html#ad5ad0fd05f4f7d29d75f92fa540ede0a">secp256k1_num_sub</a>(&negnum, &order, &snum);</div><div class="line"><a name="l00623"></a><span class="lineno"> 623</span>  <a class="code" href="num_8h.html#af30b363582f76292c16da36d8240bbed">secp256k1_num_mod</a>(&negnum, &order);</div><div class="line"><a name="l00624"></a><span class="lineno"> 624</span>  <span class="comment">/* Check that comparison with the half order is equal to testing for high scalar after negation. */</span></div><div class="line"><a name="l00625"></a><span class="lineno"> 625</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#aab66620cbbe49bec3c7c02f4a1219c05">secp256k1_scalar_is_high</a>(&neg) == (<a class="code" href="num_8h.html#a2ede1c020471b52d634890089c5374be">secp256k1_num_cmp</a>(&negnum, &half_order) > 0));</div><div class="line"><a name="l00626"></a><span class="lineno"> 626</span>  <span class="comment">/* Negating should change the high property, unless the value was already zero. */</span></div><div class="line"><a name="l00627"></a><span class="lineno"> 627</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>((<a class="code" href="scalar_8h.html#aab66620cbbe49bec3c7c02f4a1219c05">secp256k1_scalar_is_high</a>(&s) == <a class="code" href="scalar_8h.html#aab66620cbbe49bec3c7c02f4a1219c05">secp256k1_scalar_is_high</a>(&neg)) == <a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&s));</div><div class="line"><a name="l00628"></a><span class="lineno"> 628</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(&negnum2, &neg);</div><div class="line"><a name="l00629"></a><span class="lineno"> 629</span>  <span class="comment">/* Negating a scalar should be equal to (order - n) mod order on the number. */</span></div><div class="line"><a name="l00630"></a><span class="lineno"> 630</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&negnum, &negnum2));</div><div class="line"><a name="l00631"></a><span class="lineno"> 631</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&neg, &neg, &s);</div><div class="line"><a name="l00632"></a><span class="lineno"> 632</span>  <span class="comment">/* Adding a number to its negation should result in zero. */</span></div><div class="line"><a name="l00633"></a><span class="lineno"> 633</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&neg));</div><div class="line"><a name="l00634"></a><span class="lineno"> 634</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&neg, &neg);</div><div class="line"><a name="l00635"></a><span class="lineno"> 635</span>  <span class="comment">/* Negating zero should still result in zero. */</span></div><div class="line"><a name="l00636"></a><span class="lineno"> 636</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&neg));</div><div class="line"><a name="l00637"></a><span class="lineno"> 637</span>  }</div><div class="line"><a name="l00638"></a><span class="lineno"> 638</span> </div><div class="line"><a name="l00639"></a><span class="lineno"> 639</span>  {</div><div class="line"><a name="l00640"></a><span class="lineno"> 640</span>  <span class="comment">/* Test secp256k1_scalar_mul_shift_var. */</span></div><div class="line"><a name="l00641"></a><span class="lineno"> 641</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r;</div><div class="line"><a name="l00642"></a><span class="lineno"> 642</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> one;</div><div class="line"><a name="l00643"></a><span class="lineno"> 643</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> rnum;</div><div class="line"><a name="l00644"></a><span class="lineno"> 644</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> rnum2;</div><div class="line"><a name="l00645"></a><span class="lineno"> 645</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> cone[1] = {0x01};</div><div class="line"><a name="l00646"></a><span class="lineno"> 646</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> shift = 256 + <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(257);</div><div class="line"><a name="l00647"></a><span class="lineno"> 647</span>  <a class="code" href="scalar_8h.html#a8d19fb29bd4c9d863572eba08e97af20">secp256k1_scalar_mul_shift_var</a>(&r, &s1, &s2, shift);</div><div class="line"><a name="l00648"></a><span class="lineno"> 648</span>  <a class="code" href="num_8h.html#a3a5b983d5028a690f4446c10f78c2978">secp256k1_num_mul</a>(&rnum, &s1num, &s2num);</div><div class="line"><a name="l00649"></a><span class="lineno"> 649</span>  <a class="code" href="num_8h.html#adc4af999a060e6310b0fdeb99418b31c">secp256k1_num_shift</a>(&rnum, shift - 1);</div><div class="line"><a name="l00650"></a><span class="lineno"> 650</span>  <a class="code" href="num_8h.html#a4a7f500a93d330df44bbe3adda388868">secp256k1_num_set_bin</a>(&one, cone, 1);</div><div class="line"><a name="l00651"></a><span class="lineno"> 651</span>  <a class="code" href="num_8h.html#a2a2407a291e6646a94ade2d5c90f961b">secp256k1_num_add</a>(&rnum, &rnum, &one);</div><div class="line"><a name="l00652"></a><span class="lineno"> 652</span>  <a class="code" href="num_8h.html#adc4af999a060e6310b0fdeb99418b31c">secp256k1_num_shift</a>(&rnum, 1);</div><div class="line"><a name="l00653"></a><span class="lineno"> 653</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(&rnum2, &r);</div><div class="line"><a name="l00654"></a><span class="lineno"> 654</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&rnum, &rnum2));</div><div class="line"><a name="l00655"></a><span class="lineno"> 655</span>  }</div><div class="line"><a name="l00656"></a><span class="lineno"> 656</span> </div><div class="line"><a name="l00657"></a><span class="lineno"> 657</span>  {</div><div class="line"><a name="l00658"></a><span class="lineno"> 658</span>  <span class="comment">/* test secp256k1_scalar_shr_int */</span></div><div class="line"><a name="l00659"></a><span class="lineno"> 659</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r;</div><div class="line"><a name="l00660"></a><span class="lineno"> 660</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00661"></a><span class="lineno"> 661</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&r);</div><div class="line"><a name="l00662"></a><span class="lineno"> 662</span>  <span class="keywordflow">for</span> (i = 0; i < 100; ++i) {</div><div class="line"><a name="l00663"></a><span class="lineno"> 663</span>  <span class="keywordtype">int</span> <a class="code" href="keccak_8c.html#a98a822ea2bafa14fb7b509f97b38b464">low</a>;</div><div class="line"><a name="l00664"></a><span class="lineno"> 664</span>  <span class="keywordtype">int</span> shift = 1 + <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(15);</div><div class="line"><a name="l00665"></a><span class="lineno"> 665</span>  <span class="keywordtype">int</span> expected = r.<a class="code" href="structsecp256k1__scalar.html#a4aba1d263d205acdd537ed9a995393cd">d</a>[0] % (1 << shift);</div><div class="line"><a name="l00666"></a><span class="lineno"> 666</span>  <a class="code" href="keccak_8c.html#a98a822ea2bafa14fb7b509f97b38b464">low</a> = <a class="code" href="scalar_8h.html#ae9fcdf1db22cb93c2a2f06b0a9c957d3">secp256k1_scalar_shr_int</a>(&r, shift);</div><div class="line"><a name="l00667"></a><span class="lineno"> 667</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(expected == <a class="code" href="keccak_8c.html#a98a822ea2bafa14fb7b509f97b38b464">low</a>);</div><div class="line"><a name="l00668"></a><span class="lineno"> 668</span>  }</div><div class="line"><a name="l00669"></a><span class="lineno"> 669</span>  }</div><div class="line"><a name="l00670"></a><span class="lineno"> 670</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00671"></a><span class="lineno"> 671</span> </div><div class="line"><a name="l00672"></a><span class="lineno"> 672</span>  {</div><div class="line"><a name="l00673"></a><span class="lineno"> 673</span>  <span class="comment">/* Test that scalar inverses are equal to the inverse of their number modulo the order. */</span></div><div class="line"><a name="l00674"></a><span class="lineno"> 674</span>  <span class="keywordflow">if</span> (!<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&s)) {</div><div class="line"><a name="l00675"></a><span class="lineno"> 675</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> inv;</div><div class="line"><a name="l00676"></a><span class="lineno"> 676</span> <span class="preprocessor">#ifndef USE_NUM_NONE</span></div><div class="line"><a name="l00677"></a><span class="lineno"> 677</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> invnum;</div><div class="line"><a name="l00678"></a><span class="lineno"> 678</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> invnum2;</div><div class="line"><a name="l00679"></a><span class="lineno"> 679</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00680"></a><span class="lineno"> 680</span>  <a class="code" href="scalar_8h.html#ac048cded7c9731249ada44d489a258d5">secp256k1_scalar_inverse</a>(&inv, &s);</div><div class="line"><a name="l00681"></a><span class="lineno"> 681</span> <span class="preprocessor">#ifndef USE_NUM_NONE</span></div><div class="line"><a name="l00682"></a><span class="lineno"> 682</span>  <a class="code" href="num_8h.html#a96a66a341ddf203e7dbf85d1cca1c178">secp256k1_num_mod_inverse</a>(&invnum, &snum, &order);</div><div class="line"><a name="l00683"></a><span class="lineno"> 683</span>  <a class="code" href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a>(&invnum2, &inv);</div><div class="line"><a name="l00684"></a><span class="lineno"> 684</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a>(&invnum, &invnum2));</div><div class="line"><a name="l00685"></a><span class="lineno"> 685</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00686"></a><span class="lineno"> 686</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&inv, &inv, &s);</div><div class="line"><a name="l00687"></a><span class="lineno"> 687</span>  <span class="comment">/* Multiplying a scalar with its inverse must result in one. */</span></div><div class="line"><a name="l00688"></a><span class="lineno"> 688</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#aa1118b3273d3c9d15541f29373b93e97">secp256k1_scalar_is_one</a>(&inv));</div><div class="line"><a name="l00689"></a><span class="lineno"> 689</span>  <a class="code" href="scalar_8h.html#ac048cded7c9731249ada44d489a258d5">secp256k1_scalar_inverse</a>(&inv, &inv);</div><div class="line"><a name="l00690"></a><span class="lineno"> 690</span>  <span class="comment">/* Inverting one must result in one. */</span></div><div class="line"><a name="l00691"></a><span class="lineno"> 691</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#aa1118b3273d3c9d15541f29373b93e97">secp256k1_scalar_is_one</a>(&inv));</div><div class="line"><a name="l00692"></a><span class="lineno"> 692</span>  }</div><div class="line"><a name="l00693"></a><span class="lineno"> 693</span>  }</div><div class="line"><a name="l00694"></a><span class="lineno"> 694</span> </div><div class="line"><a name="l00695"></a><span class="lineno"> 695</span>  {</div><div class="line"><a name="l00696"></a><span class="lineno"> 696</span>  <span class="comment">/* Test commutativity of add. */</span></div><div class="line"><a name="l00697"></a><span class="lineno"> 697</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, r2;</div><div class="line"><a name="l00698"></a><span class="lineno"> 698</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r1, &s1, &s2);</div><div class="line"><a name="l00699"></a><span class="lineno"> 699</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r2, &s2, &s1);</div><div class="line"><a name="l00700"></a><span class="lineno"> 700</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &r2));</div><div class="line"><a name="l00701"></a><span class="lineno"> 701</span>  }</div><div class="line"><a name="l00702"></a><span class="lineno"> 702</span> </div><div class="line"><a name="l00703"></a><span class="lineno"> 703</span>  {</div><div class="line"><a name="l00704"></a><span class="lineno"> 704</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, r2;</div><div class="line"><a name="l00705"></a><span class="lineno"> 705</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> b;</div><div class="line"><a name="l00706"></a><span class="lineno"> 706</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00707"></a><span class="lineno"> 707</span>  <span class="comment">/* Test add_bit. */</span></div><div class="line"><a name="l00708"></a><span class="lineno"> 708</span>  <span class="keywordtype">int</span> bit = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(8);</div><div class="line"><a name="l00709"></a><span class="lineno"> 709</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&b, 1);</div><div class="line"><a name="l00710"></a><span class="lineno"> 710</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#aa1118b3273d3c9d15541f29373b93e97">secp256k1_scalar_is_one</a>(&b));</div><div class="line"><a name="l00711"></a><span class="lineno"> 711</span>  <span class="keywordflow">for</span> (i = 0; i < bit; i++) {</div><div class="line"><a name="l00712"></a><span class="lineno"> 712</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&b, &b, &b);</div><div class="line"><a name="l00713"></a><span class="lineno"> 713</span>  }</div><div class="line"><a name="l00714"></a><span class="lineno"> 714</span>  r1 = s1;</div><div class="line"><a name="l00715"></a><span class="lineno"> 715</span>  r2 = s1;</div><div class="line"><a name="l00716"></a><span class="lineno"> 716</span>  <span class="keywordflow">if</span> (!<a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r1, &r1, &b)) {</div><div class="line"><a name="l00717"></a><span class="lineno"> 717</span>  <span class="comment">/* No overflow happened. */</span></div><div class="line"><a name="l00718"></a><span class="lineno"> 718</span>  <a class="code" href="scalar_8h.html#ad6596a0249548deb678f0b630204254f">secp256k1_scalar_cadd_bit</a>(&r2, bit, 1);</div><div class="line"><a name="l00719"></a><span class="lineno"> 719</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &r2));</div><div class="line"><a name="l00720"></a><span class="lineno"> 720</span>  <span class="comment">/* cadd is a noop when flag is zero */</span></div><div class="line"><a name="l00721"></a><span class="lineno"> 721</span>  <a class="code" href="scalar_8h.html#ad6596a0249548deb678f0b630204254f">secp256k1_scalar_cadd_bit</a>(&r2, bit, 0);</div><div class="line"><a name="l00722"></a><span class="lineno"> 722</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &r2));</div><div class="line"><a name="l00723"></a><span class="lineno"> 723</span>  }</div><div class="line"><a name="l00724"></a><span class="lineno"> 724</span>  }</div><div class="line"><a name="l00725"></a><span class="lineno"> 725</span> </div><div class="line"><a name="l00726"></a><span class="lineno"> 726</span>  {</div><div class="line"><a name="l00727"></a><span class="lineno"> 727</span>  <span class="comment">/* Test commutativity of mul. */</span></div><div class="line"><a name="l00728"></a><span class="lineno"> 728</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, r2;</div><div class="line"><a name="l00729"></a><span class="lineno"> 729</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r1, &s1, &s2);</div><div class="line"><a name="l00730"></a><span class="lineno"> 730</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r2, &s2, &s1);</div><div class="line"><a name="l00731"></a><span class="lineno"> 731</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &r2));</div><div class="line"><a name="l00732"></a><span class="lineno"> 732</span>  }</div><div class="line"><a name="l00733"></a><span class="lineno"> 733</span> </div><div class="line"><a name="l00734"></a><span class="lineno"> 734</span>  {</div><div class="line"><a name="l00735"></a><span class="lineno"> 735</span>  <span class="comment">/* Test associativity of add. */</span></div><div class="line"><a name="l00736"></a><span class="lineno"> 736</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, r2;</div><div class="line"><a name="l00737"></a><span class="lineno"> 737</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r1, &s1, &s2);</div><div class="line"><a name="l00738"></a><span class="lineno"> 738</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r1, &r1, &s);</div><div class="line"><a name="l00739"></a><span class="lineno"> 739</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r2, &s2, &s);</div><div class="line"><a name="l00740"></a><span class="lineno"> 740</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r2, &s1, &r2);</div><div class="line"><a name="l00741"></a><span class="lineno"> 741</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &r2));</div><div class="line"><a name="l00742"></a><span class="lineno"> 742</span>  }</div><div class="line"><a name="l00743"></a><span class="lineno"> 743</span> </div><div class="line"><a name="l00744"></a><span class="lineno"> 744</span>  {</div><div class="line"><a name="l00745"></a><span class="lineno"> 745</span>  <span class="comment">/* Test associativity of mul. */</span></div><div class="line"><a name="l00746"></a><span class="lineno"> 746</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, r2;</div><div class="line"><a name="l00747"></a><span class="lineno"> 747</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r1, &s1, &s2);</div><div class="line"><a name="l00748"></a><span class="lineno"> 748</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r1, &r1, &s);</div><div class="line"><a name="l00749"></a><span class="lineno"> 749</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r2, &s2, &s);</div><div class="line"><a name="l00750"></a><span class="lineno"> 750</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r2, &s1, &r2);</div><div class="line"><a name="l00751"></a><span class="lineno"> 751</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &r2));</div><div class="line"><a name="l00752"></a><span class="lineno"> 752</span>  }</div><div class="line"><a name="l00753"></a><span class="lineno"> 753</span> </div><div class="line"><a name="l00754"></a><span class="lineno"> 754</span>  {</div><div class="line"><a name="l00755"></a><span class="lineno"> 755</span>  <span class="comment">/* Test distributitivity of mul over add. */</span></div><div class="line"><a name="l00756"></a><span class="lineno"> 756</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, r2, t;</div><div class="line"><a name="l00757"></a><span class="lineno"> 757</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r1, &s1, &s2);</div><div class="line"><a name="l00758"></a><span class="lineno"> 758</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r1, &r1, &s);</div><div class="line"><a name="l00759"></a><span class="lineno"> 759</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r2, &s1, &s);</div><div class="line"><a name="l00760"></a><span class="lineno"> 760</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&t, &s2, &s);</div><div class="line"><a name="l00761"></a><span class="lineno"> 761</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r2, &r2, &t);</div><div class="line"><a name="l00762"></a><span class="lineno"> 762</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &r2));</div><div class="line"><a name="l00763"></a><span class="lineno"> 763</span>  }</div><div class="line"><a name="l00764"></a><span class="lineno"> 764</span> </div><div class="line"><a name="l00765"></a><span class="lineno"> 765</span>  {</div><div class="line"><a name="l00766"></a><span class="lineno"> 766</span>  <span class="comment">/* Test square. */</span></div><div class="line"><a name="l00767"></a><span class="lineno"> 767</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, r2;</div><div class="line"><a name="l00768"></a><span class="lineno"> 768</span>  <a class="code" href="scalar_8h.html#a2e65618baa17c59e89149a9f7e632f69">secp256k1_scalar_sqr</a>(&r1, &s1);</div><div class="line"><a name="l00769"></a><span class="lineno"> 769</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r2, &s1, &s1);</div><div class="line"><a name="l00770"></a><span class="lineno"> 770</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &r2));</div><div class="line"><a name="l00771"></a><span class="lineno"> 771</span>  }</div><div class="line"><a name="l00772"></a><span class="lineno"> 772</span> </div><div class="line"><a name="l00773"></a><span class="lineno"> 773</span>  {</div><div class="line"><a name="l00774"></a><span class="lineno"> 774</span>  <span class="comment">/* Test multiplicative identity. */</span></div><div class="line"><a name="l00775"></a><span class="lineno"> 775</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, v1;</div><div class="line"><a name="l00776"></a><span class="lineno"> 776</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&v1,1);</div><div class="line"><a name="l00777"></a><span class="lineno"> 777</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r1, &s1, &v1);</div><div class="line"><a name="l00778"></a><span class="lineno"> 778</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &s1));</div><div class="line"><a name="l00779"></a><span class="lineno"> 779</span>  }</div><div class="line"><a name="l00780"></a><span class="lineno"> 780</span> </div><div class="line"><a name="l00781"></a><span class="lineno"> 781</span>  {</div><div class="line"><a name="l00782"></a><span class="lineno"> 782</span>  <span class="comment">/* Test additive identity. */</span></div><div class="line"><a name="l00783"></a><span class="lineno"> 783</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, v0;</div><div class="line"><a name="l00784"></a><span class="lineno"> 784</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&v0,0);</div><div class="line"><a name="l00785"></a><span class="lineno"> 785</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&r1, &s1, &v0);</div><div class="line"><a name="l00786"></a><span class="lineno"> 786</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &s1));</div><div class="line"><a name="l00787"></a><span class="lineno"> 787</span>  }</div><div class="line"><a name="l00788"></a><span class="lineno"> 788</span> </div><div class="line"><a name="l00789"></a><span class="lineno"> 789</span>  {</div><div class="line"><a name="l00790"></a><span class="lineno"> 790</span>  <span class="comment">/* Test zero product property. */</span></div><div class="line"><a name="l00791"></a><span class="lineno"> 791</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1, v0;</div><div class="line"><a name="l00792"></a><span class="lineno"> 792</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&v0,0);</div><div class="line"><a name="l00793"></a><span class="lineno"> 793</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&r1, &s1, &v0);</div><div class="line"><a name="l00794"></a><span class="lineno"> 794</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &v0));</div><div class="line"><a name="l00795"></a><span class="lineno"> 795</span>  }</div><div class="line"><a name="l00796"></a><span class="lineno"> 796</span> </div><div class="line"><a name="l00797"></a><span class="lineno"> 797</span> }</div><div class="line"><a name="l00798"></a><span class="lineno"> 798</span> </div><div class="line"><a name="l00799"></a><span class="lineno"><a class="line" href="tests_8c.html#afc29a3cda8faeba097ce967f24fcb9d1"> 799</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#afc29a3cda8faeba097ce967f24fcb9d1">run_scalar_tests</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l00800"></a><span class="lineno"> 800</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l00801"></a><span class="lineno"> 801</span>  <span class="keywordflow">for</span> (i = 0; i < 128 * <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l00802"></a><span class="lineno"> 802</span>  <a class="code" href="tests_8c.html#a0ac2e9ed5b8ba27e48fba5150cebfa82">scalar_test</a>();</div><div class="line"><a name="l00803"></a><span class="lineno"> 803</span>  }</div><div class="line"><a name="l00804"></a><span class="lineno"> 804</span> </div><div class="line"><a name="l00805"></a><span class="lineno"> 805</span>  {</div><div class="line"><a name="l00806"></a><span class="lineno"> 806</span>  <span class="comment">/* (-1)+1 should be zero. */</span></div><div class="line"><a name="l00807"></a><span class="lineno"> 807</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> s, o;</div><div class="line"><a name="l00808"></a><span class="lineno"> 808</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&s, 1);</div><div class="line"><a name="l00809"></a><span class="lineno"> 809</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#aa1118b3273d3c9d15541f29373b93e97">secp256k1_scalar_is_one</a>(&s));</div><div class="line"><a name="l00810"></a><span class="lineno"> 810</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&o, &s);</div><div class="line"><a name="l00811"></a><span class="lineno"> 811</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&o, &o, &s);</div><div class="line"><a name="l00812"></a><span class="lineno"> 812</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&o));</div><div class="line"><a name="l00813"></a><span class="lineno"> 813</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&o, &o);</div><div class="line"><a name="l00814"></a><span class="lineno"> 814</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&o));</div><div class="line"><a name="l00815"></a><span class="lineno"> 815</span>  }</div><div class="line"><a name="l00816"></a><span class="lineno"> 816</span> </div><div class="line"><a name="l00817"></a><span class="lineno"> 817</span> <span class="preprocessor">#ifndef USE_NUM_NONE</span></div><div class="line"><a name="l00818"></a><span class="lineno"> 818</span>  {</div><div class="line"><a name="l00819"></a><span class="lineno"> 819</span>  <span class="comment">/* A scalar with value of the curve order should be 0. */</span></div><div class="line"><a name="l00820"></a><span class="lineno"> 820</span>  <a class="code" href="structsecp256k1__num.html">secp256k1_num</a> order;</div><div class="line"><a name="l00821"></a><span class="lineno"> 821</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> zero;</div><div class="line"><a name="l00822"></a><span class="lineno"> 822</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> bin[32];</div><div class="line"><a name="l00823"></a><span class="lineno"> 823</span>  <span class="keywordtype">int</span> overflow = 0;</div><div class="line"><a name="l00824"></a><span class="lineno"> 824</span>  <a class="code" href="scalar_8h.html#a54e25150a9e06c01bcc4518b68aa288c">secp256k1_scalar_order_get_num</a>(&order);</div><div class="line"><a name="l00825"></a><span class="lineno"> 825</span>  <a class="code" href="num_8h.html#aada7ead84b86388284323f31b9d05bca">secp256k1_num_get_bin</a>(bin, 32, &order);</div><div class="line"><a name="l00826"></a><span class="lineno"> 826</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(&zero, bin, &overflow);</div><div class="line"><a name="l00827"></a><span class="lineno"> 827</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(overflow == 1);</div><div class="line"><a name="l00828"></a><span class="lineno"> 828</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&zero));</div><div class="line"><a name="l00829"></a><span class="lineno"> 829</span>  }</div><div class="line"><a name="l00830"></a><span class="lineno"> 830</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00831"></a><span class="lineno"> 831</span> </div><div class="line"><a name="l00832"></a><span class="lineno"> 832</span>  {</div><div class="line"><a name="l00833"></a><span class="lineno"> 833</span>  <span class="comment">/* Does check_overflow check catch all ones? */</span></div><div class="line"><a name="l00834"></a><span class="lineno"> 834</span>  <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> overflowed = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(</div><div class="line"><a name="l00835"></a><span class="lineno"> 835</span>  0xFFFFFFFFUL, 0xFFFFFFFFUL, 0xFFFFFFFFUL, 0xFFFFFFFFUL,</div><div class="line"><a name="l00836"></a><span class="lineno"> 836</span>  0xFFFFFFFFUL, 0xFFFFFFFFUL, 0xFFFFFFFFUL, 0xFFFFFFFFUL</div><div class="line"><a name="l00837"></a><span class="lineno"> 837</span>  );</div><div class="line"><a name="l00838"></a><span class="lineno"> 838</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar__4x64__impl_8h.html#a13e982915006b138de5e2b3ab68238cb">secp256k1_scalar_check_overflow</a>(&overflowed));</div><div class="line"><a name="l00839"></a><span class="lineno"> 839</span>  }</div><div class="line"><a name="l00840"></a><span class="lineno"> 840</span> </div><div class="line"><a name="l00841"></a><span class="lineno"> 841</span>  {</div><div class="line"><a name="l00842"></a><span class="lineno"> 842</span>  <span class="comment">/* Static test vectors.</span></div><div class="line"><a name="l00843"></a><span class="lineno"> 843</span> <span class="comment"> * These were reduced from ~10^12 random vectors based on comparison-decision</span></div><div class="line"><a name="l00844"></a><span class="lineno"> 844</span> <span class="comment"> * and edge-case coverage on 32-bit and 64-bit implementations.</span></div><div class="line"><a name="l00845"></a><span class="lineno"> 845</span> <span class="comment"> * The responses were generated with Sage 5.9.</span></div><div class="line"><a name="l00846"></a><span class="lineno"> 846</span> <span class="comment"> */</span></div><div class="line"><a name="l00847"></a><span class="lineno"> 847</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> x;</div><div class="line"><a name="l00848"></a><span class="lineno"> 848</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> y;</div><div class="line"><a name="l00849"></a><span class="lineno"> 849</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> z;</div><div class="line"><a name="l00850"></a><span class="lineno"> 850</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> zz;</div><div class="line"><a name="l00851"></a><span class="lineno"> 851</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> one;</div><div class="line"><a name="l00852"></a><span class="lineno"> 852</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r1;</div><div class="line"><a name="l00853"></a><span class="lineno"> 853</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r2;</div><div class="line"><a name="l00854"></a><span class="lineno"> 854</span> <span class="preprocessor">#if defined(USE_SCALAR_INV_NUM)</span></div><div class="line"><a name="l00855"></a><span class="lineno"> 855</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> zzv;</div><div class="line"><a name="l00856"></a><span class="lineno"> 856</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00857"></a><span class="lineno"> 857</span>  <span class="keywordtype">int</span> overflow;</div><div class="line"><a name="l00858"></a><span class="lineno"> 858</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> chal[32][2][32] = {</div><div class="line"><a name="l00859"></a><span class="lineno"> 859</span>  {{0xff, 0xff, 0x03, 0x07, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00860"></a><span class="lineno"> 860</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x03,</div><div class="line"><a name="l00861"></a><span class="lineno"> 861</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0xf8, 0xff, 0xff,</div><div class="line"><a name="l00862"></a><span class="lineno"> 862</span>  0xff, 0xff, 0x03, 0x00, 0xc0, 0xff, 0xff, 0xff},</div><div class="line"><a name="l00863"></a><span class="lineno"> 863</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0x0f, 0x00, 0x00,</div><div class="line"><a name="l00864"></a><span class="lineno"> 864</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xf8,</div><div class="line"><a name="l00865"></a><span class="lineno"> 865</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00866"></a><span class="lineno"> 866</span>  0xff, 0x03, 0x00, 0x00, 0x00, 0x00, 0xe0, 0xff}},</div><div class="line"><a name="l00867"></a><span class="lineno"> 867</span>  {{0xef, 0xff, 0x1f, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00868"></a><span class="lineno"> 868</span>  0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0x3f, 0x00,</div><div class="line"><a name="l00869"></a><span class="lineno"> 869</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00870"></a><span class="lineno"> 870</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},</div><div class="line"><a name="l00871"></a><span class="lineno"> 871</span>  {0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00872"></a><span class="lineno"> 872</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xe0,</div><div class="line"><a name="l00873"></a><span class="lineno"> 873</span>  0xff, 0xff, 0xff, 0xff, 0xfc, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00874"></a><span class="lineno"> 874</span>  0xff, 0xff, 0xff, 0xff, 0x7f, 0x00, 0x80, 0xff}},</div><div class="line"><a name="l00875"></a><span class="lineno"> 875</span>  {{0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00876"></a><span class="lineno"> 876</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0x00, 0x00,</div><div class="line"><a name="l00877"></a><span class="lineno"> 877</span>  0x80, 0x00, 0x00, 0x80, 0xff, 0x3f, 0x00, 0x00,</div><div class="line"><a name="l00878"></a><span class="lineno"> 878</span>  0x00, 0x00, 0x00, 0xf8, 0xff, 0xff, 0xff, 0x00},</div><div class="line"><a name="l00879"></a><span class="lineno"> 879</span>  {0x00, 0x00, 0xfc, 0xff, 0xff, 0xff, 0xff, 0x80,</div><div class="line"><a name="l00880"></a><span class="lineno"> 880</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0x0f, 0x00, 0xe0,</div><div class="line"><a name="l00881"></a><span class="lineno"> 881</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0x7f, 0x00, 0x00,</div><div class="line"><a name="l00882"></a><span class="lineno"> 882</span>  0x00, 0x00, 0x00, 0x00, 0x7f, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l00883"></a><span class="lineno"> 883</span>  {{0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00884"></a><span class="lineno"> 884</span>  0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x80,</div><div class="line"><a name="l00885"></a><span class="lineno"> 885</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l00886"></a><span class="lineno"> 886</span>  0x00, 0x1e, 0xf8, 0xff, 0xff, 0xff, 0xfd, 0xff},</div><div class="line"><a name="l00887"></a><span class="lineno"> 887</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x1f,</div><div class="line"><a name="l00888"></a><span class="lineno"> 888</span>  0x00, 0x00, 0x00, 0xf8, 0xff, 0x03, 0x00, 0xe0,</div><div class="line"><a name="l00889"></a><span class="lineno"> 889</span>  0xff, 0x0f, 0x00, 0x00, 0x00, 0x00, 0xf0, 0xff,</div><div class="line"><a name="l00890"></a><span class="lineno"> 890</span>  0xf3, 0xff, 0x03, 0x00, 0x00, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l00891"></a><span class="lineno"> 891</span>  {{0x80, 0x00, 0x00, 0x80, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l00892"></a><span class="lineno"> 892</span>  0x00, 0x1c, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00893"></a><span class="lineno"> 893</span>  0xff, 0xff, 0xff, 0xe0, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l00894"></a><span class="lineno"> 894</span>  0x00, 0x00, 0x00, 0x00, 0xe0, 0xff, 0xff, 0xff},</div><div class="line"><a name="l00895"></a><span class="lineno"> 895</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x03, 0x00,</div><div class="line"><a name="l00896"></a><span class="lineno"> 896</span>  0xf8, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00897"></a><span class="lineno"> 897</span>  0xff, 0x1f, 0x00, 0x00, 0x80, 0xff, 0xff, 0x3f,</div><div class="line"><a name="l00898"></a><span class="lineno"> 898</span>  0x00, 0xfe, 0xff, 0xff, 0xff, 0xdf, 0xff, 0xff}},</div><div class="line"><a name="l00899"></a><span class="lineno"> 899</span>  {{0xff, 0xff, 0xff, 0xff, 0x00, 0x0f, 0xfc, 0x9f,</div><div class="line"><a name="l00900"></a><span class="lineno"> 900</span>  0xff, 0xff, 0xff, 0x00, 0x80, 0x00, 0x00, 0x80,</div><div class="line"><a name="l00901"></a><span class="lineno"> 901</span>  0xff, 0x0f, 0xfc, 0xff, 0x7f, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00902"></a><span class="lineno"> 902</span>  0x00, 0xf8, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00},</div><div class="line"><a name="l00903"></a><span class="lineno"> 903</span>  {0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80,</div><div class="line"><a name="l00904"></a><span class="lineno"> 904</span>  0x00, 0x00, 0xf8, 0xff, 0x0f, 0xc0, 0xff, 0xff,</div><div class="line"><a name="l00905"></a><span class="lineno"> 905</span>  0xff, 0x1f, 0x00, 0x00, 0x00, 0xc0, 0xff, 0xff,</div><div class="line"><a name="l00906"></a><span class="lineno"> 906</span>  0xff, 0xff, 0xff, 0x07, 0x80, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l00907"></a><span class="lineno"> 907</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0x3f, 0x00, 0x00,</div><div class="line"><a name="l00908"></a><span class="lineno"> 908</span>  0x80, 0x00, 0x00, 0x80, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00909"></a><span class="lineno"> 909</span>  0xf7, 0xff, 0xff, 0xef, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l00910"></a><span class="lineno"> 910</span>  0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0xf0},</div><div class="line"><a name="l00911"></a><span class="lineno"> 911</span>  {0x00, 0x00, 0x00, 0x00, 0xf8, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00912"></a><span class="lineno"> 912</span>  0xff, 0xff, 0xff, 0xff, 0x01, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00913"></a><span class="lineno"> 913</span>  0x00, 0x00, 0x80, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00914"></a><span class="lineno"> 914</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l00915"></a><span class="lineno"> 915</span>  {{0x00, 0xf8, 0xff, 0x03, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l00916"></a><span class="lineno"> 916</span>  0x00, 0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l00917"></a><span class="lineno"> 917</span>  0x80, 0x00, 0x00, 0x80, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00918"></a><span class="lineno"> 918</span>  0xff, 0xff, 0x03, 0xc0, 0xff, 0x0f, 0xfc, 0xff},</div><div class="line"><a name="l00919"></a><span class="lineno"> 919</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xe0, 0xff, 0xff,</div><div class="line"><a name="l00920"></a><span class="lineno"> 920</span>  0xff, 0x01, 0x00, 0x00, 0x00, 0x3f, 0x00, 0xc0,</div><div class="line"><a name="l00921"></a><span class="lineno"> 921</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00922"></a><span class="lineno"> 922</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l00923"></a><span class="lineno"> 923</span>  {{0x8f, 0x0f, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00924"></a><span class="lineno"> 924</span>  0x00, 0x00, 0xf8, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00925"></a><span class="lineno"> 925</span>  0xff, 0x7f, 0x00, 0x00, 0x80, 0x00, 0x00, 0x80,</div><div class="line"><a name="l00926"></a><span class="lineno"> 926</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00},</div><div class="line"><a name="l00927"></a><span class="lineno"> 927</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00928"></a><span class="lineno"> 928</span>  0xff, 0x0f, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00929"></a><span class="lineno"> 929</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00930"></a><span class="lineno"> 930</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l00931"></a><span class="lineno"> 931</span>  {{0x00, 0x00, 0x00, 0xc0, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00932"></a><span class="lineno"> 932</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00933"></a><span class="lineno"> 933</span>  0xff, 0xff, 0x03, 0x00, 0x80, 0x00, 0x00, 0x80,</div><div class="line"><a name="l00934"></a><span class="lineno"> 934</span>  0xff, 0xff, 0xff, 0x00, 0x00, 0x80, 0xff, 0x7f},</div><div class="line"><a name="l00935"></a><span class="lineno"> 935</span>  {0xff, 0xcf, 0xff, 0xff, 0x01, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00936"></a><span class="lineno"> 936</span>  0x00, 0xc0, 0xff, 0xcf, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00937"></a><span class="lineno"> 937</span>  0xbf, 0xff, 0x0e, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00938"></a><span class="lineno"> 938</span>  0x80, 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l00939"></a><span class="lineno"> 939</span>  {{0x00, 0x00, 0x00, 0x00, 0x00, 0x80, 0xff, 0xff,</div><div class="line"><a name="l00940"></a><span class="lineno"> 940</span>  0xff, 0xff, 0x00, 0xfc, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00941"></a><span class="lineno"> 941</span>  0xff, 0xff, 0xff, 0x00, 0x80, 0x00, 0x00, 0x80,</div><div class="line"><a name="l00942"></a><span class="lineno"> 942</span>  0xff, 0x01, 0xfc, 0xff, 0x01, 0x00, 0xfe, 0xff},</div><div class="line"><a name="l00943"></a><span class="lineno"> 943</span>  {0xff, 0xff, 0xff, 0x03, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00944"></a><span class="lineno"> 944</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00945"></a><span class="lineno"> 945</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xc0,</div><div class="line"><a name="l00946"></a><span class="lineno"> 946</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x03, 0x00}},</div><div class="line"><a name="l00947"></a><span class="lineno"> 947</span>  {{0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00948"></a><span class="lineno"> 948</span>  0xe0, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00949"></a><span class="lineno"> 949</span>  0x00, 0xf8, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00950"></a><span class="lineno"> 950</span>  0x7f, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x80},</div><div class="line"><a name="l00951"></a><span class="lineno"> 951</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00952"></a><span class="lineno"> 952</span>  0x00, 0xf8, 0xff, 0x01, 0x00, 0xf0, 0xff, 0xff,</div><div class="line"><a name="l00953"></a><span class="lineno"> 953</span>  0xe0, 0xff, 0x0f, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00954"></a><span class="lineno"> 954</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l00955"></a><span class="lineno"> 955</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00956"></a><span class="lineno"> 956</span>  0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00957"></a><span class="lineno"> 957</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00958"></a><span class="lineno"> 958</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0xf8, 0xff, 0x00},</div><div class="line"><a name="l00959"></a><span class="lineno"> 959</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00, 0x00,</div><div class="line"><a name="l00960"></a><span class="lineno"> 960</span>  0xfc, 0xff, 0xff, 0x3f, 0xf0, 0xff, 0xff, 0x3f,</div><div class="line"><a name="l00961"></a><span class="lineno"> 961</span>  0x00, 0x00, 0xf8, 0x07, 0x00, 0x00, 0x00, 0xff,</div><div class="line"><a name="l00962"></a><span class="lineno"> 962</span>  0xff, 0xff, 0xff, 0xff, 0x0f, 0x7e, 0x00, 0x00}},</div><div class="line"><a name="l00963"></a><span class="lineno"> 963</span>  {{0x00, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l00964"></a><span class="lineno"> 964</span>  0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x80,</div><div class="line"><a name="l00965"></a><span class="lineno"> 965</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00966"></a><span class="lineno"> 966</span>  0xff, 0xff, 0x1f, 0x00, 0x00, 0xfe, 0x07, 0x00},</div><div class="line"><a name="l00967"></a><span class="lineno"> 967</span>  {0x00, 0x00, 0x00, 0xf0, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00968"></a><span class="lineno"> 968</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00969"></a><span class="lineno"> 969</span>  0xff, 0xfb, 0xff, 0x07, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00970"></a><span class="lineno"> 970</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60}},</div><div class="line"><a name="l00971"></a><span class="lineno"> 971</span>  {{0xff, 0x01, 0x00, 0xff, 0xff, 0xff, 0x0f, 0x00,</div><div class="line"><a name="l00972"></a><span class="lineno"> 972</span>  0x80, 0x7f, 0xfe, 0xff, 0xff, 0xff, 0xff, 0x03,</div><div class="line"><a name="l00973"></a><span class="lineno"> 973</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00974"></a><span class="lineno"> 974</span>  0x00, 0x80, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff},</div><div class="line"><a name="l00975"></a><span class="lineno"> 975</span>  {0xff, 0xff, 0x1f, 0x00, 0xf0, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00976"></a><span class="lineno"> 976</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00977"></a><span class="lineno"> 977</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00978"></a><span class="lineno"> 978</span>  0xff, 0xff, 0xff, 0x3f, 0x00, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l00979"></a><span class="lineno"> 979</span>  {{0x80, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00980"></a><span class="lineno"> 980</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00981"></a><span class="lineno"> 981</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00982"></a><span class="lineno"> 982</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff},</div><div class="line"><a name="l00983"></a><span class="lineno"> 983</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00984"></a><span class="lineno"> 984</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xf1, 0xff,</div><div class="line"><a name="l00985"></a><span class="lineno"> 985</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x03,</div><div class="line"><a name="l00986"></a><span class="lineno"> 986</span>  0x00, 0x00, 0x00, 0xe0, 0xff, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l00987"></a><span class="lineno"> 987</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l00988"></a><span class="lineno"> 988</span>  0x7e, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00989"></a><span class="lineno"> 989</span>  0xc0, 0xff, 0xff, 0xcf, 0xff, 0x1f, 0x00, 0x00,</div><div class="line"><a name="l00990"></a><span class="lineno"> 990</span>  0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80},</div><div class="line"><a name="l00991"></a><span class="lineno"> 991</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00992"></a><span class="lineno"> 992</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0xe0, 0xff, 0xff,</div><div class="line"><a name="l00993"></a><span class="lineno"> 993</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0x3f, 0x00, 0x7e,</div><div class="line"><a name="l00994"></a><span class="lineno"> 994</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l00995"></a><span class="lineno"> 995</span>  {{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00996"></a><span class="lineno"> 996</span>  0x00, 0x00, 0x00, 0xfc, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l00997"></a><span class="lineno"> 997</span>  0xff, 0xff, 0x03, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l00998"></a><span class="lineno"> 998</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x7c, 0x00},</div><div class="line"><a name="l00999"></a><span class="lineno"> 999</span>  {0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80,</div><div class="line"><a name="l01000"></a><span class="lineno"> 1000</span>  0xff, 0xff, 0x7f, 0x00, 0x80, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01001"></a><span class="lineno"> 1001</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l01002"></a><span class="lineno"> 1002</span>  0x00, 0x00, 0xe0, 0xff, 0xff, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l01003"></a><span class="lineno"> 1003</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0x1f, 0x00, 0x80,</div><div class="line"><a name="l01004"></a><span class="lineno"> 1004</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l01005"></a><span class="lineno"> 1005</span>  0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80,</div><div class="line"><a name="l01006"></a><span class="lineno"> 1006</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00},</div><div class="line"><a name="l01007"></a><span class="lineno"> 1007</span>  {0xf0, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01008"></a><span class="lineno"> 1008</span>  0xff, 0xff, 0xff, 0xff, 0x3f, 0x00, 0x00, 0x80,</div><div class="line"><a name="l01009"></a><span class="lineno"> 1009</span>  0xff, 0x01, 0x00, 0x00, 0x00, 0x00, 0xff, 0xff,</div><div class="line"><a name="l01010"></a><span class="lineno"> 1010</span>  0xff, 0x7f, 0xf8, 0xff, 0xff, 0x1f, 0x00, 0xfe}},</div><div class="line"><a name="l01011"></a><span class="lineno"> 1011</span>  {{0xff, 0xff, 0xff, 0x3f, 0xf8, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01012"></a><span class="lineno"> 1012</span>  0xff, 0x03, 0xfe, 0x01, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01013"></a><span class="lineno"> 1013</span>  0xf0, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01014"></a><span class="lineno"> 1014</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x07},</div><div class="line"><a name="l01015"></a><span class="lineno"> 1015</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l01016"></a><span class="lineno"> 1016</span>  0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80,</div><div class="line"><a name="l01017"></a><span class="lineno"> 1017</span>  0xff, 0xff, 0xff, 0xff, 0x01, 0x80, 0xff, 0xff,</div><div class="line"><a name="l01018"></a><span class="lineno"> 1018</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00}},</div><div class="line"><a name="l01019"></a><span class="lineno"> 1019</span>  {{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01020"></a><span class="lineno"> 1020</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01021"></a><span class="lineno"> 1021</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01022"></a><span class="lineno"> 1022</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},</div><div class="line"><a name="l01023"></a><span class="lineno"> 1023</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01024"></a><span class="lineno"> 1024</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe,</div><div class="line"><a name="l01025"></a><span class="lineno"> 1025</span>  0xba, 0xae, 0xdc, 0xe6, 0xaf, 0x48, 0xa0, 0x3b,</div><div class="line"><a name="l01026"></a><span class="lineno"> 1026</span>  0xbf, 0xd2, 0x5e, 0x8c, 0xd0, 0x36, 0x41, 0x40}},</div><div class="line"><a name="l01027"></a><span class="lineno"> 1027</span>  {{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01028"></a><span class="lineno"> 1028</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01029"></a><span class="lineno"> 1029</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01030"></a><span class="lineno"> 1030</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01},</div><div class="line"><a name="l01031"></a><span class="lineno"> 1031</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01032"></a><span class="lineno"> 1032</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01033"></a><span class="lineno"> 1033</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01034"></a><span class="lineno"> 1034</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l01035"></a><span class="lineno"> 1035</span>  {{0x7f, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01036"></a><span class="lineno"> 1036</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01037"></a><span class="lineno"> 1037</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01038"></a><span class="lineno"> 1038</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff},</div><div class="line"><a name="l01039"></a><span class="lineno"> 1039</span>  {0x7f, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01040"></a><span class="lineno"> 1040</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01041"></a><span class="lineno"> 1041</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01042"></a><span class="lineno"> 1042</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l01043"></a><span class="lineno"> 1043</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0xc0,</div><div class="line"><a name="l01044"></a><span class="lineno"> 1044</span>  0xff, 0x0f, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01045"></a><span class="lineno"> 1045</span>  0x00, 0x00, 0xf0, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01046"></a><span class="lineno"> 1046</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f},</div><div class="line"><a name="l01047"></a><span class="lineno"> 1047</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x01, 0x00,</div><div class="line"><a name="l01048"></a><span class="lineno"> 1048</span>  0xf0, 0xff, 0xff, 0xff, 0xff, 0x07, 0x00, 0x00,</div><div class="line"><a name="l01049"></a><span class="lineno"> 1049</span>  0x00, 0x00, 0x00, 0xfe, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01050"></a><span class="lineno"> 1050</span>  0xff, 0xff, 0xff, 0xff, 0x01, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l01051"></a><span class="lineno"> 1051</span>  {{0x7f, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01052"></a><span class="lineno"> 1052</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01053"></a><span class="lineno"> 1053</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01054"></a><span class="lineno"> 1054</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff},</div><div class="line"><a name="l01055"></a><span class="lineno"> 1055</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01056"></a><span class="lineno"> 1056</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01057"></a><span class="lineno"> 1057</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01058"></a><span class="lineno"> 1058</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02}},</div><div class="line"><a name="l01059"></a><span class="lineno"> 1059</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01060"></a><span class="lineno"> 1060</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe,</div><div class="line"><a name="l01061"></a><span class="lineno"> 1061</span>  0xba, 0xae, 0xdc, 0xe6, 0xaf, 0x48, 0xa0, 0x3b,</div><div class="line"><a name="l01062"></a><span class="lineno"> 1062</span>  0xbf, 0xd2, 0x5e, 0x8c, 0xd0, 0x36, 0x41, 0x40},</div><div class="line"><a name="l01063"></a><span class="lineno"> 1063</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01064"></a><span class="lineno"> 1064</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01065"></a><span class="lineno"> 1065</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01066"></a><span class="lineno"> 1066</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01}},</div><div class="line"><a name="l01067"></a><span class="lineno"> 1067</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01068"></a><span class="lineno"> 1068</span>  0x7e, 0x00, 0x00, 0xc0, 0xff, 0xff, 0x07, 0x00,</div><div class="line"><a name="l01069"></a><span class="lineno"> 1069</span>  0x80, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01070"></a><span class="lineno"> 1070</span>  0xfc, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff},</div><div class="line"><a name="l01071"></a><span class="lineno"> 1071</span>  {0xff, 0x01, 0x00, 0x00, 0x00, 0xe0, 0xff, 0xff,</div><div class="line"><a name="l01072"></a><span class="lineno"> 1072</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0x1f, 0x00, 0x80,</div><div class="line"><a name="l01073"></a><span class="lineno"> 1073</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0x03, 0x00, 0x00,</div><div class="line"><a name="l01074"></a><span class="lineno"> 1074</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff}},</div><div class="line"><a name="l01075"></a><span class="lineno"> 1075</span>  {{0xff, 0xff, 0xf0, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l01076"></a><span class="lineno"> 1076</span>  0xf0, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l01077"></a><span class="lineno"> 1077</span>  0x00, 0xe0, 0xff, 0xff, 0xff, 0xff, 0xff, 0x01,</div><div class="line"><a name="l01078"></a><span class="lineno"> 1078</span>  0x80, 0x00, 0x00, 0x80, 0xff, 0xff, 0xff, 0xff},</div><div class="line"><a name="l01079"></a><span class="lineno"> 1079</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0xe0, 0xff, 0xff,</div><div class="line"><a name="l01080"></a><span class="lineno"> 1080</span>  0xff, 0xff, 0x3f, 0x00, 0xf8, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01081"></a><span class="lineno"> 1081</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01082"></a><span class="lineno"> 1082</span>  0xff, 0x3f, 0x00, 0x00, 0xc0, 0xf1, 0x7f, 0x00}},</div><div class="line"><a name="l01083"></a><span class="lineno"> 1083</span>  {{0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01084"></a><span class="lineno"> 1084</span>  0x00, 0x00, 0x00, 0xc0, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01085"></a><span class="lineno"> 1085</span>  0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01086"></a><span class="lineno"> 1086</span>  0x80, 0x00, 0x00, 0x80, 0xff, 0xff, 0xff, 0x00},</div><div class="line"><a name="l01087"></a><span class="lineno"> 1087</span>  {0x00, 0xf8, 0xff, 0xff, 0xff, 0xff, 0xff, 0x01,</div><div class="line"><a name="l01088"></a><span class="lineno"> 1088</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xf8, 0xff,</div><div class="line"><a name="l01089"></a><span class="lineno"> 1089</span>  0xff, 0x7f, 0x00, 0x00, 0x00, 0x00, 0x80, 0x1f,</div><div class="line"><a name="l01090"></a><span class="lineno"> 1090</span>  0x00, 0x00, 0xfc, 0xff, 0xff, 0x01, 0xff, 0xff}},</div><div class="line"><a name="l01091"></a><span class="lineno"> 1091</span>  {{0x00, 0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l01092"></a><span class="lineno"> 1092</span>  0x80, 0x00, 0x00, 0x80, 0xff, 0x03, 0xe0, 0x01,</div><div class="line"><a name="l01093"></a><span class="lineno"> 1093</span>  0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0xfc, 0xff,</div><div class="line"><a name="l01094"></a><span class="lineno"> 1094</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00},</div><div class="line"><a name="l01095"></a><span class="lineno"> 1095</span>  {0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01096"></a><span class="lineno"> 1096</span>  0xfe, 0xff, 0xff, 0xf0, 0x07, 0x00, 0x3c, 0x80,</div><div class="line"><a name="l01097"></a><span class="lineno"> 1097</span>  0xff, 0xff, 0xff, 0xff, 0xfc, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01098"></a><span class="lineno"> 1098</span>  0xff, 0xff, 0x07, 0xe0, 0xff, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l01099"></a><span class="lineno"> 1099</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l01100"></a><span class="lineno"> 1100</span>  0xfc, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01101"></a><span class="lineno"> 1101</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x07, 0xf8,</div><div class="line"><a name="l01102"></a><span class="lineno"> 1102</span>  0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x80},</div><div class="line"><a name="l01103"></a><span class="lineno"> 1103</span>  {0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01104"></a><span class="lineno"> 1104</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0x0c, 0x80, 0x00,</div><div class="line"><a name="l01105"></a><span class="lineno"> 1105</span>  0x00, 0x00, 0x00, 0xc0, 0x7f, 0xfe, 0xff, 0x1f,</div><div class="line"><a name="l01106"></a><span class="lineno"> 1106</span>  0x00, 0xfe, 0xff, 0x03, 0x00, 0x00, 0xfe, 0xff}},</div><div class="line"><a name="l01107"></a><span class="lineno"> 1107</span>  {{0xff, 0xff, 0x81, 0xff, 0xff, 0xff, 0xff, 0x00,</div><div class="line"><a name="l01108"></a><span class="lineno"> 1108</span>  0x80, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x83,</div><div class="line"><a name="l01109"></a><span class="lineno"> 1109</span>  0xff, 0xff, 0x00, 0x00, 0x80, 0x00, 0x00, 0x80,</div><div class="line"><a name="l01110"></a><span class="lineno"> 1110</span>  0xff, 0xff, 0x7f, 0x00, 0x00, 0x00, 0x00, 0xf0},</div><div class="line"><a name="l01111"></a><span class="lineno"> 1111</span>  {0xff, 0x01, 0x00, 0x00, 0x00, 0x00, 0xf8, 0xff,</div><div class="line"><a name="l01112"></a><span class="lineno"> 1112</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0x1f, 0x00, 0x00,</div><div class="line"><a name="l01113"></a><span class="lineno"> 1113</span>  0xf8, 0x07, 0x00, 0x80, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01114"></a><span class="lineno"> 1114</span>  0xff, 0xc7, 0xff, 0xff, 0xe0, 0xff, 0xff, 0xff}}</div><div class="line"><a name="l01115"></a><span class="lineno"> 1115</span>  };</div><div class="line"><a name="l01116"></a><span class="lineno"> 1116</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> res[32][2][32] = {</div><div class="line"><a name="l01117"></a><span class="lineno"> 1117</span>  {{0x0c, 0x3b, 0x0a, 0xca, 0x8d, 0x1a, 0x2f, 0xb9,</div><div class="line"><a name="l01118"></a><span class="lineno"> 1118</span>  0x8a, 0x7b, 0x53, 0x5a, 0x1f, 0xc5, 0x22, 0xa1,</div><div class="line"><a name="l01119"></a><span class="lineno"> 1119</span>  0x07, 0x2a, 0x48, 0xea, 0x02, 0xeb, 0xb3, 0xd6,</div><div class="line"><a name="l01120"></a><span class="lineno"> 1120</span>  0x20, 0x1e, 0x86, 0xd0, 0x95, 0xf6, 0x92, 0x35},</div><div class="line"><a name="l01121"></a><span class="lineno"> 1121</span>  {0xdc, 0x90, 0x7a, 0x07, 0x2e, 0x1e, 0x44, 0x6d,</div><div class="line"><a name="l01122"></a><span class="lineno"> 1122</span>  0xf8, 0x15, 0x24, 0x5b, 0x5a, 0x96, 0x37, 0x9c,</div><div class="line"><a name="l01123"></a><span class="lineno"> 1123</span>  0x37, 0x7b, 0x0d, 0xac, 0x1b, 0x65, 0x58, 0x49,</div><div class="line"><a name="l01124"></a><span class="lineno"> 1124</span>  0x43, 0xb7, 0x31, 0xbb, 0xa7, 0xf4, 0x97, 0x15}},</div><div class="line"><a name="l01125"></a><span class="lineno"> 1125</span>  {{0xf1, 0xf7, 0x3a, 0x50, 0xe6, 0x10, 0xba, 0x22,</div><div class="line"><a name="l01126"></a><span class="lineno"> 1126</span>  0x43, 0x4d, 0x1f, 0x1f, 0x7c, 0x27, 0xca, 0x9c,</div><div class="line"><a name="l01127"></a><span class="lineno"> 1127</span>  0xb8, 0xb6, 0xa0, 0xfc, 0xd8, 0xc0, 0x05, 0x2f,</div><div class="line"><a name="l01128"></a><span class="lineno"> 1128</span>  0xf7, 0x08, 0xe1, 0x76, 0xdd, 0xd0, 0x80, 0xc8},</div><div class="line"><a name="l01129"></a><span class="lineno"> 1129</span>  {0xe3, 0x80, 0x80, 0xb8, 0xdb, 0xe3, 0xa9, 0x77,</div><div class="line"><a name="l01130"></a><span class="lineno"> 1130</span>  0x00, 0xb0, 0xf5, 0x2e, 0x27, 0xe2, 0x68, 0xc4,</div><div class="line"><a name="l01131"></a><span class="lineno"> 1131</span>  0x88, 0xe8, 0x04, 0xc1, 0x12, 0xbf, 0x78, 0x59,</div><div class="line"><a name="l01132"></a><span class="lineno"> 1132</span>  0xe6, 0xa9, 0x7c, 0xe1, 0x81, 0xdd, 0xb9, 0xd5}},</div><div class="line"><a name="l01133"></a><span class="lineno"> 1133</span>  {{0x96, 0xe2, 0xee, 0x01, 0xa6, 0x80, 0x31, 0xef,</div><div class="line"><a name="l01134"></a><span class="lineno"> 1134</span>  0x5c, 0xd0, 0x19, 0xb4, 0x7d, 0x5f, 0x79, 0xab,</div><div class="line"><a name="l01135"></a><span class="lineno"> 1135</span>  0xa1, 0x97, 0xd3, 0x7e, 0x33, 0xbb, 0x86, 0x55,</div><div class="line"><a name="l01136"></a><span class="lineno"> 1136</span>  0x60, 0x20, 0x10, 0x0d, 0x94, 0x2d, 0x11, 0x7c},</div><div class="line"><a name="l01137"></a><span class="lineno"> 1137</span>  {0xcc, 0xab, 0xe0, 0xe8, 0x98, 0x65, 0x12, 0x96,</div><div class="line"><a name="l01138"></a><span class="lineno"> 1138</span>  0x38, 0x5a, 0x1a, 0xf2, 0x85, 0x23, 0x59, 0x5f,</div><div class="line"><a name="l01139"></a><span class="lineno"> 1139</span>  0xf9, 0xf3, 0xc2, 0x81, 0x70, 0x92, 0x65, 0x12,</div><div class="line"><a name="l01140"></a><span class="lineno"> 1140</span>  0x9c, 0x65, 0x1e, 0x96, 0x00, 0xef, 0xe7, 0x63}},</div><div class="line"><a name="l01141"></a><span class="lineno"> 1141</span>  {{0xac, 0x1e, 0x62, 0xc2, 0x59, 0xfc, 0x4e, 0x5c,</div><div class="line"><a name="l01142"></a><span class="lineno"> 1142</span>  0x83, 0xb0, 0xd0, 0x6f, 0xce, 0x19, 0xf6, 0xbf,</div><div class="line"><a name="l01143"></a><span class="lineno"> 1143</span>  0xa4, 0xb0, 0xe0, 0x53, 0x66, 0x1f, 0xbf, 0xc9,</div><div class="line"><a name="l01144"></a><span class="lineno"> 1144</span>  0x33, 0x47, 0x37, 0xa9, 0x3d, 0x5d, 0xb0, 0x48},</div><div class="line"><a name="l01145"></a><span class="lineno"> 1145</span>  {0x86, 0xb9, 0x2a, 0x7f, 0x8e, 0xa8, 0x60, 0x42,</div><div class="line"><a name="l01146"></a><span class="lineno"> 1146</span>  0x26, 0x6d, 0x6e, 0x1c, 0xa2, 0xec, 0xe0, 0xe5,</div><div class="line"><a name="l01147"></a><span class="lineno"> 1147</span>  0x3e, 0x0a, 0x33, 0xbb, 0x61, 0x4c, 0x9f, 0x3c,</div><div class="line"><a name="l01148"></a><span class="lineno"> 1148</span>  0xd1, 0xdf, 0x49, 0x33, 0xcd, 0x72, 0x78, 0x18}},</div><div class="line"><a name="l01149"></a><span class="lineno"> 1149</span>  {{0xf7, 0xd3, 0xcd, 0x49, 0x5c, 0x13, 0x22, 0xfb,</div><div class="line"><a name="l01150"></a><span class="lineno"> 1150</span>  0x2e, 0xb2, 0x2f, 0x27, 0xf5, 0x8a, 0x5d, 0x74,</div><div class="line"><a name="l01151"></a><span class="lineno"> 1151</span>  0xc1, 0x58, 0xc5, 0xc2, 0x2d, 0x9f, 0x52, 0xc6,</div><div class="line"><a name="l01152"></a><span class="lineno"> 1152</span>  0x63, 0x9f, 0xba, 0x05, 0x76, 0x45, 0x7a, 0x63},</div><div class="line"><a name="l01153"></a><span class="lineno"> 1153</span>  {0x8a, 0xfa, 0x55, 0x4d, 0xdd, 0xa3, 0xb2, 0xc3,</div><div class="line"><a name="l01154"></a><span class="lineno"> 1154</span>  0x44, 0xfd, 0xec, 0x72, 0xde, 0xef, 0xc0, 0x99,</div><div class="line"><a name="l01155"></a><span class="lineno"> 1155</span>  0xf5, 0x9f, 0xe2, 0x52, 0xb4, 0x05, 0x32, 0x58,</div><div class="line"><a name="l01156"></a><span class="lineno"> 1156</span>  0x57, 0xc1, 0x8f, 0xea, 0xc3, 0x24, 0x5b, 0x94}},</div><div class="line"><a name="l01157"></a><span class="lineno"> 1157</span>  {{0x05, 0x83, 0xee, 0xdd, 0x64, 0xf0, 0x14, 0x3b,</div><div class="line"><a name="l01158"></a><span class="lineno"> 1158</span>  0xa0, 0x14, 0x4a, 0x3a, 0x41, 0x82, 0x7c, 0xa7,</div><div class="line"><a name="l01159"></a><span class="lineno"> 1159</span>  0x2c, 0xaa, 0xb1, 0x76, 0xbb, 0x59, 0x64, 0x5f,</div><div class="line"><a name="l01160"></a><span class="lineno"> 1160</span>  0x52, 0xad, 0x25, 0x29, 0x9d, 0x8f, 0x0b, 0xb0},</div><div class="line"><a name="l01161"></a><span class="lineno"> 1161</span>  {0x7e, 0xe3, 0x7c, 0xca, 0xcd, 0x4f, 0xb0, 0x6d,</div><div class="line"><a name="l01162"></a><span class="lineno"> 1162</span>  0x7a, 0xb2, 0x3e, 0xa0, 0x08, 0xb9, 0xa8, 0x2d,</div><div class="line"><a name="l01163"></a><span class="lineno"> 1163</span>  0xc2, 0xf4, 0x99, 0x66, 0xcc, 0xac, 0xd8, 0xb9,</div><div class="line"><a name="l01164"></a><span class="lineno"> 1164</span>  0x72, 0x2a, 0x4a, 0x3e, 0x0f, 0x7b, 0xbf, 0xf4}},</div><div class="line"><a name="l01165"></a><span class="lineno"> 1165</span>  {{0x8c, 0x9c, 0x78, 0x2b, 0x39, 0x61, 0x7e, 0xf7,</div><div class="line"><a name="l01166"></a><span class="lineno"> 1166</span>  0x65, 0x37, 0x66, 0x09, 0x38, 0xb9, 0x6f, 0x70,</div><div class="line"><a name="l01167"></a><span class="lineno"> 1167</span>  0x78, 0x87, 0xff, 0xcf, 0x93, 0xca, 0x85, 0x06,</div><div class="line"><a name="l01168"></a><span class="lineno"> 1168</span>  0x44, 0x84, 0xa7, 0xfe, 0xd3, 0xa4, 0xe3, 0x7e},</div><div class="line"><a name="l01169"></a><span class="lineno"> 1169</span>  {0xa2, 0x56, 0x49, 0x23, 0x54, 0xa5, 0x50, 0xe9,</div><div class="line"><a name="l01170"></a><span class="lineno"> 1170</span>  0x5f, 0xf0, 0x4d, 0xe7, 0xdc, 0x38, 0x32, 0x79,</div><div class="line"><a name="l01171"></a><span class="lineno"> 1171</span>  0x4f, 0x1c, 0xb7, 0xe4, 0xbb, 0xf8, 0xbb, 0x2e,</div><div class="line"><a name="l01172"></a><span class="lineno"> 1172</span>  0x40, 0x41, 0x4b, 0xcc, 0xe3, 0x1e, 0x16, 0x36}},</div><div class="line"><a name="l01173"></a><span class="lineno"> 1173</span>  {{0x0c, 0x1e, 0xd7, 0x09, 0x25, 0x40, 0x97, 0xcb,</div><div class="line"><a name="l01174"></a><span class="lineno"> 1174</span>  0x5c, 0x46, 0xa8, 0xda, 0xef, 0x25, 0xd5, 0xe5,</div><div class="line"><a name="l01175"></a><span class="lineno"> 1175</span>  0x92, 0x4d, 0xcf, 0xa3, 0xc4, 0x5d, 0x35, 0x4a,</div><div class="line"><a name="l01176"></a><span class="lineno"> 1176</span>  0xe4, 0x61, 0x92, 0xf3, 0xbf, 0x0e, 0xcd, 0xbe},</div><div class="line"><a name="l01177"></a><span class="lineno"> 1177</span>  {0xe4, 0xaf, 0x0a, 0xb3, 0x30, 0x8b, 0x9b, 0x48,</div><div class="line"><a name="l01178"></a><span class="lineno"> 1178</span>  0x49, 0x43, 0xc7, 0x64, 0x60, 0x4a, 0x2b, 0x9e,</div><div class="line"><a name="l01179"></a><span class="lineno"> 1179</span>  0x95, 0x5f, 0x56, 0xe8, 0x35, 0xdc, 0xeb, 0xdc,</div><div class="line"><a name="l01180"></a><span class="lineno"> 1180</span>  0xc7, 0xc4, 0xfe, 0x30, 0x40, 0xc7, 0xbf, 0xa4}},</div><div class="line"><a name="l01181"></a><span class="lineno"> 1181</span>  {{0xd4, 0xa0, 0xf5, 0x81, 0x49, 0x6b, 0xb6, 0x8b,</div><div class="line"><a name="l01182"></a><span class="lineno"> 1182</span>  0x0a, 0x69, 0xf9, 0xfe, 0xa8, 0x32, 0xe5, 0xe0,</div><div class="line"><a name="l01183"></a><span class="lineno"> 1183</span>  0xa5, 0xcd, 0x02, 0x53, 0xf9, 0x2c, 0xe3, 0x53,</div><div class="line"><a name="l01184"></a><span class="lineno"> 1184</span>  0x83, 0x36, 0xc6, 0x02, 0xb5, 0xeb, 0x64, 0xb8},</div><div class="line"><a name="l01185"></a><span class="lineno"> 1185</span>  {0x1d, 0x42, 0xb9, 0xf9, 0xe9, 0xe3, 0x93, 0x2c,</div><div class="line"><a name="l01186"></a><span class="lineno"> 1186</span>  0x4c, 0xee, 0x6c, 0x5a, 0x47, 0x9e, 0x62, 0x01,</div><div class="line"><a name="l01187"></a><span class="lineno"> 1187</span>  0x6b, 0x04, 0xfe, 0xa4, 0x30, 0x2b, 0x0d, 0x4f,</div><div class="line"><a name="l01188"></a><span class="lineno"> 1188</span>  0x71, 0x10, 0xd3, 0x55, 0xca, 0xf3, 0x5e, 0x80}},</div><div class="line"><a name="l01189"></a><span class="lineno"> 1189</span>  {{0x77, 0x05, 0xf6, 0x0c, 0x15, 0x9b, 0x45, 0xe7,</div><div class="line"><a name="l01190"></a><span class="lineno"> 1190</span>  0xb9, 0x11, 0xb8, 0xf5, 0xd6, 0xda, 0x73, 0x0c,</div><div class="line"><a name="l01191"></a><span class="lineno"> 1191</span>  0xda, 0x92, 0xea, 0xd0, 0x9d, 0xd0, 0x18, 0x92,</div><div class="line"><a name="l01192"></a><span class="lineno"> 1192</span>  0xce, 0x9a, 0xaa, 0xee, 0x0f, 0xef, 0xde, 0x30},</div><div class="line"><a name="l01193"></a><span class="lineno"> 1193</span>  {0xf1, 0xf1, 0xd6, 0x9b, 0x51, 0xd7, 0x77, 0x62,</div><div class="line"><a name="l01194"></a><span class="lineno"> 1194</span>  0x52, 0x10, 0xb8, 0x7a, 0x84, 0x9d, 0x15, 0x4e,</div><div class="line"><a name="l01195"></a><span class="lineno"> 1195</span>  0x07, 0xdc, 0x1e, 0x75, 0x0d, 0x0c, 0x3b, 0xdb,</div><div class="line"><a name="l01196"></a><span class="lineno"> 1196</span>  0x74, 0x58, 0x62, 0x02, 0x90, 0x54, 0x8b, 0x43}},</div><div class="line"><a name="l01197"></a><span class="lineno"> 1197</span>  {{0xa6, 0xfe, 0x0b, 0x87, 0x80, 0x43, 0x67, 0x25,</div><div class="line"><a name="l01198"></a><span class="lineno"> 1198</span>  0x57, 0x5d, 0xec, 0x40, 0x50, 0x08, 0xd5, 0x5d,</div><div class="line"><a name="l01199"></a><span class="lineno"> 1199</span>  0x43, 0xd7, 0xe0, 0xaa, 0xe0, 0x13, 0xb6, 0xb0,</div><div class="line"><a name="l01200"></a><span class="lineno"> 1200</span>  0xc0, 0xd4, 0xe5, 0x0d, 0x45, 0x83, 0xd6, 0x13},</div><div class="line"><a name="l01201"></a><span class="lineno"> 1201</span>  {0x40, 0x45, 0x0a, 0x92, 0x31, 0xea, 0x8c, 0x60,</div><div class="line"><a name="l01202"></a><span class="lineno"> 1202</span>  0x8c, 0x1f, 0xd8, 0x76, 0x45, 0xb9, 0x29, 0x00,</div><div class="line"><a name="l01203"></a><span class="lineno"> 1203</span>  0x26, 0x32, 0xd8, 0xa6, 0x96, 0x88, 0xe2, 0xc4,</div><div class="line"><a name="l01204"></a><span class="lineno"> 1204</span>  0x8b, 0xdb, 0x7f, 0x17, 0x87, 0xcc, 0xc8, 0xf2}},</div><div class="line"><a name="l01205"></a><span class="lineno"> 1205</span>  {{0xc2, 0x56, 0xe2, 0xb6, 0x1a, 0x81, 0xe7, 0x31,</div><div class="line"><a name="l01206"></a><span class="lineno"> 1206</span>  0x63, 0x2e, 0xbb, 0x0d, 0x2f, 0x81, 0x67, 0xd4,</div><div class="line"><a name="l01207"></a><span class="lineno"> 1207</span>  0x22, 0xe2, 0x38, 0x02, 0x25, 0x97, 0xc7, 0x88,</div><div class="line"><a name="l01208"></a><span class="lineno"> 1208</span>  0x6e, 0xdf, 0xbe, 0x2a, 0xa5, 0x73, 0x63, 0xaa},</div><div class="line"><a name="l01209"></a><span class="lineno"> 1209</span>  {0x50, 0x45, 0xe2, 0xc3, 0xbd, 0x89, 0xfc, 0x57,</div><div class="line"><a name="l01210"></a><span class="lineno"> 1210</span>  0xbd, 0x3c, 0xa3, 0x98, 0x7e, 0x7f, 0x36, 0x38,</div><div class="line"><a name="l01211"></a><span class="lineno"> 1211</span>  0x92, 0x39, 0x1f, 0x0f, 0x81, 0x1a, 0x06, 0x51,</div><div class="line"><a name="l01212"></a><span class="lineno"> 1212</span>  0x1f, 0x8d, 0x6a, 0xff, 0x47, 0x16, 0x06, 0x9c}},</div><div class="line"><a name="l01213"></a><span class="lineno"> 1213</span>  {{0x33, 0x95, 0xa2, 0x6f, 0x27, 0x5f, 0x9c, 0x9c,</div><div class="line"><a name="l01214"></a><span class="lineno"> 1214</span>  0x64, 0x45, 0xcb, 0xd1, 0x3c, 0xee, 0x5e, 0x5f,</div><div class="line"><a name="l01215"></a><span class="lineno"> 1215</span>  0x48, 0xa6, 0xaf, 0xe3, 0x79, 0xcf, 0xb1, 0xe2,</div><div class="line"><a name="l01216"></a><span class="lineno"> 1216</span>  0xbf, 0x55, 0x0e, 0xa2, 0x3b, 0x62, 0xf0, 0xe4},</div><div class="line"><a name="l01217"></a><span class="lineno"> 1217</span>  {0x14, 0xe8, 0x06, 0xe3, 0xbe, 0x7e, 0x67, 0x01,</div><div class="line"><a name="l01218"></a><span class="lineno"> 1218</span>  0xc5, 0x21, 0x67, 0xd8, 0x54, 0xb5, 0x7f, 0xa4,</div><div class="line"><a name="l01219"></a><span class="lineno"> 1219</span>  0xf9, 0x75, 0x70, 0x1c, 0xfd, 0x79, 0xdb, 0x86,</div><div class="line"><a name="l01220"></a><span class="lineno"> 1220</span>  0xad, 0x37, 0x85, 0x83, 0x56, 0x4e, 0xf0, 0xbf}},</div><div class="line"><a name="l01221"></a><span class="lineno"> 1221</span>  {{0xbc, 0xa6, 0xe0, 0x56, 0x4e, 0xef, 0xfa, 0xf5,</div><div class="line"><a name="l01222"></a><span class="lineno"> 1222</span>  0x1d, 0x5d, 0x3f, 0x2a, 0x5b, 0x19, 0xab, 0x51,</div><div class="line"><a name="l01223"></a><span class="lineno"> 1223</span>  0xc5, 0x8b, 0xdd, 0x98, 0x28, 0x35, 0x2f, 0xc3,</div><div class="line"><a name="l01224"></a><span class="lineno"> 1224</span>  0x81, 0x4f, 0x5c, 0xe5, 0x70, 0xb9, 0xeb, 0x62},</div><div class="line"><a name="l01225"></a><span class="lineno"> 1225</span>  {0xc4, 0x6d, 0x26, 0xb0, 0x17, 0x6b, 0xfe, 0x6c,</div><div class="line"><a name="l01226"></a><span class="lineno"> 1226</span>  0x12, 0xf8, 0xe7, 0xc1, 0xf5, 0x2f, 0xfa, 0x91,</div><div class="line"><a name="l01227"></a><span class="lineno"> 1227</span>  0x13, 0x27, 0xbd, 0x73, 0xcc, 0x33, 0x31, 0x1c,</div><div class="line"><a name="l01228"></a><span class="lineno"> 1228</span>  0x39, 0xe3, 0x27, 0x6a, 0x95, 0xcf, 0xc5, 0xfb}},</div><div class="line"><a name="l01229"></a><span class="lineno"> 1229</span>  {{0x30, 0xb2, 0x99, 0x84, 0xf0, 0x18, 0x2a, 0x6e,</div><div class="line"><a name="l01230"></a><span class="lineno"> 1230</span>  0x1e, 0x27, 0xed, 0xa2, 0x29, 0x99, 0x41, 0x56,</div><div class="line"><a name="l01231"></a><span class="lineno"> 1231</span>  0xe8, 0xd4, 0x0d, 0xef, 0x99, 0x9c, 0xf3, 0x58,</div><div class="line"><a name="l01232"></a><span class="lineno"> 1232</span>  0x29, 0x55, 0x1a, 0xc0, 0x68, 0xd6, 0x74, 0xa4},</div><div class="line"><a name="l01233"></a><span class="lineno"> 1233</span>  {0x07, 0x9c, 0xe7, 0xec, 0xf5, 0x36, 0x73, 0x41,</div><div class="line"><a name="l01234"></a><span class="lineno"> 1234</span>  0xa3, 0x1c, 0xe5, 0x93, 0x97, 0x6a, 0xfd, 0xf7,</div><div class="line"><a name="l01235"></a><span class="lineno"> 1235</span>  0x53, 0x18, 0xab, 0xaf, 0xeb, 0x85, 0xbd, 0x92,</div><div class="line"><a name="l01236"></a><span class="lineno"> 1236</span>  0x90, 0xab, 0x3c, 0xbf, 0x30, 0x82, 0xad, 0xf6}},</div><div class="line"><a name="l01237"></a><span class="lineno"> 1237</span>  {{0xc6, 0x87, 0x8a, 0x2a, 0xea, 0xc0, 0xa9, 0xec,</div><div class="line"><a name="l01238"></a><span class="lineno"> 1238</span>  0x6d, 0xd3, 0xdc, 0x32, 0x23, 0xce, 0x62, 0x19,</div><div class="line"><a name="l01239"></a><span class="lineno"> 1239</span>  0xa4, 0x7e, 0xa8, 0xdd, 0x1c, 0x33, 0xae, 0xd3,</div><div class="line"><a name="l01240"></a><span class="lineno"> 1240</span>  0x4f, 0x62, 0x9f, 0x52, 0xe7, 0x65, 0x46, 0xf4},</div><div class="line"><a name="l01241"></a><span class="lineno"> 1241</span>  {0x97, 0x51, 0x27, 0x67, 0x2d, 0xa2, 0x82, 0x87,</div><div class="line"><a name="l01242"></a><span class="lineno"> 1242</span>  0x98, 0xd3, 0xb6, 0x14, 0x7f, 0x51, 0xd3, 0x9a,</div><div class="line"><a name="l01243"></a><span class="lineno"> 1243</span>  0x0b, 0xd0, 0x76, 0x81, 0xb2, 0x4f, 0x58, 0x92,</div><div class="line"><a name="l01244"></a><span class="lineno"> 1244</span>  0xa4, 0x86, 0xa1, 0xa7, 0x09, 0x1d, 0xef, 0x9b}},</div><div class="line"><a name="l01245"></a><span class="lineno"> 1245</span>  {{0xb3, 0x0f, 0x2b, 0x69, 0x0d, 0x06, 0x90, 0x64,</div><div class="line"><a name="l01246"></a><span class="lineno"> 1246</span>  0xbd, 0x43, 0x4c, 0x10, 0xe8, 0x98, 0x1c, 0xa3,</div><div class="line"><a name="l01247"></a><span class="lineno"> 1247</span>  0xe1, 0x68, 0xe9, 0x79, 0x6c, 0x29, 0x51, 0x3f,</div><div class="line"><a name="l01248"></a><span class="lineno"> 1248</span>  0x41, 0xdc, 0xdf, 0x1f, 0xf3, 0x60, 0xbe, 0x33},</div><div class="line"><a name="l01249"></a><span class="lineno"> 1249</span>  {0xa1, 0x5f, 0xf7, 0x1d, 0xb4, 0x3e, 0x9b, 0x3c,</div><div class="line"><a name="l01250"></a><span class="lineno"> 1250</span>  0xe7, 0xbd, 0xb6, 0x06, 0xd5, 0x60, 0x06, 0x6d,</div><div class="line"><a name="l01251"></a><span class="lineno"> 1251</span>  0x50, 0xd2, 0xf4, 0x1a, 0x31, 0x08, 0xf2, 0xea,</div><div class="line"><a name="l01252"></a><span class="lineno"> 1252</span>  0x8e, 0xef, 0x5f, 0x7d, 0xb6, 0xd0, 0xc0, 0x27}},</div><div class="line"><a name="l01253"></a><span class="lineno"> 1253</span>  {{0x62, 0x9a, 0xd9, 0xbb, 0x38, 0x36, 0xce, 0xf7,</div><div class="line"><a name="l01254"></a><span class="lineno"> 1254</span>  0x5d, 0x2f, 0x13, 0xec, 0xc8, 0x2d, 0x02, 0x8a,</div><div class="line"><a name="l01255"></a><span class="lineno"> 1255</span>  0x2e, 0x72, 0xf0, 0xe5, 0x15, 0x9d, 0x72, 0xae,</div><div class="line"><a name="l01256"></a><span class="lineno"> 1256</span>  0xfc, 0xb3, 0x4f, 0x02, 0xea, 0xe1, 0x09, 0xfe},</div><div class="line"><a name="l01257"></a><span class="lineno"> 1257</span>  {0x00, 0x00, 0x00, 0x00, 0xfa, 0x0a, 0x3d, 0xbc,</div><div class="line"><a name="l01258"></a><span class="lineno"> 1258</span>  0xad, 0x16, 0x0c, 0xb6, 0xe7, 0x7c, 0x8b, 0x39,</div><div class="line"><a name="l01259"></a><span class="lineno"> 1259</span>  0x9a, 0x43, 0xbb, 0xe3, 0xc2, 0x55, 0x15, 0x14,</div><div class="line"><a name="l01260"></a><span class="lineno"> 1260</span>  0x75, 0xac, 0x90, 0x9b, 0x7f, 0x9a, 0x92, 0x00}},</div><div class="line"><a name="l01261"></a><span class="lineno"> 1261</span>  {{0x8b, 0xac, 0x70, 0x86, 0x29, 0x8f, 0x00, 0x23,</div><div class="line"><a name="l01262"></a><span class="lineno"> 1262</span>  0x7b, 0x45, 0x30, 0xaa, 0xb8, 0x4c, 0xc7, 0x8d,</div><div class="line"><a name="l01263"></a><span class="lineno"> 1263</span>  0x4e, 0x47, 0x85, 0xc6, 0x19, 0xe3, 0x96, 0xc2,</div><div class="line"><a name="l01264"></a><span class="lineno"> 1264</span>  0x9a, 0xa0, 0x12, 0xed, 0x6f, 0xd7, 0x76, 0x16},</div><div class="line"><a name="l01265"></a><span class="lineno"> 1265</span>  {0x45, 0xaf, 0x7e, 0x33, 0xc7, 0x7f, 0x10, 0x6c,</div><div class="line"><a name="l01266"></a><span class="lineno"> 1266</span>  0x7c, 0x9f, 0x29, 0xc1, 0xa8, 0x7e, 0x15, 0x84,</div><div class="line"><a name="l01267"></a><span class="lineno"> 1267</span>  0xe7, 0x7d, 0xc0, 0x6d, 0xab, 0x71, 0x5d, 0xd0,</div><div class="line"><a name="l01268"></a><span class="lineno"> 1268</span>  0x6b, 0x9f, 0x97, 0xab, 0xcb, 0x51, 0x0c, 0x9f}},</div><div class="line"><a name="l01269"></a><span class="lineno"> 1269</span>  {{0x9e, 0xc3, 0x92, 0xb4, 0x04, 0x9f, 0xc8, 0xbb,</div><div class="line"><a name="l01270"></a><span class="lineno"> 1270</span>  0xdd, 0x9e, 0xc6, 0x05, 0xfd, 0x65, 0xec, 0x94,</div><div class="line"><a name="l01271"></a><span class="lineno"> 1271</span>  0x7f, 0x2c, 0x16, 0xc4, 0x40, 0xac, 0x63, 0x7b,</div><div class="line"><a name="l01272"></a><span class="lineno"> 1272</span>  0x7d, 0xb8, 0x0c, 0xe4, 0x5b, 0xe3, 0xa7, 0x0e},</div><div class="line"><a name="l01273"></a><span class="lineno"> 1273</span>  {0x43, 0xf4, 0x44, 0xe8, 0xcc, 0xc8, 0xd4, 0x54,</div><div class="line"><a name="l01274"></a><span class="lineno"> 1274</span>  0x33, 0x37, 0x50, 0xf2, 0x87, 0x42, 0x2e, 0x00,</div><div class="line"><a name="l01275"></a><span class="lineno"> 1275</span>  0x49, 0x60, 0x62, 0x02, 0xfd, 0x1a, 0x7c, 0xdb,</div><div class="line"><a name="l01276"></a><span class="lineno"> 1276</span>  0x29, 0x6c, 0x6d, 0x54, 0x53, 0x08, 0xd1, 0xc8}},</div><div class="line"><a name="l01277"></a><span class="lineno"> 1277</span>  {{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01278"></a><span class="lineno"> 1278</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01279"></a><span class="lineno"> 1279</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01280"></a><span class="lineno"> 1280</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},</div><div class="line"><a name="l01281"></a><span class="lineno"> 1281</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01282"></a><span class="lineno"> 1282</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01283"></a><span class="lineno"> 1283</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01284"></a><span class="lineno"> 1284</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}},</div><div class="line"><a name="l01285"></a><span class="lineno"> 1285</span>  {{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01286"></a><span class="lineno"> 1286</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01287"></a><span class="lineno"> 1287</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01288"></a><span class="lineno"> 1288</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},</div><div class="line"><a name="l01289"></a><span class="lineno"> 1289</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01290"></a><span class="lineno"> 1290</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01291"></a><span class="lineno"> 1291</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01292"></a><span class="lineno"> 1292</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01}},</div><div class="line"><a name="l01293"></a><span class="lineno"> 1293</span>  {{0x27, 0x59, 0xc7, 0x35, 0x60, 0x71, 0xa6, 0xf1,</div><div class="line"><a name="l01294"></a><span class="lineno"> 1294</span>  0x79, 0xa5, 0xfd, 0x79, 0x16, 0xf3, 0x41, 0xf0,</div><div class="line"><a name="l01295"></a><span class="lineno"> 1295</span>  0x57, 0xb4, 0x02, 0x97, 0x32, 0xe7, 0xde, 0x59,</div><div class="line"><a name="l01296"></a><span class="lineno"> 1296</span>  0xe2, 0x2d, 0x9b, 0x11, 0xea, 0x2c, 0x35, 0x92},</div><div class="line"><a name="l01297"></a><span class="lineno"> 1297</span>  {0x27, 0x59, 0xc7, 0x35, 0x60, 0x71, 0xa6, 0xf1,</div><div class="line"><a name="l01298"></a><span class="lineno"> 1298</span>  0x79, 0xa5, 0xfd, 0x79, 0x16, 0xf3, 0x41, 0xf0,</div><div class="line"><a name="l01299"></a><span class="lineno"> 1299</span>  0x57, 0xb4, 0x02, 0x97, 0x32, 0xe7, 0xde, 0x59,</div><div class="line"><a name="l01300"></a><span class="lineno"> 1300</span>  0xe2, 0x2d, 0x9b, 0x11, 0xea, 0x2c, 0x35, 0x92}},</div><div class="line"><a name="l01301"></a><span class="lineno"> 1301</span>  {{0x28, 0x56, 0xac, 0x0e, 0x4f, 0x98, 0x09, 0xf0,</div><div class="line"><a name="l01302"></a><span class="lineno"> 1302</span>  0x49, 0xfa, 0x7f, 0x84, 0xac, 0x7e, 0x50, 0x5b,</div><div class="line"><a name="l01303"></a><span class="lineno"> 1303</span>  0x17, 0x43, 0x14, 0x89, 0x9c, 0x53, 0xa8, 0x94,</div><div class="line"><a name="l01304"></a><span class="lineno"> 1304</span>  0x30, 0xf2, 0x11, 0x4d, 0x92, 0x14, 0x27, 0xe8},</div><div class="line"><a name="l01305"></a><span class="lineno"> 1305</span>  {0x39, 0x7a, 0x84, 0x56, 0x79, 0x9d, 0xec, 0x26,</div><div class="line"><a name="l01306"></a><span class="lineno"> 1306</span>  0x2c, 0x53, 0xc1, 0x94, 0xc9, 0x8d, 0x9e, 0x9d,</div><div class="line"><a name="l01307"></a><span class="lineno"> 1307</span>  0x32, 0x1f, 0xdd, 0x84, 0x04, 0xe8, 0xe2, 0x0a,</div><div class="line"><a name="l01308"></a><span class="lineno"> 1308</span>  0x6b, 0xbe, 0xbb, 0x42, 0x40, 0x67, 0x30, 0x6c}},</div><div class="line"><a name="l01309"></a><span class="lineno"> 1309</span>  {{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01310"></a><span class="lineno"> 1310</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l01311"></a><span class="lineno"> 1311</span>  0x45, 0x51, 0x23, 0x19, 0x50, 0xb7, 0x5f, 0xc4,</div><div class="line"><a name="l01312"></a><span class="lineno"> 1312</span>  0x40, 0x2d, 0xa1, 0x73, 0x2f, 0xc9, 0xbe, 0xbd},</div><div class="line"><a name="l01313"></a><span class="lineno"> 1313</span>  {0x27, 0x59, 0xc7, 0x35, 0x60, 0x71, 0xa6, 0xf1,</div><div class="line"><a name="l01314"></a><span class="lineno"> 1314</span>  0x79, 0xa5, 0xfd, 0x79, 0x16, 0xf3, 0x41, 0xf0,</div><div class="line"><a name="l01315"></a><span class="lineno"> 1315</span>  0x57, 0xb4, 0x02, 0x97, 0x32, 0xe7, 0xde, 0x59,</div><div class="line"><a name="l01316"></a><span class="lineno"> 1316</span>  0xe2, 0x2d, 0x9b, 0x11, 0xea, 0x2c, 0x35, 0x92}},</div><div class="line"><a name="l01317"></a><span class="lineno"> 1317</span>  {{0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l01318"></a><span class="lineno"> 1318</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe,</div><div class="line"><a name="l01319"></a><span class="lineno"> 1319</span>  0xba, 0xae, 0xdc, 0xe6, 0xaf, 0x48, 0xa0, 0x3b,</div><div class="line"><a name="l01320"></a><span class="lineno"> 1320</span>  0xbf, 0xd2, 0x5e, 0x8c, 0xd0, 0x36, 0x41, 0x40},</div><div class="line"><a name="l01321"></a><span class="lineno"> 1321</span>  {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01322"></a><span class="lineno"> 1322</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01323"></a><span class="lineno"> 1323</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l01324"></a><span class="lineno"> 1324</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01}},</div><div class="line"><a name="l01325"></a><span class="lineno"> 1325</span>  {{0x1c, 0xc4, 0xf7, 0xda, 0x0f, 0x65, 0xca, 0x39,</div><div class="line"><a name="l01326"></a><span class="lineno"> 1326</span>  0x70, 0x52, 0x92, 0x8e, 0xc3, 0xc8, 0x15, 0xea,</div><div class="line"><a name="l01327"></a><span class="lineno"> 1327</span>  0x7f, 0x10, 0x9e, 0x77, 0x4b, 0x6e, 0x2d, 0xdf,</div><div class="line"><a name="l01328"></a><span class="lineno"> 1328</span>  0xe8, 0x30, 0x9d, 0xda, 0xe8, 0x9a, 0x65, 0xae},</div><div class="line"><a name="l01329"></a><span class="lineno"> 1329</span>  {0x02, 0xb0, 0x16, 0xb1, 0x1d, 0xc8, 0x57, 0x7b,</div><div class="line"><a name="l01330"></a><span class="lineno"> 1330</span>  0xa2, 0x3a, 0xa2, 0xa3, 0x38, 0x5c, 0x8f, 0xeb,</div><div class="line"><a name="l01331"></a><span class="lineno"> 1331</span>  0x66, 0x37, 0x91, 0xa8, 0x5f, 0xef, 0x04, 0xf6,</div><div class="line"><a name="l01332"></a><span class="lineno"> 1332</span>  0x59, 0x75, 0xe1, 0xee, 0x92, 0xf6, 0x0e, 0x30}},</div><div class="line"><a name="l01333"></a><span class="lineno"> 1333</span>  {{0x8d, 0x76, 0x14, 0xa4, 0x14, 0x06, 0x9f, 0x9a,</div><div class="line"><a name="l01334"></a><span class="lineno"> 1334</span>  0xdf, 0x4a, 0x85, 0xa7, 0x6b, 0xbf, 0x29, 0x6f,</div><div class="line"><a name="l01335"></a><span class="lineno"> 1335</span>  0xbc, 0x34, 0x87, 0x5d, 0xeb, 0xbb, 0x2e, 0xa9,</div><div class="line"><a name="l01336"></a><span class="lineno"> 1336</span>  0xc9, 0x1f, 0x58, 0xd6, 0x9a, 0x82, 0xa0, 0x56},</div><div class="line"><a name="l01337"></a><span class="lineno"> 1337</span>  {0xd4, 0xb9, 0xdb, 0x88, 0x1d, 0x04, 0xe9, 0x93,</div><div class="line"><a name="l01338"></a><span class="lineno"> 1338</span>  0x8d, 0x3f, 0x20, 0xd5, 0x86, 0xa8, 0x83, 0x07,</div><div class="line"><a name="l01339"></a><span class="lineno"> 1339</span>  0xdb, 0x09, 0xd8, 0x22, 0x1f, 0x7f, 0xf1, 0x71,</div><div class="line"><a name="l01340"></a><span class="lineno"> 1340</span>  0xc8, 0xe7, 0x5d, 0x47, 0xaf, 0x8b, 0x72, 0xe9}},</div><div class="line"><a name="l01341"></a><span class="lineno"> 1341</span>  {{0x83, 0xb9, 0x39, 0xb2, 0xa4, 0xdf, 0x46, 0x87,</div><div class="line"><a name="l01342"></a><span class="lineno"> 1342</span>  0xc2, 0xb8, 0xf1, 0xe6, 0x4c, 0xd1, 0xe2, 0xa9,</div><div class="line"><a name="l01343"></a><span class="lineno"> 1343</span>  0xe4, 0x70, 0x30, 0x34, 0xbc, 0x52, 0x7c, 0x55,</div><div class="line"><a name="l01344"></a><span class="lineno"> 1344</span>  0xa6, 0xec, 0x80, 0xa4, 0xe5, 0xd2, 0xdc, 0x73},</div><div class="line"><a name="l01345"></a><span class="lineno"> 1345</span>  {0x08, 0xf1, 0x03, 0xcf, 0x16, 0x73, 0xe8, 0x7d,</div><div class="line"><a name="l01346"></a><span class="lineno"> 1346</span>  0xb6, 0x7e, 0x9b, 0xc0, 0xb4, 0xc2, 0xa5, 0x86,</div><div class="line"><a name="l01347"></a><span class="lineno"> 1347</span>  0x02, 0x77, 0xd5, 0x27, 0x86, 0xa5, 0x15, 0xfb,</div><div class="line"><a name="l01348"></a><span class="lineno"> 1348</span>  0xae, 0x9b, 0x8c, 0xa9, 0xf9, 0xf8, 0xa8, 0x4a}},</div><div class="line"><a name="l01349"></a><span class="lineno"> 1349</span>  {{0x8b, 0x00, 0x49, 0xdb, 0xfa, 0xf0, 0x1b, 0xa2,</div><div class="line"><a name="l01350"></a><span class="lineno"> 1350</span>  0xed, 0x8a, 0x9a, 0x7a, 0x36, 0x78, 0x4a, 0xc7,</div><div class="line"><a name="l01351"></a><span class="lineno"> 1351</span>  0xf7, 0xad, 0x39, 0xd0, 0x6c, 0x65, 0x7a, 0x41,</div><div class="line"><a name="l01352"></a><span class="lineno"> 1352</span>  0xce, 0xd6, 0xd6, 0x4c, 0x20, 0x21, 0x6b, 0xc7},</div><div class="line"><a name="l01353"></a><span class="lineno"> 1353</span>  {0xc6, 0xca, 0x78, 0x1d, 0x32, 0x6c, 0x6c, 0x06,</div><div class="line"><a name="l01354"></a><span class="lineno"> 1354</span>  0x91, 0xf2, 0x1a, 0xe8, 0x43, 0x16, 0xea, 0x04,</div><div class="line"><a name="l01355"></a><span class="lineno"> 1355</span>  0x3c, 0x1f, 0x07, 0x85, 0xf7, 0x09, 0x22, 0x08,</div><div class="line"><a name="l01356"></a><span class="lineno"> 1356</span>  0xba, 0x13, 0xfd, 0x78, 0x1e, 0x3f, 0x6f, 0x62}},</div><div class="line"><a name="l01357"></a><span class="lineno"> 1357</span>  {{0x25, 0x9b, 0x7c, 0xb0, 0xac, 0x72, 0x6f, 0xb2,</div><div class="line"><a name="l01358"></a><span class="lineno"> 1358</span>  0xe3, 0x53, 0x84, 0x7a, 0x1a, 0x9a, 0x98, 0x9b,</div><div class="line"><a name="l01359"></a><span class="lineno"> 1359</span>  0x44, 0xd3, 0x59, 0xd0, 0x8e, 0x57, 0x41, 0x40,</div><div class="line"><a name="l01360"></a><span class="lineno"> 1360</span>  0x78, 0xa7, 0x30, 0x2f, 0x4c, 0x9c, 0xb9, 0x68},</div><div class="line"><a name="l01361"></a><span class="lineno"> 1361</span>  {0xb7, 0x75, 0x03, 0x63, 0x61, 0xc2, 0x48, 0x6e,</div><div class="line"><a name="l01362"></a><span class="lineno"> 1362</span>  0x12, 0x3d, 0xbf, 0x4b, 0x27, 0xdf, 0xb1, 0x7a,</div><div class="line"><a name="l01363"></a><span class="lineno"> 1363</span>  0xff, 0x4e, 0x31, 0x07, 0x83, 0xf4, 0x62, 0x5b,</div><div class="line"><a name="l01364"></a><span class="lineno"> 1364</span>  0x19, 0xa5, 0xac, 0xa0, 0x32, 0x58, 0x0d, 0xa7}},</div><div class="line"><a name="l01365"></a><span class="lineno"> 1365</span>  {{0x43, 0x4f, 0x10, 0xa4, 0xca, 0xdb, 0x38, 0x67,</div><div class="line"><a name="l01366"></a><span class="lineno"> 1366</span>  0xfa, 0xae, 0x96, 0xb5, 0x6d, 0x97, 0xff, 0x1f,</div><div class="line"><a name="l01367"></a><span class="lineno"> 1367</span>  0xb6, 0x83, 0x43, 0xd3, 0xa0, 0x2d, 0x70, 0x7a,</div><div class="line"><a name="l01368"></a><span class="lineno"> 1368</span>  0x64, 0x05, 0x4c, 0xa7, 0xc1, 0xa5, 0x21, 0x51},</div><div class="line"><a name="l01369"></a><span class="lineno"> 1369</span>  {0xe4, 0xf1, 0x23, 0x84, 0xe1, 0xb5, 0x9d, 0xf2,</div><div class="line"><a name="l01370"></a><span class="lineno"> 1370</span>  0xb8, 0x73, 0x8b, 0x45, 0x2b, 0x35, 0x46, 0x38,</div><div class="line"><a name="l01371"></a><span class="lineno"> 1371</span>  0x10, 0x2b, 0x50, 0xf8, 0x8b, 0x35, 0xcd, 0x34,</div><div class="line"><a name="l01372"></a><span class="lineno"> 1372</span>  0xc8, 0x0e, 0xf6, 0xdb, 0x09, 0x35, 0xf0, 0xda}}</div><div class="line"><a name="l01373"></a><span class="lineno"> 1373</span>  };</div><div class="line"><a name="l01374"></a><span class="lineno"> 1374</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&one, 1);</div><div class="line"><a name="l01375"></a><span class="lineno"> 1375</span>  <span class="keywordflow">for</span> (i = 0; i < 32; i++) {</div><div class="line"><a name="l01376"></a><span class="lineno"> 1376</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(&x, chal[i][0], &overflow);</div><div class="line"><a name="l01377"></a><span class="lineno"> 1377</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!overflow);</div><div class="line"><a name="l01378"></a><span class="lineno"> 1378</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(&y, chal[i][1], &overflow);</div><div class="line"><a name="l01379"></a><span class="lineno"> 1379</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!overflow);</div><div class="line"><a name="l01380"></a><span class="lineno"> 1380</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(&r1, res[i][0], &overflow);</div><div class="line"><a name="l01381"></a><span class="lineno"> 1381</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!overflow);</div><div class="line"><a name="l01382"></a><span class="lineno"> 1382</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(&r2, res[i][1], &overflow);</div><div class="line"><a name="l01383"></a><span class="lineno"> 1383</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!overflow);</div><div class="line"><a name="l01384"></a><span class="lineno"> 1384</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&z, &x, &y);</div><div class="line"><a name="l01385"></a><span class="lineno"> 1385</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar__4x64__impl_8h.html#a13e982915006b138de5e2b3ab68238cb">secp256k1_scalar_check_overflow</a>(&z));</div><div class="line"><a name="l01386"></a><span class="lineno"> 1386</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r1, &z));</div><div class="line"><a name="l01387"></a><span class="lineno"> 1387</span>  <span class="keywordflow">if</span> (!<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&y)) {</div><div class="line"><a name="l01388"></a><span class="lineno"> 1388</span>  <a class="code" href="scalar_8h.html#ac048cded7c9731249ada44d489a258d5">secp256k1_scalar_inverse</a>(&zz, &y);</div><div class="line"><a name="l01389"></a><span class="lineno"> 1389</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar__4x64__impl_8h.html#a13e982915006b138de5e2b3ab68238cb">secp256k1_scalar_check_overflow</a>(&zz));</div><div class="line"><a name="l01390"></a><span class="lineno"> 1390</span> <span class="preprocessor">#if defined(USE_SCALAR_INV_NUM)</span></div><div class="line"><a name="l01391"></a><span class="lineno"> 1391</span>  <a class="code" href="scalar_8h.html#a58e84d0cabe81139df5c71759f833855">secp256k1_scalar_inverse_var</a>(&zzv, &y);</div><div class="line"><a name="l01392"></a><span class="lineno"> 1392</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&zzv, &zz));</div><div class="line"><a name="l01393"></a><span class="lineno"> 1393</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l01394"></a><span class="lineno"> 1394</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&z, &z, &zz);</div><div class="line"><a name="l01395"></a><span class="lineno"> 1395</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar__4x64__impl_8h.html#a13e982915006b138de5e2b3ab68238cb">secp256k1_scalar_check_overflow</a>(&z));</div><div class="line"><a name="l01396"></a><span class="lineno"> 1396</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&x, &z));</div><div class="line"><a name="l01397"></a><span class="lineno"> 1397</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&zz, &zz, &y);</div><div class="line"><a name="l01398"></a><span class="lineno"> 1398</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar__4x64__impl_8h.html#a13e982915006b138de5e2b3ab68238cb">secp256k1_scalar_check_overflow</a>(&zz));</div><div class="line"><a name="l01399"></a><span class="lineno"> 1399</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&one, &zz));</div><div class="line"><a name="l01400"></a><span class="lineno"> 1400</span>  }</div><div class="line"><a name="l01401"></a><span class="lineno"> 1401</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&z, &x, &x);</div><div class="line"><a name="l01402"></a><span class="lineno"> 1402</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar__4x64__impl_8h.html#a13e982915006b138de5e2b3ab68238cb">secp256k1_scalar_check_overflow</a>(&z));</div><div class="line"><a name="l01403"></a><span class="lineno"> 1403</span>  <a class="code" href="scalar_8h.html#a2e65618baa17c59e89149a9f7e632f69">secp256k1_scalar_sqr</a>(&zz, &x);</div><div class="line"><a name="l01404"></a><span class="lineno"> 1404</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar__4x64__impl_8h.html#a13e982915006b138de5e2b3ab68238cb">secp256k1_scalar_check_overflow</a>(&zz));</div><div class="line"><a name="l01405"></a><span class="lineno"> 1405</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&zz, &z));</div><div class="line"><a name="l01406"></a><span class="lineno"> 1406</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&r2, &zz));</div><div class="line"><a name="l01407"></a><span class="lineno"> 1407</span>  }</div><div class="line"><a name="l01408"></a><span class="lineno"> 1408</span>  }</div><div class="line"><a name="l01409"></a><span class="lineno"> 1409</span> }</div><div class="line"><a name="l01410"></a><span class="lineno"> 1410</span> </div><div class="line"><a name="l01411"></a><span class="lineno"> 1411</span> <span class="comment">/***** FIELD TESTS *****/</span></div><div class="line"><a name="l01412"></a><span class="lineno"> 1412</span> </div><div class="line"><a name="l01413"></a><span class="lineno"><a class="line" href="tests_8c.html#ad49b2c3065041ff986c8a4d71a329c79"> 1413</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ad49b2c3065041ff986c8a4d71a329c79">random_fe</a>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *x) {</div><div class="line"><a name="l01414"></a><span class="lineno"> 1414</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> bin[32];</div><div class="line"><a name="l01415"></a><span class="lineno"> 1415</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l01416"></a><span class="lineno"> 1416</span>  <a class="code" href="testrand_8h.html#ac6eab6443f98bba198f7df69e658173c">secp256k1_rand256</a>(bin);</div><div class="line"><a name="l01417"></a><span class="lineno"> 1417</span>  <span class="keywordflow">if</span> (<a class="code" href="field_8h.html#a5c86a65052e3b135919c00fe2233a43d">secp256k1_fe_set_b32</a>(x, bin)) {</div><div class="line"><a name="l01418"></a><span class="lineno"> 1418</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l01419"></a><span class="lineno"> 1419</span>  }</div><div class="line"><a name="l01420"></a><span class="lineno"> 1420</span>  } <span class="keywordflow">while</span>(1);</div><div class="line"><a name="l01421"></a><span class="lineno"> 1421</span> }</div><div class="line"><a name="l01422"></a><span class="lineno"> 1422</span> </div><div class="line"><a name="l01423"></a><span class="lineno"><a class="line" href="tests_8c.html#a786a875eccc29ad918255883d89f00a1"> 1423</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a786a875eccc29ad918255883d89f00a1">random_fe_test</a>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *x) {</div><div class="line"><a name="l01424"></a><span class="lineno"> 1424</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> bin[32];</div><div class="line"><a name="l01425"></a><span class="lineno"> 1425</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l01426"></a><span class="lineno"> 1426</span>  <a class="code" href="testrand_8h.html#ac7dd7cc19d5d0ae9b50791656b57af7b">secp256k1_rand256_test</a>(bin);</div><div class="line"><a name="l01427"></a><span class="lineno"> 1427</span>  <span class="keywordflow">if</span> (<a class="code" href="field_8h.html#a5c86a65052e3b135919c00fe2233a43d">secp256k1_fe_set_b32</a>(x, bin)) {</div><div class="line"><a name="l01428"></a><span class="lineno"> 1428</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l01429"></a><span class="lineno"> 1429</span>  }</div><div class="line"><a name="l01430"></a><span class="lineno"> 1430</span>  } <span class="keywordflow">while</span>(1);</div><div class="line"><a name="l01431"></a><span class="lineno"> 1431</span> }</div><div class="line"><a name="l01432"></a><span class="lineno"> 1432</span> </div><div class="line"><a name="l01433"></a><span class="lineno"><a class="line" href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a"> 1433</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a">random_fe_non_zero</a>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *nz) {</div><div class="line"><a name="l01434"></a><span class="lineno"> 1434</span>  <span class="keywordtype">int</span> tries = 10;</div><div class="line"><a name="l01435"></a><span class="lineno"> 1435</span>  <span class="keywordflow">while</span> (--tries >= 0) {</div><div class="line"><a name="l01436"></a><span class="lineno"> 1436</span>  <a class="code" href="tests_8c.html#ad49b2c3065041ff986c8a4d71a329c79">random_fe</a>(nz);</div><div class="line"><a name="l01437"></a><span class="lineno"> 1437</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(nz);</div><div class="line"><a name="l01438"></a><span class="lineno"> 1438</span>  <span class="keywordflow">if</span> (!<a class="code" href="field_8h.html#a619ec4805df6cc54d70e6682ceebd098">secp256k1_fe_is_zero</a>(nz)) {</div><div class="line"><a name="l01439"></a><span class="lineno"> 1439</span>  <span class="keywordflow">break</span>;</div><div class="line"><a name="l01440"></a><span class="lineno"> 1440</span>  }</div><div class="line"><a name="l01441"></a><span class="lineno"> 1441</span>  }</div><div class="line"><a name="l01442"></a><span class="lineno"> 1442</span>  <span class="comment">/* Infinitesimal probability of spurious failure here */</span></div><div class="line"><a name="l01443"></a><span class="lineno"> 1443</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(tries >= 0);</div><div class="line"><a name="l01444"></a><span class="lineno"> 1444</span> }</div><div class="line"><a name="l01445"></a><span class="lineno"> 1445</span> </div><div class="line"><a name="l01446"></a><span class="lineno"><a class="line" href="tests_8c.html#acb56afe8a17a3048470c0c299150a36a"> 1446</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#acb56afe8a17a3048470c0c299150a36a">random_fe_non_square</a>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *ns) {</div><div class="line"><a name="l01447"></a><span class="lineno"> 1447</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> r;</div><div class="line"><a name="l01448"></a><span class="lineno"> 1448</span>  <a class="code" href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a">random_fe_non_zero</a>(ns);</div><div class="line"><a name="l01449"></a><span class="lineno"> 1449</span>  <span class="keywordflow">if</span> (<a class="code" href="field_8h.html#adeed9551ce946187f98c5e3d789e9575">secp256k1_fe_sqrt_var</a>(&r, ns)) {</div><div class="line"><a name="l01450"></a><span class="lineno"> 1450</span>  <a class="code" href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a>(ns, ns, 1);</div><div class="line"><a name="l01451"></a><span class="lineno"> 1451</span>  }</div><div class="line"><a name="l01452"></a><span class="lineno"> 1452</span> }</div><div class="line"><a name="l01453"></a><span class="lineno"> 1453</span> </div><div class="line"><a name="l01454"></a><span class="lineno"><a class="line" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855"> 1454</a></span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *a, <span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *b) {</div><div class="line"><a name="l01455"></a><span class="lineno"> 1455</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> an = *a;</div><div class="line"><a name="l01456"></a><span class="lineno"> 1456</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> bn = *b;</div><div class="line"><a name="l01457"></a><span class="lineno"> 1457</span>  <a class="code" href="field_8h.html#a0aaec7df2f708a451a8e1f41a943d8b1">secp256k1_fe_normalize_weak</a>(&an);</div><div class="line"><a name="l01458"></a><span class="lineno"> 1458</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&bn);</div><div class="line"><a name="l01459"></a><span class="lineno"> 1459</span>  <span class="keywordflow">return</span> <a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&an, &bn);</div><div class="line"><a name="l01460"></a><span class="lineno"> 1460</span> }</div><div class="line"><a name="l01461"></a><span class="lineno"> 1461</span> </div><div class="line"><a name="l01462"></a><span class="lineno"><a class="line" href="tests_8c.html#a9fe4a53634c0f9e17b1f74e55ea8de99"> 1462</a></span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a9fe4a53634c0f9e17b1f74e55ea8de99">check_fe_inverse</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *a, <span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *ai) {</div><div class="line"><a name="l01463"></a><span class="lineno"> 1463</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> x;</div><div class="line"><a name="l01464"></a><span class="lineno"> 1464</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> one = <a class="code" href="field__10x26_8h.html#a8c00ba3d97ea0d9b0d461463e890de15">SECP256K1_FE_CONST</a>(0, 0, 0, 0, 0, 0, 0, 1);</div><div class="line"><a name="l01465"></a><span class="lineno"> 1465</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&x, a, ai);</div><div class="line"><a name="l01466"></a><span class="lineno"> 1466</span>  <span class="keywordflow">return</span> <a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&x, &one);</div><div class="line"><a name="l01467"></a><span class="lineno"> 1467</span> }</div><div class="line"><a name="l01468"></a><span class="lineno"> 1468</span> </div><div class="line"><a name="l01469"></a><span class="lineno"><a class="line" href="tests_8c.html#a3fb0153a38fe54783b46ab4bc39d9912"> 1469</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a3fb0153a38fe54783b46ab4bc39d9912">run_field_convert</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01470"></a><span class="lineno"> 1470</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> b32[32] = {</div><div class="line"><a name="l01471"></a><span class="lineno"> 1471</span>  0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,</div><div class="line"><a name="l01472"></a><span class="lineno"> 1472</span>  0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,</div><div class="line"><a name="l01473"></a><span class="lineno"> 1473</span>  0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29,</div><div class="line"><a name="l01474"></a><span class="lineno"> 1474</span>  0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x40</div><div class="line"><a name="l01475"></a><span class="lineno"> 1475</span>  };</div><div class="line"><a name="l01476"></a><span class="lineno"> 1476</span>  <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="structsecp256k1__fe__storage.html">secp256k1_fe_storage</a> fes = <a class="code" href="field__10x26_8h.html#ae6927483c41044bd04e5f8efb42f53ba">SECP256K1_FE_STORAGE_CONST</a>(</div><div class="line"><a name="l01477"></a><span class="lineno"> 1477</span>  0x00010203UL, 0x04050607UL, 0x11121314UL, 0x15161718UL,</div><div class="line"><a name="l01478"></a><span class="lineno"> 1478</span>  0x22232425UL, 0x26272829UL, 0x33343536UL, 0x37383940UL</div><div class="line"><a name="l01479"></a><span class="lineno"> 1479</span>  );</div><div class="line"><a name="l01480"></a><span class="lineno"> 1480</span>  <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> fe = <a class="code" href="field__10x26_8h.html#a8c00ba3d97ea0d9b0d461463e890de15">SECP256K1_FE_CONST</a>(</div><div class="line"><a name="l01481"></a><span class="lineno"> 1481</span>  0x00010203UL, 0x04050607UL, 0x11121314UL, 0x15161718UL,</div><div class="line"><a name="l01482"></a><span class="lineno"> 1482</span>  0x22232425UL, 0x26272829UL, 0x33343536UL, 0x37383940UL</div><div class="line"><a name="l01483"></a><span class="lineno"> 1483</span>  );</div><div class="line"><a name="l01484"></a><span class="lineno"> 1484</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> fe2;</div><div class="line"><a name="l01485"></a><span class="lineno"> 1485</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> b322[32];</div><div class="line"><a name="l01486"></a><span class="lineno"> 1486</span>  <a class="code" href="structsecp256k1__fe__storage.html">secp256k1_fe_storage</a> fes2;</div><div class="line"><a name="l01487"></a><span class="lineno"> 1487</span>  <span class="comment">/* Check conversions to fe. */</span></div><div class="line"><a name="l01488"></a><span class="lineno"> 1488</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a5c86a65052e3b135919c00fe2233a43d">secp256k1_fe_set_b32</a>(&fe2, b32));</div><div class="line"><a name="l01489"></a><span class="lineno"> 1489</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&fe, &fe2));</div><div class="line"><a name="l01490"></a><span class="lineno"> 1490</span>  <a class="code" href="field_8h.html#a644783b01d20445b5b2f3c9c2abfbae3">secp256k1_fe_from_storage</a>(&fe2, &fes);</div><div class="line"><a name="l01491"></a><span class="lineno"> 1491</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&fe, &fe2));</div><div class="line"><a name="l01492"></a><span class="lineno"> 1492</span>  <span class="comment">/* Check conversion from fe. */</span></div><div class="line"><a name="l01493"></a><span class="lineno"> 1493</span>  <a class="code" href="field_8h.html#abb1017649be14b9ac1823be3c573e542">secp256k1_fe_get_b32</a>(b322, &fe);</div><div class="line"><a name="l01494"></a><span class="lineno"> 1494</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(b322, b32, 32) == 0);</div><div class="line"><a name="l01495"></a><span class="lineno"> 1495</span>  <a class="code" href="field_8h.html#ab2813c5c17c63e222d5a15a60f239b12">secp256k1_fe_to_storage</a>(&fes2, &fe);</div><div class="line"><a name="l01496"></a><span class="lineno"> 1496</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&fes2, &fes, <span class="keyword">sizeof</span>(fes)) == 0);</div><div class="line"><a name="l01497"></a><span class="lineno"> 1497</span> }</div><div class="line"><a name="l01498"></a><span class="lineno"> 1498</span> </div><div class="line"><a name="l01499"></a><span class="lineno"><a class="line" href="tests_8c.html#a5b444bc3ba72dbbc46729ebd85204a6d"> 1499</a></span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a5b444bc3ba72dbbc46729ebd85204a6d">fe_memcmp</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *a, <span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *b) {</div><div class="line"><a name="l01500"></a><span class="lineno"> 1500</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> t = *b;</div><div class="line"><a name="l01501"></a><span class="lineno"> 1501</span> <span class="preprocessor">#ifdef VERIFY</span></div><div class="line"><a name="l01502"></a><span class="lineno"> 1502</span>  t.magnitude = a->magnitude;</div><div class="line"><a name="l01503"></a><span class="lineno"> 1503</span>  t.normalized = a->normalized;</div><div class="line"><a name="l01504"></a><span class="lineno"> 1504</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l01505"></a><span class="lineno"> 1505</span>  <span class="keywordflow">return</span> memcmp(a, &t, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a>));</div><div class="line"><a name="l01506"></a><span class="lineno"> 1506</span> }</div><div class="line"><a name="l01507"></a><span class="lineno"> 1507</span> </div><div class="line"><a name="l01508"></a><span class="lineno"><a class="line" href="tests_8c.html#a407b4cff8cbc365e753f2a1d70b45f81"> 1508</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a407b4cff8cbc365e753f2a1d70b45f81">run_field_misc</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01509"></a><span class="lineno"> 1509</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> x;</div><div class="line"><a name="l01510"></a><span class="lineno"> 1510</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> y;</div><div class="line"><a name="l01511"></a><span class="lineno"> 1511</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> z;</div><div class="line"><a name="l01512"></a><span class="lineno"> 1512</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> q;</div><div class="line"><a name="l01513"></a><span class="lineno"> 1513</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> fe5 = <a class="code" href="field__10x26_8h.html#a8c00ba3d97ea0d9b0d461463e890de15">SECP256K1_FE_CONST</a>(0, 0, 0, 0, 0, 0, 0, 5);</div><div class="line"><a name="l01514"></a><span class="lineno"> 1514</span>  <span class="keywordtype">int</span> i, j;</div><div class="line"><a name="l01515"></a><span class="lineno"> 1515</span>  <span class="keywordflow">for</span> (i = 0; i < 5*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l01516"></a><span class="lineno"> 1516</span>  <a class="code" href="structsecp256k1__fe__storage.html">secp256k1_fe_storage</a> xs, ys, zs;</div><div class="line"><a name="l01517"></a><span class="lineno"> 1517</span>  <a class="code" href="tests_8c.html#ad49b2c3065041ff986c8a4d71a329c79">random_fe</a>(&x);</div><div class="line"><a name="l01518"></a><span class="lineno"> 1518</span>  <a class="code" href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a">random_fe_non_zero</a>(&y);</div><div class="line"><a name="l01519"></a><span class="lineno"> 1519</span>  <span class="comment">/* Test the fe equality and comparison operations. */</span></div><div class="line"><a name="l01520"></a><span class="lineno"> 1520</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#af372f2088796ef5338bb43dbb6dd5277">secp256k1_fe_cmp_var</a>(&x, &x) == 0);</div><div class="line"><a name="l01521"></a><span class="lineno"> 1521</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&x, &x));</div><div class="line"><a name="l01522"></a><span class="lineno"> 1522</span>  z = x;</div><div class="line"><a name="l01523"></a><span class="lineno"> 1523</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&z,&y);</div><div class="line"><a name="l01524"></a><span class="lineno"> 1524</span>  <span class="comment">/* Test fe conditional move; z is not normalized here. */</span></div><div class="line"><a name="l01525"></a><span class="lineno"> 1525</span>  q = x;</div><div class="line"><a name="l01526"></a><span class="lineno"> 1526</span>  <a class="code" href="field_8h.html#a3e9ecf6eef0181f8f086611253f6776f">secp256k1_fe_cmov</a>(&x, &z, 0);</div><div class="line"><a name="l01527"></a><span class="lineno"> 1527</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aca8ac5ae73fd966db106de59160a178b">VERIFY_CHECK</a>(!x.normalized && x.magnitude == z.magnitude);</div><div class="line"><a name="l01528"></a><span class="lineno"> 1528</span>  <a class="code" href="field_8h.html#a3e9ecf6eef0181f8f086611253f6776f">secp256k1_fe_cmov</a>(&x, &x, 1);</div><div class="line"><a name="l01529"></a><span class="lineno"> 1529</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a5b444bc3ba72dbbc46729ebd85204a6d">fe_memcmp</a>(&x, &z) != 0);</div><div class="line"><a name="l01530"></a><span class="lineno"> 1530</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a5b444bc3ba72dbbc46729ebd85204a6d">fe_memcmp</a>(&x, &q) == 0);</div><div class="line"><a name="l01531"></a><span class="lineno"> 1531</span>  <a class="code" href="field_8h.html#a3e9ecf6eef0181f8f086611253f6776f">secp256k1_fe_cmov</a>(&q, &z, 1);</div><div class="line"><a name="l01532"></a><span class="lineno"> 1532</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aca8ac5ae73fd966db106de59160a178b">VERIFY_CHECK</a>(!q.normalized && q.magnitude == z.magnitude);</div><div class="line"><a name="l01533"></a><span class="lineno"> 1533</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a5b444bc3ba72dbbc46729ebd85204a6d">fe_memcmp</a>(&q, &z) == 0);</div><div class="line"><a name="l01534"></a><span class="lineno"> 1534</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&x);</div><div class="line"><a name="l01535"></a><span class="lineno"> 1535</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&z);</div><div class="line"><a name="l01536"></a><span class="lineno"> 1536</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&x, &z));</div><div class="line"><a name="l01537"></a><span class="lineno"> 1537</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&q);</div><div class="line"><a name="l01538"></a><span class="lineno"> 1538</span>  <a class="code" href="field_8h.html#a3e9ecf6eef0181f8f086611253f6776f">secp256k1_fe_cmov</a>(&q, &z, (i&1));</div><div class="line"><a name="l01539"></a><span class="lineno"> 1539</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aca8ac5ae73fd966db106de59160a178b">VERIFY_CHECK</a>(q.normalized && q.magnitude == 1);</div><div class="line"><a name="l01540"></a><span class="lineno"> 1540</span>  <span class="keywordflow">for</span> (j = 0; j < 6; j++) {</div><div class="line"><a name="l01541"></a><span class="lineno"> 1541</span>  <a class="code" href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a>(&z, &z, j+1);</div><div class="line"><a name="l01542"></a><span class="lineno"> 1542</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&q);</div><div class="line"><a name="l01543"></a><span class="lineno"> 1543</span>  <a class="code" href="field_8h.html#a3e9ecf6eef0181f8f086611253f6776f">secp256k1_fe_cmov</a>(&q, &z, (j&1));</div><div class="line"><a name="l01544"></a><span class="lineno"> 1544</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aca8ac5ae73fd966db106de59160a178b">VERIFY_CHECK</a>(!q.normalized && q.magnitude == (j+2));</div><div class="line"><a name="l01545"></a><span class="lineno"> 1545</span>  }</div><div class="line"><a name="l01546"></a><span class="lineno"> 1546</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&z);</div><div class="line"><a name="l01547"></a><span class="lineno"> 1547</span>  <span class="comment">/* Test storage conversion and conditional moves. */</span></div><div class="line"><a name="l01548"></a><span class="lineno"> 1548</span>  <a class="code" href="field_8h.html#ab2813c5c17c63e222d5a15a60f239b12">secp256k1_fe_to_storage</a>(&xs, &x);</div><div class="line"><a name="l01549"></a><span class="lineno"> 1549</span>  <a class="code" href="field_8h.html#ab2813c5c17c63e222d5a15a60f239b12">secp256k1_fe_to_storage</a>(&ys, &y);</div><div class="line"><a name="l01550"></a><span class="lineno"> 1550</span>  <a class="code" href="field_8h.html#ab2813c5c17c63e222d5a15a60f239b12">secp256k1_fe_to_storage</a>(&zs, &z);</div><div class="line"><a name="l01551"></a><span class="lineno"> 1551</span>  <a class="code" href="field_8h.html#ae9d61c6568f3a63bcea9146c056b18dc">secp256k1_fe_storage_cmov</a>(&zs, &xs, 0);</div><div class="line"><a name="l01552"></a><span class="lineno"> 1552</span>  <a class="code" href="field_8h.html#ae9d61c6568f3a63bcea9146c056b18dc">secp256k1_fe_storage_cmov</a>(&zs, &zs, 1);</div><div class="line"><a name="l01553"></a><span class="lineno"> 1553</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&xs, &zs, <span class="keyword">sizeof</span>(xs)) != 0);</div><div class="line"><a name="l01554"></a><span class="lineno"> 1554</span>  <a class="code" href="field_8h.html#ae9d61c6568f3a63bcea9146c056b18dc">secp256k1_fe_storage_cmov</a>(&ys, &xs, 1);</div><div class="line"><a name="l01555"></a><span class="lineno"> 1555</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&xs, &ys, <span class="keyword">sizeof</span>(xs)) == 0);</div><div class="line"><a name="l01556"></a><span class="lineno"> 1556</span>  <a class="code" href="field_8h.html#a644783b01d20445b5b2f3c9c2abfbae3">secp256k1_fe_from_storage</a>(&x, &xs);</div><div class="line"><a name="l01557"></a><span class="lineno"> 1557</span>  <a class="code" href="field_8h.html#a644783b01d20445b5b2f3c9c2abfbae3">secp256k1_fe_from_storage</a>(&y, &ys);</div><div class="line"><a name="l01558"></a><span class="lineno"> 1558</span>  <a class="code" href="field_8h.html#a644783b01d20445b5b2f3c9c2abfbae3">secp256k1_fe_from_storage</a>(&z, &zs);</div><div class="line"><a name="l01559"></a><span class="lineno"> 1559</span>  <span class="comment">/* Test that mul_int, mul, and add agree. */</span></div><div class="line"><a name="l01560"></a><span class="lineno"> 1560</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&y, &x);</div><div class="line"><a name="l01561"></a><span class="lineno"> 1561</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&y, &x);</div><div class="line"><a name="l01562"></a><span class="lineno"> 1562</span>  z = x;</div><div class="line"><a name="l01563"></a><span class="lineno"> 1563</span>  <a class="code" href="field_8h.html#a3f7b55267ed0d5135530283da6314416">secp256k1_fe_mul_int</a>(&z, 3);</div><div class="line"><a name="l01564"></a><span class="lineno"> 1564</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&y, &z));</div><div class="line"><a name="l01565"></a><span class="lineno"> 1565</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&y, &x);</div><div class="line"><a name="l01566"></a><span class="lineno"> 1566</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&z, &x);</div><div class="line"><a name="l01567"></a><span class="lineno"> 1567</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&z, &y));</div><div class="line"><a name="l01568"></a><span class="lineno"> 1568</span>  z = x;</div><div class="line"><a name="l01569"></a><span class="lineno"> 1569</span>  <a class="code" href="field_8h.html#a3f7b55267ed0d5135530283da6314416">secp256k1_fe_mul_int</a>(&z, 5);</div><div class="line"><a name="l01570"></a><span class="lineno"> 1570</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&q, &x, &fe5);</div><div class="line"><a name="l01571"></a><span class="lineno"> 1571</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&z, &q));</div><div class="line"><a name="l01572"></a><span class="lineno"> 1572</span>  <a class="code" href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a>(&x, &x, 1);</div><div class="line"><a name="l01573"></a><span class="lineno"> 1573</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&z, &x);</div><div class="line"><a name="l01574"></a><span class="lineno"> 1574</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&q, &x);</div><div class="line"><a name="l01575"></a><span class="lineno"> 1575</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&y, &z));</div><div class="line"><a name="l01576"></a><span class="lineno"> 1576</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&q, &y));</div><div class="line"><a name="l01577"></a><span class="lineno"> 1577</span>  }</div><div class="line"><a name="l01578"></a><span class="lineno"> 1578</span> }</div><div class="line"><a name="l01579"></a><span class="lineno"> 1579</span> </div><div class="line"><a name="l01580"></a><span class="lineno"><a class="line" href="tests_8c.html#ad636c10e982fafdb8f6ddeb3d1424b2d"> 1580</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ad636c10e982fafdb8f6ddeb3d1424b2d">run_field_inv</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01581"></a><span class="lineno"> 1581</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> x, xi, xii;</div><div class="line"><a name="l01582"></a><span class="lineno"> 1582</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l01583"></a><span class="lineno"> 1583</span>  <span class="keywordflow">for</span> (i = 0; i < 10*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l01584"></a><span class="lineno"> 1584</span>  <a class="code" href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a">random_fe_non_zero</a>(&x);</div><div class="line"><a name="l01585"></a><span class="lineno"> 1585</span>  <a class="code" href="field_8h.html#a3a071aa04ce0d88003b059c0a8ee0c0e">secp256k1_fe_inv</a>(&xi, &x);</div><div class="line"><a name="l01586"></a><span class="lineno"> 1586</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a9fe4a53634c0f9e17b1f74e55ea8de99">check_fe_inverse</a>(&x, &xi));</div><div class="line"><a name="l01587"></a><span class="lineno"> 1587</span>  <a class="code" href="field_8h.html#a3a071aa04ce0d88003b059c0a8ee0c0e">secp256k1_fe_inv</a>(&xii, &xi);</div><div class="line"><a name="l01588"></a><span class="lineno"> 1588</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&x, &xii));</div><div class="line"><a name="l01589"></a><span class="lineno"> 1589</span>  }</div><div class="line"><a name="l01590"></a><span class="lineno"> 1590</span> }</div><div class="line"><a name="l01591"></a><span class="lineno"> 1591</span> </div><div class="line"><a name="l01592"></a><span class="lineno"><a class="line" href="tests_8c.html#ad83214628412557c86e3c1d01270c83a"> 1592</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ad83214628412557c86e3c1d01270c83a">run_field_inv_var</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01593"></a><span class="lineno"> 1593</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> x, xi, xii;</div><div class="line"><a name="l01594"></a><span class="lineno"> 1594</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l01595"></a><span class="lineno"> 1595</span>  <span class="keywordflow">for</span> (i = 0; i < 10*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l01596"></a><span class="lineno"> 1596</span>  <a class="code" href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a">random_fe_non_zero</a>(&x);</div><div class="line"><a name="l01597"></a><span class="lineno"> 1597</span>  <a class="code" href="field_8h.html#a0090ecfb39b34a8965cc16ae1feca5aa">secp256k1_fe_inv_var</a>(&xi, &x);</div><div class="line"><a name="l01598"></a><span class="lineno"> 1598</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a9fe4a53634c0f9e17b1f74e55ea8de99">check_fe_inverse</a>(&x, &xi));</div><div class="line"><a name="l01599"></a><span class="lineno"> 1599</span>  <a class="code" href="field_8h.html#a0090ecfb39b34a8965cc16ae1feca5aa">secp256k1_fe_inv_var</a>(&xii, &xi);</div><div class="line"><a name="l01600"></a><span class="lineno"> 1600</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&x, &xii));</div><div class="line"><a name="l01601"></a><span class="lineno"> 1601</span>  }</div><div class="line"><a name="l01602"></a><span class="lineno"> 1602</span> }</div><div class="line"><a name="l01603"></a><span class="lineno"> 1603</span> </div><div class="line"><a name="l01604"></a><span class="lineno"><a class="line" href="tests_8c.html#afb738ef4c7077ce703c56beefcb29653"> 1604</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#afb738ef4c7077ce703c56beefcb29653">run_field_inv_all_var</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01605"></a><span class="lineno"> 1605</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> x[16], xi[16], xii[16];</div><div class="line"><a name="l01606"></a><span class="lineno"> 1606</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l01607"></a><span class="lineno"> 1607</span>  <span class="comment">/* Check it's safe to call for 0 elements */</span></div><div class="line"><a name="l01608"></a><span class="lineno"> 1608</span>  <a class="code" href="field_8h.html#a728a757d8960973603be6f3b2aa13f4e">secp256k1_fe_inv_all_var</a>(0, xi, x);</div><div class="line"><a name="l01609"></a><span class="lineno"> 1609</span>  <span class="keywordflow">for</span> (i = 0; i < <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l01610"></a><span class="lineno"> 1610</span>  <span class="keywordtype">size_t</span> j;</div><div class="line"><a name="l01611"></a><span class="lineno"> 1611</span>  <span class="keywordtype">size_t</span> len = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(15) + 1;</div><div class="line"><a name="l01612"></a><span class="lineno"> 1612</span>  <span class="keywordflow">for</span> (j = 0; j < len; j++) {</div><div class="line"><a name="l01613"></a><span class="lineno"> 1613</span>  <a class="code" href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a">random_fe_non_zero</a>(&x[j]);</div><div class="line"><a name="l01614"></a><span class="lineno"> 1614</span>  }</div><div class="line"><a name="l01615"></a><span class="lineno"> 1615</span>  <a class="code" href="field_8h.html#a728a757d8960973603be6f3b2aa13f4e">secp256k1_fe_inv_all_var</a>(len, xi, x);</div><div class="line"><a name="l01616"></a><span class="lineno"> 1616</span>  <span class="keywordflow">for</span> (j = 0; j < len; j++) {</div><div class="line"><a name="l01617"></a><span class="lineno"> 1617</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a9fe4a53634c0f9e17b1f74e55ea8de99">check_fe_inverse</a>(&x[j], &xi[j]));</div><div class="line"><a name="l01618"></a><span class="lineno"> 1618</span>  }</div><div class="line"><a name="l01619"></a><span class="lineno"> 1619</span>  <a class="code" href="field_8h.html#a728a757d8960973603be6f3b2aa13f4e">secp256k1_fe_inv_all_var</a>(len, xii, xi);</div><div class="line"><a name="l01620"></a><span class="lineno"> 1620</span>  <span class="keywordflow">for</span> (j = 0; j < len; j++) {</div><div class="line"><a name="l01621"></a><span class="lineno"> 1621</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a>(&x[j], &xii[j]));</div><div class="line"><a name="l01622"></a><span class="lineno"> 1622</span>  }</div><div class="line"><a name="l01623"></a><span class="lineno"> 1623</span>  }</div><div class="line"><a name="l01624"></a><span class="lineno"> 1624</span> }</div><div class="line"><a name="l01625"></a><span class="lineno"> 1625</span> </div><div class="line"><a name="l01626"></a><span class="lineno"><a class="line" href="tests_8c.html#aebe6e77bbe66e58eb7d0230d9506dc61"> 1626</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#aebe6e77bbe66e58eb7d0230d9506dc61">run_sqr</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01627"></a><span class="lineno"> 1627</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> x, s;</div><div class="line"><a name="l01628"></a><span class="lineno"> 1628</span> </div><div class="line"><a name="l01629"></a><span class="lineno"> 1629</span>  {</div><div class="line"><a name="l01630"></a><span class="lineno"> 1630</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l01631"></a><span class="lineno"> 1631</span>  <a class="code" href="field_8h.html#a4bfba9980b6d6960ad623f1ddbbc547e">secp256k1_fe_set_int</a>(&x, 1);</div><div class="line"><a name="l01632"></a><span class="lineno"> 1632</span>  <a class="code" href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a>(&x, &x, 1);</div><div class="line"><a name="l01633"></a><span class="lineno"> 1633</span> </div><div class="line"><a name="l01634"></a><span class="lineno"> 1634</span>  <span class="keywordflow">for</span> (i = 1; i <= 512; ++i) {</div><div class="line"><a name="l01635"></a><span class="lineno"> 1635</span>  <a class="code" href="field_8h.html#a3f7b55267ed0d5135530283da6314416">secp256k1_fe_mul_int</a>(&x, 2);</div><div class="line"><a name="l01636"></a><span class="lineno"> 1636</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&x);</div><div class="line"><a name="l01637"></a><span class="lineno"> 1637</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&s, &x);</div><div class="line"><a name="l01638"></a><span class="lineno"> 1638</span>  }</div><div class="line"><a name="l01639"></a><span class="lineno"> 1639</span>  }</div><div class="line"><a name="l01640"></a><span class="lineno"> 1640</span> }</div><div class="line"><a name="l01641"></a><span class="lineno"> 1641</span> </div><div class="line"><a name="l01642"></a><span class="lineno"><a class="line" href="tests_8c.html#a42744351538fd01fc266d1cac41401a8"> 1642</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a42744351538fd01fc266d1cac41401a8">test_sqrt</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *a, <span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *k) {</div><div class="line"><a name="l01643"></a><span class="lineno"> 1643</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> r1, r2;</div><div class="line"><a name="l01644"></a><span class="lineno"> 1644</span>  <span class="keywordtype">int</span> v = <a class="code" href="field_8h.html#adeed9551ce946187f98c5e3d789e9575">secp256k1_fe_sqrt_var</a>(&r1, a);</div><div class="line"><a name="l01645"></a><span class="lineno"> 1645</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>((v == 0) == (k == NULL));</div><div class="line"><a name="l01646"></a><span class="lineno"> 1646</span> </div><div class="line"><a name="l01647"></a><span class="lineno"> 1647</span>  <span class="keywordflow">if</span> (k != NULL) {</div><div class="line"><a name="l01648"></a><span class="lineno"> 1648</span>  <span class="comment">/* Check that the returned root is +/- the given known answer */</span></div><div class="line"><a name="l01649"></a><span class="lineno"> 1649</span>  <a class="code" href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a>(&r2, &r1, 1);</div><div class="line"><a name="l01650"></a><span class="lineno"> 1650</span>  <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&r1, k); <a class="code" href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a>(&r2, k);</div><div class="line"><a name="l01651"></a><span class="lineno"> 1651</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&r1); <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&r2);</div><div class="line"><a name="l01652"></a><span class="lineno"> 1652</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a619ec4805df6cc54d70e6682ceebd098">secp256k1_fe_is_zero</a>(&r1) || <a class="code" href="field_8h.html#a619ec4805df6cc54d70e6682ceebd098">secp256k1_fe_is_zero</a>(&r2));</div><div class="line"><a name="l01653"></a><span class="lineno"> 1653</span>  }</div><div class="line"><a name="l01654"></a><span class="lineno"> 1654</span> }</div><div class="line"><a name="l01655"></a><span class="lineno"> 1655</span> </div><div class="line"><a name="l01656"></a><span class="lineno"><a class="line" href="tests_8c.html#a9f14566c39814625ca83d68d1dddb684"> 1656</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a9f14566c39814625ca83d68d1dddb684">run_sqrt</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01657"></a><span class="lineno"> 1657</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> ns, x, s, t;</div><div class="line"><a name="l01658"></a><span class="lineno"> 1658</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l01659"></a><span class="lineno"> 1659</span> </div><div class="line"><a name="l01660"></a><span class="lineno"> 1660</span>  <span class="comment">/* Check sqrt(0) is 0 */</span></div><div class="line"><a name="l01661"></a><span class="lineno"> 1661</span>  <a class="code" href="field_8h.html#a4bfba9980b6d6960ad623f1ddbbc547e">secp256k1_fe_set_int</a>(&x, 0);</div><div class="line"><a name="l01662"></a><span class="lineno"> 1662</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&s, &x);</div><div class="line"><a name="l01663"></a><span class="lineno"> 1663</span>  <a class="code" href="tests_8c.html#a42744351538fd01fc266d1cac41401a8">test_sqrt</a>(&s, &x);</div><div class="line"><a name="l01664"></a><span class="lineno"> 1664</span> </div><div class="line"><a name="l01665"></a><span class="lineno"> 1665</span>  <span class="comment">/* Check sqrt of small squares (and their negatives) */</span></div><div class="line"><a name="l01666"></a><span class="lineno"> 1666</span>  <span class="keywordflow">for</span> (i = 1; i <= 100; i++) {</div><div class="line"><a name="l01667"></a><span class="lineno"> 1667</span>  <a class="code" href="field_8h.html#a4bfba9980b6d6960ad623f1ddbbc547e">secp256k1_fe_set_int</a>(&x, i);</div><div class="line"><a name="l01668"></a><span class="lineno"> 1668</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&s, &x);</div><div class="line"><a name="l01669"></a><span class="lineno"> 1669</span>  <a class="code" href="tests_8c.html#a42744351538fd01fc266d1cac41401a8">test_sqrt</a>(&s, &x);</div><div class="line"><a name="l01670"></a><span class="lineno"> 1670</span>  <a class="code" href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a>(&t, &s, 1);</div><div class="line"><a name="l01671"></a><span class="lineno"> 1671</span>  <a class="code" href="tests_8c.html#a42744351538fd01fc266d1cac41401a8">test_sqrt</a>(&t, NULL);</div><div class="line"><a name="l01672"></a><span class="lineno"> 1672</span>  }</div><div class="line"><a name="l01673"></a><span class="lineno"> 1673</span> </div><div class="line"><a name="l01674"></a><span class="lineno"> 1674</span>  <span class="comment">/* Consistency checks for large random values */</span></div><div class="line"><a name="l01675"></a><span class="lineno"> 1675</span>  <span class="keywordflow">for</span> (i = 0; i < 10; i++) {</div><div class="line"><a name="l01676"></a><span class="lineno"> 1676</span>  <span class="keywordtype">int</span> j;</div><div class="line"><a name="l01677"></a><span class="lineno"> 1677</span>  <a class="code" href="tests_8c.html#acb56afe8a17a3048470c0c299150a36a">random_fe_non_square</a>(&ns);</div><div class="line"><a name="l01678"></a><span class="lineno"> 1678</span>  <span class="keywordflow">for</span> (j = 0; j < <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; j++) {</div><div class="line"><a name="l01679"></a><span class="lineno"> 1679</span>  <a class="code" href="tests_8c.html#ad49b2c3065041ff986c8a4d71a329c79">random_fe</a>(&x);</div><div class="line"><a name="l01680"></a><span class="lineno"> 1680</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&s, &x);</div><div class="line"><a name="l01681"></a><span class="lineno"> 1681</span>  <a class="code" href="tests_8c.html#a42744351538fd01fc266d1cac41401a8">test_sqrt</a>(&s, &x);</div><div class="line"><a name="l01682"></a><span class="lineno"> 1682</span>  <a class="code" href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a>(&t, &s, 1);</div><div class="line"><a name="l01683"></a><span class="lineno"> 1683</span>  <a class="code" href="tests_8c.html#a42744351538fd01fc266d1cac41401a8">test_sqrt</a>(&t, NULL);</div><div class="line"><a name="l01684"></a><span class="lineno"> 1684</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&t, &s, &ns);</div><div class="line"><a name="l01685"></a><span class="lineno"> 1685</span>  <a class="code" href="tests_8c.html#a42744351538fd01fc266d1cac41401a8">test_sqrt</a>(&t, NULL);</div><div class="line"><a name="l01686"></a><span class="lineno"> 1686</span>  }</div><div class="line"><a name="l01687"></a><span class="lineno"> 1687</span>  }</div><div class="line"><a name="l01688"></a><span class="lineno"> 1688</span> }</div><div class="line"><a name="l01689"></a><span class="lineno"> 1689</span> </div><div class="line"><a name="l01690"></a><span class="lineno"> 1690</span> <span class="comment">/***** GROUP TESTS *****/</span></div><div class="line"><a name="l01691"></a><span class="lineno"> 1691</span> </div><div class="line"><a name="l01692"></a><span class="lineno"><a class="line" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae"> 1692</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *a, <span class="keyword">const</span> <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *b) {</div><div class="line"><a name="l01693"></a><span class="lineno"> 1693</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(a-><a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a> == b-><a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>);</div><div class="line"><a name="l01694"></a><span class="lineno"> 1694</span>  <span class="keywordflow">if</span> (a-><a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>) {</div><div class="line"><a name="l01695"></a><span class="lineno"> 1695</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l01696"></a><span class="lineno"> 1696</span>  }</div><div class="line"><a name="l01697"></a><span class="lineno"> 1697</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&a-><a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, &b-><a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>));</div><div class="line"><a name="l01698"></a><span class="lineno"> 1698</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&a-><a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>, &b-><a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>));</div><div class="line"><a name="l01699"></a><span class="lineno"> 1699</span> }</div><div class="line"><a name="l01700"></a><span class="lineno"> 1700</span> </div><div class="line"><a name="l01701"></a><span class="lineno"> 1701</span> <span class="comment">/* This compares jacobian points including their Z, not just their geometric meaning. */</span></div><div class="line"><a name="l01702"></a><span class="lineno"><a class="line" href="tests_8c.html#a9ce0d67d2ba57bdc32e660cafcaaef2f"> 1702</a></span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a9ce0d67d2ba57bdc32e660cafcaaef2f">gej_xyz_equals_gej</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *a, <span class="keyword">const</span> <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *b) {</div><div class="line"><a name="l01703"></a><span class="lineno"> 1703</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> a2;</div><div class="line"><a name="l01704"></a><span class="lineno"> 1704</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> b2;</div><div class="line"><a name="l01705"></a><span class="lineno"> 1705</span>  <span class="keywordtype">int</span> ret = 1;</div><div class="line"><a name="l01706"></a><span class="lineno"> 1706</span>  ret &= a-><a class="code" href="structsecp256k1__gej.html#ab3ec8168caf27aa3a092d512eaadaad9">infinity</a> == b-><a class="code" href="structsecp256k1__gej.html#ab3ec8168caf27aa3a092d512eaadaad9">infinity</a>;</div><div class="line"><a name="l01707"></a><span class="lineno"> 1707</span>  <span class="keywordflow">if</span> (ret && !a-><a class="code" href="structsecp256k1__gej.html#ab3ec8168caf27aa3a092d512eaadaad9">infinity</a>) {</div><div class="line"><a name="l01708"></a><span class="lineno"> 1708</span>  a2 = *a;</div><div class="line"><a name="l01709"></a><span class="lineno"> 1709</span>  b2 = *b;</div><div class="line"><a name="l01710"></a><span class="lineno"> 1710</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&a2.<a class="code" href="structsecp256k1__gej.html#a7d2451c89411d62628ac466eb28c8ff5">x</a>);</div><div class="line"><a name="l01711"></a><span class="lineno"> 1711</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&a2.<a class="code" href="structsecp256k1__gej.html#a29d5184060ad790d85a0c89a13820e0d">y</a>);</div><div class="line"><a name="l01712"></a><span class="lineno"> 1712</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&a2.<a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>);</div><div class="line"><a name="l01713"></a><span class="lineno"> 1713</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&b2.<a class="code" href="structsecp256k1__gej.html#a7d2451c89411d62628ac466eb28c8ff5">x</a>);</div><div class="line"><a name="l01714"></a><span class="lineno"> 1714</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&b2.<a class="code" href="structsecp256k1__gej.html#a29d5184060ad790d85a0c89a13820e0d">y</a>);</div><div class="line"><a name="l01715"></a><span class="lineno"> 1715</span>  <a class="code" href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a>(&b2.<a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>);</div><div class="line"><a name="l01716"></a><span class="lineno"> 1716</span>  ret &= <a class="code" href="field_8h.html#af372f2088796ef5338bb43dbb6dd5277">secp256k1_fe_cmp_var</a>(&a2.<a class="code" href="structsecp256k1__gej.html#a7d2451c89411d62628ac466eb28c8ff5">x</a>, &b2.<a class="code" href="structsecp256k1__gej.html#a7d2451c89411d62628ac466eb28c8ff5">x</a>) == 0;</div><div class="line"><a name="l01717"></a><span class="lineno"> 1717</span>  ret &= <a class="code" href="field_8h.html#af372f2088796ef5338bb43dbb6dd5277">secp256k1_fe_cmp_var</a>(&a2.<a class="code" href="structsecp256k1__gej.html#a29d5184060ad790d85a0c89a13820e0d">y</a>, &b2.<a class="code" href="structsecp256k1__gej.html#a29d5184060ad790d85a0c89a13820e0d">y</a>) == 0;</div><div class="line"><a name="l01718"></a><span class="lineno"> 1718</span>  ret &= <a class="code" href="field_8h.html#af372f2088796ef5338bb43dbb6dd5277">secp256k1_fe_cmp_var</a>(&a2.<a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>, &b2.<a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>) == 0;</div><div class="line"><a name="l01719"></a><span class="lineno"> 1719</span>  }</div><div class="line"><a name="l01720"></a><span class="lineno"> 1720</span>  <span class="keywordflow">return</span> ret;</div><div class="line"><a name="l01721"></a><span class="lineno"> 1721</span> }</div><div class="line"><a name="l01722"></a><span class="lineno"> 1722</span> </div><div class="line"><a name="l01723"></a><span class="lineno"><a class="line" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69"> 1723</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *a, <span class="keyword">const</span> <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *b) {</div><div class="line"><a name="l01724"></a><span class="lineno"> 1724</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> z2s;</div><div class="line"><a name="l01725"></a><span class="lineno"> 1725</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> u1, u2, s1, s2;</div><div class="line"><a name="l01726"></a><span class="lineno"> 1726</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(a-><a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a> == b-><a class="code" href="structsecp256k1__gej.html#ab3ec8168caf27aa3a092d512eaadaad9">infinity</a>);</div><div class="line"><a name="l01727"></a><span class="lineno"> 1727</span>  <span class="keywordflow">if</span> (a-><a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>) {</div><div class="line"><a name="l01728"></a><span class="lineno"> 1728</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l01729"></a><span class="lineno"> 1729</span>  }</div><div class="line"><a name="l01730"></a><span class="lineno"> 1730</span>  <span class="comment">/* Check a.x * b.z^2 == b.x && a.y * b.z^3 == b.y, to avoid inverses. */</span></div><div class="line"><a name="l01731"></a><span class="lineno"> 1731</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&z2s, &b-><a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>);</div><div class="line"><a name="l01732"></a><span class="lineno"> 1732</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&u1, &a-><a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, &z2s);</div><div class="line"><a name="l01733"></a><span class="lineno"> 1733</span>  u2 = b-><a class="code" href="structsecp256k1__gej.html#a7d2451c89411d62628ac466eb28c8ff5">x</a>; <a class="code" href="field_8h.html#a0aaec7df2f708a451a8e1f41a943d8b1">secp256k1_fe_normalize_weak</a>(&u2);</div><div class="line"><a name="l01734"></a><span class="lineno"> 1734</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&s1, &a-><a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>, &z2s); <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&s1, &s1, &b-><a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>);</div><div class="line"><a name="l01735"></a><span class="lineno"> 1735</span>  s2 = b-><a class="code" href="structsecp256k1__gej.html#a29d5184060ad790d85a0c89a13820e0d">y</a>; <a class="code" href="field_8h.html#a0aaec7df2f708a451a8e1f41a943d8b1">secp256k1_fe_normalize_weak</a>(&s2);</div><div class="line"><a name="l01736"></a><span class="lineno"> 1736</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&u1, &u2));</div><div class="line"><a name="l01737"></a><span class="lineno"> 1737</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&s1, &s2));</div><div class="line"><a name="l01738"></a><span class="lineno"> 1738</span> }</div><div class="line"><a name="l01739"></a><span class="lineno"> 1739</span> </div><div class="line"><a name="l01740"></a><span class="lineno"><a class="line" href="tests_8c.html#a3084bb11900a5e4d33115904d0ceb847"> 1740</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a3084bb11900a5e4d33115904d0ceb847">test_ge</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01741"></a><span class="lineno"> 1741</span>  <span class="keywordtype">int</span> i, i1;</div><div class="line"><a name="l01742"></a><span class="lineno"> 1742</span> <span class="preprocessor">#ifdef USE_ENDOMORPHISM</span></div><div class="line"><a name="l01743"></a><span class="lineno"> 1743</span>  <span class="keywordtype">int</span> runs = 6;</div><div class="line"><a name="l01744"></a><span class="lineno"> 1744</span> <span class="preprocessor">#else</span></div><div class="line"><a name="l01745"></a><span class="lineno"> 1745</span>  <span class="keywordtype">int</span> runs = 4;</div><div class="line"><a name="l01746"></a><span class="lineno"> 1746</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l01747"></a><span class="lineno"> 1747</span>  <span class="comment">/* Points: (infinity, p1, p1, -p1, -p1, p2, p2, -p2, -p2, p3, p3, -p3, -p3, p4, p4, -p4, -p4).</span></div><div class="line"><a name="l01748"></a><span class="lineno"> 1748</span> <span class="comment"> * The second in each pair of identical points uses a random Z coordinate in the Jacobian form.</span></div><div class="line"><a name="l01749"></a><span class="lineno"> 1749</span> <span class="comment"> * All magnitudes are randomized.</span></div><div class="line"><a name="l01750"></a><span class="lineno"> 1750</span> <span class="comment"> * All 17*17 combinations of points are added to each other, using all applicable methods.</span></div><div class="line"><a name="l01751"></a><span class="lineno"> 1751</span> <span class="comment"> *</span></div><div class="line"><a name="l01752"></a><span class="lineno"> 1752</span> <span class="comment"> * When the endomorphism code is compiled in, p5 = lambda*p1 and p6 = lambda^2*p1 are added as well.</span></div><div class="line"><a name="l01753"></a><span class="lineno"> 1753</span> <span class="comment"> */</span></div><div class="line"><a name="l01754"></a><span class="lineno"> 1754</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *ge = (<a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *)malloc(<span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a>) * (1 + 4 * runs));</div><div class="line"><a name="l01755"></a><span class="lineno"> 1755</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *gej = (<a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *)malloc(<span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a>) * (1 + 4 * runs));</div><div class="line"><a name="l01756"></a><span class="lineno"> 1756</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *zinv = (<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *)malloc(<span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a>) * (1 + 4 * runs));</div><div class="line"><a name="l01757"></a><span class="lineno"> 1757</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> zf;</div><div class="line"><a name="l01758"></a><span class="lineno"> 1758</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> zfi2, zfi3;</div><div class="line"><a name="l01759"></a><span class="lineno"> 1759</span> </div><div class="line"><a name="l01760"></a><span class="lineno"> 1760</span>  <a class="code" href="group_8h.html#a2c6b24a2db08260d89e891eab7035b2c">secp256k1_gej_set_infinity</a>(&gej[0]);</div><div class="line"><a name="l01761"></a><span class="lineno"> 1761</span>  <a class="code" href="group_8h.html#a34793cf48794f089bb28597d1a9f23b2">secp256k1_ge_clear</a>(&ge[0]);</div><div class="line"><a name="l01762"></a><span class="lineno"> 1762</span>  <a class="code" href="group__impl_8h.html#aea803cf52c0f33c2cb3bfb82d5790d71">secp256k1_ge_set_gej_var</a>(&ge[0], &gej[0]);</div><div class="line"><a name="l01763"></a><span class="lineno"> 1763</span>  <span class="keywordflow">for</span> (i = 0; i < runs; i++) {</div><div class="line"><a name="l01764"></a><span class="lineno"> 1764</span>  <span class="keywordtype">int</span> j;</div><div class="line"><a name="l01765"></a><span class="lineno"> 1765</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> g;</div><div class="line"><a name="l01766"></a><span class="lineno"> 1766</span>  <a class="code" href="tests_8c.html#a63a7c68b6b72356c59cfdaaab131c73b">random_group_element_test</a>(&g);</div><div class="line"><a name="l01767"></a><span class="lineno"> 1767</span> <span class="preprocessor">#ifdef USE_ENDOMORPHISM</span></div><div class="line"><a name="l01768"></a><span class="lineno"> 1768</span>  <span class="keywordflow">if</span> (i >= runs - 2) {</div><div class="line"><a name="l01769"></a><span class="lineno"> 1769</span>  secp256k1_ge_mul_lambda(&g, &ge[1]);</div><div class="line"><a name="l01770"></a><span class="lineno"> 1770</span>  }</div><div class="line"><a name="l01771"></a><span class="lineno"> 1771</span>  <span class="keywordflow">if</span> (i >= runs - 1) {</div><div class="line"><a name="l01772"></a><span class="lineno"> 1772</span>  secp256k1_ge_mul_lambda(&g, &g);</div><div class="line"><a name="l01773"></a><span class="lineno"> 1773</span>  }</div><div class="line"><a name="l01774"></a><span class="lineno"> 1774</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l01775"></a><span class="lineno"> 1775</span>  ge[1 + 4 * i] = g;</div><div class="line"><a name="l01776"></a><span class="lineno"> 1776</span>  ge[2 + 4 * i] = g;</div><div class="line"><a name="l01777"></a><span class="lineno"> 1777</span>  <a class="code" href="group_8h.html#abcb34de0cfdf82a125e059f4f98de1d9">secp256k1_ge_neg</a>(&ge[3 + 4 * i], &g);</div><div class="line"><a name="l01778"></a><span class="lineno"> 1778</span>  <a class="code" href="group_8h.html#abcb34de0cfdf82a125e059f4f98de1d9">secp256k1_ge_neg</a>(&ge[4 + 4 * i], &g);</div><div class="line"><a name="l01779"></a><span class="lineno"> 1779</span>  <a class="code" href="group_8h.html#ad5f813e26afb239f03e83f0e61e05498">secp256k1_gej_set_ge</a>(&gej[1 + 4 * i], &ge[1 + 4 * i]);</div><div class="line"><a name="l01780"></a><span class="lineno"> 1780</span>  <a class="code" href="tests_8c.html#a92dafcbafa2a878e07b5ff22f573be7f">random_group_element_jacobian_test</a>(&gej[2 + 4 * i], &ge[2 + 4 * i]);</div><div class="line"><a name="l01781"></a><span class="lineno"> 1781</span>  <a class="code" href="group_8h.html#ad5f813e26afb239f03e83f0e61e05498">secp256k1_gej_set_ge</a>(&gej[3 + 4 * i], &ge[3 + 4 * i]);</div><div class="line"><a name="l01782"></a><span class="lineno"> 1782</span>  <a class="code" href="tests_8c.html#a92dafcbafa2a878e07b5ff22f573be7f">random_group_element_jacobian_test</a>(&gej[4 + 4 * i], &ge[4 + 4 * i]);</div><div class="line"><a name="l01783"></a><span class="lineno"> 1783</span>  <span class="keywordflow">for</span> (j = 0; j < 4; j++) {</div><div class="line"><a name="l01784"></a><span class="lineno"> 1784</span>  <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(&ge[1 + j + 4 * i].x);</div><div class="line"><a name="l01785"></a><span class="lineno"> 1785</span>  <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(&ge[1 + j + 4 * i].y);</div><div class="line"><a name="l01786"></a><span class="lineno"> 1786</span>  <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(&gej[1 + j + 4 * i].x);</div><div class="line"><a name="l01787"></a><span class="lineno"> 1787</span>  <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(&gej[1 + j + 4 * i].y);</div><div class="line"><a name="l01788"></a><span class="lineno"> 1788</span>  <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(&gej[1 + j + 4 * i].z);</div><div class="line"><a name="l01789"></a><span class="lineno"> 1789</span>  }</div><div class="line"><a name="l01790"></a><span class="lineno"> 1790</span>  }</div><div class="line"><a name="l01791"></a><span class="lineno"> 1791</span> </div><div class="line"><a name="l01792"></a><span class="lineno"> 1792</span>  <span class="comment">/* Compute z inverses. */</span></div><div class="line"><a name="l01793"></a><span class="lineno"> 1793</span>  {</div><div class="line"><a name="l01794"></a><span class="lineno"> 1794</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *zs = malloc(<span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a>) * (1 + 4 * runs));</div><div class="line"><a name="l01795"></a><span class="lineno"> 1795</span>  <span class="keywordflow">for</span> (i = 0; i < 4 * runs + 1; i++) {</div><div class="line"><a name="l01796"></a><span class="lineno"> 1796</span>  <span class="keywordflow">if</span> (i == 0) {</div><div class="line"><a name="l01797"></a><span class="lineno"> 1797</span>  <span class="comment">/* The point at infinity does not have a meaningful z inverse. Any should do. */</span></div><div class="line"><a name="l01798"></a><span class="lineno"> 1798</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l01799"></a><span class="lineno"> 1799</span>  <a class="code" href="tests_8c.html#af038dec65d22bf5050a82de7b4ad4bca">random_field_element_test</a>(&zs[i]);</div><div class="line"><a name="l01800"></a><span class="lineno"> 1800</span>  } <span class="keywordflow">while</span>(<a class="code" href="field_8h.html#a619ec4805df6cc54d70e6682ceebd098">secp256k1_fe_is_zero</a>(&zs[i]));</div><div class="line"><a name="l01801"></a><span class="lineno"> 1801</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l01802"></a><span class="lineno"> 1802</span>  zs[i] = gej[i].<a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>;</div><div class="line"><a name="l01803"></a><span class="lineno"> 1803</span>  }</div><div class="line"><a name="l01804"></a><span class="lineno"> 1804</span>  }</div><div class="line"><a name="l01805"></a><span class="lineno"> 1805</span>  <a class="code" href="field_8h.html#a728a757d8960973603be6f3b2aa13f4e">secp256k1_fe_inv_all_var</a>(4 * runs + 1, zinv, zs);</div><div class="line"><a name="l01806"></a><span class="lineno"> 1806</span>  free(zs);</div><div class="line"><a name="l01807"></a><span class="lineno"> 1807</span>  }</div><div class="line"><a name="l01808"></a><span class="lineno"> 1808</span> </div><div class="line"><a name="l01809"></a><span class="lineno"> 1809</span>  <span class="comment">/* Generate random zf, and zfi2 = 1/zf^2, zfi3 = 1/zf^3 */</span></div><div class="line"><a name="l01810"></a><span class="lineno"> 1810</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l01811"></a><span class="lineno"> 1811</span>  <a class="code" href="tests_8c.html#af038dec65d22bf5050a82de7b4ad4bca">random_field_element_test</a>(&zf);</div><div class="line"><a name="l01812"></a><span class="lineno"> 1812</span>  } <span class="keywordflow">while</span>(<a class="code" href="field_8h.html#a619ec4805df6cc54d70e6682ceebd098">secp256k1_fe_is_zero</a>(&zf));</div><div class="line"><a name="l01813"></a><span class="lineno"> 1813</span>  <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(&zf);</div><div class="line"><a name="l01814"></a><span class="lineno"> 1814</span>  <a class="code" href="field_8h.html#a0090ecfb39b34a8965cc16ae1feca5aa">secp256k1_fe_inv_var</a>(&zfi3, &zf);</div><div class="line"><a name="l01815"></a><span class="lineno"> 1815</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&zfi2, &zfi3);</div><div class="line"><a name="l01816"></a><span class="lineno"> 1816</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&zfi3, &zfi3, &zfi2);</div><div class="line"><a name="l01817"></a><span class="lineno"> 1817</span> </div><div class="line"><a name="l01818"></a><span class="lineno"> 1818</span>  <span class="keywordflow">for</span> (i1 = 0; i1 < 1 + 4 * runs; i1++) {</div><div class="line"><a name="l01819"></a><span class="lineno"> 1819</span>  <span class="keywordtype">int</span> i2;</div><div class="line"><a name="l01820"></a><span class="lineno"> 1820</span>  <span class="keywordflow">for</span> (i2 = 0; i2 < 1 + 4 * runs; i2++) {</div><div class="line"><a name="l01821"></a><span class="lineno"> 1821</span>  <span class="comment">/* Compute reference result using gej + gej (var). */</span></div><div class="line"><a name="l01822"></a><span class="lineno"> 1822</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> refj, resj;</div><div class="line"><a name="l01823"></a><span class="lineno"> 1823</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> ref;</div><div class="line"><a name="l01824"></a><span class="lineno"> 1824</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> zr;</div><div class="line"><a name="l01825"></a><span class="lineno"> 1825</span>  <a class="code" href="group_8h.html#a8df21f3ef7412e6c4d39fb67dc0140c6">secp256k1_gej_add_var</a>(&refj, &gej[i1], &gej[i2], <a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&gej[i1]) ? NULL : &zr);</div><div class="line"><a name="l01826"></a><span class="lineno"> 1826</span>  <span class="comment">/* Check Z ratio. */</span></div><div class="line"><a name="l01827"></a><span class="lineno"> 1827</span>  <span class="keywordflow">if</span> (!<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&gej[i1]) && !<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&refj)) {</div><div class="line"><a name="l01828"></a><span class="lineno"> 1828</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> zrz; <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&zrz, &zr, &gej[i1].z);</div><div class="line"><a name="l01829"></a><span class="lineno"> 1829</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&zrz, &refj.<a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>));</div><div class="line"><a name="l01830"></a><span class="lineno"> 1830</span>  }</div><div class="line"><a name="l01831"></a><span class="lineno"> 1831</span>  <a class="code" href="group__impl_8h.html#aea803cf52c0f33c2cb3bfb82d5790d71">secp256k1_ge_set_gej_var</a>(&ref, &refj);</div><div class="line"><a name="l01832"></a><span class="lineno"> 1832</span> </div><div class="line"><a name="l01833"></a><span class="lineno"> 1833</span>  <span class="comment">/* Test gej + ge with Z ratio result (var). */</span></div><div class="line"><a name="l01834"></a><span class="lineno"> 1834</span>  <a class="code" href="group_8h.html#a4d0338f50b08d082caa32f8e72707b55">secp256k1_gej_add_ge_var</a>(&resj, &gej[i1], &ge[i2], <a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&gej[i1]) ? NULL : &zr);</div><div class="line"><a name="l01835"></a><span class="lineno"> 1835</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ref, &resj);</div><div class="line"><a name="l01836"></a><span class="lineno"> 1836</span>  <span class="keywordflow">if</span> (!<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&gej[i1]) && !<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&resj)) {</div><div class="line"><a name="l01837"></a><span class="lineno"> 1837</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> zrz; <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&zrz, &zr, &gej[i1].z);</div><div class="line"><a name="l01838"></a><span class="lineno"> 1838</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&zrz, &resj.<a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>));</div><div class="line"><a name="l01839"></a><span class="lineno"> 1839</span>  }</div><div class="line"><a name="l01840"></a><span class="lineno"> 1840</span> </div><div class="line"><a name="l01841"></a><span class="lineno"> 1841</span>  <span class="comment">/* Test gej + ge (var, with additional Z factor). */</span></div><div class="line"><a name="l01842"></a><span class="lineno"> 1842</span>  {</div><div class="line"><a name="l01843"></a><span class="lineno"> 1843</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> ge2_zfi = ge[i2]; <span class="comment">/* the second term with x and y rescaled for z = 1/zf */</span></div><div class="line"><a name="l01844"></a><span class="lineno"> 1844</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&ge2_zfi.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, &ge2_zfi.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, &zfi2);</div><div class="line"><a name="l01845"></a><span class="lineno"> 1845</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&ge2_zfi.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>, &ge2_zfi.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>, &zfi3);</div><div class="line"><a name="l01846"></a><span class="lineno"> 1846</span>  <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(&ge2_zfi.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>);</div><div class="line"><a name="l01847"></a><span class="lineno"> 1847</span>  <a class="code" href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a>(&ge2_zfi.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>);</div><div class="line"><a name="l01848"></a><span class="lineno"> 1848</span>  <a class="code" href="group_8h.html#a180d4e54e906f101ce0f1e74563ce5f6">secp256k1_gej_add_zinv_var</a>(&resj, &gej[i1], &ge2_zfi, &zf);</div><div class="line"><a name="l01849"></a><span class="lineno"> 1849</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ref, &resj);</div><div class="line"><a name="l01850"></a><span class="lineno"> 1850</span>  }</div><div class="line"><a name="l01851"></a><span class="lineno"> 1851</span> </div><div class="line"><a name="l01852"></a><span class="lineno"> 1852</span>  <span class="comment">/* Test gej + ge (const). */</span></div><div class="line"><a name="l01853"></a><span class="lineno"> 1853</span>  <span class="keywordflow">if</span> (i2 != 0) {</div><div class="line"><a name="l01854"></a><span class="lineno"> 1854</span>  <span class="comment">/* secp256k1_gej_add_ge does not support its second argument being infinity. */</span></div><div class="line"><a name="l01855"></a><span class="lineno"> 1855</span>  <a class="code" href="group_8h.html#a586b55d5921edcd68799f584c0a3c58d">secp256k1_gej_add_ge</a>(&resj, &gej[i1], &ge[i2]);</div><div class="line"><a name="l01856"></a><span class="lineno"> 1856</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ref, &resj);</div><div class="line"><a name="l01857"></a><span class="lineno"> 1857</span>  }</div><div class="line"><a name="l01858"></a><span class="lineno"> 1858</span> </div><div class="line"><a name="l01859"></a><span class="lineno"> 1859</span>  <span class="comment">/* Test doubling (var). */</span></div><div class="line"><a name="l01860"></a><span class="lineno"> 1860</span>  <span class="keywordflow">if</span> ((i1 == 0 && i2 == 0) || ((i1 + 3)/4 == (i2 + 3)/4 && ((i1 + 3)%4)/2 == ((i2 + 3)%4)/2)) {</div><div class="line"><a name="l01861"></a><span class="lineno"> 1861</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> zr2;</div><div class="line"><a name="l01862"></a><span class="lineno"> 1862</span>  <span class="comment">/* Normal doubling with Z ratio result. */</span></div><div class="line"><a name="l01863"></a><span class="lineno"> 1863</span>  <a class="code" href="group_8h.html#a033aa434a4d0838f649ad757dd44db46">secp256k1_gej_double_var</a>(&resj, &gej[i1], &zr2);</div><div class="line"><a name="l01864"></a><span class="lineno"> 1864</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ref, &resj);</div><div class="line"><a name="l01865"></a><span class="lineno"> 1865</span>  <span class="comment">/* Check Z ratio. */</span></div><div class="line"><a name="l01866"></a><span class="lineno"> 1866</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&zr2, &zr2, &gej[i1].z);</div><div class="line"><a name="l01867"></a><span class="lineno"> 1867</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&zr2, &resj.<a class="code" href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">z</a>));</div><div class="line"><a name="l01868"></a><span class="lineno"> 1868</span>  <span class="comment">/* Normal doubling. */</span></div><div class="line"><a name="l01869"></a><span class="lineno"> 1869</span>  <a class="code" href="group_8h.html#a033aa434a4d0838f649ad757dd44db46">secp256k1_gej_double_var</a>(&resj, &gej[i2], NULL);</div><div class="line"><a name="l01870"></a><span class="lineno"> 1870</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ref, &resj);</div><div class="line"><a name="l01871"></a><span class="lineno"> 1871</span>  }</div><div class="line"><a name="l01872"></a><span class="lineno"> 1872</span> </div><div class="line"><a name="l01873"></a><span class="lineno"> 1873</span>  <span class="comment">/* Test adding opposites. */</span></div><div class="line"><a name="l01874"></a><span class="lineno"> 1874</span>  <span class="keywordflow">if</span> ((i1 == 0 && i2 == 0) || ((i1 + 3)/4 == (i2 + 3)/4 && ((i1 + 3)%4)/2 != ((i2 + 3)%4)/2)) {</div><div class="line"><a name="l01875"></a><span class="lineno"> 1875</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#ac83592db46af97faf7ba9b9a39a1f6ff">secp256k1_ge_is_infinity</a>(&ref));</div><div class="line"><a name="l01876"></a><span class="lineno"> 1876</span>  }</div><div class="line"><a name="l01877"></a><span class="lineno"> 1877</span> </div><div class="line"><a name="l01878"></a><span class="lineno"> 1878</span>  <span class="comment">/* Test adding infinity. */</span></div><div class="line"><a name="l01879"></a><span class="lineno"> 1879</span>  <span class="keywordflow">if</span> (i1 == 0) {</div><div class="line"><a name="l01880"></a><span class="lineno"> 1880</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#ac83592db46af97faf7ba9b9a39a1f6ff">secp256k1_ge_is_infinity</a>(&ge[i1]));</div><div class="line"><a name="l01881"></a><span class="lineno"> 1881</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&gej[i1]));</div><div class="line"><a name="l01882"></a><span class="lineno"> 1882</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ref, &gej[i2]);</div><div class="line"><a name="l01883"></a><span class="lineno"> 1883</span>  }</div><div class="line"><a name="l01884"></a><span class="lineno"> 1884</span>  <span class="keywordflow">if</span> (i2 == 0) {</div><div class="line"><a name="l01885"></a><span class="lineno"> 1885</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#ac83592db46af97faf7ba9b9a39a1f6ff">secp256k1_ge_is_infinity</a>(&ge[i2]));</div><div class="line"><a name="l01886"></a><span class="lineno"> 1886</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&gej[i2]));</div><div class="line"><a name="l01887"></a><span class="lineno"> 1887</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ref, &gej[i1]);</div><div class="line"><a name="l01888"></a><span class="lineno"> 1888</span>  }</div><div class="line"><a name="l01889"></a><span class="lineno"> 1889</span>  }</div><div class="line"><a name="l01890"></a><span class="lineno"> 1890</span>  }</div><div class="line"><a name="l01891"></a><span class="lineno"> 1891</span> </div><div class="line"><a name="l01892"></a><span class="lineno"> 1892</span>  <span class="comment">/* Test adding all points together in random order equals infinity. */</span></div><div class="line"><a name="l01893"></a><span class="lineno"> 1893</span>  {</div><div class="line"><a name="l01894"></a><span class="lineno"> 1894</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> <a class="code" href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a> = <a class="code" href="group_8h.html#a0143422e1ce1601b00ff71c20c455ceb">SECP256K1_GEJ_CONST_INFINITY</a>;</div><div class="line"><a name="l01895"></a><span class="lineno"> 1895</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *gej_shuffled = (<a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *)malloc((4 * runs + 1) * <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a>));</div><div class="line"><a name="l01896"></a><span class="lineno"> 1896</span>  <span class="keywordflow">for</span> (i = 0; i < 4 * runs + 1; i++) {</div><div class="line"><a name="l01897"></a><span class="lineno"> 1897</span>  gej_shuffled[i] = gej[i];</div><div class="line"><a name="l01898"></a><span class="lineno"> 1898</span>  }</div><div class="line"><a name="l01899"></a><span class="lineno"> 1899</span>  <span class="keywordflow">for</span> (i = 0; i < 4 * runs + 1; i++) {</div><div class="line"><a name="l01900"></a><span class="lineno"> 1900</span>  <span class="keywordtype">int</span> swap = i + <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(4 * runs + 1 - i);</div><div class="line"><a name="l01901"></a><span class="lineno"> 1901</span>  <span class="keywordflow">if</span> (swap != i) {</div><div class="line"><a name="l01902"></a><span class="lineno"> 1902</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> t = gej_shuffled[i];</div><div class="line"><a name="l01903"></a><span class="lineno"> 1903</span>  gej_shuffled[i] = gej_shuffled[swap];</div><div class="line"><a name="l01904"></a><span class="lineno"> 1904</span>  gej_shuffled[swap] = t;</div><div class="line"><a name="l01905"></a><span class="lineno"> 1905</span>  }</div><div class="line"><a name="l01906"></a><span class="lineno"> 1906</span>  }</div><div class="line"><a name="l01907"></a><span class="lineno"> 1907</span>  <span class="keywordflow">for</span> (i = 0; i < 4 * runs + 1; i++) {</div><div class="line"><a name="l01908"></a><span class="lineno"> 1908</span>  <a class="code" href="group_8h.html#a8df21f3ef7412e6c4d39fb67dc0140c6">secp256k1_gej_add_var</a>(&<a class="code" href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a>, &<a class="code" href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a>, &gej_shuffled[i], NULL);</div><div class="line"><a name="l01909"></a><span class="lineno"> 1909</span>  }</div><div class="line"><a name="l01910"></a><span class="lineno"> 1910</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&<a class="code" href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a>));</div><div class="line"><a name="l01911"></a><span class="lineno"> 1911</span>  free(gej_shuffled);</div><div class="line"><a name="l01912"></a><span class="lineno"> 1912</span>  }</div><div class="line"><a name="l01913"></a><span class="lineno"> 1913</span> </div><div class="line"><a name="l01914"></a><span class="lineno"> 1914</span>  <span class="comment">/* Test batch gej -> ge conversion with and without known z ratios. */</span></div><div class="line"><a name="l01915"></a><span class="lineno"> 1915</span>  {</div><div class="line"><a name="l01916"></a><span class="lineno"> 1916</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *zr = (<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> *)malloc((4 * runs + 1) * <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a>));</div><div class="line"><a name="l01917"></a><span class="lineno"> 1917</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *ge_set_table = (<a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *)malloc((4 * runs + 1) * <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a>));</div><div class="line"><a name="l01918"></a><span class="lineno"> 1918</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *ge_set_all = (<a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> *)malloc((4 * runs + 1) * <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a>));</div><div class="line"><a name="l01919"></a><span class="lineno"> 1919</span>  <span class="keywordflow">for</span> (i = 0; i < 4 * runs + 1; i++) {</div><div class="line"><a name="l01920"></a><span class="lineno"> 1920</span>  <span class="comment">/* Compute gej[i + 1].z / gez[i].z (with gej[n].z taken to be 1). */</span></div><div class="line"><a name="l01921"></a><span class="lineno"> 1921</span>  <span class="keywordflow">if</span> (i < 4 * runs) {</div><div class="line"><a name="l01922"></a><span class="lineno"> 1922</span>  <a class="code" href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a>(&zr[i + 1], &zinv[i], &gej[i + 1].z);</div><div class="line"><a name="l01923"></a><span class="lineno"> 1923</span>  }</div><div class="line"><a name="l01924"></a><span class="lineno"> 1924</span>  }</div><div class="line"><a name="l01925"></a><span class="lineno"> 1925</span>  <a class="code" href="group_8h.html#a1cf9611464711ed63bde94d92ecc70de">secp256k1_ge_set_table_gej_var</a>(4 * runs + 1, ge_set_table, gej, zr);</div><div class="line"><a name="l01926"></a><span class="lineno"> 1926</span>  <a class="code" href="group_8h.html#ada58b0cf328a74cfdd1f8b35083668a1">secp256k1_ge_set_all_gej_var</a>(4 * runs + 1, ge_set_all, gej, &<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aa34a996f869676899e8625adfb6c6f1d">error_callback</a>);</div><div class="line"><a name="l01927"></a><span class="lineno"> 1927</span>  <span class="keywordflow">for</span> (i = 0; i < 4 * runs + 1; i++) {</div><div class="line"><a name="l01928"></a><span class="lineno"> 1928</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> s;</div><div class="line"><a name="l01929"></a><span class="lineno"> 1929</span>  <a class="code" href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a">random_fe_non_zero</a>(&s);</div><div class="line"><a name="l01930"></a><span class="lineno"> 1930</span>  <a class="code" href="group_8h.html#a96ba360f6eb5f21c88e019e741a098ee">secp256k1_gej_rescale</a>(&gej[i], &s);</div><div class="line"><a name="l01931"></a><span class="lineno"> 1931</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ge_set_table[i], &gej[i]);</div><div class="line"><a name="l01932"></a><span class="lineno"> 1932</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ge_set_all[i], &gej[i]);</div><div class="line"><a name="l01933"></a><span class="lineno"> 1933</span>  }</div><div class="line"><a name="l01934"></a><span class="lineno"> 1934</span>  free(ge_set_table);</div><div class="line"><a name="l01935"></a><span class="lineno"> 1935</span>  free(ge_set_all);</div><div class="line"><a name="l01936"></a><span class="lineno"> 1936</span>  free(zr);</div><div class="line"><a name="l01937"></a><span class="lineno"> 1937</span>  }</div><div class="line"><a name="l01938"></a><span class="lineno"> 1938</span> </div><div class="line"><a name="l01939"></a><span class="lineno"> 1939</span>  free(ge);</div><div class="line"><a name="l01940"></a><span class="lineno"> 1940</span>  free(gej);</div><div class="line"><a name="l01941"></a><span class="lineno"> 1941</span>  free(zinv);</div><div class="line"><a name="l01942"></a><span class="lineno"> 1942</span> }</div><div class="line"><a name="l01943"></a><span class="lineno"> 1943</span> </div><div class="line"><a name="l01944"></a><span class="lineno"><a class="line" href="tests_8c.html#a849e08074670ab1644fdec5cc5ef08a7"> 1944</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a849e08074670ab1644fdec5cc5ef08a7">test_add_neg_y_diff_x</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l01945"></a><span class="lineno"> 1945</span>  <span class="comment">/* The point of this test is to check that we can add two points</span></div><div class="line"><a name="l01946"></a><span class="lineno"> 1946</span> <span class="comment"> * whose y-coordinates are negatives of each other but whose x</span></div><div class="line"><a name="l01947"></a><span class="lineno"> 1947</span> <span class="comment"> * coordinates differ. If the x-coordinates were the same, these</span></div><div class="line"><a name="l01948"></a><span class="lineno"> 1948</span> <span class="comment"> * points would be negatives of each other and their sum is</span></div><div class="line"><a name="l01949"></a><span class="lineno"> 1949</span> <span class="comment"> * infinity. This is cool because it "covers up" any degeneracy</span></div><div class="line"><a name="l01950"></a><span class="lineno"> 1950</span> <span class="comment"> * in the addition algorithm that would cause the xy coordinates</span></div><div class="line"><a name="l01951"></a><span class="lineno"> 1951</span> <span class="comment"> * of the sum to be wrong (since infinity has no xy coordinates).</span></div><div class="line"><a name="l01952"></a><span class="lineno"> 1952</span> <span class="comment"> * HOWEVER, if the x-coordinates are different, infinity is the</span></div><div class="line"><a name="l01953"></a><span class="lineno"> 1953</span> <span class="comment"> * wrong answer, and such degeneracies are exposed. This is the</span></div><div class="line"><a name="l01954"></a><span class="lineno"> 1954</span> <span class="comment"> * root of https://github.com/bitcoin/secp256k1/issues/257 which</span></div><div class="line"><a name="l01955"></a><span class="lineno"> 1955</span> <span class="comment"> * this test is a regression test for.</span></div><div class="line"><a name="l01956"></a><span class="lineno"> 1956</span> <span class="comment"> *</span></div><div class="line"><a name="l01957"></a><span class="lineno"> 1957</span> <span class="comment"> * These points were generated in sage as</span></div><div class="line"><a name="l01958"></a><span class="lineno"> 1958</span> <span class="comment"> * # secp256k1 params</span></div><div class="line"><a name="l01959"></a><span class="lineno"> 1959</span> <span class="comment"> * F = FiniteField (0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F)</span></div><div class="line"><a name="l01960"></a><span class="lineno"> 1960</span> <span class="comment"> * C = EllipticCurve ([F (0), F (7)])</span></div><div class="line"><a name="l01961"></a><span class="lineno"> 1961</span> <span class="comment"> * G = C.lift_x(0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798)</span></div><div class="line"><a name="l01962"></a><span class="lineno"> 1962</span> <span class="comment"> * N = FiniteField(G.order())</span></div><div class="line"><a name="l01963"></a><span class="lineno"> 1963</span> <span class="comment"> *</span></div><div class="line"><a name="l01964"></a><span class="lineno"> 1964</span> <span class="comment"> * # endomorphism values (lambda is 1^{1/3} in N, beta is 1^{1/3} in F)</span></div><div class="line"><a name="l01965"></a><span class="lineno"> 1965</span> <span class="comment"> * x = polygen(N)</span></div><div class="line"><a name="l01966"></a><span class="lineno"> 1966</span> <span class="comment"> * lam = (1 - x^3).roots()[1][0]</span></div><div class="line"><a name="l01967"></a><span class="lineno"> 1967</span> <span class="comment"> *</span></div><div class="line"><a name="l01968"></a><span class="lineno"> 1968</span> <span class="comment"> * # random "bad pair"</span></div><div class="line"><a name="l01969"></a><span class="lineno"> 1969</span> <span class="comment"> * P = C.random_element()</span></div><div class="line"><a name="l01970"></a><span class="lineno"> 1970</span> <span class="comment"> * Q = -int(lam) * P</span></div><div class="line"><a name="l01971"></a><span class="lineno"> 1971</span> <span class="comment"> * print " P: %x %x" % P.xy()</span></div><div class="line"><a name="l01972"></a><span class="lineno"> 1972</span> <span class="comment"> * print " Q: %x %x" % Q.xy()</span></div><div class="line"><a name="l01973"></a><span class="lineno"> 1973</span> <span class="comment"> * print "P + Q: %x %x" % (P + Q).xy()</span></div><div class="line"><a name="l01974"></a><span class="lineno"> 1974</span> <span class="comment"> */</span></div><div class="line"><a name="l01975"></a><span class="lineno"> 1975</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> aj = <a class="code" href="group_8h.html#af46c307c9174e2aa45dbf6f32e61ed21">SECP256K1_GEJ_CONST</a>(</div><div class="line"><a name="l01976"></a><span class="lineno"> 1976</span>  0x8d24cd95, 0x0a355af1, 0x3c543505, 0x44238d30,</div><div class="line"><a name="l01977"></a><span class="lineno"> 1977</span>  0x0643d79f, 0x05a59614, 0x2f8ec030, 0xd58977cb,</div><div class="line"><a name="l01978"></a><span class="lineno"> 1978</span>  0x001e337a, 0x38093dcd, 0x6c0f386d, 0x0b1293a8,</div><div class="line"><a name="l01979"></a><span class="lineno"> 1979</span>  0x4d72c879, 0xd7681924, 0x44e6d2f3, 0x9190117d</div><div class="line"><a name="l01980"></a><span class="lineno"> 1980</span>  );</div><div class="line"><a name="l01981"></a><span class="lineno"> 1981</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> bj = <a class="code" href="group_8h.html#af46c307c9174e2aa45dbf6f32e61ed21">SECP256K1_GEJ_CONST</a>(</div><div class="line"><a name="l01982"></a><span class="lineno"> 1982</span>  0xc7b74206, 0x1f788cd9, 0xabd0937d, 0x164a0d86,</div><div class="line"><a name="l01983"></a><span class="lineno"> 1983</span>  0x95f6ff75, 0xf19a4ce9, 0xd013bd7b, 0xbf92d2a7,</div><div class="line"><a name="l01984"></a><span class="lineno"> 1984</span>  0xffe1cc85, 0xc7f6c232, 0x93f0c792, 0xf4ed6c57,</div><div class="line"><a name="l01985"></a><span class="lineno"> 1985</span>  0xb28d3786, 0x2897e6db, 0xbb192d0b, 0x6e6feab2</div><div class="line"><a name="l01986"></a><span class="lineno"> 1986</span>  );</div><div class="line"><a name="l01987"></a><span class="lineno"> 1987</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> sumj = <a class="code" href="group_8h.html#af46c307c9174e2aa45dbf6f32e61ed21">SECP256K1_GEJ_CONST</a>(</div><div class="line"><a name="l01988"></a><span class="lineno"> 1988</span>  0x671a63c0, 0x3efdad4c, 0x389a7798, 0x24356027,</div><div class="line"><a name="l01989"></a><span class="lineno"> 1989</span>  0xb3d69010, 0x278625c3, 0x5c86d390, 0x184a8f7a,</div><div class="line"><a name="l01990"></a><span class="lineno"> 1990</span>  0x5f6409c2, 0x2ce01f2b, 0x511fd375, 0x25071d08,</div><div class="line"><a name="l01991"></a><span class="lineno"> 1991</span>  0xda651801, 0x70e95caf, 0x8f0d893c, 0xbed8fbbe</div><div class="line"><a name="l01992"></a><span class="lineno"> 1992</span>  );</div><div class="line"><a name="l01993"></a><span class="lineno"> 1993</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> b;</div><div class="line"><a name="l01994"></a><span class="lineno"> 1994</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> resj;</div><div class="line"><a name="l01995"></a><span class="lineno"> 1995</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> res;</div><div class="line"><a name="l01996"></a><span class="lineno"> 1996</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&b, &bj);</div><div class="line"><a name="l01997"></a><span class="lineno"> 1997</span> </div><div class="line"><a name="l01998"></a><span class="lineno"> 1998</span>  <a class="code" href="group_8h.html#a8df21f3ef7412e6c4d39fb67dc0140c6">secp256k1_gej_add_var</a>(&resj, &aj, &bj, NULL);</div><div class="line"><a name="l01999"></a><span class="lineno"> 1999</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res, &resj);</div><div class="line"><a name="l02000"></a><span class="lineno"> 2000</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&res, &sumj);</div><div class="line"><a name="l02001"></a><span class="lineno"> 2001</span> </div><div class="line"><a name="l02002"></a><span class="lineno"> 2002</span>  <a class="code" href="group_8h.html#a586b55d5921edcd68799f584c0a3c58d">secp256k1_gej_add_ge</a>(&resj, &aj, &b);</div><div class="line"><a name="l02003"></a><span class="lineno"> 2003</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res, &resj);</div><div class="line"><a name="l02004"></a><span class="lineno"> 2004</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&res, &sumj);</div><div class="line"><a name="l02005"></a><span class="lineno"> 2005</span> </div><div class="line"><a name="l02006"></a><span class="lineno"> 2006</span>  <a class="code" href="group_8h.html#a4d0338f50b08d082caa32f8e72707b55">secp256k1_gej_add_ge_var</a>(&resj, &aj, &b, NULL);</div><div class="line"><a name="l02007"></a><span class="lineno"> 2007</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res, &resj);</div><div class="line"><a name="l02008"></a><span class="lineno"> 2008</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&res, &sumj);</div><div class="line"><a name="l02009"></a><span class="lineno"> 2009</span> }</div><div class="line"><a name="l02010"></a><span class="lineno"> 2010</span> </div><div class="line"><a name="l02011"></a><span class="lineno"><a class="line" href="tests_8c.html#aa7ad70a73e9a44f0b9486ffe6f46ca39"> 2011</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#aa7ad70a73e9a44f0b9486ffe6f46ca39">run_ge</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02012"></a><span class="lineno"> 2012</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02013"></a><span class="lineno"> 2013</span>  <span class="keywordflow">for</span> (i = 0; i < <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a> * 32; i++) {</div><div class="line"><a name="l02014"></a><span class="lineno"> 2014</span>  <a class="code" href="tests_8c.html#a3084bb11900a5e4d33115904d0ceb847">test_ge</a>();</div><div class="line"><a name="l02015"></a><span class="lineno"> 2015</span>  }</div><div class="line"><a name="l02016"></a><span class="lineno"> 2016</span>  <a class="code" href="tests_8c.html#a849e08074670ab1644fdec5cc5ef08a7">test_add_neg_y_diff_x</a>();</div><div class="line"><a name="l02017"></a><span class="lineno"> 2017</span> }</div><div class="line"><a name="l02018"></a><span class="lineno"> 2018</span> </div><div class="line"><a name="l02019"></a><span class="lineno"><a class="line" href="tests_8c.html#af668387a475fa94107e316b2ddc003cf"> 2019</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#af668387a475fa94107e316b2ddc003cf">test_ec_combine</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02020"></a><span class="lineno"> 2020</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a> = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 0);</div><div class="line"><a name="l02021"></a><span class="lineno"> 2021</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> <a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>[6];</div><div class="line"><a name="l02022"></a><span class="lineno"> 2022</span>  <span class="keyword">const</span> <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>* d[6];</div><div class="line"><a name="l02023"></a><span class="lineno"> 2023</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> sd;</div><div class="line"><a name="l02024"></a><span class="lineno"> 2024</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> sd2;</div><div class="line"><a name="l02025"></a><span class="lineno"> 2025</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> Qj;</div><div class="line"><a name="l02026"></a><span class="lineno"> 2026</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> Q;</div><div class="line"><a name="l02027"></a><span class="lineno"> 2027</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02028"></a><span class="lineno"> 2028</span>  <span class="keywordflow">for</span> (i = 1; i <= 6; i++) {</div><div class="line"><a name="l02029"></a><span class="lineno"> 2029</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> s;</div><div class="line"><a name="l02030"></a><span class="lineno"> 2030</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&s);</div><div class="line"><a name="l02031"></a><span class="lineno"> 2031</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&<a class="code" href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a>, &<a class="code" href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a>, &s);</div><div class="line"><a name="l02032"></a><span class="lineno"> 2032</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &Qj, &s);</div><div class="line"><a name="l02033"></a><span class="lineno"> 2033</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&Q, &Qj);</div><div class="line"><a name="l02034"></a><span class="lineno"> 2034</span>  <a class="code" href="secp256k1_8c.html#aa061c9c5c861017bef990e5c4653e0f4">secp256k1_pubkey_save</a>(&<a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>[i - 1], &Q);</div><div class="line"><a name="l02035"></a><span class="lineno"> 2035</span>  d[i - 1] = &<a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>[i - 1];</div><div class="line"><a name="l02036"></a><span class="lineno"> 2036</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &Qj, &<a class="code" href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a>);</div><div class="line"><a name="l02037"></a><span class="lineno"> 2037</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&Q, &Qj);</div><div class="line"><a name="l02038"></a><span class="lineno"> 2038</span>  <a class="code" href="secp256k1_8c.html#aa061c9c5c861017bef990e5c4653e0f4">secp256k1_pubkey_save</a>(&sd, &Q);</div><div class="line"><a name="l02039"></a><span class="lineno"> 2039</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sd2, d, i) == 1);</div><div class="line"><a name="l02040"></a><span class="lineno"> 2040</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&sd, &sd2, <span class="keyword">sizeof</span>(sd)) == 0);</div><div class="line"><a name="l02041"></a><span class="lineno"> 2041</span>  }</div><div class="line"><a name="l02042"></a><span class="lineno"> 2042</span> }</div><div class="line"><a name="l02043"></a><span class="lineno"> 2043</span> </div><div class="line"><a name="l02044"></a><span class="lineno"><a class="line" href="tests_8c.html#a394075284eed27ac8d87935f73d4c673"> 2044</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a394075284eed27ac8d87935f73d4c673">run_ec_combine</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02045"></a><span class="lineno"> 2045</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02046"></a><span class="lineno"> 2046</span>  <span class="keywordflow">for</span> (i = 0; i < <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a> * 8; i++) {</div><div class="line"><a name="l02047"></a><span class="lineno"> 2047</span>  <a class="code" href="tests_8c.html#af668387a475fa94107e316b2ddc003cf">test_ec_combine</a>();</div><div class="line"><a name="l02048"></a><span class="lineno"> 2048</span>  }</div><div class="line"><a name="l02049"></a><span class="lineno"> 2049</span> }</div><div class="line"><a name="l02050"></a><span class="lineno"> 2050</span> </div><div class="line"><a name="l02051"></a><span class="lineno"><a class="line" href="tests_8c.html#abf8379c326274c3162ebb26491a31611"> 2051</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#abf8379c326274c3162ebb26491a31611">test_group_decompress</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a>* x) {</div><div class="line"><a name="l02052"></a><span class="lineno"> 2052</span>  <span class="comment">/* The input itself, normalized. */</span></div><div class="line"><a name="l02053"></a><span class="lineno"> 2053</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> fex = *x;</div><div class="line"><a name="l02054"></a><span class="lineno"> 2054</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> tmp;</div><div class="line"><a name="l02055"></a><span class="lineno"> 2055</span>  <span class="comment">/* Results of set_xquad_var, set_xo_var(..., 0), set_xo_var(..., 1). */</span></div><div class="line"><a name="l02056"></a><span class="lineno"> 2056</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> ge_quad, ge_even, ge_odd;</div><div class="line"><a name="l02057"></a><span class="lineno"> 2057</span>  <span class="comment">/* Return values of the above calls. */</span></div><div class="line"><a name="l02058"></a><span class="lineno"> 2058</span>  <span class="keywordtype">int</span> res_quad, res_even, res_odd;</div><div class="line"><a name="l02059"></a><span class="lineno"> 2059</span> </div><div class="line"><a name="l02060"></a><span class="lineno"> 2060</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&fex);</div><div class="line"><a name="l02061"></a><span class="lineno"> 2061</span> </div><div class="line"><a name="l02062"></a><span class="lineno"> 2062</span>  res_quad = <a class="code" href="group_8h.html#a767d4255b822bcd84f84d9b440b3af86">secp256k1_ge_set_xquad_var</a>(&ge_quad, &fex);</div><div class="line"><a name="l02063"></a><span class="lineno"> 2063</span>  res_even = <a class="code" href="group_8h.html#a3c3d9154b093bb4ed48ba55e4c28a0b5">secp256k1_ge_set_xo_var</a>(&ge_even, &fex, 0);</div><div class="line"><a name="l02064"></a><span class="lineno"> 2064</span>  res_odd = <a class="code" href="group_8h.html#a3c3d9154b093bb4ed48ba55e4c28a0b5">secp256k1_ge_set_xo_var</a>(&ge_odd, &fex, 1);</div><div class="line"><a name="l02065"></a><span class="lineno"> 2065</span> </div><div class="line"><a name="l02066"></a><span class="lineno"> 2066</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(res_quad == res_even);</div><div class="line"><a name="l02067"></a><span class="lineno"> 2067</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(res_quad == res_odd);</div><div class="line"><a name="l02068"></a><span class="lineno"> 2068</span> </div><div class="line"><a name="l02069"></a><span class="lineno"> 2069</span>  <span class="keywordflow">if</span> (res_quad) {</div><div class="line"><a name="l02070"></a><span class="lineno"> 2070</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&ge_quad.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>);</div><div class="line"><a name="l02071"></a><span class="lineno"> 2071</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&ge_odd.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>);</div><div class="line"><a name="l02072"></a><span class="lineno"> 2072</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&ge_even.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>);</div><div class="line"><a name="l02073"></a><span class="lineno"> 2073</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&ge_quad.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>);</div><div class="line"><a name="l02074"></a><span class="lineno"> 2074</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&ge_odd.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>);</div><div class="line"><a name="l02075"></a><span class="lineno"> 2075</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&ge_even.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>);</div><div class="line"><a name="l02076"></a><span class="lineno"> 2076</span> </div><div class="line"><a name="l02077"></a><span class="lineno"> 2077</span>  <span class="comment">/* No infinity allowed. */</span></div><div class="line"><a name="l02078"></a><span class="lineno"> 2078</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!ge_quad.<a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>);</div><div class="line"><a name="l02079"></a><span class="lineno"> 2079</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!ge_even.<a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>);</div><div class="line"><a name="l02080"></a><span class="lineno"> 2080</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!ge_odd.<a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>);</div><div class="line"><a name="l02081"></a><span class="lineno"> 2081</span> </div><div class="line"><a name="l02082"></a><span class="lineno"> 2082</span>  <span class="comment">/* Check that the x coordinates check out. */</span></div><div class="line"><a name="l02083"></a><span class="lineno"> 2083</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&ge_quad.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, x));</div><div class="line"><a name="l02084"></a><span class="lineno"> 2084</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&ge_even.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, x));</div><div class="line"><a name="l02085"></a><span class="lineno"> 2085</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&ge_odd.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, x));</div><div class="line"><a name="l02086"></a><span class="lineno"> 2086</span> </div><div class="line"><a name="l02087"></a><span class="lineno"> 2087</span>  <span class="comment">/* Check that the Y coordinate result in ge_quad is a square. */</span></div><div class="line"><a name="l02088"></a><span class="lineno"> 2088</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#adeed9551ce946187f98c5e3d789e9575">secp256k1_fe_sqrt_var</a>(&tmp, &ge_quad.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>));</div><div class="line"><a name="l02089"></a><span class="lineno"> 2089</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&tmp, &tmp);</div><div class="line"><a name="l02090"></a><span class="lineno"> 2090</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&tmp, &ge_quad.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>));</div><div class="line"><a name="l02091"></a><span class="lineno"> 2091</span> </div><div class="line"><a name="l02092"></a><span class="lineno"> 2092</span>  <span class="comment">/* Check odd/even Y in ge_odd, ge_even. */</span></div><div class="line"><a name="l02093"></a><span class="lineno"> 2093</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a4657d3eea1cc59c7a20cc2d19663bf02">secp256k1_fe_is_odd</a>(&ge_odd.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>));</div><div class="line"><a name="l02094"></a><span class="lineno"> 2094</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="field_8h.html#a4657d3eea1cc59c7a20cc2d19663bf02">secp256k1_fe_is_odd</a>(&ge_even.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>));</div><div class="line"><a name="l02095"></a><span class="lineno"> 2095</span>  }</div><div class="line"><a name="l02096"></a><span class="lineno"> 2096</span> }</div><div class="line"><a name="l02097"></a><span class="lineno"> 2097</span> </div><div class="line"><a name="l02098"></a><span class="lineno"><a class="line" href="tests_8c.html#a03817b02604d9e2c9b5f049fc01d4a99"> 2098</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a03817b02604d9e2c9b5f049fc01d4a99">run_group_decompress</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02099"></a><span class="lineno"> 2099</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02100"></a><span class="lineno"> 2100</span>  <span class="keywordflow">for</span> (i = 0; i < <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a> * 4; i++) {</div><div class="line"><a name="l02101"></a><span class="lineno"> 2101</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> fe;</div><div class="line"><a name="l02102"></a><span class="lineno"> 2102</span>  <a class="code" href="tests_8c.html#a786a875eccc29ad918255883d89f00a1">random_fe_test</a>(&fe);</div><div class="line"><a name="l02103"></a><span class="lineno"> 2103</span>  <a class="code" href="tests_8c.html#abf8379c326274c3162ebb26491a31611">test_group_decompress</a>(&fe);</div><div class="line"><a name="l02104"></a><span class="lineno"> 2104</span>  }</div><div class="line"><a name="l02105"></a><span class="lineno"> 2105</span> }</div><div class="line"><a name="l02106"></a><span class="lineno"> 2106</span> </div><div class="line"><a name="l02107"></a><span class="lineno"> 2107</span> <span class="comment">/***** ECMULT TESTS *****/</span></div><div class="line"><a name="l02108"></a><span class="lineno"> 2108</span> </div><div class="line"><a name="l02109"></a><span class="lineno"><a class="line" href="tests_8c.html#aec6ef7189f31c2b9628cedf9154f6929"> 2109</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#aec6ef7189f31c2b9628cedf9154f6929">run_ecmult_chain</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02110"></a><span class="lineno"> 2110</span>  <span class="comment">/* random starting point A (on the curve) */</span></div><div class="line"><a name="l02111"></a><span class="lineno"> 2111</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> a = <a class="code" href="group_8h.html#af46c307c9174e2aa45dbf6f32e61ed21">SECP256K1_GEJ_CONST</a>(</div><div class="line"><a name="l02112"></a><span class="lineno"> 2112</span>  0x8b30bbe9, 0xae2a9906, 0x96b22f67, 0x0709dff3,</div><div class="line"><a name="l02113"></a><span class="lineno"> 2113</span>  0x727fd8bc, 0x04d3362c, 0x6c7bf458, 0xe2846004,</div><div class="line"><a name="l02114"></a><span class="lineno"> 2114</span>  0xa357ae91, 0x5c4a6528, 0x1309edf2, 0x0504740f,</div><div class="line"><a name="l02115"></a><span class="lineno"> 2115</span>  0x0eb33439, 0x90216b4f, 0x81063cb6, 0x5f2f7e0f</div><div class="line"><a name="l02116"></a><span class="lineno"> 2116</span>  );</div><div class="line"><a name="l02117"></a><span class="lineno"> 2117</span>  <span class="comment">/* two random initial factors xn and gn */</span></div><div class="line"><a name="l02118"></a><span class="lineno"> 2118</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> xn = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(</div><div class="line"><a name="l02119"></a><span class="lineno"> 2119</span>  0x84cc5452, 0xf7fde1ed, 0xb4d38a8c, 0xe9b1b84c,</div><div class="line"><a name="l02120"></a><span class="lineno"> 2120</span>  0xcef31f14, 0x6e569be9, 0x705d357a, 0x42985407</div><div class="line"><a name="l02121"></a><span class="lineno"> 2121</span>  );</div><div class="line"><a name="l02122"></a><span class="lineno"> 2122</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> gn = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(</div><div class="line"><a name="l02123"></a><span class="lineno"> 2123</span>  0xa1e58d22, 0x553dcd42, 0xb2398062, 0x5d4c57a9,</div><div class="line"><a name="l02124"></a><span class="lineno"> 2124</span>  0x6e9323d4, 0x2b3152e5, 0xca2c3990, 0xedc7c9de</div><div class="line"><a name="l02125"></a><span class="lineno"> 2125</span>  );</div><div class="line"><a name="l02126"></a><span class="lineno"> 2126</span>  <span class="comment">/* two small multipliers to be applied to xn and gn in every iteration: */</span></div><div class="line"><a name="l02127"></a><span class="lineno"> 2127</span>  <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> xf = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 0x1337);</div><div class="line"><a name="l02128"></a><span class="lineno"> 2128</span>  <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> gf = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 0x7113);</div><div class="line"><a name="l02129"></a><span class="lineno"> 2129</span>  <span class="comment">/* accumulators with the resulting coefficients to A and G */</span></div><div class="line"><a name="l02130"></a><span class="lineno"> 2130</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> ae = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 1);</div><div class="line"><a name="l02131"></a><span class="lineno"> 2131</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> ge = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 0);</div><div class="line"><a name="l02132"></a><span class="lineno"> 2132</span>  <span class="comment">/* actual points */</span></div><div class="line"><a name="l02133"></a><span class="lineno"> 2133</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> x;</div><div class="line"><a name="l02134"></a><span class="lineno"> 2134</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> x2;</div><div class="line"><a name="l02135"></a><span class="lineno"> 2135</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02136"></a><span class="lineno"> 2136</span> </div><div class="line"><a name="l02137"></a><span class="lineno"> 2137</span>  <span class="comment">/* the point being computed */</span></div><div class="line"><a name="l02138"></a><span class="lineno"> 2138</span>  x = a;</div><div class="line"><a name="l02139"></a><span class="lineno"> 2139</span>  <span class="keywordflow">for</span> (i = 0; i < 200*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l02140"></a><span class="lineno"> 2140</span>  <span class="comment">/* in each iteration, compute X = xn*X + gn*G; */</span></div><div class="line"><a name="l02141"></a><span class="lineno"> 2141</span>  <a class="code" href="ecmult_8h.html#aacf8b6ba48671daf24d549adb176366c">secp256k1_ecmult</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &x, &x, &xn, &gn);</div><div class="line"><a name="l02142"></a><span class="lineno"> 2142</span>  <span class="comment">/* also compute ae and ge: the actual accumulated factors for A and G */</span></div><div class="line"><a name="l02143"></a><span class="lineno"> 2143</span>  <span class="comment">/* if X was (ae*A+ge*G), xn*X + gn*G results in (xn*ae*A + (xn*ge+gn)*G) */</span></div><div class="line"><a name="l02144"></a><span class="lineno"> 2144</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&ae, &ae, &xn);</div><div class="line"><a name="l02145"></a><span class="lineno"> 2145</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&ge, &ge, &xn);</div><div class="line"><a name="l02146"></a><span class="lineno"> 2146</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&ge, &ge, &gn);</div><div class="line"><a name="l02147"></a><span class="lineno"> 2147</span>  <span class="comment">/* modify xn and gn */</span></div><div class="line"><a name="l02148"></a><span class="lineno"> 2148</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&xn, &xn, &xf);</div><div class="line"><a name="l02149"></a><span class="lineno"> 2149</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&gn, &gn, &gf);</div><div class="line"><a name="l02150"></a><span class="lineno"> 2150</span> </div><div class="line"><a name="l02151"></a><span class="lineno"> 2151</span>  <span class="comment">/* verify */</span></div><div class="line"><a name="l02152"></a><span class="lineno"> 2152</span>  <span class="keywordflow">if</span> (i == 19999) {</div><div class="line"><a name="l02153"></a><span class="lineno"> 2153</span>  <span class="comment">/* expected result after 19999 iterations */</span></div><div class="line"><a name="l02154"></a><span class="lineno"> 2154</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> rp = <a class="code" href="group_8h.html#af46c307c9174e2aa45dbf6f32e61ed21">SECP256K1_GEJ_CONST</a>(</div><div class="line"><a name="l02155"></a><span class="lineno"> 2155</span>  0xD6E96687, 0xF9B10D09, 0x2A6F3543, 0x9D86CEBE,</div><div class="line"><a name="l02156"></a><span class="lineno"> 2156</span>  0xA4535D0D, 0x409F5358, 0x6440BD74, 0xB933E830,</div><div class="line"><a name="l02157"></a><span class="lineno"> 2157</span>  0xB95CBCA2, 0xC77DA786, 0x539BE8FD, 0x53354D2D,</div><div class="line"><a name="l02158"></a><span class="lineno"> 2158</span>  0x3B4F566A, 0xE6580454, 0x07ED6015, 0xEE1B2A88</div><div class="line"><a name="l02159"></a><span class="lineno"> 2159</span>  );</div><div class="line"><a name="l02160"></a><span class="lineno"> 2160</span> </div><div class="line"><a name="l02161"></a><span class="lineno"> 2161</span>  <a class="code" href="group_8h.html#af9194949a7aaf18aceab1dee73fe4027">secp256k1_gej_neg</a>(&rp, &rp);</div><div class="line"><a name="l02162"></a><span class="lineno"> 2162</span>  <a class="code" href="group_8h.html#a8df21f3ef7412e6c4d39fb67dc0140c6">secp256k1_gej_add_var</a>(&rp, &rp, &x, NULL);</div><div class="line"><a name="l02163"></a><span class="lineno"> 2163</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&rp));</div><div class="line"><a name="l02164"></a><span class="lineno"> 2164</span>  }</div><div class="line"><a name="l02165"></a><span class="lineno"> 2165</span>  }</div><div class="line"><a name="l02166"></a><span class="lineno"> 2166</span>  <span class="comment">/* redo the computation, but directly with the resulting ae and ge coefficients: */</span></div><div class="line"><a name="l02167"></a><span class="lineno"> 2167</span>  <a class="code" href="ecmult_8h.html#aacf8b6ba48671daf24d549adb176366c">secp256k1_ecmult</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &x2, &a, &ae, &ge);</div><div class="line"><a name="l02168"></a><span class="lineno"> 2168</span>  <a class="code" href="group_8h.html#af9194949a7aaf18aceab1dee73fe4027">secp256k1_gej_neg</a>(&x2, &x2);</div><div class="line"><a name="l02169"></a><span class="lineno"> 2169</span>  <a class="code" href="group_8h.html#a8df21f3ef7412e6c4d39fb67dc0140c6">secp256k1_gej_add_var</a>(&x2, &x2, &x, NULL);</div><div class="line"><a name="l02170"></a><span class="lineno"> 2170</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&x2));</div><div class="line"><a name="l02171"></a><span class="lineno"> 2171</span> }</div><div class="line"><a name="l02172"></a><span class="lineno"> 2172</span> </div><div class="line"><a name="l02173"></a><span class="lineno"><a class="line" href="tests_8c.html#a5760a028e03f061e5aed00cb7839138e"> 2173</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a5760a028e03f061e5aed00cb7839138e">test_point_times_order</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> *point) {</div><div class="line"><a name="l02174"></a><span class="lineno"> 2174</span>  <span class="comment">/* X * (point + G) + (order-X) * (pointer + G) = 0 */</span></div><div class="line"><a name="l02175"></a><span class="lineno"> 2175</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> x;</div><div class="line"><a name="l02176"></a><span class="lineno"> 2176</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> nx;</div><div class="line"><a name="l02177"></a><span class="lineno"> 2177</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> zero = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 0);</div><div class="line"><a name="l02178"></a><span class="lineno"> 2178</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> one = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 1);</div><div class="line"><a name="l02179"></a><span class="lineno"> 2179</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> res1, res2;</div><div class="line"><a name="l02180"></a><span class="lineno"> 2180</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> res3;</div><div class="line"><a name="l02181"></a><span class="lineno"> 2181</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pub[65];</div><div class="line"><a name="l02182"></a><span class="lineno"> 2182</span>  <span class="keywordtype">size_t</span> psize = 65;</div><div class="line"><a name="l02183"></a><span class="lineno"> 2183</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&x);</div><div class="line"><a name="l02184"></a><span class="lineno"> 2184</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&nx, &x);</div><div class="line"><a name="l02185"></a><span class="lineno"> 2185</span>  <a class="code" href="ecmult_8h.html#aacf8b6ba48671daf24d549adb176366c">secp256k1_ecmult</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &res1, point, &x, &x); <span class="comment">/* calc res1 = x * point + x * G; */</span></div><div class="line"><a name="l02186"></a><span class="lineno"> 2186</span>  <a class="code" href="ecmult_8h.html#aacf8b6ba48671daf24d549adb176366c">secp256k1_ecmult</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &res2, point, &nx, &nx); <span class="comment">/* calc res2 = (order - x) * point + (order - x) * G; */</span></div><div class="line"><a name="l02187"></a><span class="lineno"> 2187</span>  <a class="code" href="group_8h.html#a8df21f3ef7412e6c4d39fb67dc0140c6">secp256k1_gej_add_var</a>(&res1, &res1, &res2, NULL);</div><div class="line"><a name="l02188"></a><span class="lineno"> 2188</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&res1));</div><div class="line"><a name="l02189"></a><span class="lineno"> 2189</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group__impl_8h.html#aaf14c34acab0a279530f58c7e7d50749">secp256k1_gej_is_valid_var</a>(&res1) == 0);</div><div class="line"><a name="l02190"></a><span class="lineno"> 2190</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res3, &res1);</div><div class="line"><a name="l02191"></a><span class="lineno"> 2191</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#ac83592db46af97faf7ba9b9a39a1f6ff">secp256k1_ge_is_infinity</a>(&res3));</div><div class="line"><a name="l02192"></a><span class="lineno"> 2192</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a83600b0c4d8e95a8b2e730b4e2f207dc">secp256k1_ge_is_valid_var</a>(&res3) == 0);</div><div class="line"><a name="l02193"></a><span class="lineno"> 2193</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae1f52342d70928f16c8e606da59e6aa6">secp256k1_eckey_pubkey_serialize</a>(&res3, pub, &psize, 0) == 0);</div><div class="line"><a name="l02194"></a><span class="lineno"> 2194</span>  psize = 65;</div><div class="line"><a name="l02195"></a><span class="lineno"> 2195</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae1f52342d70928f16c8e606da59e6aa6">secp256k1_eckey_pubkey_serialize</a>(&res3, pub, &psize, 1) == 0);</div><div class="line"><a name="l02196"></a><span class="lineno"> 2196</span>  <span class="comment">/* check zero/one edge cases */</span></div><div class="line"><a name="l02197"></a><span class="lineno"> 2197</span>  <a class="code" href="ecmult_8h.html#aacf8b6ba48671daf24d549adb176366c">secp256k1_ecmult</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &res1, point, &zero, &zero);</div><div class="line"><a name="l02198"></a><span class="lineno"> 2198</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res3, &res1);</div><div class="line"><a name="l02199"></a><span class="lineno"> 2199</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#ac83592db46af97faf7ba9b9a39a1f6ff">secp256k1_ge_is_infinity</a>(&res3));</div><div class="line"><a name="l02200"></a><span class="lineno"> 2200</span>  <a class="code" href="ecmult_8h.html#aacf8b6ba48671daf24d549adb176366c">secp256k1_ecmult</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &res1, point, &one, &zero);</div><div class="line"><a name="l02201"></a><span class="lineno"> 2201</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res3, &res1);</div><div class="line"><a name="l02202"></a><span class="lineno"> 2202</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&res3, point);</div><div class="line"><a name="l02203"></a><span class="lineno"> 2203</span>  <a class="code" href="ecmult_8h.html#aacf8b6ba48671daf24d549adb176366c">secp256k1_ecmult</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &res1, point, &zero, &one);</div><div class="line"><a name="l02204"></a><span class="lineno"> 2204</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res3, &res1);</div><div class="line"><a name="l02205"></a><span class="lineno"> 2205</span>  <a class="code" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a>(&res3, &<a class="code" href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a>);</div><div class="line"><a name="l02206"></a><span class="lineno"> 2206</span> }</div><div class="line"><a name="l02207"></a><span class="lineno"> 2207</span> </div><div class="line"><a name="l02208"></a><span class="lineno"><a class="line" href="tests_8c.html#accc1ed100e6e73e61ce30e82cf4f0bbb"> 2208</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#accc1ed100e6e73e61ce30e82cf4f0bbb">run_point_times_order</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02209"></a><span class="lineno"> 2209</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02210"></a><span class="lineno"> 2210</span>  <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> x = <a class="code" href="field__10x26_8h.html#a8c00ba3d97ea0d9b0d461463e890de15">SECP256K1_FE_CONST</a>(0, 0, 0, 0, 0, 0, 0, 2);</div><div class="line"><a name="l02211"></a><span class="lineno"> 2211</span>  <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="structsecp256k1__fe.html">secp256k1_fe</a> xr = <a class="code" href="field__10x26_8h.html#a8c00ba3d97ea0d9b0d461463e890de15">SECP256K1_FE_CONST</a>(</div><div class="line"><a name="l02212"></a><span class="lineno"> 2212</span>  0x7603CB59, 0xB0EF6C63, 0xFE608479, 0x2A0C378C,</div><div class="line"><a name="l02213"></a><span class="lineno"> 2213</span>  0xDB3233A8, 0x0F8A9A09, 0xA877DEAD, 0x31B38C45</div><div class="line"><a name="l02214"></a><span class="lineno"> 2214</span>  );</div><div class="line"><a name="l02215"></a><span class="lineno"> 2215</span>  <span class="keywordflow">for</span> (i = 0; i < 500; i++) {</div><div class="line"><a name="l02216"></a><span class="lineno"> 2216</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> <a class="code" href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">p</a>;</div><div class="line"><a name="l02217"></a><span class="lineno"> 2217</span>  <span class="keywordflow">if</span> (<a class="code" href="group_8h.html#a3c3d9154b093bb4ed48ba55e4c28a0b5">secp256k1_ge_set_xo_var</a>(&<a class="code" href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">p</a>, &x, 1)) {</div><div class="line"><a name="l02218"></a><span class="lineno"> 2218</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> j;</div><div class="line"><a name="l02219"></a><span class="lineno"> 2219</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a83600b0c4d8e95a8b2e730b4e2f207dc">secp256k1_ge_is_valid_var</a>(&<a class="code" href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">p</a>));</div><div class="line"><a name="l02220"></a><span class="lineno"> 2220</span>  <a class="code" href="group_8h.html#ad5f813e26afb239f03e83f0e61e05498">secp256k1_gej_set_ge</a>(&j, &<a class="code" href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">p</a>);</div><div class="line"><a name="l02221"></a><span class="lineno"> 2221</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group__impl_8h.html#aaf14c34acab0a279530f58c7e7d50749">secp256k1_gej_is_valid_var</a>(&j));</div><div class="line"><a name="l02222"></a><span class="lineno"> 2222</span>  <a class="code" href="tests_8c.html#a5760a028e03f061e5aed00cb7839138e">test_point_times_order</a>(&j);</div><div class="line"><a name="l02223"></a><span class="lineno"> 2223</span>  }</div><div class="line"><a name="l02224"></a><span class="lineno"> 2224</span>  <a class="code" href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a>(&x, &x);</div><div class="line"><a name="l02225"></a><span class="lineno"> 2225</span>  }</div><div class="line"><a name="l02226"></a><span class="lineno"> 2226</span>  <a class="code" href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a>(&x);</div><div class="line"><a name="l02227"></a><span class="lineno"> 2227</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a>(&x, &xr));</div><div class="line"><a name="l02228"></a><span class="lineno"> 2228</span> }</div><div class="line"><a name="l02229"></a><span class="lineno"> 2229</span> </div><div class="line"><a name="l02230"></a><span class="lineno"><a class="line" href="tests_8c.html#a2e747532c49b7e398aff44547a7ff477"> 2230</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a2e747532c49b7e398aff44547a7ff477">ecmult_const_random_mult</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02231"></a><span class="lineno"> 2231</span>  <span class="comment">/* random starting point A (on the curve) */</span></div><div class="line"><a name="l02232"></a><span class="lineno"> 2232</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> a = <a class="code" href="group_8h.html#adb0cb248ca6d0aabe3a82423233e6ce3">SECP256K1_GE_CONST</a>(</div><div class="line"><a name="l02233"></a><span class="lineno"> 2233</span>  0x6d986544, 0x57ff52b8, 0xcf1b8126, 0x5b802a5b,</div><div class="line"><a name="l02234"></a><span class="lineno"> 2234</span>  0xa97f9263, 0xb1e88044, 0x93351325, 0x91bc450a,</div><div class="line"><a name="l02235"></a><span class="lineno"> 2235</span>  0x535c59f7, 0x325e5d2b, 0xc391fbe8, 0x3c12787c,</div><div class="line"><a name="l02236"></a><span class="lineno"> 2236</span>  0x337e4a98, 0xe82a9011, 0x0123ba37, 0xdd769c7d</div><div class="line"><a name="l02237"></a><span class="lineno"> 2237</span>  );</div><div class="line"><a name="l02238"></a><span class="lineno"> 2238</span>  <span class="comment">/* random initial factor xn */</span></div><div class="line"><a name="l02239"></a><span class="lineno"> 2239</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> xn = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(</div><div class="line"><a name="l02240"></a><span class="lineno"> 2240</span>  0x649d4f77, 0xc4242df7, 0x7f2079c9, 0x14530327,</div><div class="line"><a name="l02241"></a><span class="lineno"> 2241</span>  0xa31b876a, 0xd2d8ce2a, 0x2236d5c6, 0xd7b2029b</div><div class="line"><a name="l02242"></a><span class="lineno"> 2242</span>  );</div><div class="line"><a name="l02243"></a><span class="lineno"> 2243</span>  <span class="comment">/* expected xn * A (from sage) */</span></div><div class="line"><a name="l02244"></a><span class="lineno"> 2244</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> expected_b = <a class="code" href="group_8h.html#adb0cb248ca6d0aabe3a82423233e6ce3">SECP256K1_GE_CONST</a>(</div><div class="line"><a name="l02245"></a><span class="lineno"> 2245</span>  0x23773684, 0x4d209dc7, 0x098a786f, 0x20d06fcd,</div><div class="line"><a name="l02246"></a><span class="lineno"> 2246</span>  0x070a38bf, 0xc11ac651, 0x03004319, 0x1e2a8786,</div><div class="line"><a name="l02247"></a><span class="lineno"> 2247</span>  0xed8c3b8e, 0xc06dd57b, 0xd06ea66e, 0x45492b0f,</div><div class="line"><a name="l02248"></a><span class="lineno"> 2248</span>  0xb84e4e1b, 0xfb77e21f, 0x96baae2a, 0x63dec956</div><div class="line"><a name="l02249"></a><span class="lineno"> 2249</span>  );</div><div class="line"><a name="l02250"></a><span class="lineno"> 2250</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> b;</div><div class="line"><a name="l02251"></a><span class="lineno"> 2251</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&b, &a, &xn);</div><div class="line"><a name="l02252"></a><span class="lineno"> 2252</span> </div><div class="line"><a name="l02253"></a><span class="lineno"> 2253</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a83600b0c4d8e95a8b2e730b4e2f207dc">secp256k1_ge_is_valid_var</a>(&a));</div><div class="line"><a name="l02254"></a><span class="lineno"> 2254</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&expected_b, &b);</div><div class="line"><a name="l02255"></a><span class="lineno"> 2255</span> }</div><div class="line"><a name="l02256"></a><span class="lineno"> 2256</span> </div><div class="line"><a name="l02257"></a><span class="lineno"><a class="line" href="tests_8c.html#ab1ac8e94f017ab831c8c50cc7384fd87"> 2257</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ab1ac8e94f017ab831c8c50cc7384fd87">ecmult_const_commutativity</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02258"></a><span class="lineno"> 2258</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> a;</div><div class="line"><a name="l02259"></a><span class="lineno"> 2259</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> b;</div><div class="line"><a name="l02260"></a><span class="lineno"> 2260</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> res1;</div><div class="line"><a name="l02261"></a><span class="lineno"> 2261</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> res2;</div><div class="line"><a name="l02262"></a><span class="lineno"> 2262</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> mid1;</div><div class="line"><a name="l02263"></a><span class="lineno"> 2263</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> mid2;</div><div class="line"><a name="l02264"></a><span class="lineno"> 2264</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&a);</div><div class="line"><a name="l02265"></a><span class="lineno"> 2265</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&b);</div><div class="line"><a name="l02266"></a><span class="lineno"> 2266</span> </div><div class="line"><a name="l02267"></a><span class="lineno"> 2267</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&res1, &<a class="code" href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a>, &a);</div><div class="line"><a name="l02268"></a><span class="lineno"> 2268</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&res2, &<a class="code" href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a>, &b);</div><div class="line"><a name="l02269"></a><span class="lineno"> 2269</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&mid1, &res1);</div><div class="line"><a name="l02270"></a><span class="lineno"> 2270</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&mid2, &res2);</div><div class="line"><a name="l02271"></a><span class="lineno"> 2271</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&res1, &mid1, &b);</div><div class="line"><a name="l02272"></a><span class="lineno"> 2272</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&res2, &mid2, &a);</div><div class="line"><a name="l02273"></a><span class="lineno"> 2273</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&mid1, &res1);</div><div class="line"><a name="l02274"></a><span class="lineno"> 2274</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&mid2, &res2);</div><div class="line"><a name="l02275"></a><span class="lineno"> 2275</span>  <a class="code" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a>(&mid1, &mid2);</div><div class="line"><a name="l02276"></a><span class="lineno"> 2276</span> }</div><div class="line"><a name="l02277"></a><span class="lineno"> 2277</span> </div><div class="line"><a name="l02278"></a><span class="lineno"><a class="line" href="tests_8c.html#aa7d1b408b3e21121300c1a6348251ab2"> 2278</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#aa7d1b408b3e21121300c1a6348251ab2">ecmult_const_mult_zero_one</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02279"></a><span class="lineno"> 2279</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> zero = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 0);</div><div class="line"><a name="l02280"></a><span class="lineno"> 2280</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> one = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(0, 0, 0, 0, 0, 0, 0, 1);</div><div class="line"><a name="l02281"></a><span class="lineno"> 2281</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> negone;</div><div class="line"><a name="l02282"></a><span class="lineno"> 2282</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> res1;</div><div class="line"><a name="l02283"></a><span class="lineno"> 2283</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> res2;</div><div class="line"><a name="l02284"></a><span class="lineno"> 2284</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> point;</div><div class="line"><a name="l02285"></a><span class="lineno"> 2285</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&negone, &one);</div><div class="line"><a name="l02286"></a><span class="lineno"> 2286</span> </div><div class="line"><a name="l02287"></a><span class="lineno"> 2287</span>  <a class="code" href="tests_8c.html#a63a7c68b6b72356c59cfdaaab131c73b">random_group_element_test</a>(&point);</div><div class="line"><a name="l02288"></a><span class="lineno"> 2288</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&res1, &point, &zero);</div><div class="line"><a name="l02289"></a><span class="lineno"> 2289</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res2, &res1);</div><div class="line"><a name="l02290"></a><span class="lineno"> 2290</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#ac83592db46af97faf7ba9b9a39a1f6ff">secp256k1_ge_is_infinity</a>(&res2));</div><div class="line"><a name="l02291"></a><span class="lineno"> 2291</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&res1, &point, &one);</div><div class="line"><a name="l02292"></a><span class="lineno"> 2292</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res2, &res1);</div><div class="line"><a name="l02293"></a><span class="lineno"> 2293</span>  <a class="code" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a>(&res2, &point);</div><div class="line"><a name="l02294"></a><span class="lineno"> 2294</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&res1, &point, &negone);</div><div class="line"><a name="l02295"></a><span class="lineno"> 2295</span>  <a class="code" href="group_8h.html#af9194949a7aaf18aceab1dee73fe4027">secp256k1_gej_neg</a>(&res1, &res1);</div><div class="line"><a name="l02296"></a><span class="lineno"> 2296</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res2, &res1);</div><div class="line"><a name="l02297"></a><span class="lineno"> 2297</span>  <a class="code" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a>(&res2, &point);</div><div class="line"><a name="l02298"></a><span class="lineno"> 2298</span> }</div><div class="line"><a name="l02299"></a><span class="lineno"> 2299</span> </div><div class="line"><a name="l02300"></a><span class="lineno"><a class="line" href="tests_8c.html#a5f38325377d0160eb1c5100b1a4f1c0f"> 2300</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a5f38325377d0160eb1c5100b1a4f1c0f">ecmult_const_chain_multiply</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02301"></a><span class="lineno"> 2301</span>  <span class="comment">/* Check known result (randomly generated test problem from sage) */</span></div><div class="line"><a name="l02302"></a><span class="lineno"> 2302</span>  <span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> scalar = <a class="code" href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a>(</div><div class="line"><a name="l02303"></a><span class="lineno"> 2303</span>  0x4968d524, 0x2abf9b7a, 0x466abbcf, 0x34b11b6d,</div><div class="line"><a name="l02304"></a><span class="lineno"> 2304</span>  0xcd83d307, 0x827bed62, 0x05fad0ce, 0x18fae63b</div><div class="line"><a name="l02305"></a><span class="lineno"> 2305</span>  );</div><div class="line"><a name="l02306"></a><span class="lineno"> 2306</span>  <span class="keyword">const</span> <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> expected_point = <a class="code" href="group_8h.html#af46c307c9174e2aa45dbf6f32e61ed21">SECP256K1_GEJ_CONST</a>(</div><div class="line"><a name="l02307"></a><span class="lineno"> 2307</span>  0x5494c15d, 0x32099706, 0xc2395f94, 0x348745fd,</div><div class="line"><a name="l02308"></a><span class="lineno"> 2308</span>  0x757ce30e, 0x4e8c90fb, 0xa2bad184, 0xf883c69f,</div><div class="line"><a name="l02309"></a><span class="lineno"> 2309</span>  0x5d195d20, 0xe191bf7f, 0x1be3e55f, 0x56a80196,</div><div class="line"><a name="l02310"></a><span class="lineno"> 2310</span>  0x6071ad01, 0xf1462f66, 0xc997fa94, 0xdb858435</div><div class="line"><a name="l02311"></a><span class="lineno"> 2311</span>  );</div><div class="line"><a name="l02312"></a><span class="lineno"> 2312</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> point;</div><div class="line"><a name="l02313"></a><span class="lineno"> 2313</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> res;</div><div class="line"><a name="l02314"></a><span class="lineno"> 2314</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02315"></a><span class="lineno"> 2315</span> </div><div class="line"><a name="l02316"></a><span class="lineno"> 2316</span>  <a class="code" href="group_8h.html#ad5f813e26afb239f03e83f0e61e05498">secp256k1_gej_set_ge</a>(&point, &<a class="code" href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a>);</div><div class="line"><a name="l02317"></a><span class="lineno"> 2317</span>  <span class="keywordflow">for</span> (i = 0; i < 100; ++i) {</div><div class="line"><a name="l02318"></a><span class="lineno"> 2318</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> tmp;</div><div class="line"><a name="l02319"></a><span class="lineno"> 2319</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&tmp, &point);</div><div class="line"><a name="l02320"></a><span class="lineno"> 2320</span>  <a class="code" href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a>(&point, &tmp, &scalar);</div><div class="line"><a name="l02321"></a><span class="lineno"> 2321</span>  }</div><div class="line"><a name="l02322"></a><span class="lineno"> 2322</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&res, &point);</div><div class="line"><a name="l02323"></a><span class="lineno"> 2323</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&res, &expected_point);</div><div class="line"><a name="l02324"></a><span class="lineno"> 2324</span> }</div><div class="line"><a name="l02325"></a><span class="lineno"> 2325</span> </div><div class="line"><a name="l02326"></a><span class="lineno"><a class="line" href="tests_8c.html#af69d927b217be17f076754b9d4e4f326"> 2326</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#af69d927b217be17f076754b9d4e4f326">run_ecmult_const_tests</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02327"></a><span class="lineno"> 2327</span>  <a class="code" href="tests_8c.html#aa7d1b408b3e21121300c1a6348251ab2">ecmult_const_mult_zero_one</a>();</div><div class="line"><a name="l02328"></a><span class="lineno"> 2328</span>  <a class="code" href="tests_8c.html#a2e747532c49b7e398aff44547a7ff477">ecmult_const_random_mult</a>();</div><div class="line"><a name="l02329"></a><span class="lineno"> 2329</span>  <a class="code" href="tests_8c.html#ab1ac8e94f017ab831c8c50cc7384fd87">ecmult_const_commutativity</a>();</div><div class="line"><a name="l02330"></a><span class="lineno"> 2330</span>  <a class="code" href="tests_8c.html#a5f38325377d0160eb1c5100b1a4f1c0f">ecmult_const_chain_multiply</a>();</div><div class="line"><a name="l02331"></a><span class="lineno"> 2331</span> }</div><div class="line"><a name="l02332"></a><span class="lineno"> 2332</span> </div><div class="line"><a name="l02333"></a><span class="lineno"><a class="line" href="tests_8c.html#a7ca78a9b379dc40e8b025b145dd5648a"> 2333</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a7ca78a9b379dc40e8b025b145dd5648a">test_wnaf</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *number, <span class="keywordtype">int</span> w) {</div><div class="line"><a name="l02334"></a><span class="lineno"> 2334</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> x, two, t;</div><div class="line"><a name="l02335"></a><span class="lineno"> 2335</span>  <span class="keywordtype">int</span> wnaf[256];</div><div class="line"><a name="l02336"></a><span class="lineno"> 2336</span>  <span class="keywordtype">int</span> zeroes = -1;</div><div class="line"><a name="l02337"></a><span class="lineno"> 2337</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02338"></a><span class="lineno"> 2338</span>  <span class="keywordtype">int</span> bits;</div><div class="line"><a name="l02339"></a><span class="lineno"> 2339</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&x, 0);</div><div class="line"><a name="l02340"></a><span class="lineno"> 2340</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&two, 2);</div><div class="line"><a name="l02341"></a><span class="lineno"> 2341</span>  bits = <a class="code" href="ecmult__impl_8h.html#a48a8b6bbead18d4475c8a29d28376c5b">secp256k1_ecmult_wnaf</a>(wnaf, 256, number, w);</div><div class="line"><a name="l02342"></a><span class="lineno"> 2342</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(bits <= 256);</div><div class="line"><a name="l02343"></a><span class="lineno"> 2343</span>  <span class="keywordflow">for</span> (i = bits-1; i >= 0; i--) {</div><div class="line"><a name="l02344"></a><span class="lineno"> 2344</span>  <span class="keywordtype">int</span> v = wnaf[i];</div><div class="line"><a name="l02345"></a><span class="lineno"> 2345</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&x, &x, &two);</div><div class="line"><a name="l02346"></a><span class="lineno"> 2346</span>  <span class="keywordflow">if</span> (v) {</div><div class="line"><a name="l02347"></a><span class="lineno"> 2347</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(zeroes == -1 || zeroes >= w-1); <span class="comment">/* check that distance between non-zero elements is at least w-1 */</span></div><div class="line"><a name="l02348"></a><span class="lineno"> 2348</span>  zeroes=0;</div><div class="line"><a name="l02349"></a><span class="lineno"> 2349</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>((v & 1) == 1); <span class="comment">/* check non-zero elements are odd */</span></div><div class="line"><a name="l02350"></a><span class="lineno"> 2350</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(v <= (1 << (w-1)) - 1); <span class="comment">/* check range below */</span></div><div class="line"><a name="l02351"></a><span class="lineno"> 2351</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(v >= -(1 << (w-1)) - 1); <span class="comment">/* check range above */</span></div><div class="line"><a name="l02352"></a><span class="lineno"> 2352</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l02353"></a><span class="lineno"> 2353</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(zeroes != -1); <span class="comment">/* check that no unnecessary zero padding exists */</span></div><div class="line"><a name="l02354"></a><span class="lineno"> 2354</span>  zeroes++;</div><div class="line"><a name="l02355"></a><span class="lineno"> 2355</span>  }</div><div class="line"><a name="l02356"></a><span class="lineno"> 2356</span>  <span class="keywordflow">if</span> (v >= 0) {</div><div class="line"><a name="l02357"></a><span class="lineno"> 2357</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&t, v);</div><div class="line"><a name="l02358"></a><span class="lineno"> 2358</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l02359"></a><span class="lineno"> 2359</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&t, -v);</div><div class="line"><a name="l02360"></a><span class="lineno"> 2360</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&t, &t);</div><div class="line"><a name="l02361"></a><span class="lineno"> 2361</span>  }</div><div class="line"><a name="l02362"></a><span class="lineno"> 2362</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&x, &x, &t);</div><div class="line"><a name="l02363"></a><span class="lineno"> 2363</span>  }</div><div class="line"><a name="l02364"></a><span class="lineno"> 2364</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&x, number)); <span class="comment">/* check that wnaf represents number */</span></div><div class="line"><a name="l02365"></a><span class="lineno"> 2365</span> }</div><div class="line"><a name="l02366"></a><span class="lineno"> 2366</span> </div><div class="line"><a name="l02367"></a><span class="lineno"><a class="line" href="tests_8c.html#ad9c7802400ac86e07d8b5eb46055afaf"> 2367</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ad9c7802400ac86e07d8b5eb46055afaf">test_constant_wnaf_negate</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *number) {</div><div class="line"><a name="l02368"></a><span class="lineno"> 2368</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> neg1 = *number;</div><div class="line"><a name="l02369"></a><span class="lineno"> 2369</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> neg2 = *number;</div><div class="line"><a name="l02370"></a><span class="lineno"> 2370</span>  <span class="keywordtype">int</span> sign1 = 1;</div><div class="line"><a name="l02371"></a><span class="lineno"> 2371</span>  <span class="keywordtype">int</span> sign2 = 1;</div><div class="line"><a name="l02372"></a><span class="lineno"> 2372</span> </div><div class="line"><a name="l02373"></a><span class="lineno"> 2373</span>  <span class="keywordflow">if</span> (!<a class="code" href="scalar_8h.html#a70d7af05e9c9a579ed5cb20d9f22eeba">secp256k1_scalar_get_bits</a>(&neg1, 0, 1)) {</div><div class="line"><a name="l02374"></a><span class="lineno"> 2374</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&neg1, &neg1);</div><div class="line"><a name="l02375"></a><span class="lineno"> 2375</span>  sign1 = -1;</div><div class="line"><a name="l02376"></a><span class="lineno"> 2376</span>  }</div><div class="line"><a name="l02377"></a><span class="lineno"> 2377</span>  sign2 = <a class="code" href="scalar_8h.html#a520b78be2bca742daa8d5efa5c343291">secp256k1_scalar_cond_negate</a>(&neg2, <a class="code" href="scalar_8h.html#a3eb65cf9bfad7c430cbb3dc26d494a95">secp256k1_scalar_is_even</a>(&neg2));</div><div class="line"><a name="l02378"></a><span class="lineno"> 2378</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(sign1 == sign2);</div><div class="line"><a name="l02379"></a><span class="lineno"> 2379</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&neg1, &neg2));</div><div class="line"><a name="l02380"></a><span class="lineno"> 2380</span> }</div><div class="line"><a name="l02381"></a><span class="lineno"> 2381</span> </div><div class="line"><a name="l02382"></a><span class="lineno"><a class="line" href="tests_8c.html#ab1b83b06f2b16b37ec472a91775d1a94"> 2382</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ab1b83b06f2b16b37ec472a91775d1a94">test_constant_wnaf</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *number, <span class="keywordtype">int</span> w) {</div><div class="line"><a name="l02383"></a><span class="lineno"> 2383</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> x, shift;</div><div class="line"><a name="l02384"></a><span class="lineno"> 2384</span>  <span class="keywordtype">int</span> wnaf[256] = {0};</div><div class="line"><a name="l02385"></a><span class="lineno"> 2385</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02386"></a><span class="lineno"> 2386</span> <span class="preprocessor">#ifdef USE_ENDOMORPHISM</span></div><div class="line"><a name="l02387"></a><span class="lineno"> 2387</span>  <span class="keywordtype">int</span> skew;</div><div class="line"><a name="l02388"></a><span class="lineno"> 2388</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l02389"></a><span class="lineno"> 2389</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> num = *number;</div><div class="line"><a name="l02390"></a><span class="lineno"> 2390</span> </div><div class="line"><a name="l02391"></a><span class="lineno"> 2391</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&x, 0);</div><div class="line"><a name="l02392"></a><span class="lineno"> 2392</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&shift, 1 << w);</div><div class="line"><a name="l02393"></a><span class="lineno"> 2393</span>  <span class="comment">/* With USE_ENDOMORPHISM on we only consider 128-bit numbers */</span></div><div class="line"><a name="l02394"></a><span class="lineno"> 2394</span> <span class="preprocessor">#ifdef USE_ENDOMORPHISM</span></div><div class="line"><a name="l02395"></a><span class="lineno"> 2395</span>  <span class="keywordflow">for</span> (i = 0; i < 16; ++i) {</div><div class="line"><a name="l02396"></a><span class="lineno"> 2396</span>  <a class="code" href="scalar_8h.html#ae9fcdf1db22cb93c2a2f06b0a9c957d3">secp256k1_scalar_shr_int</a>(&num, 8);</div><div class="line"><a name="l02397"></a><span class="lineno"> 2397</span>  }</div><div class="line"><a name="l02398"></a><span class="lineno"> 2398</span>  skew = <a class="code" href="ecmult__const__impl_8h.html#ac252ac4f8c905ddc178ce056bd45b8ec">secp256k1_wnaf_const</a>(wnaf, num, w);</div><div class="line"><a name="l02399"></a><span class="lineno"> 2399</span> <span class="preprocessor">#else</span></div><div class="line"><a name="l02400"></a><span class="lineno"> 2400</span>  <a class="code" href="ecmult__const__impl_8h.html#ac252ac4f8c905ddc178ce056bd45b8ec">secp256k1_wnaf_const</a>(wnaf, num, w);</div><div class="line"><a name="l02401"></a><span class="lineno"> 2401</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l02402"></a><span class="lineno"> 2402</span> </div><div class="line"><a name="l02403"></a><span class="lineno"> 2403</span>  <span class="keywordflow">for</span> (i = <a class="code" href="ecmult__const__impl_8h.html#a23d9fb349265ae338b9977f7f7aab065">WNAF_SIZE</a>(w); i >= 0; --i) {</div><div class="line"><a name="l02404"></a><span class="lineno"> 2404</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> t;</div><div class="line"><a name="l02405"></a><span class="lineno"> 2405</span>  <span class="keywordtype">int</span> v = wnaf[i];</div><div class="line"><a name="l02406"></a><span class="lineno"> 2406</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(v != 0); <span class="comment">/* check nonzero */</span></div><div class="line"><a name="l02407"></a><span class="lineno"> 2407</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(v & 1); <span class="comment">/* check parity */</span></div><div class="line"><a name="l02408"></a><span class="lineno"> 2408</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(v > -(1 << w)); <span class="comment">/* check range above */</span></div><div class="line"><a name="l02409"></a><span class="lineno"> 2409</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(v < (1 << w)); <span class="comment">/* check range below */</span></div><div class="line"><a name="l02410"></a><span class="lineno"> 2410</span> </div><div class="line"><a name="l02411"></a><span class="lineno"> 2411</span>  <a class="code" href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a>(&x, &x, &shift);</div><div class="line"><a name="l02412"></a><span class="lineno"> 2412</span>  <span class="keywordflow">if</span> (v >= 0) {</div><div class="line"><a name="l02413"></a><span class="lineno"> 2413</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&t, v);</div><div class="line"><a name="l02414"></a><span class="lineno"> 2414</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l02415"></a><span class="lineno"> 2415</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&t, -v);</div><div class="line"><a name="l02416"></a><span class="lineno"> 2416</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&t, &t);</div><div class="line"><a name="l02417"></a><span class="lineno"> 2417</span>  }</div><div class="line"><a name="l02418"></a><span class="lineno"> 2418</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&x, &x, &t);</div><div class="line"><a name="l02419"></a><span class="lineno"> 2419</span>  }</div><div class="line"><a name="l02420"></a><span class="lineno"> 2420</span> <span class="preprocessor">#ifdef USE_ENDOMORPHISM</span></div><div class="line"><a name="l02421"></a><span class="lineno"> 2421</span>  <span class="comment">/* Skew num because when encoding 128-bit numbers as odd we use an offset */</span></div><div class="line"><a name="l02422"></a><span class="lineno"> 2422</span>  <a class="code" href="scalar_8h.html#ad6596a0249548deb678f0b630204254f">secp256k1_scalar_cadd_bit</a>(&num, skew == 2, 1);</div><div class="line"><a name="l02423"></a><span class="lineno"> 2423</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l02424"></a><span class="lineno"> 2424</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&x, &num));</div><div class="line"><a name="l02425"></a><span class="lineno"> 2425</span> }</div><div class="line"><a name="l02426"></a><span class="lineno"> 2426</span> </div><div class="line"><a name="l02427"></a><span class="lineno"><a class="line" href="tests_8c.html#af3c34e47a9088ad0f5f0df779303a85a"> 2427</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#af3c34e47a9088ad0f5f0df779303a85a">run_wnaf</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02428"></a><span class="lineno"> 2428</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02429"></a><span class="lineno"> 2429</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a> = {{0}};</div><div class="line"><a name="l02430"></a><span class="lineno"> 2430</span> </div><div class="line"><a name="l02431"></a><span class="lineno"> 2431</span>  <span class="comment">/* Sanity check: 1 and 2 are the smallest odd and even numbers and should</span></div><div class="line"><a name="l02432"></a><span class="lineno"> 2432</span> <span class="comment"> * have easier-to-diagnose failure modes */</span></div><div class="line"><a name="l02433"></a><span class="lineno"> 2433</span>  <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>.d[0] = 1;</div><div class="line"><a name="l02434"></a><span class="lineno"> 2434</span>  <a class="code" href="tests_8c.html#ab1b83b06f2b16b37ec472a91775d1a94">test_constant_wnaf</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 4);</div><div class="line"><a name="l02435"></a><span class="lineno"> 2435</span>  <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>.d[0] = 2;</div><div class="line"><a name="l02436"></a><span class="lineno"> 2436</span>  <a class="code" href="tests_8c.html#ab1b83b06f2b16b37ec472a91775d1a94">test_constant_wnaf</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 4);</div><div class="line"><a name="l02437"></a><span class="lineno"> 2437</span>  <span class="comment">/* Random tests */</span></div><div class="line"><a name="l02438"></a><span class="lineno"> 2438</span>  <span class="keywordflow">for</span> (i = 0; i < <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l02439"></a><span class="lineno"> 2439</span>  <a class="code" href="tests_8c.html#a01cf4b4fc9b4ab8cb3e04fd3dc2ff57f">random_scalar_order</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>);</div><div class="line"><a name="l02440"></a><span class="lineno"> 2440</span>  <a class="code" href="tests_8c.html#a7ca78a9b379dc40e8b025b145dd5648a">test_wnaf</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 4+(i%10));</div><div class="line"><a name="l02441"></a><span class="lineno"> 2441</span>  <a class="code" href="tests_8c.html#ad9c7802400ac86e07d8b5eb46055afaf">test_constant_wnaf_negate</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>);</div><div class="line"><a name="l02442"></a><span class="lineno"> 2442</span>  <a class="code" href="tests_8c.html#ab1b83b06f2b16b37ec472a91775d1a94">test_constant_wnaf</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 4 + (i % 10));</div><div class="line"><a name="l02443"></a><span class="lineno"> 2443</span>  }</div><div class="line"><a name="l02444"></a><span class="lineno"> 2444</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 0);</div><div class="line"><a name="l02445"></a><span class="lineno"> 2445</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a520b78be2bca742daa8d5efa5c343291">secp256k1_scalar_cond_negate</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 1) == -1);</div><div class="line"><a name="l02446"></a><span class="lineno"> 2446</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>));</div><div class="line"><a name="l02447"></a><span class="lineno"> 2447</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a520b78be2bca742daa8d5efa5c343291">secp256k1_scalar_cond_negate</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>, 0) == 1);</div><div class="line"><a name="l02448"></a><span class="lineno"> 2448</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a>(&<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>));</div><div class="line"><a name="l02449"></a><span class="lineno"> 2449</span> }</div><div class="line"><a name="l02450"></a><span class="lineno"> 2450</span> </div><div class="line"><a name="l02451"></a><span class="lineno"><a class="line" href="tests_8c.html#ab02e05e21c96c34d9497e2bdd44d2e3a"> 2451</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ab02e05e21c96c34d9497e2bdd44d2e3a">test_ecmult_constants</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02452"></a><span class="lineno"> 2452</span>  <span class="comment">/* Test ecmult_gen() for [0..36) and [order-36..0). */</span></div><div class="line"><a name="l02453"></a><span class="lineno"> 2453</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> x;</div><div class="line"><a name="l02454"></a><span class="lineno"> 2454</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> r;</div><div class="line"><a name="l02455"></a><span class="lineno"> 2455</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> ng;</div><div class="line"><a name="l02456"></a><span class="lineno"> 2456</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02457"></a><span class="lineno"> 2457</span>  <span class="keywordtype">int</span> j;</div><div class="line"><a name="l02458"></a><span class="lineno"> 2458</span>  <a class="code" href="group_8h.html#abcb34de0cfdf82a125e059f4f98de1d9">secp256k1_ge_neg</a>(&ng, &<a class="code" href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a>);</div><div class="line"><a name="l02459"></a><span class="lineno"> 2459</span>  <span class="keywordflow">for</span> (i = 0; i < 36; i++ ) {</div><div class="line"><a name="l02460"></a><span class="lineno"> 2460</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&x, i);</div><div class="line"><a name="l02461"></a><span class="lineno"> 2461</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &r, &x);</div><div class="line"><a name="l02462"></a><span class="lineno"> 2462</span>  <span class="keywordflow">for</span> (j = 0; j < i; j++) {</div><div class="line"><a name="l02463"></a><span class="lineno"> 2463</span>  <span class="keywordflow">if</span> (j == i - 1) {</div><div class="line"><a name="l02464"></a><span class="lineno"> 2464</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&<a class="code" href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a>, &r);</div><div class="line"><a name="l02465"></a><span class="lineno"> 2465</span>  }</div><div class="line"><a name="l02466"></a><span class="lineno"> 2466</span>  <a class="code" href="group_8h.html#a586b55d5921edcd68799f584c0a3c58d">secp256k1_gej_add_ge</a>(&r, &r, &ng);</div><div class="line"><a name="l02467"></a><span class="lineno"> 2467</span>  }</div><div class="line"><a name="l02468"></a><span class="lineno"> 2468</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&r));</div><div class="line"><a name="l02469"></a><span class="lineno"> 2469</span>  }</div><div class="line"><a name="l02470"></a><span class="lineno"> 2470</span>  <span class="keywordflow">for</span> (i = 1; i <= 36; i++ ) {</div><div class="line"><a name="l02471"></a><span class="lineno"> 2471</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&x, i);</div><div class="line"><a name="l02472"></a><span class="lineno"> 2472</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&x, &x);</div><div class="line"><a name="l02473"></a><span class="lineno"> 2473</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &r, &x);</div><div class="line"><a name="l02474"></a><span class="lineno"> 2474</span>  <span class="keywordflow">for</span> (j = 0; j < i; j++) {</div><div class="line"><a name="l02475"></a><span class="lineno"> 2475</span>  <span class="keywordflow">if</span> (j == i - 1) {</div><div class="line"><a name="l02476"></a><span class="lineno"> 2476</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&ng, &r);</div><div class="line"><a name="l02477"></a><span class="lineno"> 2477</span>  }</div><div class="line"><a name="l02478"></a><span class="lineno"> 2478</span>  <a class="code" href="group_8h.html#a586b55d5921edcd68799f584c0a3c58d">secp256k1_gej_add_ge</a>(&r, &r, &<a class="code" href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a>);</div><div class="line"><a name="l02479"></a><span class="lineno"> 2479</span>  }</div><div class="line"><a name="l02480"></a><span class="lineno"> 2480</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a>(&r));</div><div class="line"><a name="l02481"></a><span class="lineno"> 2481</span>  }</div><div class="line"><a name="l02482"></a><span class="lineno"> 2482</span> }</div><div class="line"><a name="l02483"></a><span class="lineno"> 2483</span> </div><div class="line"><a name="l02484"></a><span class="lineno"><a class="line" href="tests_8c.html#a93c275726298d7a59a4f027996a958b4"> 2484</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a93c275726298d7a59a4f027996a958b4">run_ecmult_constants</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02485"></a><span class="lineno"> 2485</span>  <a class="code" href="tests_8c.html#ab02e05e21c96c34d9497e2bdd44d2e3a">test_ecmult_constants</a>();</div><div class="line"><a name="l02486"></a><span class="lineno"> 2486</span> }</div><div class="line"><a name="l02487"></a><span class="lineno"> 2487</span> </div><div class="line"><a name="l02488"></a><span class="lineno"><a class="line" href="tests_8c.html#ab353fbc77d15cd48e25d995ea3f33795"> 2488</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ab353fbc77d15cd48e25d995ea3f33795">test_ecmult_gen_blind</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02489"></a><span class="lineno"> 2489</span>  <span class="comment">/* Test ecmult_gen() blinding and confirm that the blinding changes, the affine points match, and the z's don't match. */</span></div><div class="line"><a name="l02490"></a><span class="lineno"> 2490</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l02491"></a><span class="lineno"> 2491</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> b;</div><div class="line"><a name="l02492"></a><span class="lineno"> 2492</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> seed32[32];</div><div class="line"><a name="l02493"></a><span class="lineno"> 2493</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> pgej;</div><div class="line"><a name="l02494"></a><span class="lineno"> 2494</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> pgej2;</div><div class="line"><a name="l02495"></a><span class="lineno"> 2495</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> i;</div><div class="line"><a name="l02496"></a><span class="lineno"> 2496</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> pge;</div><div class="line"><a name="l02497"></a><span class="lineno"> 2497</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l02498"></a><span class="lineno"> 2498</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &pgej, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l02499"></a><span class="lineno"> 2499</span>  <a class="code" href="testrand_8h.html#ac6eab6443f98bba198f7df69e658173c">secp256k1_rand256</a>(seed32);</div><div class="line"><a name="l02500"></a><span class="lineno"> 2500</span>  b = <a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>.<a class="code" href="structsecp256k1__ecmult__gen__context.html#af2f3064a367e86f936ab1c8b93d6f27e">blind</a>;</div><div class="line"><a name="l02501"></a><span class="lineno"> 2501</span>  i = <a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>.<a class="code" href="structsecp256k1__ecmult__gen__context.html#a1ebfe4de83e25248ea9d989d06c9b069">initial</a>;</div><div class="line"><a name="l02502"></a><span class="lineno"> 2502</span>  <a class="code" href="ecmult__gen_8h.html#a7e41f045cb4901a4eba781966fa35abd">secp256k1_ecmult_gen_blind</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, seed32);</div><div class="line"><a name="l02503"></a><span class="lineno"> 2503</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&b, &<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>.<a class="code" href="structsecp256k1__ecmult__gen__context.html#af2f3064a367e86f936ab1c8b93d6f27e">blind</a>));</div><div class="line"><a name="l02504"></a><span class="lineno"> 2504</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &pgej2, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l02505"></a><span class="lineno"> 2505</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="tests_8c.html#a9ce0d67d2ba57bdc32e660cafcaaef2f">gej_xyz_equals_gej</a>(&pgej, &pgej2));</div><div class="line"><a name="l02506"></a><span class="lineno"> 2506</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="tests_8c.html#a9ce0d67d2ba57bdc32e660cafcaaef2f">gej_xyz_equals_gej</a>(&i, &<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>.<a class="code" href="structsecp256k1__ecmult__gen__context.html#a1ebfe4de83e25248ea9d989d06c9b069">initial</a>));</div><div class="line"><a name="l02507"></a><span class="lineno"> 2507</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&pge, &pgej);</div><div class="line"><a name="l02508"></a><span class="lineno"> 2508</span>  <a class="code" href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a>(&pge, &pgej2);</div><div class="line"><a name="l02509"></a><span class="lineno"> 2509</span> }</div><div class="line"><a name="l02510"></a><span class="lineno"> 2510</span> </div><div class="line"><a name="l02511"></a><span class="lineno"><a class="line" href="tests_8c.html#a375b2994cf6e867644abdf5ae3f93abe"> 2511</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a375b2994cf6e867644abdf5ae3f93abe">test_ecmult_gen_blind_reset</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02512"></a><span class="lineno"> 2512</span>  <span class="comment">/* Test ecmult_gen() blinding reset and confirm that the blinding is consistent. */</span></div><div class="line"><a name="l02513"></a><span class="lineno"> 2513</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> b;</div><div class="line"><a name="l02514"></a><span class="lineno"> 2514</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> initial;</div><div class="line"><a name="l02515"></a><span class="lineno"> 2515</span>  <a class="code" href="ecmult__gen_8h.html#a7e41f045cb4901a4eba781966fa35abd">secp256k1_ecmult_gen_blind</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, 0);</div><div class="line"><a name="l02516"></a><span class="lineno"> 2516</span>  b = <a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>.<a class="code" href="structsecp256k1__ecmult__gen__context.html#af2f3064a367e86f936ab1c8b93d6f27e">blind</a>;</div><div class="line"><a name="l02517"></a><span class="lineno"> 2517</span>  initial = <a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>.<a class="code" href="structsecp256k1__ecmult__gen__context.html#a1ebfe4de83e25248ea9d989d06c9b069">initial</a>;</div><div class="line"><a name="l02518"></a><span class="lineno"> 2518</span>  <a class="code" href="ecmult__gen_8h.html#a7e41f045cb4901a4eba781966fa35abd">secp256k1_ecmult_gen_blind</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, 0);</div><div class="line"><a name="l02519"></a><span class="lineno"> 2519</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&b, &<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>.<a class="code" href="structsecp256k1__ecmult__gen__context.html#af2f3064a367e86f936ab1c8b93d6f27e">blind</a>));</div><div class="line"><a name="l02520"></a><span class="lineno"> 2520</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a9ce0d67d2ba57bdc32e660cafcaaef2f">gej_xyz_equals_gej</a>(&initial, &<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>.<a class="code" href="structsecp256k1__ecmult__gen__context.html#a1ebfe4de83e25248ea9d989d06c9b069">initial</a>));</div><div class="line"><a name="l02521"></a><span class="lineno"> 2521</span> }</div><div class="line"><a name="l02522"></a><span class="lineno"> 2522</span> </div><div class="line"><a name="l02523"></a><span class="lineno"><a class="line" href="tests_8c.html#ac3003b8a1d7eed5ebb0497a3f0dd97b6"> 2523</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ac3003b8a1d7eed5ebb0497a3f0dd97b6">run_ecmult_gen_blind</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02524"></a><span class="lineno"> 2524</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l02525"></a><span class="lineno"> 2525</span>  <a class="code" href="tests_8c.html#a375b2994cf6e867644abdf5ae3f93abe">test_ecmult_gen_blind_reset</a>();</div><div class="line"><a name="l02526"></a><span class="lineno"> 2526</span>  <span class="keywordflow">for</span> (i = 0; i < 10; i++) {</div><div class="line"><a name="l02527"></a><span class="lineno"> 2527</span>  <a class="code" href="tests_8c.html#ab353fbc77d15cd48e25d995ea3f33795">test_ecmult_gen_blind</a>();</div><div class="line"><a name="l02528"></a><span class="lineno"> 2528</span>  }</div><div class="line"><a name="l02529"></a><span class="lineno"> 2529</span> }</div><div class="line"><a name="l02530"></a><span class="lineno"> 2530</span> </div><div class="line"><a name="l02531"></a><span class="lineno"> 2531</span> <span class="preprocessor">#ifdef USE_ENDOMORPHISM</span></div><div class="line"><a name="l02532"></a><span class="lineno"> 2532</span> <span class="comment">/***** ENDOMORPHISH TESTS *****/</span></div><div class="line"><a name="l02533"></a><span class="lineno"> 2533</span> <span class="keywordtype">void</span> test_scalar_split(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02534"></a><span class="lineno"> 2534</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> full;</div><div class="line"><a name="l02535"></a><span class="lineno"> 2535</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> s1, slam;</div><div class="line"><a name="l02536"></a><span class="lineno"> 2536</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> zero[32] = {0};</div><div class="line"><a name="l02537"></a><span class="lineno"> 2537</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> tmp[32];</div><div class="line"><a name="l02538"></a><span class="lineno"> 2538</span> </div><div class="line"><a name="l02539"></a><span class="lineno"> 2539</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&full);</div><div class="line"><a name="l02540"></a><span class="lineno"> 2540</span>  secp256k1_scalar_split_lambda(&s1, &slam, &full);</div><div class="line"><a name="l02541"></a><span class="lineno"> 2541</span> </div><div class="line"><a name="l02542"></a><span class="lineno"> 2542</span>  <span class="comment">/* check that both are <= 128 bits in size */</span></div><div class="line"><a name="l02543"></a><span class="lineno"> 2543</span>  <span class="keywordflow">if</span> (<a class="code" href="scalar_8h.html#aab66620cbbe49bec3c7c02f4a1219c05">secp256k1_scalar_is_high</a>(&s1)) {</div><div class="line"><a name="l02544"></a><span class="lineno"> 2544</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&s1, &s1);</div><div class="line"><a name="l02545"></a><span class="lineno"> 2545</span>  }</div><div class="line"><a name="l02546"></a><span class="lineno"> 2546</span>  <span class="keywordflow">if</span> (<a class="code" href="scalar_8h.html#aab66620cbbe49bec3c7c02f4a1219c05">secp256k1_scalar_is_high</a>(&slam)) {</div><div class="line"><a name="l02547"></a><span class="lineno"> 2547</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&slam, &slam);</div><div class="line"><a name="l02548"></a><span class="lineno"> 2548</span>  }</div><div class="line"><a name="l02549"></a><span class="lineno"> 2549</span> </div><div class="line"><a name="l02550"></a><span class="lineno"> 2550</span>  <a class="code" href="scalar_8h.html#a4fa08f8af5a23f505b44c9ef1bec1831">secp256k1_scalar_get_b32</a>(tmp, &s1);</div><div class="line"><a name="l02551"></a><span class="lineno"> 2551</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(zero, tmp, 16) == 0);</div><div class="line"><a name="l02552"></a><span class="lineno"> 2552</span>  <a class="code" href="scalar_8h.html#a4fa08f8af5a23f505b44c9ef1bec1831">secp256k1_scalar_get_b32</a>(tmp, &slam);</div><div class="line"><a name="l02553"></a><span class="lineno"> 2553</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(zero, tmp, 16) == 0);</div><div class="line"><a name="l02554"></a><span class="lineno"> 2554</span> }</div><div class="line"><a name="l02555"></a><span class="lineno"> 2555</span> </div><div class="line"><a name="l02556"></a><span class="lineno"> 2556</span> <span class="keywordtype">void</span> run_endomorphism_tests(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02557"></a><span class="lineno"> 2557</span>  test_scalar_split();</div><div class="line"><a name="l02558"></a><span class="lineno"> 2558</span> }</div><div class="line"><a name="l02559"></a><span class="lineno"> 2559</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l02560"></a><span class="lineno"> 2560</span> </div><div class="line"><a name="l02561"></a><span class="lineno"><a class="line" href="tests_8c.html#ab33610b81949f135f12a8f2aab3dc192"> 2561</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ab33610b81949f135f12a8f2aab3dc192">ec_pubkey_parse_pointtest</a>(<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *input, <span class="keywordtype">int</span> xvalid, <span class="keywordtype">int</span> yvalid) {</div><div class="line"><a name="l02562"></a><span class="lineno"> 2562</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkeyc[65];</div><div class="line"><a name="l02563"></a><span class="lineno"> 2563</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey;</div><div class="line"><a name="l02564"></a><span class="lineno"> 2564</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> ge;</div><div class="line"><a name="l02565"></a><span class="lineno"> 2565</span>  <span class="keywordtype">size_t</span> pubkeyclen;</div><div class="line"><a name="l02566"></a><span class="lineno"> 2566</span>  int32_t ecount;</div><div class="line"><a name="l02567"></a><span class="lineno"> 2567</span>  ecount = 0;</div><div class="line"><a name="l02568"></a><span class="lineno"> 2568</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, <a class="code" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a>, &ecount);</div><div class="line"><a name="l02569"></a><span class="lineno"> 2569</span>  <span class="keywordflow">for</span> (pubkeyclen = 3; pubkeyclen <= 65; pubkeyclen++) {</div><div class="line"><a name="l02570"></a><span class="lineno"> 2570</span>  <span class="comment">/* Smaller sizes are tested exhaustively elsewhere. */</span></div><div class="line"><a name="l02571"></a><span class="lineno"> 2571</span>  int32_t i;</div><div class="line"><a name="l02572"></a><span class="lineno"> 2572</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(&pubkeyc[1], input, 64);</div><div class="line"><a name="l02573"></a><span class="lineno"> 2573</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkeyc[pubkeyclen], 65 - pubkeyclen);</div><div class="line"><a name="l02574"></a><span class="lineno"> 2574</span>  <span class="keywordflow">for</span> (i = 0; i < 256; i++) {</div><div class="line"><a name="l02575"></a><span class="lineno"> 2575</span>  <span class="comment">/* Try all type bytes. */</span></div><div class="line"><a name="l02576"></a><span class="lineno"> 2576</span>  <span class="keywordtype">int</span> xpass;</div><div class="line"><a name="l02577"></a><span class="lineno"> 2577</span>  <span class="keywordtype">int</span> ypass;</div><div class="line"><a name="l02578"></a><span class="lineno"> 2578</span>  <span class="keywordtype">int</span> ysign;</div><div class="line"><a name="l02579"></a><span class="lineno"> 2579</span>  pubkeyc[0] = i;</div><div class="line"><a name="l02580"></a><span class="lineno"> 2580</span>  <span class="comment">/* What sign does this point have? */</span></div><div class="line"><a name="l02581"></a><span class="lineno"> 2581</span>  ysign = (input[63] & 1) + 2;</div><div class="line"><a name="l02582"></a><span class="lineno"> 2582</span>  <span class="comment">/* For the current type (i) do we expect parsing to work? Handled all of compressed/uncompressed/hybrid. */</span></div><div class="line"><a name="l02583"></a><span class="lineno"> 2583</span>  xpass = xvalid && (pubkeyclen == 33) && ((i & 254) == 2);</div><div class="line"><a name="l02584"></a><span class="lineno"> 2584</span>  <span class="comment">/* Do we expect a parse and re-serialize as uncompressed to give a matching y? */</span></div><div class="line"><a name="l02585"></a><span class="lineno"> 2585</span>  ypass = xvalid && yvalid && ((i & 4) == ((pubkeyclen == 65) << 2)) &&</div><div class="line"><a name="l02586"></a><span class="lineno"> 2586</span>  ((i == 4) || ((i & 251) == ysign)) && ((pubkeyclen == 33) || (pubkeyclen == 65));</div><div class="line"><a name="l02587"></a><span class="lineno"> 2587</span>  <span class="keywordflow">if</span> (xpass || ypass) {</div><div class="line"><a name="l02588"></a><span class="lineno"> 2588</span>  <span class="comment">/* These cases must parse. */</span></div><div class="line"><a name="l02589"></a><span class="lineno"> 2589</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkeyo[65];</div><div class="line"><a name="l02590"></a><span class="lineno"> 2590</span>  <span class="keywordtype">size_t</span> outl;</div><div class="line"><a name="l02591"></a><span class="lineno"> 2591</span>  memset(&pubkey, 0, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02592"></a><span class="lineno"> 2592</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02593"></a><span class="lineno"> 2593</span>  ecount = 0;</div><div class="line"><a name="l02594"></a><span class="lineno"> 2594</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeyc, pubkeyclen) == 1);</div><div class="line"><a name="l02595"></a><span class="lineno"> 2595</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02596"></a><span class="lineno"> 2596</span>  outl = 65;</div><div class="line"><a name="l02597"></a><span class="lineno"> 2597</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(pubkeyo, 65);</div><div class="line"><a name="l02598"></a><span class="lineno"> 2598</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, pubkeyo, &outl, &pubkey, <a class="code" href="secp256k1_8h.html#a7b8f642c65e8b5c81fa4421b7c42ab57">SECP256K1_EC_COMPRESSED</a>) == 1);</div><div class="line"><a name="l02599"></a><span class="lineno"> 2599</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(pubkeyo, outl);</div><div class="line"><a name="l02600"></a><span class="lineno"> 2600</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(outl == 33);</div><div class="line"><a name="l02601"></a><span class="lineno"> 2601</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkeyo[1], &pubkeyc[1], 32) == 0);</div><div class="line"><a name="l02602"></a><span class="lineno"> 2602</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>((pubkeyclen != 33) || (pubkeyo[0] == pubkeyc[0]));</div><div class="line"><a name="l02603"></a><span class="lineno"> 2603</span>  <span class="keywordflow">if</span> (ypass) {</div><div class="line"><a name="l02604"></a><span class="lineno"> 2604</span>  <span class="comment">/* This test isn't always done because we decode with alternative signs, so the y won't match. */</span></div><div class="line"><a name="l02605"></a><span class="lineno"> 2605</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(pubkeyo[0] == ysign);</div><div class="line"><a name="l02606"></a><span class="lineno"> 2606</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 1);</div><div class="line"><a name="l02607"></a><span class="lineno"> 2607</span>  memset(&pubkey, 0, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02608"></a><span class="lineno"> 2608</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02609"></a><span class="lineno"> 2609</span>  <a class="code" href="secp256k1_8c.html#aa061c9c5c861017bef990e5c4653e0f4">secp256k1_pubkey_save</a>(&pubkey, &ge);</div><div class="line"><a name="l02610"></a><span class="lineno"> 2610</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02611"></a><span class="lineno"> 2611</span>  outl = 65;</div><div class="line"><a name="l02612"></a><span class="lineno"> 2612</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(pubkeyo, 65);</div><div class="line"><a name="l02613"></a><span class="lineno"> 2613</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, pubkeyo, &outl, &pubkey, <a class="code" href="secp256k1_8h.html#ab8e25dc58843e83926f95795f9e8a6e2">SECP256K1_EC_UNCOMPRESSED</a>) == 1);</div><div class="line"><a name="l02614"></a><span class="lineno"> 2614</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(pubkeyo, outl);</div><div class="line"><a name="l02615"></a><span class="lineno"> 2615</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(outl == 65);</div><div class="line"><a name="l02616"></a><span class="lineno"> 2616</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(pubkeyo[0] == 4);</div><div class="line"><a name="l02617"></a><span class="lineno"> 2617</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkeyo[1], input, 64) == 0);</div><div class="line"><a name="l02618"></a><span class="lineno"> 2618</span>  }</div><div class="line"><a name="l02619"></a><span class="lineno"> 2619</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02620"></a><span class="lineno"> 2620</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l02621"></a><span class="lineno"> 2621</span>  <span class="comment">/* These cases must fail to parse. */</span></div><div class="line"><a name="l02622"></a><span class="lineno"> 2622</span>  memset(&pubkey, 0xfe, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02623"></a><span class="lineno"> 2623</span>  ecount = 0;</div><div class="line"><a name="l02624"></a><span class="lineno"> 2624</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02625"></a><span class="lineno"> 2625</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeyc, pubkeyclen) == 0);</div><div class="line"><a name="l02626"></a><span class="lineno"> 2626</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02627"></a><span class="lineno"> 2627</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02628"></a><span class="lineno"> 2628</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 0);</div><div class="line"><a name="l02629"></a><span class="lineno"> 2629</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02630"></a><span class="lineno"> 2630</span>  }</div><div class="line"><a name="l02631"></a><span class="lineno"> 2631</span>  }</div><div class="line"><a name="l02632"></a><span class="lineno"> 2632</span>  }</div><div class="line"><a name="l02633"></a><span class="lineno"> 2633</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, NULL);</div><div class="line"><a name="l02634"></a><span class="lineno"> 2634</span> }</div><div class="line"><a name="l02635"></a><span class="lineno"> 2635</span> </div><div class="line"><a name="l02636"></a><span class="lineno"><a class="line" href="tests_8c.html#a24bd2af11fcef9c3f2abb62862d6fe97"> 2636</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a24bd2af11fcef9c3f2abb62862d6fe97">run_ec_pubkey_parse_test</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02637"></a><span class="lineno"> 2637</span> <span class="preprocessor">#define SECP256K1_EC_PARSE_TEST_NVALID (12)</span></div><div class="line"><a name="l02638"></a><span class="lineno"> 2638</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> valid[<a class="code" href="tests_8c.html#a4064b14fff65941d6f9046d53e900e89">SECP256K1_EC_PARSE_TEST_NVALID</a>][64] = {</div><div class="line"><a name="l02639"></a><span class="lineno"> 2639</span>  {</div><div class="line"><a name="l02640"></a><span class="lineno"> 2640</span>  <span class="comment">/* Point with leading and trailing zeros in x and y serialization. */</span></div><div class="line"><a name="l02641"></a><span class="lineno"> 2641</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x42, 0x52,</div><div class="line"><a name="l02642"></a><span class="lineno"> 2642</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02643"></a><span class="lineno"> 2643</span>  0x00, 0x00, 0x64, 0xef, 0xa1, 0x7b, 0x77, 0x61, 0xe1, 0xe4, 0x27, 0x06, 0x98, 0x9f, 0xb4, 0x83,</div><div class="line"><a name="l02644"></a><span class="lineno"> 2644</span>  0xb8, 0xd2, 0xd4, 0x9b, 0xf7, 0x8f, 0xae, 0x98, 0x03, 0xf0, 0x99, 0xb8, 0x34, 0xed, 0xeb, 0x00</div><div class="line"><a name="l02645"></a><span class="lineno"> 2645</span>  },</div><div class="line"><a name="l02646"></a><span class="lineno"> 2646</span>  {</div><div class="line"><a name="l02647"></a><span class="lineno"> 2647</span>  <span class="comment">/* Point with x equal to a 3rd root of unity.*/</span></div><div class="line"><a name="l02648"></a><span class="lineno"> 2648</span>  0x7a, 0xe9, 0x6a, 0x2b, 0x65, 0x7c, 0x07, 0x10, 0x6e, 0x64, 0x47, 0x9e, 0xac, 0x34, 0x34, 0xe9,</div><div class="line"><a name="l02649"></a><span class="lineno"> 2649</span>  0x9c, 0xf0, 0x49, 0x75, 0x12, 0xf5, 0x89, 0x95, 0xc1, 0x39, 0x6c, 0x28, 0x71, 0x95, 0x01, 0xee,</div><div class="line"><a name="l02650"></a><span class="lineno"> 2650</span>  0x42, 0x18, 0xf2, 0x0a, 0xe6, 0xc6, 0x46, 0xb3, 0x63, 0xdb, 0x68, 0x60, 0x58, 0x22, 0xfb, 0x14,</div><div class="line"><a name="l02651"></a><span class="lineno"> 2651</span>  0x26, 0x4c, 0xa8, 0xd2, 0x58, 0x7f, 0xdd, 0x6f, 0xbc, 0x75, 0x0d, 0x58, 0x7e, 0x76, 0xa7, 0xee,</div><div class="line"><a name="l02652"></a><span class="lineno"> 2652</span>  },</div><div class="line"><a name="l02653"></a><span class="lineno"> 2653</span>  {</div><div class="line"><a name="l02654"></a><span class="lineno"> 2654</span>  <span class="comment">/* Point with largest x. (1/2) */</span></div><div class="line"><a name="l02655"></a><span class="lineno"> 2655</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02656"></a><span class="lineno"> 2656</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x2c,</div><div class="line"><a name="l02657"></a><span class="lineno"> 2657</span>  0x0e, 0x99, 0x4b, 0x14, 0xea, 0x72, 0xf8, 0xc3, 0xeb, 0x95, 0xc7, 0x1e, 0xf6, 0x92, 0x57, 0x5e,</div><div class="line"><a name="l02658"></a><span class="lineno"> 2658</span>  0x77, 0x50, 0x58, 0x33, 0x2d, 0x7e, 0x52, 0xd0, 0x99, 0x5c, 0xf8, 0x03, 0x88, 0x71, 0xb6, 0x7d,</div><div class="line"><a name="l02659"></a><span class="lineno"> 2659</span>  },</div><div class="line"><a name="l02660"></a><span class="lineno"> 2660</span>  {</div><div class="line"><a name="l02661"></a><span class="lineno"> 2661</span>  <span class="comment">/* Point with largest x. (2/2) */</span></div><div class="line"><a name="l02662"></a><span class="lineno"> 2662</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02663"></a><span class="lineno"> 2663</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x2c,</div><div class="line"><a name="l02664"></a><span class="lineno"> 2664</span>  0xf1, 0x66, 0xb4, 0xeb, 0x15, 0x8d, 0x07, 0x3c, 0x14, 0x6a, 0x38, 0xe1, 0x09, 0x6d, 0xa8, 0xa1,</div><div class="line"><a name="l02665"></a><span class="lineno"> 2665</span>  0x88, 0xaf, 0xa7, 0xcc, 0xd2, 0x81, 0xad, 0x2f, 0x66, 0xa3, 0x07, 0xfb, 0x77, 0x8e, 0x45, 0xb2,</div><div class="line"><a name="l02666"></a><span class="lineno"> 2666</span>  },</div><div class="line"><a name="l02667"></a><span class="lineno"> 2667</span>  {</div><div class="line"><a name="l02668"></a><span class="lineno"> 2668</span>  <span class="comment">/* Point with smallest x. (1/2) */</span></div><div class="line"><a name="l02669"></a><span class="lineno"> 2669</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02670"></a><span class="lineno"> 2670</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l02671"></a><span class="lineno"> 2671</span>  0x42, 0x18, 0xf2, 0x0a, 0xe6, 0xc6, 0x46, 0xb3, 0x63, 0xdb, 0x68, 0x60, 0x58, 0x22, 0xfb, 0x14,</div><div class="line"><a name="l02672"></a><span class="lineno"> 2672</span>  0x26, 0x4c, 0xa8, 0xd2, 0x58, 0x7f, 0xdd, 0x6f, 0xbc, 0x75, 0x0d, 0x58, 0x7e, 0x76, 0xa7, 0xee,</div><div class="line"><a name="l02673"></a><span class="lineno"> 2673</span>  },</div><div class="line"><a name="l02674"></a><span class="lineno"> 2674</span>  {</div><div class="line"><a name="l02675"></a><span class="lineno"> 2675</span>  <span class="comment">/* Point with smallest x. (2/2) */</span></div><div class="line"><a name="l02676"></a><span class="lineno"> 2676</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02677"></a><span class="lineno"> 2677</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l02678"></a><span class="lineno"> 2678</span>  0xbd, 0xe7, 0x0d, 0xf5, 0x19, 0x39, 0xb9, 0x4c, 0x9c, 0x24, 0x97, 0x9f, 0xa7, 0xdd, 0x04, 0xeb,</div><div class="line"><a name="l02679"></a><span class="lineno"> 2679</span>  0xd9, 0xb3, 0x57, 0x2d, 0xa7, 0x80, 0x22, 0x90, 0x43, 0x8a, 0xf2, 0xa6, 0x81, 0x89, 0x54, 0x41,</div><div class="line"><a name="l02680"></a><span class="lineno"> 2680</span>  },</div><div class="line"><a name="l02681"></a><span class="lineno"> 2681</span>  {</div><div class="line"><a name="l02682"></a><span class="lineno"> 2682</span>  <span class="comment">/* Point with largest y. (1/3) */</span></div><div class="line"><a name="l02683"></a><span class="lineno"> 2683</span>  0x1f, 0xe1, 0xe5, 0xef, 0x3f, 0xce, 0xb5, 0xc1, 0x35, 0xab, 0x77, 0x41, 0x33, 0x3c, 0xe5, 0xa6,</div><div class="line"><a name="l02684"></a><span class="lineno"> 2684</span>  0xe8, 0x0d, 0x68, 0x16, 0x76, 0x53, 0xf6, 0xb2, 0xb2, 0x4b, 0xcb, 0xcf, 0xaa, 0xaf, 0xf5, 0x07,</div><div class="line"><a name="l02685"></a><span class="lineno"> 2685</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02686"></a><span class="lineno"> 2686</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x2e,</div><div class="line"><a name="l02687"></a><span class="lineno"> 2687</span>  },</div><div class="line"><a name="l02688"></a><span class="lineno"> 2688</span>  {</div><div class="line"><a name="l02689"></a><span class="lineno"> 2689</span>  <span class="comment">/* Point with largest y. (2/3) */</span></div><div class="line"><a name="l02690"></a><span class="lineno"> 2690</span>  0xcb, 0xb0, 0xde, 0xab, 0x12, 0x57, 0x54, 0xf1, 0xfd, 0xb2, 0x03, 0x8b, 0x04, 0x34, 0xed, 0x9c,</div><div class="line"><a name="l02691"></a><span class="lineno"> 2691</span>  0xb3, 0xfb, 0x53, 0xab, 0x73, 0x53, 0x91, 0x12, 0x99, 0x94, 0xa5, 0x35, 0xd9, 0x25, 0xf6, 0x73,</div><div class="line"><a name="l02692"></a><span class="lineno"> 2692</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02693"></a><span class="lineno"> 2693</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x2e,</div><div class="line"><a name="l02694"></a><span class="lineno"> 2694</span>  },</div><div class="line"><a name="l02695"></a><span class="lineno"> 2695</span>  {</div><div class="line"><a name="l02696"></a><span class="lineno"> 2696</span>  <span class="comment">/* Point with largest y. (3/3) */</span></div><div class="line"><a name="l02697"></a><span class="lineno"> 2697</span>  0x14, 0x6d, 0x3b, 0x65, 0xad, 0xd9, 0xf5, 0x4c, 0xcc, 0xa2, 0x85, 0x33, 0xc8, 0x8e, 0x2c, 0xbc,</div><div class="line"><a name="l02698"></a><span class="lineno"> 2698</span>  0x63, 0xf7, 0x44, 0x3e, 0x16, 0x58, 0x78, 0x3a, 0xb4, 0x1f, 0x8e, 0xf9, 0x7c, 0x2a, 0x10, 0xb5,</div><div class="line"><a name="l02699"></a><span class="lineno"> 2699</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02700"></a><span class="lineno"> 2700</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x2e,</div><div class="line"><a name="l02701"></a><span class="lineno"> 2701</span>  },</div><div class="line"><a name="l02702"></a><span class="lineno"> 2702</span>  {</div><div class="line"><a name="l02703"></a><span class="lineno"> 2703</span>  <span class="comment">/* Point with smallest y. (1/3) */</span></div><div class="line"><a name="l02704"></a><span class="lineno"> 2704</span>  0x1f, 0xe1, 0xe5, 0xef, 0x3f, 0xce, 0xb5, 0xc1, 0x35, 0xab, 0x77, 0x41, 0x33, 0x3c, 0xe5, 0xa6,</div><div class="line"><a name="l02705"></a><span class="lineno"> 2705</span>  0xe8, 0x0d, 0x68, 0x16, 0x76, 0x53, 0xf6, 0xb2, 0xb2, 0x4b, 0xcb, 0xcf, 0xaa, 0xaf, 0xf5, 0x07,</div><div class="line"><a name="l02706"></a><span class="lineno"> 2706</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02707"></a><span class="lineno"> 2707</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l02708"></a><span class="lineno"> 2708</span>  },</div><div class="line"><a name="l02709"></a><span class="lineno"> 2709</span>  {</div><div class="line"><a name="l02710"></a><span class="lineno"> 2710</span>  <span class="comment">/* Point with smallest y. (2/3) */</span></div><div class="line"><a name="l02711"></a><span class="lineno"> 2711</span>  0xcb, 0xb0, 0xde, 0xab, 0x12, 0x57, 0x54, 0xf1, 0xfd, 0xb2, 0x03, 0x8b, 0x04, 0x34, 0xed, 0x9c,</div><div class="line"><a name="l02712"></a><span class="lineno"> 2712</span>  0xb3, 0xfb, 0x53, 0xab, 0x73, 0x53, 0x91, 0x12, 0x99, 0x94, 0xa5, 0x35, 0xd9, 0x25, 0xf6, 0x73,</div><div class="line"><a name="l02713"></a><span class="lineno"> 2713</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02714"></a><span class="lineno"> 2714</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l02715"></a><span class="lineno"> 2715</span>  },</div><div class="line"><a name="l02716"></a><span class="lineno"> 2716</span>  {</div><div class="line"><a name="l02717"></a><span class="lineno"> 2717</span>  <span class="comment">/* Point with smallest y. (3/3) */</span></div><div class="line"><a name="l02718"></a><span class="lineno"> 2718</span>  0x14, 0x6d, 0x3b, 0x65, 0xad, 0xd9, 0xf5, 0x4c, 0xcc, 0xa2, 0x85, 0x33, 0xc8, 0x8e, 0x2c, 0xbc,</div><div class="line"><a name="l02719"></a><span class="lineno"> 2719</span>  0x63, 0xf7, 0x44, 0x3e, 0x16, 0x58, 0x78, 0x3a, 0xb4, 0x1f, 0x8e, 0xf9, 0x7c, 0x2a, 0x10, 0xb5,</div><div class="line"><a name="l02720"></a><span class="lineno"> 2720</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02721"></a><span class="lineno"> 2721</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01</div><div class="line"><a name="l02722"></a><span class="lineno"> 2722</span>  }</div><div class="line"><a name="l02723"></a><span class="lineno"> 2723</span>  };</div><div class="line"><a name="l02724"></a><span class="lineno"> 2724</span> <span class="preprocessor">#define SECP256K1_EC_PARSE_TEST_NXVALID (4)</span></div><div class="line"><a name="l02725"></a><span class="lineno"> 2725</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> onlyxvalid[<a class="code" href="tests_8c.html#afa8c0d29706dca1ca0cffb9b3bb6d209">SECP256K1_EC_PARSE_TEST_NXVALID</a>][64] = {</div><div class="line"><a name="l02726"></a><span class="lineno"> 2726</span>  {</div><div class="line"><a name="l02727"></a><span class="lineno"> 2727</span>  <span class="comment">/* Valid if y overflow ignored (y = 1 mod p). (1/3) */</span></div><div class="line"><a name="l02728"></a><span class="lineno"> 2728</span>  0x1f, 0xe1, 0xe5, 0xef, 0x3f, 0xce, 0xb5, 0xc1, 0x35, 0xab, 0x77, 0x41, 0x33, 0x3c, 0xe5, 0xa6,</div><div class="line"><a name="l02729"></a><span class="lineno"> 2729</span>  0xe8, 0x0d, 0x68, 0x16, 0x76, 0x53, 0xf6, 0xb2, 0xb2, 0x4b, 0xcb, 0xcf, 0xaa, 0xaf, 0xf5, 0x07,</div><div class="line"><a name="l02730"></a><span class="lineno"> 2730</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02731"></a><span class="lineno"> 2731</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x30,</div><div class="line"><a name="l02732"></a><span class="lineno"> 2732</span>  },</div><div class="line"><a name="l02733"></a><span class="lineno"> 2733</span>  {</div><div class="line"><a name="l02734"></a><span class="lineno"> 2734</span>  <span class="comment">/* Valid if y overflow ignored (y = 1 mod p). (2/3) */</span></div><div class="line"><a name="l02735"></a><span class="lineno"> 2735</span>  0xcb, 0xb0, 0xde, 0xab, 0x12, 0x57, 0x54, 0xf1, 0xfd, 0xb2, 0x03, 0x8b, 0x04, 0x34, 0xed, 0x9c,</div><div class="line"><a name="l02736"></a><span class="lineno"> 2736</span>  0xb3, 0xfb, 0x53, 0xab, 0x73, 0x53, 0x91, 0x12, 0x99, 0x94, 0xa5, 0x35, 0xd9, 0x25, 0xf6, 0x73,</div><div class="line"><a name="l02737"></a><span class="lineno"> 2737</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02738"></a><span class="lineno"> 2738</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x30,</div><div class="line"><a name="l02739"></a><span class="lineno"> 2739</span>  },</div><div class="line"><a name="l02740"></a><span class="lineno"> 2740</span>  {</div><div class="line"><a name="l02741"></a><span class="lineno"> 2741</span>  <span class="comment">/* Valid if y overflow ignored (y = 1 mod p). (3/3)*/</span></div><div class="line"><a name="l02742"></a><span class="lineno"> 2742</span>  0x14, 0x6d, 0x3b, 0x65, 0xad, 0xd9, 0xf5, 0x4c, 0xcc, 0xa2, 0x85, 0x33, 0xc8, 0x8e, 0x2c, 0xbc,</div><div class="line"><a name="l02743"></a><span class="lineno"> 2743</span>  0x63, 0xf7, 0x44, 0x3e, 0x16, 0x58, 0x78, 0x3a, 0xb4, 0x1f, 0x8e, 0xf9, 0x7c, 0x2a, 0x10, 0xb5,</div><div class="line"><a name="l02744"></a><span class="lineno"> 2744</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02745"></a><span class="lineno"> 2745</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x30,</div><div class="line"><a name="l02746"></a><span class="lineno"> 2746</span>  },</div><div class="line"><a name="l02747"></a><span class="lineno"> 2747</span>  {</div><div class="line"><a name="l02748"></a><span class="lineno"> 2748</span>  <span class="comment">/* x on curve, y is from y^2 = x^3 + 8. */</span></div><div class="line"><a name="l02749"></a><span class="lineno"> 2749</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02750"></a><span class="lineno"> 2750</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l02751"></a><span class="lineno"> 2751</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02752"></a><span class="lineno"> 2752</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x03</div><div class="line"><a name="l02753"></a><span class="lineno"> 2753</span>  }</div><div class="line"><a name="l02754"></a><span class="lineno"> 2754</span>  };</div><div class="line"><a name="l02755"></a><span class="lineno"> 2755</span> <span class="preprocessor">#define SECP256K1_EC_PARSE_TEST_NINVALID (7)</span></div><div class="line"><a name="l02756"></a><span class="lineno"> 2756</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> invalid[<a class="code" href="tests_8c.html#a279d9ab9cbf85037ed552544b15c69fd">SECP256K1_EC_PARSE_TEST_NINVALID</a>][64] = {</div><div class="line"><a name="l02757"></a><span class="lineno"> 2757</span>  {</div><div class="line"><a name="l02758"></a><span class="lineno"> 2758</span>  <span class="comment">/* x is third root of -8, y is -1 * (x^3+7); also on the curve for y^2 = x^3 + 9. */</span></div><div class="line"><a name="l02759"></a><span class="lineno"> 2759</span>  0x0a, 0x2d, 0x2b, 0xa9, 0x35, 0x07, 0xf1, 0xdf, 0x23, 0x37, 0x70, 0xc2, 0xa7, 0x97, 0x96, 0x2c,</div><div class="line"><a name="l02760"></a><span class="lineno"> 2760</span>  0xc6, 0x1f, 0x6d, 0x15, 0xda, 0x14, 0xec, 0xd4, 0x7d, 0x8d, 0x27, 0xae, 0x1c, 0xd5, 0xf8, 0x53,</div><div class="line"><a name="l02761"></a><span class="lineno"> 2761</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02762"></a><span class="lineno"> 2762</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l02763"></a><span class="lineno"> 2763</span>  },</div><div class="line"><a name="l02764"></a><span class="lineno"> 2764</span>  {</div><div class="line"><a name="l02765"></a><span class="lineno"> 2765</span>  <span class="comment">/* Valid if x overflow ignored (x = 1 mod p). */</span></div><div class="line"><a name="l02766"></a><span class="lineno"> 2766</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02767"></a><span class="lineno"> 2767</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x30,</div><div class="line"><a name="l02768"></a><span class="lineno"> 2768</span>  0x42, 0x18, 0xf2, 0x0a, 0xe6, 0xc6, 0x46, 0xb3, 0x63, 0xdb, 0x68, 0x60, 0x58, 0x22, 0xfb, 0x14,</div><div class="line"><a name="l02769"></a><span class="lineno"> 2769</span>  0x26, 0x4c, 0xa8, 0xd2, 0x58, 0x7f, 0xdd, 0x6f, 0xbc, 0x75, 0x0d, 0x58, 0x7e, 0x76, 0xa7, 0xee,</div><div class="line"><a name="l02770"></a><span class="lineno"> 2770</span>  },</div><div class="line"><a name="l02771"></a><span class="lineno"> 2771</span>  {</div><div class="line"><a name="l02772"></a><span class="lineno"> 2772</span>  <span class="comment">/* Valid if x overflow ignored (x = 1 mod p). */</span></div><div class="line"><a name="l02773"></a><span class="lineno"> 2773</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02774"></a><span class="lineno"> 2774</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x30,</div><div class="line"><a name="l02775"></a><span class="lineno"> 2775</span>  0xbd, 0xe7, 0x0d, 0xf5, 0x19, 0x39, 0xb9, 0x4c, 0x9c, 0x24, 0x97, 0x9f, 0xa7, 0xdd, 0x04, 0xeb,</div><div class="line"><a name="l02776"></a><span class="lineno"> 2776</span>  0xd9, 0xb3, 0x57, 0x2d, 0xa7, 0x80, 0x22, 0x90, 0x43, 0x8a, 0xf2, 0xa6, 0x81, 0x89, 0x54, 0x41,</div><div class="line"><a name="l02777"></a><span class="lineno"> 2777</span>  },</div><div class="line"><a name="l02778"></a><span class="lineno"> 2778</span>  {</div><div class="line"><a name="l02779"></a><span class="lineno"> 2779</span>  <span class="comment">/* x is -1, y is the result of the sqrt ladder; also on the curve for y^2 = x^3 - 5. */</span></div><div class="line"><a name="l02780"></a><span class="lineno"> 2780</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02781"></a><span class="lineno"> 2781</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x2e,</div><div class="line"><a name="l02782"></a><span class="lineno"> 2782</span>  0xf4, 0x84, 0x14, 0x5c, 0xb0, 0x14, 0x9b, 0x82, 0x5d, 0xff, 0x41, 0x2f, 0xa0, 0x52, 0xa8, 0x3f,</div><div class="line"><a name="l02783"></a><span class="lineno"> 2783</span>  0xcb, 0x72, 0xdb, 0x61, 0xd5, 0x6f, 0x37, 0x70, 0xce, 0x06, 0x6b, 0x73, 0x49, 0xa2, 0xaa, 0x28,</div><div class="line"><a name="l02784"></a><span class="lineno"> 2784</span>  },</div><div class="line"><a name="l02785"></a><span class="lineno"> 2785</span>  {</div><div class="line"><a name="l02786"></a><span class="lineno"> 2786</span>  <span class="comment">/* x is -1, y is the result of the sqrt ladder; also on the curve for y^2 = x^3 - 5. */</span></div><div class="line"><a name="l02787"></a><span class="lineno"> 2787</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02788"></a><span class="lineno"> 2788</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xfc, 0x2e,</div><div class="line"><a name="l02789"></a><span class="lineno"> 2789</span>  0x0b, 0x7b, 0xeb, 0xa3, 0x4f, 0xeb, 0x64, 0x7d, 0xa2, 0x00, 0xbe, 0xd0, 0x5f, 0xad, 0x57, 0xc0,</div><div class="line"><a name="l02790"></a><span class="lineno"> 2790</span>  0x34, 0x8d, 0x24, 0x9e, 0x2a, 0x90, 0xc8, 0x8f, 0x31, 0xf9, 0x94, 0x8b, 0xb6, 0x5d, 0x52, 0x07,</div><div class="line"><a name="l02791"></a><span class="lineno"> 2791</span>  },</div><div class="line"><a name="l02792"></a><span class="lineno"> 2792</span>  {</div><div class="line"><a name="l02793"></a><span class="lineno"> 2793</span>  <span class="comment">/* x is zero, y is the result of the sqrt ladder; also on the curve for y^2 = x^3 - 7. */</span></div><div class="line"><a name="l02794"></a><span class="lineno"> 2794</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02795"></a><span class="lineno"> 2795</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02796"></a><span class="lineno"> 2796</span>  0x8f, 0x53, 0x7e, 0xef, 0xdf, 0xc1, 0x60, 0x6a, 0x07, 0x27, 0xcd, 0x69, 0xb4, 0xa7, 0x33, 0x3d,</div><div class="line"><a name="l02797"></a><span class="lineno"> 2797</span>  0x38, 0xed, 0x44, 0xe3, 0x93, 0x2a, 0x71, 0x79, 0xee, 0xcb, 0x4b, 0x6f, 0xba, 0x93, 0x60, 0xdc,</div><div class="line"><a name="l02798"></a><span class="lineno"> 2798</span>  },</div><div class="line"><a name="l02799"></a><span class="lineno"> 2799</span>  {</div><div class="line"><a name="l02800"></a><span class="lineno"> 2800</span>  <span class="comment">/* x is zero, y is the result of the sqrt ladder; also on the curve for y^2 = x^3 - 7. */</span></div><div class="line"><a name="l02801"></a><span class="lineno"> 2801</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02802"></a><span class="lineno"> 2802</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l02803"></a><span class="lineno"> 2803</span>  0x70, 0xac, 0x81, 0x10, 0x20, 0x3e, 0x9f, 0x95, 0xf8, 0xd8, 0x32, 0x96, 0x4b, 0x58, 0xcc, 0xc2,</div><div class="line"><a name="l02804"></a><span class="lineno"> 2804</span>  0xc7, 0x12, 0xbb, 0x1c, 0x6c, 0xd5, 0x8e, 0x86, 0x11, 0x34, 0xb4, 0x8f, 0x45, 0x6c, 0x9b, 0x53</div><div class="line"><a name="l02805"></a><span class="lineno"> 2805</span>  }</div><div class="line"><a name="l02806"></a><span class="lineno"> 2806</span>  };</div><div class="line"><a name="l02807"></a><span class="lineno"> 2807</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkeyc[66] = {</div><div class="line"><a name="l02808"></a><span class="lineno"> 2808</span>  <span class="comment">/* Serialization of G. */</span></div><div class="line"><a name="l02809"></a><span class="lineno"> 2809</span>  0x04, 0x79, 0xBE, 0x66, 0x7E, 0xF9, 0xDC, 0xBB, 0xAC, 0x55, 0xA0, 0x62, 0x95, 0xCE, 0x87, 0x0B,</div><div class="line"><a name="l02810"></a><span class="lineno"> 2810</span>  0x07, 0x02, 0x9B, 0xFC, 0xDB, 0x2D, 0xCE, 0x28, 0xD9, 0x59, 0xF2, 0x81, 0x5B, 0x16, 0xF8, 0x17,</div><div class="line"><a name="l02811"></a><span class="lineno"> 2811</span>  0x98, 0x48, 0x3A, 0xDA, 0x77, 0x26, 0xA3, 0xC4, 0x65, 0x5D, 0xA4, 0xFB, 0xFC, 0x0E, 0x11, 0x08,</div><div class="line"><a name="l02812"></a><span class="lineno"> 2812</span>  0xA8, 0xFD, 0x17, 0xB4, 0x48, 0xA6, 0x85, 0x54, 0x19, 0x9C, 0x47, 0xD0, 0x8F, 0xFB, 0x10, 0xD4,</div><div class="line"><a name="l02813"></a><span class="lineno"> 2813</span>  0xB8, 0x00</div><div class="line"><a name="l02814"></a><span class="lineno"> 2814</span>  };</div><div class="line"><a name="l02815"></a><span class="lineno"> 2815</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> sout[65];</div><div class="line"><a name="l02816"></a><span class="lineno"> 2816</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> shortkey[2];</div><div class="line"><a name="l02817"></a><span class="lineno"> 2817</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> ge;</div><div class="line"><a name="l02818"></a><span class="lineno"> 2818</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey;</div><div class="line"><a name="l02819"></a><span class="lineno"> 2819</span>  <span class="keywordtype">size_t</span> len;</div><div class="line"><a name="l02820"></a><span class="lineno"> 2820</span>  int32_t i;</div><div class="line"><a name="l02821"></a><span class="lineno"> 2821</span>  int32_t ecount;</div><div class="line"><a name="l02822"></a><span class="lineno"> 2822</span>  int32_t ecount2;</div><div class="line"><a name="l02823"></a><span class="lineno"> 2823</span>  ecount = 0;</div><div class="line"><a name="l02824"></a><span class="lineno"> 2824</span>  <span class="comment">/* Nothing should be reading this far into pubkeyc. */</span></div><div class="line"><a name="l02825"></a><span class="lineno"> 2825</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkeyc[65], 1);</div><div class="line"><a name="l02826"></a><span class="lineno"> 2826</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, <a class="code" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a>, &ecount);</div><div class="line"><a name="l02827"></a><span class="lineno"> 2827</span>  <span class="comment">/* Zero length claimed, fail, zeroize, no illegal arg error. */</span></div><div class="line"><a name="l02828"></a><span class="lineno"> 2828</span>  memset(&pubkey, 0xfe, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02829"></a><span class="lineno"> 2829</span>  ecount = 0;</div><div class="line"><a name="l02830"></a><span class="lineno"> 2830</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(shortkey, 2);</div><div class="line"><a name="l02831"></a><span class="lineno"> 2831</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02832"></a><span class="lineno"> 2832</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, shortkey, 0) == 0);</div><div class="line"><a name="l02833"></a><span class="lineno"> 2833</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02834"></a><span class="lineno"> 2834</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02835"></a><span class="lineno"> 2835</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 0);</div><div class="line"><a name="l02836"></a><span class="lineno"> 2836</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02837"></a><span class="lineno"> 2837</span>  <span class="comment">/* Length one claimed, fail, zeroize, no illegal arg error. */</span></div><div class="line"><a name="l02838"></a><span class="lineno"> 2838</span>  <span class="keywordflow">for</span> (i = 0; i < 256 ; i++) {</div><div class="line"><a name="l02839"></a><span class="lineno"> 2839</span>  memset(&pubkey, 0xfe, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02840"></a><span class="lineno"> 2840</span>  ecount = 0;</div><div class="line"><a name="l02841"></a><span class="lineno"> 2841</span>  shortkey[0] = i;</div><div class="line"><a name="l02842"></a><span class="lineno"> 2842</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&shortkey[1], 1);</div><div class="line"><a name="l02843"></a><span class="lineno"> 2843</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02844"></a><span class="lineno"> 2844</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, shortkey, 1) == 0);</div><div class="line"><a name="l02845"></a><span class="lineno"> 2845</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02846"></a><span class="lineno"> 2846</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02847"></a><span class="lineno"> 2847</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 0);</div><div class="line"><a name="l02848"></a><span class="lineno"> 2848</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02849"></a><span class="lineno"> 2849</span>  }</div><div class="line"><a name="l02850"></a><span class="lineno"> 2850</span>  <span class="comment">/* Length two claimed, fail, zeroize, no illegal arg error. */</span></div><div class="line"><a name="l02851"></a><span class="lineno"> 2851</span>  <span class="keywordflow">for</span> (i = 0; i < 65536 ; i++) {</div><div class="line"><a name="l02852"></a><span class="lineno"> 2852</span>  memset(&pubkey, 0xfe, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02853"></a><span class="lineno"> 2853</span>  ecount = 0;</div><div class="line"><a name="l02854"></a><span class="lineno"> 2854</span>  shortkey[0] = i & 255;</div><div class="line"><a name="l02855"></a><span class="lineno"> 2855</span>  shortkey[1] = i >> 8;</div><div class="line"><a name="l02856"></a><span class="lineno"> 2856</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02857"></a><span class="lineno"> 2857</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, shortkey, 2) == 0);</div><div class="line"><a name="l02858"></a><span class="lineno"> 2858</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02859"></a><span class="lineno"> 2859</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02860"></a><span class="lineno"> 2860</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 0);</div><div class="line"><a name="l02861"></a><span class="lineno"> 2861</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02862"></a><span class="lineno"> 2862</span>  }</div><div class="line"><a name="l02863"></a><span class="lineno"> 2863</span>  memset(&pubkey, 0xfe, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02864"></a><span class="lineno"> 2864</span>  ecount = 0;</div><div class="line"><a name="l02865"></a><span class="lineno"> 2865</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02866"></a><span class="lineno"> 2866</span>  <span class="comment">/* 33 bytes claimed on otherwise valid input starting with 0x04, fail, zeroize output, no illegal arg error. */</span></div><div class="line"><a name="l02867"></a><span class="lineno"> 2867</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeyc, 33) == 0);</div><div class="line"><a name="l02868"></a><span class="lineno"> 2868</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02869"></a><span class="lineno"> 2869</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02870"></a><span class="lineno"> 2870</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 0);</div><div class="line"><a name="l02871"></a><span class="lineno"> 2871</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02872"></a><span class="lineno"> 2872</span>  <span class="comment">/* NULL pubkey, illegal arg error. Pubkey isn't rewritten before this step, since it's NULL into the parser. */</span></div><div class="line"><a name="l02873"></a><span class="lineno"> 2873</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, pubkeyc, 65) == 0);</div><div class="line"><a name="l02874"></a><span class="lineno"> 2874</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l02875"></a><span class="lineno"> 2875</span>  <span class="comment">/* NULL input string. Illegal arg and zeroize output. */</span></div><div class="line"><a name="l02876"></a><span class="lineno"> 2876</span>  memset(&pubkey, 0xfe, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02877"></a><span class="lineno"> 2877</span>  ecount = 0;</div><div class="line"><a name="l02878"></a><span class="lineno"> 2878</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02879"></a><span class="lineno"> 2879</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, NULL, 65) == 0);</div><div class="line"><a name="l02880"></a><span class="lineno"> 2880</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02881"></a><span class="lineno"> 2881</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02882"></a><span class="lineno"> 2882</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 0);</div><div class="line"><a name="l02883"></a><span class="lineno"> 2883</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l02884"></a><span class="lineno"> 2884</span>  <span class="comment">/* 64 bytes claimed on input starting with 0x04, fail, zeroize output, no illegal arg error. */</span></div><div class="line"><a name="l02885"></a><span class="lineno"> 2885</span>  memset(&pubkey, 0xfe, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02886"></a><span class="lineno"> 2886</span>  ecount = 0;</div><div class="line"><a name="l02887"></a><span class="lineno"> 2887</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02888"></a><span class="lineno"> 2888</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeyc, 64) == 0);</div><div class="line"><a name="l02889"></a><span class="lineno"> 2889</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02890"></a><span class="lineno"> 2890</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02891"></a><span class="lineno"> 2891</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 0);</div><div class="line"><a name="l02892"></a><span class="lineno"> 2892</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02893"></a><span class="lineno"> 2893</span>  <span class="comment">/* 66 bytes claimed, fail, zeroize output, no illegal arg error. */</span></div><div class="line"><a name="l02894"></a><span class="lineno"> 2894</span>  memset(&pubkey, 0xfe, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02895"></a><span class="lineno"> 2895</span>  ecount = 0;</div><div class="line"><a name="l02896"></a><span class="lineno"> 2896</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02897"></a><span class="lineno"> 2897</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeyc, 66) == 0);</div><div class="line"><a name="l02898"></a><span class="lineno"> 2898</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02899"></a><span class="lineno"> 2899</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02900"></a><span class="lineno"> 2900</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 0);</div><div class="line"><a name="l02901"></a><span class="lineno"> 2901</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02902"></a><span class="lineno"> 2902</span>  <span class="comment">/* Valid parse. */</span></div><div class="line"><a name="l02903"></a><span class="lineno"> 2903</span>  memset(&pubkey, 0, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02904"></a><span class="lineno"> 2904</span>  ecount = 0;</div><div class="line"><a name="l02905"></a><span class="lineno"> 2905</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02906"></a><span class="lineno"> 2906</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeyc, 65) == 1);</div><div class="line"><a name="l02907"></a><span class="lineno"> 2907</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02908"></a><span class="lineno"> 2908</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02909"></a><span class="lineno"> 2909</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&ge, <span class="keyword">sizeof</span>(ge));</div><div class="line"><a name="l02910"></a><span class="lineno"> 2910</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &ge, &pubkey) == 1);</div><div class="line"><a name="l02911"></a><span class="lineno"> 2911</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&ge.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>, <span class="keyword">sizeof</span>(ge.<a class="code" href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">x</a>));</div><div class="line"><a name="l02912"></a><span class="lineno"> 2912</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&ge.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>, <span class="keyword">sizeof</span>(ge.<a class="code" href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">y</a>));</div><div class="line"><a name="l02913"></a><span class="lineno"> 2913</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&ge.<a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>, <span class="keyword">sizeof</span>(ge.<a class="code" href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">infinity</a>));</div><div class="line"><a name="l02914"></a><span class="lineno"> 2914</span>  <a class="code" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a>(&<a class="code" href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a>, &ge);</div><div class="line"><a name="l02915"></a><span class="lineno"> 2915</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l02916"></a><span class="lineno"> 2916</span>  <span class="comment">/* secp256k1_ec_pubkey_serialize illegal args. */</span></div><div class="line"><a name="l02917"></a><span class="lineno"> 2917</span>  ecount = 0;</div><div class="line"><a name="l02918"></a><span class="lineno"> 2918</span>  len = 65;</div><div class="line"><a name="l02919"></a><span class="lineno"> 2919</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, &len, &pubkey, <a class="code" href="secp256k1_8h.html#ab8e25dc58843e83926f95795f9e8a6e2">SECP256K1_EC_UNCOMPRESSED</a>) == 0);</div><div class="line"><a name="l02920"></a><span class="lineno"> 2920</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02921"></a><span class="lineno"> 2921</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(len == 0);</div><div class="line"><a name="l02922"></a><span class="lineno"> 2922</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, sout, NULL, &pubkey, <a class="code" href="secp256k1_8h.html#ab8e25dc58843e83926f95795f9e8a6e2">SECP256K1_EC_UNCOMPRESSED</a>) == 0);</div><div class="line"><a name="l02923"></a><span class="lineno"> 2923</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l02924"></a><span class="lineno"> 2924</span>  len = 65;</div><div class="line"><a name="l02925"></a><span class="lineno"> 2925</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(sout, 65);</div><div class="line"><a name="l02926"></a><span class="lineno"> 2926</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, sout, &len, NULL, <a class="code" href="secp256k1_8h.html#ab8e25dc58843e83926f95795f9e8a6e2">SECP256K1_EC_UNCOMPRESSED</a>) == 0);</div><div class="line"><a name="l02927"></a><span class="lineno"> 2927</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(sout, 65);</div><div class="line"><a name="l02928"></a><span class="lineno"> 2928</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l02929"></a><span class="lineno"> 2929</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(len == 0);</div><div class="line"><a name="l02930"></a><span class="lineno"> 2930</span>  len = 65;</div><div class="line"><a name="l02931"></a><span class="lineno"> 2931</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, sout, &len, &pubkey, ~0) == 0);</div><div class="line"><a name="l02932"></a><span class="lineno"> 2932</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 4);</div><div class="line"><a name="l02933"></a><span class="lineno"> 2933</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(len == 0);</div><div class="line"><a name="l02934"></a><span class="lineno"> 2934</span>  len = 65;</div><div class="line"><a name="l02935"></a><span class="lineno"> 2935</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(sout, 65);</div><div class="line"><a name="l02936"></a><span class="lineno"> 2936</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, sout, &len, &pubkey, <a class="code" href="secp256k1_8h.html#ab8e25dc58843e83926f95795f9e8a6e2">SECP256K1_EC_UNCOMPRESSED</a>) == 1);</div><div class="line"><a name="l02937"></a><span class="lineno"> 2937</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(sout, 65);</div><div class="line"><a name="l02938"></a><span class="lineno"> 2938</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 4);</div><div class="line"><a name="l02939"></a><span class="lineno"> 2939</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(len == 65);</div><div class="line"><a name="l02940"></a><span class="lineno"> 2940</span>  <span class="comment">/* Multiple illegal args. Should still set arg error only once. */</span></div><div class="line"><a name="l02941"></a><span class="lineno"> 2941</span>  ecount = 0;</div><div class="line"><a name="l02942"></a><span class="lineno"> 2942</span>  ecount2 = 11;</div><div class="line"><a name="l02943"></a><span class="lineno"> 2943</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, NULL, 65) == 0);</div><div class="line"><a name="l02944"></a><span class="lineno"> 2944</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02945"></a><span class="lineno"> 2945</span>  <span class="comment">/* Does the illegal arg callback actually change the behavior? */</span></div><div class="line"><a name="l02946"></a><span class="lineno"> 2946</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, <a class="code" href="tests_8c.html#acd831563a1c9edb9b7be83b206b51e4b">uncounting_illegal_callback_fn</a>, &ecount2);</div><div class="line"><a name="l02947"></a><span class="lineno"> 2947</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, NULL, 65) == 0);</div><div class="line"><a name="l02948"></a><span class="lineno"> 2948</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l02949"></a><span class="lineno"> 2949</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount2 == 10);</div><div class="line"><a name="l02950"></a><span class="lineno"> 2950</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, NULL);</div><div class="line"><a name="l02951"></a><span class="lineno"> 2951</span>  <span class="comment">/* Try a bunch of prefabbed points with all possible encodings. */</span></div><div class="line"><a name="l02952"></a><span class="lineno"> 2952</span>  <span class="keywordflow">for</span> (i = 0; i < <a class="code" href="tests_8c.html#a4064b14fff65941d6f9046d53e900e89">SECP256K1_EC_PARSE_TEST_NVALID</a>; i++) {</div><div class="line"><a name="l02953"></a><span class="lineno"> 2953</span>  <a class="code" href="tests_8c.html#ab33610b81949f135f12a8f2aab3dc192">ec_pubkey_parse_pointtest</a>(valid[i], 1, 1);</div><div class="line"><a name="l02954"></a><span class="lineno"> 2954</span>  }</div><div class="line"><a name="l02955"></a><span class="lineno"> 2955</span>  <span class="keywordflow">for</span> (i = 0; i < <a class="code" href="tests_8c.html#afa8c0d29706dca1ca0cffb9b3bb6d209">SECP256K1_EC_PARSE_TEST_NXVALID</a>; i++) {</div><div class="line"><a name="l02956"></a><span class="lineno"> 2956</span>  <a class="code" href="tests_8c.html#ab33610b81949f135f12a8f2aab3dc192">ec_pubkey_parse_pointtest</a>(onlyxvalid[i], 1, 0);</div><div class="line"><a name="l02957"></a><span class="lineno"> 2957</span>  }</div><div class="line"><a name="l02958"></a><span class="lineno"> 2958</span>  <span class="keywordflow">for</span> (i = 0; i < <a class="code" href="tests_8c.html#a279d9ab9cbf85037ed552544b15c69fd">SECP256K1_EC_PARSE_TEST_NINVALID</a>; i++) {</div><div class="line"><a name="l02959"></a><span class="lineno"> 2959</span>  <a class="code" href="tests_8c.html#ab33610b81949f135f12a8f2aab3dc192">ec_pubkey_parse_pointtest</a>(invalid[i], 0, 0);</div><div class="line"><a name="l02960"></a><span class="lineno"> 2960</span>  }</div><div class="line"><a name="l02961"></a><span class="lineno"> 2961</span> }</div><div class="line"><a name="l02962"></a><span class="lineno"> 2962</span> </div><div class="line"><a name="l02963"></a><span class="lineno"><a class="line" href="tests_8c.html#a32498e86a99a258f68cd4b1176f47966"> 2963</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a32498e86a99a258f68cd4b1176f47966">run_eckey_edge_case_test</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l02964"></a><span class="lineno"> 2964</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> orderc[32] = {</div><div class="line"><a name="l02965"></a><span class="lineno"> 2965</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l02966"></a><span class="lineno"> 2966</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe,</div><div class="line"><a name="l02967"></a><span class="lineno"> 2967</span>  0xba, 0xae, 0xdc, 0xe6, 0xaf, 0x48, 0xa0, 0x3b,</div><div class="line"><a name="l02968"></a><span class="lineno"> 2968</span>  0xbf, 0xd2, 0x5e, 0x8c, 0xd0, 0x36, 0x41, 0x41</div><div class="line"><a name="l02969"></a><span class="lineno"> 2969</span>  };</div><div class="line"><a name="l02970"></a><span class="lineno"> 2970</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> zeros[<span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)] = {0x00};</div><div class="line"><a name="l02971"></a><span class="lineno"> 2971</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> ctmp[33];</div><div class="line"><a name="l02972"></a><span class="lineno"> 2972</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> ctmp2[33];</div><div class="line"><a name="l02973"></a><span class="lineno"> 2973</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey;</div><div class="line"><a name="l02974"></a><span class="lineno"> 2974</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey2;</div><div class="line"><a name="l02975"></a><span class="lineno"> 2975</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey_one;</div><div class="line"><a name="l02976"></a><span class="lineno"> 2976</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey_negone;</div><div class="line"><a name="l02977"></a><span class="lineno"> 2977</span>  <span class="keyword">const</span> <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> *pubkeys[3];</div><div class="line"><a name="l02978"></a><span class="lineno"> 2978</span>  <span class="keywordtype">size_t</span> len;</div><div class="line"><a name="l02979"></a><span class="lineno"> 2979</span>  int32_t ecount;</div><div class="line"><a name="l02980"></a><span class="lineno"> 2980</span>  <span class="comment">/* Group order is too large, reject. */</span></div><div class="line"><a name="l02981"></a><span class="lineno"> 2981</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, orderc) == 0);</div><div class="line"><a name="l02982"></a><span class="lineno"> 2982</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02983"></a><span class="lineno"> 2983</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, orderc) == 0);</div><div class="line"><a name="l02984"></a><span class="lineno"> 2984</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02985"></a><span class="lineno"> 2985</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l02986"></a><span class="lineno"> 2986</span>  <span class="comment">/* Maximum value is too large, reject. */</span></div><div class="line"><a name="l02987"></a><span class="lineno"> 2987</span>  memset(ctmp, 255, 32);</div><div class="line"><a name="l02988"></a><span class="lineno"> 2988</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp) == 0);</div><div class="line"><a name="l02989"></a><span class="lineno"> 2989</span>  memset(&pubkey, 1, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02990"></a><span class="lineno"> 2990</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02991"></a><span class="lineno"> 2991</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp) == 0);</div><div class="line"><a name="l02992"></a><span class="lineno"> 2992</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02993"></a><span class="lineno"> 2993</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l02994"></a><span class="lineno"> 2994</span>  <span class="comment">/* Zero is too small, reject. */</span></div><div class="line"><a name="l02995"></a><span class="lineno"> 2995</span>  memset(ctmp, 0, 32);</div><div class="line"><a name="l02996"></a><span class="lineno"> 2996</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp) == 0);</div><div class="line"><a name="l02997"></a><span class="lineno"> 2997</span>  memset(&pubkey, 1, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02998"></a><span class="lineno"> 2998</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l02999"></a><span class="lineno"> 2999</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp) == 0);</div><div class="line"><a name="l03000"></a><span class="lineno"> 3000</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03001"></a><span class="lineno"> 3001</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l03002"></a><span class="lineno"> 3002</span>  <span class="comment">/* One must be accepted. */</span></div><div class="line"><a name="l03003"></a><span class="lineno"> 3003</span>  ctmp[31] = 0x01;</div><div class="line"><a name="l03004"></a><span class="lineno"> 3004</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp) == 1);</div><div class="line"><a name="l03005"></a><span class="lineno"> 3005</span>  memset(&pubkey, 0, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03006"></a><span class="lineno"> 3006</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03007"></a><span class="lineno"> 3007</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp) == 1);</div><div class="line"><a name="l03008"></a><span class="lineno"> 3008</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03009"></a><span class="lineno"> 3009</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) > 0);</div><div class="line"><a name="l03010"></a><span class="lineno"> 3010</span>  pubkey_one = pubkey;</div><div class="line"><a name="l03011"></a><span class="lineno"> 3011</span>  <span class="comment">/* Group order + 1 is too large, reject. */</span></div><div class="line"><a name="l03012"></a><span class="lineno"> 3012</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(ctmp, orderc, 32);</div><div class="line"><a name="l03013"></a><span class="lineno"> 3013</span>  ctmp[31] = 0x42;</div><div class="line"><a name="l03014"></a><span class="lineno"> 3014</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp) == 0);</div><div class="line"><a name="l03015"></a><span class="lineno"> 3015</span>  memset(&pubkey, 1, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03016"></a><span class="lineno"> 3016</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03017"></a><span class="lineno"> 3017</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp) == 0);</div><div class="line"><a name="l03018"></a><span class="lineno"> 3018</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03019"></a><span class="lineno"> 3019</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l03020"></a><span class="lineno"> 3020</span>  <span class="comment">/* -1 must be accepted. */</span></div><div class="line"><a name="l03021"></a><span class="lineno"> 3021</span>  ctmp[31] = 0x40;</div><div class="line"><a name="l03022"></a><span class="lineno"> 3022</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp) == 1);</div><div class="line"><a name="l03023"></a><span class="lineno"> 3023</span>  memset(&pubkey, 0, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03024"></a><span class="lineno"> 3024</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03025"></a><span class="lineno"> 3025</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp) == 1);</div><div class="line"><a name="l03026"></a><span class="lineno"> 3026</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03027"></a><span class="lineno"> 3027</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) > 0);</div><div class="line"><a name="l03028"></a><span class="lineno"> 3028</span>  pubkey_negone = pubkey;</div><div class="line"><a name="l03029"></a><span class="lineno"> 3029</span>  <span class="comment">/* Tweak of zero leaves the value changed. */</span></div><div class="line"><a name="l03030"></a><span class="lineno"> 3030</span>  memset(ctmp2, 0, 32);</div><div class="line"><a name="l03031"></a><span class="lineno"> 3031</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0f9125cd8c970342ec5118f7bfacc0c5">secp256k1_ec_privkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp, ctmp2) == 1);</div><div class="line"><a name="l03032"></a><span class="lineno"> 3032</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(orderc, ctmp, 31) == 0 && ctmp[31] == 0x40);</div><div class="line"><a name="l03033"></a><span class="lineno"> 3033</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(&pubkey2, &pubkey, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03034"></a><span class="lineno"> 3034</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp2) == 1);</div><div class="line"><a name="l03035"></a><span class="lineno"> 3035</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03036"></a><span class="lineno"> 3036</span>  <span class="comment">/* Multiply tweak of zero zeroizes the output. */</span></div><div class="line"><a name="l03037"></a><span class="lineno"> 3037</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#abe078cbb6b642d792f123ea67494f7e3">secp256k1_ec_privkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp, ctmp2) == 0);</div><div class="line"><a name="l03038"></a><span class="lineno"> 3038</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(zeros, ctmp, 32) == 0);</div><div class="line"><a name="l03039"></a><span class="lineno"> 3039</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp2) == 0);</div><div class="line"><a name="l03040"></a><span class="lineno"> 3040</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03041"></a><span class="lineno"> 3041</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03042"></a><span class="lineno"> 3042</span>  <span class="comment">/* Overflowing key tweak zeroizes. */</span></div><div class="line"><a name="l03043"></a><span class="lineno"> 3043</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(ctmp, orderc, 32);</div><div class="line"><a name="l03044"></a><span class="lineno"> 3044</span>  ctmp[31] = 0x40;</div><div class="line"><a name="l03045"></a><span class="lineno"> 3045</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0f9125cd8c970342ec5118f7bfacc0c5">secp256k1_ec_privkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp, orderc) == 0);</div><div class="line"><a name="l03046"></a><span class="lineno"> 3046</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(zeros, ctmp, 32) == 0);</div><div class="line"><a name="l03047"></a><span class="lineno"> 3047</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(ctmp, orderc, 32);</div><div class="line"><a name="l03048"></a><span class="lineno"> 3048</span>  ctmp[31] = 0x40;</div><div class="line"><a name="l03049"></a><span class="lineno"> 3049</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#abe078cbb6b642d792f123ea67494f7e3">secp256k1_ec_privkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp, orderc) == 0);</div><div class="line"><a name="l03050"></a><span class="lineno"> 3050</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(zeros, ctmp, 32) == 0);</div><div class="line"><a name="l03051"></a><span class="lineno"> 3051</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(ctmp, orderc, 32);</div><div class="line"><a name="l03052"></a><span class="lineno"> 3052</span>  ctmp[31] = 0x40;</div><div class="line"><a name="l03053"></a><span class="lineno"> 3053</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, orderc) == 0);</div><div class="line"><a name="l03054"></a><span class="lineno"> 3054</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03055"></a><span class="lineno"> 3055</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03056"></a><span class="lineno"> 3056</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, orderc) == 0);</div><div class="line"><a name="l03057"></a><span class="lineno"> 3057</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03058"></a><span class="lineno"> 3058</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03059"></a><span class="lineno"> 3059</span>  <span class="comment">/* Private key tweaks results in a key of zero. */</span></div><div class="line"><a name="l03060"></a><span class="lineno"> 3060</span>  ctmp2[31] = 1;</div><div class="line"><a name="l03061"></a><span class="lineno"> 3061</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0f9125cd8c970342ec5118f7bfacc0c5">secp256k1_ec_privkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp2, ctmp) == 0);</div><div class="line"><a name="l03062"></a><span class="lineno"> 3062</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(zeros, ctmp2, 32) == 0);</div><div class="line"><a name="l03063"></a><span class="lineno"> 3063</span>  ctmp2[31] = 1;</div><div class="line"><a name="l03064"></a><span class="lineno"> 3064</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp2) == 0);</div><div class="line"><a name="l03065"></a><span class="lineno"> 3065</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03066"></a><span class="lineno"> 3066</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03067"></a><span class="lineno"> 3067</span>  <span class="comment">/* Tweak computation wraps and results in a key of 1. */</span></div><div class="line"><a name="l03068"></a><span class="lineno"> 3068</span>  ctmp2[31] = 2;</div><div class="line"><a name="l03069"></a><span class="lineno"> 3069</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0f9125cd8c970342ec5118f7bfacc0c5">secp256k1_ec_privkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp2, ctmp) == 1);</div><div class="line"><a name="l03070"></a><span class="lineno"> 3070</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(ctmp2, zeros, 31) == 0 && ctmp2[31] == 1);</div><div class="line"><a name="l03071"></a><span class="lineno"> 3071</span>  ctmp2[31] = 2;</div><div class="line"><a name="l03072"></a><span class="lineno"> 3072</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp2) == 1);</div><div class="line"><a name="l03073"></a><span class="lineno"> 3073</span>  ctmp2[31] = 1;</div><div class="line"><a name="l03074"></a><span class="lineno"> 3074</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey2, ctmp2) == 1);</div><div class="line"><a name="l03075"></a><span class="lineno"> 3075</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03076"></a><span class="lineno"> 3076</span>  <span class="comment">/* Tweak mul * 2 = 1+1. */</span></div><div class="line"><a name="l03077"></a><span class="lineno"> 3077</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp2) == 1);</div><div class="line"><a name="l03078"></a><span class="lineno"> 3078</span>  ctmp2[31] = 2;</div><div class="line"><a name="l03079"></a><span class="lineno"> 3079</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey2, ctmp2) == 1);</div><div class="line"><a name="l03080"></a><span class="lineno"> 3080</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03081"></a><span class="lineno"> 3081</span>  <span class="comment">/* Test argument errors. */</span></div><div class="line"><a name="l03082"></a><span class="lineno"> 3082</span>  ecount = 0;</div><div class="line"><a name="l03083"></a><span class="lineno"> 3083</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, <a class="code" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a>, &ecount);</div><div class="line"><a name="l03084"></a><span class="lineno"> 3084</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l03085"></a><span class="lineno"> 3085</span>  <span class="comment">/* Zeroize pubkey on parse error. */</span></div><div class="line"><a name="l03086"></a><span class="lineno"> 3086</span>  memset(&pubkey, 0, 32);</div><div class="line"><a name="l03087"></a><span class="lineno"> 3087</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, ctmp2) == 0);</div><div class="line"><a name="l03088"></a><span class="lineno"> 3088</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l03089"></a><span class="lineno"> 3089</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03090"></a><span class="lineno"> 3090</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03091"></a><span class="lineno"> 3091</span>  memset(&pubkey2, 0, 32);</div><div class="line"><a name="l03092"></a><span class="lineno"> 3092</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey2, ctmp2) == 0);</div><div class="line"><a name="l03093"></a><span class="lineno"> 3093</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l03094"></a><span class="lineno"> 3094</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey2, zeros, <span class="keyword">sizeof</span>(pubkey2)) == 0);</div><div class="line"><a name="l03095"></a><span class="lineno"> 3095</span>  <span class="comment">/* Plain argument errors. */</span></div><div class="line"><a name="l03096"></a><span class="lineno"> 3096</span>  ecount = 0;</div><div class="line"><a name="l03097"></a><span class="lineno"> 3097</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp) == 1);</div><div class="line"><a name="l03098"></a><span class="lineno"> 3098</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l03099"></a><span class="lineno"> 3099</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL) == 0);</div><div class="line"><a name="l03100"></a><span class="lineno"> 3100</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l03101"></a><span class="lineno"> 3101</span>  ecount = 0;</div><div class="line"><a name="l03102"></a><span class="lineno"> 3102</span>  memset(ctmp2, 0, 32);</div><div class="line"><a name="l03103"></a><span class="lineno"> 3103</span>  ctmp2[31] = 4;</div><div class="line"><a name="l03104"></a><span class="lineno"> 3104</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, ctmp2) == 0);</div><div class="line"><a name="l03105"></a><span class="lineno"> 3105</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l03106"></a><span class="lineno"> 3106</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, NULL) == 0);</div><div class="line"><a name="l03107"></a><span class="lineno"> 3107</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l03108"></a><span class="lineno"> 3108</span>  ecount = 0;</div><div class="line"><a name="l03109"></a><span class="lineno"> 3109</span>  memset(ctmp2, 0, 32);</div><div class="line"><a name="l03110"></a><span class="lineno"> 3110</span>  ctmp2[31] = 4;</div><div class="line"><a name="l03111"></a><span class="lineno"> 3111</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, ctmp2) == 0);</div><div class="line"><a name="l03112"></a><span class="lineno"> 3112</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l03113"></a><span class="lineno"> 3113</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, NULL) == 0);</div><div class="line"><a name="l03114"></a><span class="lineno"> 3114</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l03115"></a><span class="lineno"> 3115</span>  ecount = 0;</div><div class="line"><a name="l03116"></a><span class="lineno"> 3116</span>  memset(ctmp2, 0, 32);</div><div class="line"><a name="l03117"></a><span class="lineno"> 3117</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0f9125cd8c970342ec5118f7bfacc0c5">secp256k1_ec_privkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, ctmp2) == 0);</div><div class="line"><a name="l03118"></a><span class="lineno"> 3118</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l03119"></a><span class="lineno"> 3119</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a0f9125cd8c970342ec5118f7bfacc0c5">secp256k1_ec_privkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp, NULL) == 0);</div><div class="line"><a name="l03120"></a><span class="lineno"> 3120</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l03121"></a><span class="lineno"> 3121</span>  ecount = 0;</div><div class="line"><a name="l03122"></a><span class="lineno"> 3122</span>  memset(ctmp2, 0, 32);</div><div class="line"><a name="l03123"></a><span class="lineno"> 3123</span>  ctmp2[31] = 1;</div><div class="line"><a name="l03124"></a><span class="lineno"> 3124</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#abe078cbb6b642d792f123ea67494f7e3">secp256k1_ec_privkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, ctmp2) == 0);</div><div class="line"><a name="l03125"></a><span class="lineno"> 3125</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l03126"></a><span class="lineno"> 3126</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#abe078cbb6b642d792f123ea67494f7e3">secp256k1_ec_privkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp, NULL) == 0);</div><div class="line"><a name="l03127"></a><span class="lineno"> 3127</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l03128"></a><span class="lineno"> 3128</span>  ecount = 0;</div><div class="line"><a name="l03129"></a><span class="lineno"> 3129</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, ctmp) == 0);</div><div class="line"><a name="l03130"></a><span class="lineno"> 3130</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l03131"></a><span class="lineno"> 3131</span>  memset(&pubkey, 1, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03132"></a><span class="lineno"> 3132</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, NULL) == 0);</div><div class="line"><a name="l03133"></a><span class="lineno"> 3133</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l03134"></a><span class="lineno"> 3134</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l03135"></a><span class="lineno"> 3135</span>  <span class="comment">/* secp256k1_ec_pubkey_combine tests. */</span></div><div class="line"><a name="l03136"></a><span class="lineno"> 3136</span>  ecount = 0;</div><div class="line"><a name="l03137"></a><span class="lineno"> 3137</span>  pubkeys[0] = &pubkey_one;</div><div class="line"><a name="l03138"></a><span class="lineno"> 3138</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkeys[0], <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> *));</div><div class="line"><a name="l03139"></a><span class="lineno"> 3139</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkeys[1], <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> *));</div><div class="line"><a name="l03140"></a><span class="lineno"> 3140</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkeys[2], <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> *));</div><div class="line"><a name="l03141"></a><span class="lineno"> 3141</span>  memset(&pubkey, 255, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03142"></a><span class="lineno"> 3142</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03143"></a><span class="lineno"> 3143</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeys, 0) == 0);</div><div class="line"><a name="l03144"></a><span class="lineno"> 3144</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03145"></a><span class="lineno"> 3145</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l03146"></a><span class="lineno"> 3146</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l03147"></a><span class="lineno"> 3147</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, pubkeys, 1) == 0);</div><div class="line"><a name="l03148"></a><span class="lineno"> 3148</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l03149"></a><span class="lineno"> 3149</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l03150"></a><span class="lineno"> 3150</span>  memset(&pubkey, 255, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03151"></a><span class="lineno"> 3151</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03152"></a><span class="lineno"> 3152</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, NULL, 1) == 0);</div><div class="line"><a name="l03153"></a><span class="lineno"> 3153</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03154"></a><span class="lineno"> 3154</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l03155"></a><span class="lineno"> 3155</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l03156"></a><span class="lineno"> 3156</span>  pubkeys[0] = &pubkey_negone;</div><div class="line"><a name="l03157"></a><span class="lineno"> 3157</span>  memset(&pubkey, 255, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03158"></a><span class="lineno"> 3158</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03159"></a><span class="lineno"> 3159</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeys, 1) == 1);</div><div class="line"><a name="l03160"></a><span class="lineno"> 3160</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03161"></a><span class="lineno"> 3161</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) > 0);</div><div class="line"><a name="l03162"></a><span class="lineno"> 3162</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l03163"></a><span class="lineno"> 3163</span>  len = 33;</div><div class="line"><a name="l03164"></a><span class="lineno"> 3164</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp, &len, &pubkey, <a class="code" href="secp256k1_8h.html#a7b8f642c65e8b5c81fa4421b7c42ab57">SECP256K1_EC_COMPRESSED</a>) == 1);</div><div class="line"><a name="l03165"></a><span class="lineno"> 3165</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp2, &len, &pubkey_negone, <a class="code" href="secp256k1_8h.html#a7b8f642c65e8b5c81fa4421b7c42ab57">SECP256K1_EC_COMPRESSED</a>) == 1);</div><div class="line"><a name="l03166"></a><span class="lineno"> 3166</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(ctmp, ctmp2, 33) == 0);</div><div class="line"><a name="l03167"></a><span class="lineno"> 3167</span>  <span class="comment">/* Result is infinity. */</span></div><div class="line"><a name="l03168"></a><span class="lineno"> 3168</span>  pubkeys[0] = &pubkey_one;</div><div class="line"><a name="l03169"></a><span class="lineno"> 3169</span>  pubkeys[1] = &pubkey_negone;</div><div class="line"><a name="l03170"></a><span class="lineno"> 3170</span>  memset(&pubkey, 255, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03171"></a><span class="lineno"> 3171</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03172"></a><span class="lineno"> 3172</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeys, 2) == 0);</div><div class="line"><a name="l03173"></a><span class="lineno"> 3173</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03174"></a><span class="lineno"> 3174</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) == 0);</div><div class="line"><a name="l03175"></a><span class="lineno"> 3175</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l03176"></a><span class="lineno"> 3176</span>  <span class="comment">/* Passes through infinity but comes out one. */</span></div><div class="line"><a name="l03177"></a><span class="lineno"> 3177</span>  pubkeys[2] = &pubkey_one;</div><div class="line"><a name="l03178"></a><span class="lineno"> 3178</span>  memset(&pubkey, 255, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03179"></a><span class="lineno"> 3179</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03180"></a><span class="lineno"> 3180</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeys, 3) == 1);</div><div class="line"><a name="l03181"></a><span class="lineno"> 3181</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03182"></a><span class="lineno"> 3182</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) > 0);</div><div class="line"><a name="l03183"></a><span class="lineno"> 3183</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l03184"></a><span class="lineno"> 3184</span>  len = 33;</div><div class="line"><a name="l03185"></a><span class="lineno"> 3185</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp, &len, &pubkey, <a class="code" href="secp256k1_8h.html#a7b8f642c65e8b5c81fa4421b7c42ab57">SECP256K1_EC_COMPRESSED</a>) == 1);</div><div class="line"><a name="l03186"></a><span class="lineno"> 3186</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, ctmp2, &len, &pubkey_one, <a class="code" href="secp256k1_8h.html#a7b8f642c65e8b5c81fa4421b7c42ab57">SECP256K1_EC_COMPRESSED</a>) == 1);</div><div class="line"><a name="l03187"></a><span class="lineno"> 3187</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(ctmp, ctmp2, 33) == 0);</div><div class="line"><a name="l03188"></a><span class="lineno"> 3188</span>  <span class="comment">/* Adds to two. */</span></div><div class="line"><a name="l03189"></a><span class="lineno"> 3189</span>  pubkeys[1] = &pubkey_one;</div><div class="line"><a name="l03190"></a><span class="lineno"> 3190</span>  memset(&pubkey, 255, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03191"></a><span class="lineno"> 3191</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03192"></a><span class="lineno"> 3192</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeys, 2) == 1);</div><div class="line"><a name="l03193"></a><span class="lineno"> 3193</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(&pubkey, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>));</div><div class="line"><a name="l03194"></a><span class="lineno"> 3194</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, zeros, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a>)) > 0);</div><div class="line"><a name="l03195"></a><span class="lineno"> 3195</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l03196"></a><span class="lineno"> 3196</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, NULL);</div><div class="line"><a name="l03197"></a><span class="lineno"> 3197</span> }</div><div class="line"><a name="l03198"></a><span class="lineno"> 3198</span> </div><div class="line"><a name="l03199"></a><span class="lineno"><a class="line" href="tests_8c.html#a5c5253164e8444359849fd66e27bbe5a"> 3199</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a5c5253164e8444359849fd66e27bbe5a">random_sign</a>(<a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *sigr, <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *sigs, <span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <span class="keyword">const</span> <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> *<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <span class="keywordtype">int</span> *recid) {</div><div class="line"><a name="l03200"></a><span class="lineno"> 3200</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> nonce;</div><div class="line"><a name="l03201"></a><span class="lineno"> 3201</span>  <span class="keywordflow">do</span> {</div><div class="line"><a name="l03202"></a><span class="lineno"> 3202</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&nonce);</div><div class="line"><a name="l03203"></a><span class="lineno"> 3203</span>  } <span class="keywordflow">while</span>(!<a class="code" href="ecdsa_8h.html#a5bf6905e00ae8571465a52e3165c6e6e">secp256k1_ecdsa_sig_sign</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, sigr, sigs, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &nonce, recid));</div><div class="line"><a name="l03204"></a><span class="lineno"> 3204</span> }</div><div class="line"><a name="l03205"></a><span class="lineno"> 3205</span> </div><div class="line"><a name="l03206"></a><span class="lineno"><a class="line" href="tests_8c.html#a9f741d7d63a637666b9884c5241abd00"> 3206</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a9f741d7d63a637666b9884c5241abd00">test_ecdsa_sign_verify</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l03207"></a><span class="lineno"> 3207</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> pubj;</div><div class="line"><a name="l03208"></a><span class="lineno"> 3208</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> pub;</div><div class="line"><a name="l03209"></a><span class="lineno"> 3209</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> one;</div><div class="line"><a name="l03210"></a><span class="lineno"> 3210</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l03211"></a><span class="lineno"> 3211</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sigr, sigs;</div><div class="line"><a name="l03212"></a><span class="lineno"> 3212</span>  <span class="keywordtype">int</span> recid;</div><div class="line"><a name="l03213"></a><span class="lineno"> 3213</span>  <span class="keywordtype">int</span> getrec;</div><div class="line"><a name="l03214"></a><span class="lineno"> 3214</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>);</div><div class="line"><a name="l03215"></a><span class="lineno"> 3215</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l03216"></a><span class="lineno"> 3216</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &pubj, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l03217"></a><span class="lineno"> 3217</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&pub, &pubj);</div><div class="line"><a name="l03218"></a><span class="lineno"> 3218</span>  getrec = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1);</div><div class="line"><a name="l03219"></a><span class="lineno"> 3219</span>  <a class="code" href="tests_8c.html#a5c5253164e8444359849fd66e27bbe5a">random_sign</a>(&sigr, &sigs, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, getrec?&recid:NULL);</div><div class="line"><a name="l03220"></a><span class="lineno"> 3220</span>  <span class="keywordflow">if</span> (getrec) {</div><div class="line"><a name="l03221"></a><span class="lineno"> 3221</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(recid >= 0 && recid < 4);</div><div class="line"><a name="l03222"></a><span class="lineno"> 3222</span>  }</div><div class="line"><a name="l03223"></a><span class="lineno"> 3223</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sigr, &sigs, &pub, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>));</div><div class="line"><a name="l03224"></a><span class="lineno"> 3224</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&one, 1);</div><div class="line"><a name="l03225"></a><span class="lineno"> 3225</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &one);</div><div class="line"><a name="l03226"></a><span class="lineno"> 3226</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sigr, &sigs, &pub, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>));</div><div class="line"><a name="l03227"></a><span class="lineno"> 3227</span> }</div><div class="line"><a name="l03228"></a><span class="lineno"> 3228</span> </div><div class="line"><a name="l03229"></a><span class="lineno"><a class="line" href="tests_8c.html#a8b33b5c265c09b165c29d92c05c641d8"> 3229</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a8b33b5c265c09b165c29d92c05c641d8">run_ecdsa_sign_verify</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l03230"></a><span class="lineno"> 3230</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l03231"></a><span class="lineno"> 3231</span>  <span class="keywordflow">for</span> (i = 0; i < 10*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l03232"></a><span class="lineno"> 3232</span>  <a class="code" href="tests_8c.html#a9f741d7d63a637666b9884c5241abd00">test_ecdsa_sign_verify</a>();</div><div class="line"><a name="l03233"></a><span class="lineno"> 3233</span>  }</div><div class="line"><a name="l03234"></a><span class="lineno"> 3234</span> }</div><div class="line"><a name="l03235"></a><span class="lineno"> 3235</span> </div><div class="line"><a name="l03237"></a><span class="lineno"><a class="line" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf"> 3237</a></span> <span class="keyword">static</span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a>(<span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *nonce32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *msg32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *key32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *algo16, <span class="keywordtype">void</span> *<a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>, <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> counter) {</div><div class="line"><a name="l03238"></a><span class="lineno"> 3238</span>  (void)msg32;</div><div class="line"><a name="l03239"></a><span class="lineno"> 3239</span>  (void)key32;</div><div class="line"><a name="l03240"></a><span class="lineno"> 3240</span>  (void)algo16;</div><div class="line"><a name="l03241"></a><span class="lineno"> 3241</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(nonce32, <a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>, 32);</div><div class="line"><a name="l03242"></a><span class="lineno"> 3242</span>  <span class="keywordflow">return</span> (counter == 0);</div><div class="line"><a name="l03243"></a><span class="lineno"> 3243</span> }</div><div class="line"><a name="l03244"></a><span class="lineno"> 3244</span> </div><div class="line"><a name="l03245"></a><span class="lineno"><a class="line" href="tests_8c.html#a2631070201e67210b08603a358e0a622"> 3245</a></span> <span class="keyword">static</span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a2631070201e67210b08603a358e0a622">nonce_function_test_fail</a>(<span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *nonce32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *msg32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *key32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *algo16, <span class="keywordtype">void</span> *<a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>, <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> counter) {</div><div class="line"><a name="l03246"></a><span class="lineno"> 3246</span>  <span class="comment">/* Dummy nonce generator that has a fatal error on the first counter value. */</span></div><div class="line"><a name="l03247"></a><span class="lineno"> 3247</span>  <span class="keywordflow">if</span> (counter == 0) {</div><div class="line"><a name="l03248"></a><span class="lineno"> 3248</span>  <span class="keywordflow">return</span> 0;</div><div class="line"><a name="l03249"></a><span class="lineno"> 3249</span>  }</div><div class="line"><a name="l03250"></a><span class="lineno"> 3250</span>  <span class="keywordflow">return</span> <a class="code" href="secp256k1_8c.html#aaeed37b3a1d669fc6031755d37a5b2c4">nonce_function_rfc6979</a>(nonce32, msg32, key32, algo16, <a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>, counter - 1);</div><div class="line"><a name="l03251"></a><span class="lineno"> 3251</span> }</div><div class="line"><a name="l03252"></a><span class="lineno"> 3252</span> </div><div class="line"><a name="l03253"></a><span class="lineno"><a class="line" href="tests_8c.html#a2643b34ae08799d0c3442f610ffe9c53"> 3253</a></span> <span class="keyword">static</span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a2643b34ae08799d0c3442f610ffe9c53">nonce_function_test_retry</a>(<span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *nonce32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *msg32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *key32, <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *algo16, <span class="keywordtype">void</span> *<a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>, <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> counter) {</div><div class="line"><a name="l03254"></a><span class="lineno"> 3254</span>  <span class="comment">/* Dummy nonce generator that produces unacceptable nonces for the first several counter values. */</span></div><div class="line"><a name="l03255"></a><span class="lineno"> 3255</span>  <span class="keywordflow">if</span> (counter < 3) {</div><div class="line"><a name="l03256"></a><span class="lineno"> 3256</span>  memset(nonce32, counter==0 ? 0 : 255, 32);</div><div class="line"><a name="l03257"></a><span class="lineno"> 3257</span>  <span class="keywordflow">if</span> (counter == 2) {</div><div class="line"><a name="l03258"></a><span class="lineno"> 3258</span>  nonce32[31]--;</div><div class="line"><a name="l03259"></a><span class="lineno"> 3259</span>  }</div><div class="line"><a name="l03260"></a><span class="lineno"> 3260</span>  <span class="keywordflow">return</span> 1;</div><div class="line"><a name="l03261"></a><span class="lineno"> 3261</span>  }</div><div class="line"><a name="l03262"></a><span class="lineno"> 3262</span>  <span class="keywordflow">if</span> (counter < 5) {</div><div class="line"><a name="l03263"></a><span class="lineno"> 3263</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> order[] = {</div><div class="line"><a name="l03264"></a><span class="lineno"> 3264</span>  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,</div><div class="line"><a name="l03265"></a><span class="lineno"> 3265</span>  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,</div><div class="line"><a name="l03266"></a><span class="lineno"> 3266</span>  0xBA,0xAE,0xDC,0xE6,0xAF,0x48,0xA0,0x3B,</div><div class="line"><a name="l03267"></a><span class="lineno"> 3267</span>  0xBF,0xD2,0x5E,0x8C,0xD0,0x36,0x41,0x41</div><div class="line"><a name="l03268"></a><span class="lineno"> 3268</span>  };</div><div class="line"><a name="l03269"></a><span class="lineno"> 3269</span>  <a class="code" href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a>(nonce32, order, 32);</div><div class="line"><a name="l03270"></a><span class="lineno"> 3270</span>  <span class="keywordflow">if</span> (counter == 4) {</div><div class="line"><a name="l03271"></a><span class="lineno"> 3271</span>  nonce32[31]++;</div><div class="line"><a name="l03272"></a><span class="lineno"> 3272</span>  }</div><div class="line"><a name="l03273"></a><span class="lineno"> 3273</span>  <span class="keywordflow">return</span> 1;</div><div class="line"><a name="l03274"></a><span class="lineno"> 3274</span>  }</div><div class="line"><a name="l03275"></a><span class="lineno"> 3275</span>  <span class="comment">/* Retry rate of 6979 is negligible esp. as we only call this in deterministic tests. */</span></div><div class="line"><a name="l03276"></a><span class="lineno"> 3276</span>  <span class="comment">/* If someone does fine a case where it retries for secp256k1, we'd like to know. */</span></div><div class="line"><a name="l03277"></a><span class="lineno"> 3277</span>  <span class="keywordflow">if</span> (counter > 5) {</div><div class="line"><a name="l03278"></a><span class="lineno"> 3278</span>  <span class="keywordflow">return</span> 0;</div><div class="line"><a name="l03279"></a><span class="lineno"> 3279</span>  }</div><div class="line"><a name="l03280"></a><span class="lineno"> 3280</span>  <span class="keywordflow">return</span> <a class="code" href="secp256k1_8c.html#aaeed37b3a1d669fc6031755d37a5b2c4">nonce_function_rfc6979</a>(nonce32, msg32, key32, algo16, <a class="code" href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">data</a>, counter - 5);</div><div class="line"><a name="l03281"></a><span class="lineno"> 3281</span> }</div><div class="line"><a name="l03282"></a><span class="lineno"> 3282</span> </div><div class="line"><a name="l03283"></a><span class="lineno"><a class="line" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b"> 3283</a></span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(<span class="keyword">const</span> <a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a> *sig) {</div><div class="line"><a name="l03284"></a><span class="lineno"> 3284</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> res[<span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a>)] = {0};</div><div class="line"><a name="l03285"></a><span class="lineno"> 3285</span>  <span class="keywordflow">return</span> memcmp(sig, res, <span class="keyword">sizeof</span>(<a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a>)) == 0;</div><div class="line"><a name="l03286"></a><span class="lineno"> 3286</span> }</div><div class="line"><a name="l03287"></a><span class="lineno"> 3287</span> </div><div class="line"><a name="l03288"></a><span class="lineno"><a class="line" href="tests_8c.html#a3fc9dc1908215215a68690ea1bfa8bcd"> 3288</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a3fc9dc1908215215a68690ea1bfa8bcd">test_ecdsa_end_to_end</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l03289"></a><span class="lineno"> 3289</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> extra[32] = {0x00};</div><div class="line"><a name="l03290"></a><span class="lineno"> 3290</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> privkey[32];</div><div class="line"><a name="l03291"></a><span class="lineno"> 3291</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> message[32];</div><div class="line"><a name="l03292"></a><span class="lineno"> 3292</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> privkey2[32];</div><div class="line"><a name="l03293"></a><span class="lineno"> 3293</span>  <a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a> signature[6];</div><div class="line"><a name="l03294"></a><span class="lineno"> 3294</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> r, s;</div><div class="line"><a name="l03295"></a><span class="lineno"> 3295</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> sig[74];</div><div class="line"><a name="l03296"></a><span class="lineno"> 3296</span>  <span class="keywordtype">size_t</span> siglen = 74;</div><div class="line"><a name="l03297"></a><span class="lineno"> 3297</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkeyc[65];</div><div class="line"><a name="l03298"></a><span class="lineno"> 3298</span>  <span class="keywordtype">size_t</span> pubkeyclen = 65;</div><div class="line"><a name="l03299"></a><span class="lineno"> 3299</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey;</div><div class="line"><a name="l03300"></a><span class="lineno"> 3300</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> seckey[300];</div><div class="line"><a name="l03301"></a><span class="lineno"> 3301</span>  <span class="keywordtype">size_t</span> seckeylen = 300;</div><div class="line"><a name="l03302"></a><span class="lineno"> 3302</span> </div><div class="line"><a name="l03303"></a><span class="lineno"> 3303</span>  <span class="comment">/* Generate a random key and message. */</span></div><div class="line"><a name="l03304"></a><span class="lineno"> 3304</span>  {</div><div class="line"><a name="l03305"></a><span class="lineno"> 3305</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l03306"></a><span class="lineno"> 3306</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>);</div><div class="line"><a name="l03307"></a><span class="lineno"> 3307</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l03308"></a><span class="lineno"> 3308</span>  <a class="code" href="scalar_8h.html#a4fa08f8af5a23f505b44c9ef1bec1831">secp256k1_scalar_get_b32</a>(privkey, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l03309"></a><span class="lineno"> 3309</span>  <a class="code" href="scalar_8h.html#a4fa08f8af5a23f505b44c9ef1bec1831">secp256k1_scalar_get_b32</a>(message, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>);</div><div class="line"><a name="l03310"></a><span class="lineno"> 3310</span>  }</div><div class="line"><a name="l03311"></a><span class="lineno"> 3311</span> </div><div class="line"><a name="l03312"></a><span class="lineno"> 3312</span>  <span class="comment">/* Construct and verify corresponding public key. */</span></div><div class="line"><a name="l03313"></a><span class="lineno"> 3313</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, privkey) == 1);</div><div class="line"><a name="l03314"></a><span class="lineno"> 3314</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, privkey) == 1);</div><div class="line"><a name="l03315"></a><span class="lineno"> 3315</span> </div><div class="line"><a name="l03316"></a><span class="lineno"> 3316</span>  <span class="comment">/* Verify exporting and importing public key. */</span></div><div class="line"><a name="l03317"></a><span class="lineno"> 3317</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, pubkeyc, &pubkeyclen, &pubkey, <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1) == 1 ? <a class="code" href="secp256k1_8h.html#a7b8f642c65e8b5c81fa4421b7c42ab57">SECP256K1_EC_COMPRESSED</a> : <a class="code" href="secp256k1_8h.html#ab8e25dc58843e83926f95795f9e8a6e2">SECP256K1_EC_UNCOMPRESSED</a>));</div><div class="line"><a name="l03318"></a><span class="lineno"> 3318</span>  memset(&pubkey, 0, <span class="keyword">sizeof</span>(pubkey));</div><div class="line"><a name="l03319"></a><span class="lineno"> 3319</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, pubkeyc, pubkeyclen) == 1);</div><div class="line"><a name="l03320"></a><span class="lineno"> 3320</span> </div><div class="line"><a name="l03321"></a><span class="lineno"> 3321</span>  <span class="comment">/* Verify private key import and export. */</span></div><div class="line"><a name="l03322"></a><span class="lineno"> 3322</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="key_8cpp.html#a8cafc8a5eaf9a41f141e31d7c42ed7b9">ec_privkey_export_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, seckey, &seckeylen, privkey, <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1) == 1));</div><div class="line"><a name="l03323"></a><span class="lineno"> 3323</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="key_8cpp.html#a4b55d97662f6589a6319c363469c501e">ec_privkey_import_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, privkey2, seckey, seckeylen) == 1);</div><div class="line"><a name="l03324"></a><span class="lineno"> 3324</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(privkey, privkey2, 32) == 0);</div><div class="line"><a name="l03325"></a><span class="lineno"> 3325</span> </div><div class="line"><a name="l03326"></a><span class="lineno"> 3326</span>  <span class="comment">/* Optionally tweak the keys using addition. */</span></div><div class="line"><a name="l03327"></a><span class="lineno"> 3327</span>  <span class="keywordflow">if</span> (<a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(3) == 0) {</div><div class="line"><a name="l03328"></a><span class="lineno"> 3328</span>  <span class="keywordtype">int</span> ret1;</div><div class="line"><a name="l03329"></a><span class="lineno"> 3329</span>  <span class="keywordtype">int</span> ret2;</div><div class="line"><a name="l03330"></a><span class="lineno"> 3330</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> rnd[32];</div><div class="line"><a name="l03331"></a><span class="lineno"> 3331</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey2;</div><div class="line"><a name="l03332"></a><span class="lineno"> 3332</span>  <a class="code" href="testrand_8h.html#ac7dd7cc19d5d0ae9b50791656b57af7b">secp256k1_rand256_test</a>(rnd);</div><div class="line"><a name="l03333"></a><span class="lineno"> 3333</span>  ret1 = <a class="code" href="secp256k1_8h.html#a0f9125cd8c970342ec5118f7bfacc0c5">secp256k1_ec_privkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, privkey, rnd);</div><div class="line"><a name="l03334"></a><span class="lineno"> 3334</span>  ret2 = <a class="code" href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, rnd);</div><div class="line"><a name="l03335"></a><span class="lineno"> 3335</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ret1 == ret2);</div><div class="line"><a name="l03336"></a><span class="lineno"> 3336</span>  <span class="keywordflow">if</span> (ret1 == 0) {</div><div class="line"><a name="l03337"></a><span class="lineno"> 3337</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l03338"></a><span class="lineno"> 3338</span>  }</div><div class="line"><a name="l03339"></a><span class="lineno"> 3339</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey2, privkey) == 1);</div><div class="line"><a name="l03340"></a><span class="lineno"> 3340</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03341"></a><span class="lineno"> 3341</span>  }</div><div class="line"><a name="l03342"></a><span class="lineno"> 3342</span> </div><div class="line"><a name="l03343"></a><span class="lineno"> 3343</span>  <span class="comment">/* Optionally tweak the keys using multiplication. */</span></div><div class="line"><a name="l03344"></a><span class="lineno"> 3344</span>  <span class="keywordflow">if</span> (<a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(3) == 0) {</div><div class="line"><a name="l03345"></a><span class="lineno"> 3345</span>  <span class="keywordtype">int</span> ret1;</div><div class="line"><a name="l03346"></a><span class="lineno"> 3346</span>  <span class="keywordtype">int</span> ret2;</div><div class="line"><a name="l03347"></a><span class="lineno"> 3347</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> rnd[32];</div><div class="line"><a name="l03348"></a><span class="lineno"> 3348</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey2;</div><div class="line"><a name="l03349"></a><span class="lineno"> 3349</span>  <a class="code" href="testrand_8h.html#ac7dd7cc19d5d0ae9b50791656b57af7b">secp256k1_rand256_test</a>(rnd);</div><div class="line"><a name="l03350"></a><span class="lineno"> 3350</span>  ret1 = <a class="code" href="secp256k1_8h.html#abe078cbb6b642d792f123ea67494f7e3">secp256k1_ec_privkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, privkey, rnd);</div><div class="line"><a name="l03351"></a><span class="lineno"> 3351</span>  ret2 = <a class="code" href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, rnd);</div><div class="line"><a name="l03352"></a><span class="lineno"> 3352</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ret1 == ret2);</div><div class="line"><a name="l03353"></a><span class="lineno"> 3353</span>  <span class="keywordflow">if</span> (ret1 == 0) {</div><div class="line"><a name="l03354"></a><span class="lineno"> 3354</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l03355"></a><span class="lineno"> 3355</span>  }</div><div class="line"><a name="l03356"></a><span class="lineno"> 3356</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey2, privkey) == 1);</div><div class="line"><a name="l03357"></a><span class="lineno"> 3357</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&pubkey, &pubkey2, <span class="keyword">sizeof</span>(pubkey)) == 0);</div><div class="line"><a name="l03358"></a><span class="lineno"> 3358</span>  }</div><div class="line"><a name="l03359"></a><span class="lineno"> 3359</span> </div><div class="line"><a name="l03360"></a><span class="lineno"> 3360</span>  <span class="comment">/* Sign. */</span></div><div class="line"><a name="l03361"></a><span class="lineno"> 3361</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[0], message, privkey, NULL, NULL) == 1);</div><div class="line"><a name="l03362"></a><span class="lineno"> 3362</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[4], message, privkey, NULL, NULL) == 1);</div><div class="line"><a name="l03363"></a><span class="lineno"> 3363</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[1], message, privkey, NULL, extra) == 1);</div><div class="line"><a name="l03364"></a><span class="lineno"> 3364</span>  extra[31] = 1;</div><div class="line"><a name="l03365"></a><span class="lineno"> 3365</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[2], message, privkey, NULL, extra) == 1);</div><div class="line"><a name="l03366"></a><span class="lineno"> 3366</span>  extra[31] = 0;</div><div class="line"><a name="l03367"></a><span class="lineno"> 3367</span>  extra[0] = 1;</div><div class="line"><a name="l03368"></a><span class="lineno"> 3368</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[3], message, privkey, NULL, extra) == 1);</div><div class="line"><a name="l03369"></a><span class="lineno"> 3369</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&signature[0], &signature[4], <span class="keyword">sizeof</span>(signature[0])) == 0);</div><div class="line"><a name="l03370"></a><span class="lineno"> 3370</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&signature[0], &signature[1], <span class="keyword">sizeof</span>(signature[0])) != 0);</div><div class="line"><a name="l03371"></a><span class="lineno"> 3371</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&signature[0], &signature[2], <span class="keyword">sizeof</span>(signature[0])) != 0);</div><div class="line"><a name="l03372"></a><span class="lineno"> 3372</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&signature[0], &signature[3], <span class="keyword">sizeof</span>(signature[0])) != 0);</div><div class="line"><a name="l03373"></a><span class="lineno"> 3373</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&signature[1], &signature[2], <span class="keyword">sizeof</span>(signature[0])) != 0);</div><div class="line"><a name="l03374"></a><span class="lineno"> 3374</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&signature[1], &signature[3], <span class="keyword">sizeof</span>(signature[0])) != 0);</div><div class="line"><a name="l03375"></a><span class="lineno"> 3375</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&signature[2], &signature[3], <span class="keyword">sizeof</span>(signature[0])) != 0);</div><div class="line"><a name="l03376"></a><span class="lineno"> 3376</span>  <span class="comment">/* Verify. */</span></div><div class="line"><a name="l03377"></a><span class="lineno"> 3377</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[0], message, &pubkey) == 1);</div><div class="line"><a name="l03378"></a><span class="lineno"> 3378</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[1], message, &pubkey) == 1);</div><div class="line"><a name="l03379"></a><span class="lineno"> 3379</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[2], message, &pubkey) == 1);</div><div class="line"><a name="l03380"></a><span class="lineno"> 3380</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[3], message, &pubkey) == 1);</div><div class="line"><a name="l03381"></a><span class="lineno"> 3381</span>  <span class="comment">/* Test lower-S form, malleate, verify and fail, test again, malleate again */</span></div><div class="line"><a name="l03382"></a><span class="lineno"> 3382</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="secp256k1_8h.html#a93ec36a19229f08acc5ff1ca613ab3a1">secp256k1_ecdsa_signature_normalize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, &signature[0]));</div><div class="line"><a name="l03383"></a><span class="lineno"> 3383</span>  <a class="code" href="secp256k1_8c.html#af2027241c9dfc85fa5b6a3bb5fe41d18">secp256k1_ecdsa_signature_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &r, &s, &signature[0]);</div><div class="line"><a name="l03384"></a><span class="lineno"> 3384</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&s, &s);</div><div class="line"><a name="l03385"></a><span class="lineno"> 3385</span>  <a class="code" href="secp256k1_8c.html#a94e522f94c4819bebf8e854952eb6a8f">secp256k1_ecdsa_signature_save</a>(&signature[5], &r, &s);</div><div class="line"><a name="l03386"></a><span class="lineno"> 3386</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[5], message, &pubkey) == 0);</div><div class="line"><a name="l03387"></a><span class="lineno"> 3387</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a93ec36a19229f08acc5ff1ca613ab3a1">secp256k1_ecdsa_signature_normalize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, &signature[5]));</div><div class="line"><a name="l03388"></a><span class="lineno"> 3388</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a93ec36a19229f08acc5ff1ca613ab3a1">secp256k1_ecdsa_signature_normalize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[5], &signature[5]));</div><div class="line"><a name="l03389"></a><span class="lineno"> 3389</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="secp256k1_8h.html#a93ec36a19229f08acc5ff1ca613ab3a1">secp256k1_ecdsa_signature_normalize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, &signature[5]));</div><div class="line"><a name="l03390"></a><span class="lineno"> 3390</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="secp256k1_8h.html#a93ec36a19229f08acc5ff1ca613ab3a1">secp256k1_ecdsa_signature_normalize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[5], &signature[5]));</div><div class="line"><a name="l03391"></a><span class="lineno"> 3391</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[5], message, &pubkey) == 1);</div><div class="line"><a name="l03392"></a><span class="lineno"> 3392</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&s, &s);</div><div class="line"><a name="l03393"></a><span class="lineno"> 3393</span>  <a class="code" href="secp256k1_8c.html#a94e522f94c4819bebf8e854952eb6a8f">secp256k1_ecdsa_signature_save</a>(&signature[5], &r, &s);</div><div class="line"><a name="l03394"></a><span class="lineno"> 3394</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="secp256k1_8h.html#a93ec36a19229f08acc5ff1ca613ab3a1">secp256k1_ecdsa_signature_normalize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, &signature[5]));</div><div class="line"><a name="l03395"></a><span class="lineno"> 3395</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[5], message, &pubkey) == 1);</div><div class="line"><a name="l03396"></a><span class="lineno"> 3396</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&signature[5], &signature[0], 64) == 0);</div><div class="line"><a name="l03397"></a><span class="lineno"> 3397</span> </div><div class="line"><a name="l03398"></a><span class="lineno"> 3398</span>  <span class="comment">/* Serialize/parse DER and verify again */</span></div><div class="line"><a name="l03399"></a><span class="lineno"> 3399</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, sig, &siglen, &signature[0]) == 1);</div><div class="line"><a name="l03400"></a><span class="lineno"> 3400</span>  memset(&signature[0], 0, <span class="keyword">sizeof</span>(signature[0]));</div><div class="line"><a name="l03401"></a><span class="lineno"> 3401</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a57d390dd5baa54855b0cb20628034b90">secp256k1_ecdsa_signature_parse_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[0], sig, siglen) == 1);</div><div class="line"><a name="l03402"></a><span class="lineno"> 3402</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[0], message, &pubkey) == 1);</div><div class="line"><a name="l03403"></a><span class="lineno"> 3403</span>  <span class="comment">/* Serialize/destroy/parse DER and verify again. */</span></div><div class="line"><a name="l03404"></a><span class="lineno"> 3404</span>  siglen = 74;</div><div class="line"><a name="l03405"></a><span class="lineno"> 3405</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, sig, &siglen, &signature[0]) == 1);</div><div class="line"><a name="l03406"></a><span class="lineno"> 3406</span>  sig[<a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(siglen)] += 1 + <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(255);</div><div class="line"><a name="l03407"></a><span class="lineno"> 3407</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a57d390dd5baa54855b0cb20628034b90">secp256k1_ecdsa_signature_parse_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[0], sig, siglen) == 0 ||</div><div class="line"><a name="l03408"></a><span class="lineno"> 3408</span>  <a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &signature[0], message, &pubkey) == 0);</div><div class="line"><a name="l03409"></a><span class="lineno"> 3409</span> }</div><div class="line"><a name="l03410"></a><span class="lineno"> 3410</span> </div><div class="line"><a name="l03411"></a><span class="lineno"><a class="line" href="tests_8c.html#a9f06c34f3caa68b5da0ad133c86f5e3c"> 3411</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a9f06c34f3caa68b5da0ad133c86f5e3c">test_random_pubkeys</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l03412"></a><span class="lineno"> 3412</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> elem;</div><div class="line"><a name="l03413"></a><span class="lineno"> 3413</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> elem2;</div><div class="line"><a name="l03414"></a><span class="lineno"> 3414</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> in[65];</div><div class="line"><a name="l03415"></a><span class="lineno"> 3415</span>  <span class="comment">/* Generate some randomly sized pubkeys. */</span></div><div class="line"><a name="l03416"></a><span class="lineno"> 3416</span>  <span class="keywordtype">size_t</span> len = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(2) == 0 ? 65 : 33;</div><div class="line"><a name="l03417"></a><span class="lineno"> 3417</span>  <span class="keywordflow">if</span> (<a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(2) == 0) {</div><div class="line"><a name="l03418"></a><span class="lineno"> 3418</span>  len = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(6);</div><div class="line"><a name="l03419"></a><span class="lineno"> 3419</span>  }</div><div class="line"><a name="l03420"></a><span class="lineno"> 3420</span>  <span class="keywordflow">if</span> (len == 65) {</div><div class="line"><a name="l03421"></a><span class="lineno"> 3421</span>  in[0] = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1) ? 4 : (<a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1) ? 6 : 7);</div><div class="line"><a name="l03422"></a><span class="lineno"> 3422</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l03423"></a><span class="lineno"> 3423</span>  in[0] = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1) ? 2 : 3;</div><div class="line"><a name="l03424"></a><span class="lineno"> 3424</span>  }</div><div class="line"><a name="l03425"></a><span class="lineno"> 3425</span>  <span class="keywordflow">if</span> (<a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(3) == 0) {</div><div class="line"><a name="l03426"></a><span class="lineno"> 3426</span>  in[0] = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(8);</div><div class="line"><a name="l03427"></a><span class="lineno"> 3427</span>  }</div><div class="line"><a name="l03428"></a><span class="lineno"> 3428</span>  <span class="keywordflow">if</span> (len > 1) {</div><div class="line"><a name="l03429"></a><span class="lineno"> 3429</span>  <a class="code" href="testrand_8h.html#ac6eab6443f98bba198f7df69e658173c">secp256k1_rand256</a>(&in[1]);</div><div class="line"><a name="l03430"></a><span class="lineno"> 3430</span>  }</div><div class="line"><a name="l03431"></a><span class="lineno"> 3431</span>  <span class="keywordflow">if</span> (len > 33) {</div><div class="line"><a name="l03432"></a><span class="lineno"> 3432</span>  <a class="code" href="testrand_8h.html#ac6eab6443f98bba198f7df69e658173c">secp256k1_rand256</a>(&in[33]);</div><div class="line"><a name="l03433"></a><span class="lineno"> 3433</span>  }</div><div class="line"><a name="l03434"></a><span class="lineno"> 3434</span>  <span class="keywordflow">if</span> (<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&elem, in, len)) {</div><div class="line"><a name="l03435"></a><span class="lineno"> 3435</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>[65];</div><div class="line"><a name="l03436"></a><span class="lineno"> 3436</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> firstb;</div><div class="line"><a name="l03437"></a><span class="lineno"> 3437</span>  <span class="keywordtype">int</span> res;</div><div class="line"><a name="l03438"></a><span class="lineno"> 3438</span>  <span class="keywordtype">size_t</span> size = len;</div><div class="line"><a name="l03439"></a><span class="lineno"> 3439</span>  firstb = in[0];</div><div class="line"><a name="l03440"></a><span class="lineno"> 3440</span>  <span class="comment">/* If the pubkey can be parsed, it should round-trip... */</span></div><div class="line"><a name="l03441"></a><span class="lineno"> 3441</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae1f52342d70928f16c8e606da59e6aa6">secp256k1_eckey_pubkey_serialize</a>(&elem, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, &size, len == 33));</div><div class="line"><a name="l03442"></a><span class="lineno"> 3442</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(size == len);</div><div class="line"><a name="l03443"></a><span class="lineno"> 3443</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&in[1], &<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>[1], len-1) == 0);</div><div class="line"><a name="l03444"></a><span class="lineno"> 3444</span>  <span class="comment">/* ... except for the type of hybrid inputs. */</span></div><div class="line"><a name="l03445"></a><span class="lineno"> 3445</span>  <span class="keywordflow">if</span> ((in[0] != 6) && (in[0] != 7)) {</div><div class="line"><a name="l03446"></a><span class="lineno"> 3446</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(in[0] == <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>[0]);</div><div class="line"><a name="l03447"></a><span class="lineno"> 3447</span>  }</div><div class="line"><a name="l03448"></a><span class="lineno"> 3448</span>  size = 65;</div><div class="line"><a name="l03449"></a><span class="lineno"> 3449</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae1f52342d70928f16c8e606da59e6aa6">secp256k1_eckey_pubkey_serialize</a>(&elem, in, &size, 0));</div><div class="line"><a name="l03450"></a><span class="lineno"> 3450</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(size == 65);</div><div class="line"><a name="l03451"></a><span class="lineno"> 3451</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&elem2, in, size));</div><div class="line"><a name="l03452"></a><span class="lineno"> 3452</span>  <a class="code" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a>(&elem,&elem2);</div><div class="line"><a name="l03453"></a><span class="lineno"> 3453</span>  <span class="comment">/* Check that the X9.62 hybrid type is checked. */</span></div><div class="line"><a name="l03454"></a><span class="lineno"> 3454</span>  in[0] = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1) ? 6 : 7;</div><div class="line"><a name="l03455"></a><span class="lineno"> 3455</span>  res = <a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&elem2, in, size);</div><div class="line"><a name="l03456"></a><span class="lineno"> 3456</span>  <span class="keywordflow">if</span> (firstb == 2 || firstb == 3) {</div><div class="line"><a name="l03457"></a><span class="lineno"> 3457</span>  <span class="keywordflow">if</span> (in[0] == firstb + 4) {</div><div class="line"><a name="l03458"></a><span class="lineno"> 3458</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(res);</div><div class="line"><a name="l03459"></a><span class="lineno"> 3459</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l03460"></a><span class="lineno"> 3460</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!res);</div><div class="line"><a name="l03461"></a><span class="lineno"> 3461</span>  }</div><div class="line"><a name="l03462"></a><span class="lineno"> 3462</span>  }</div><div class="line"><a name="l03463"></a><span class="lineno"> 3463</span>  <span class="keywordflow">if</span> (res) {</div><div class="line"><a name="l03464"></a><span class="lineno"> 3464</span>  <a class="code" href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a>(&elem,&elem2);</div><div class="line"><a name="l03465"></a><span class="lineno"> 3465</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae1f52342d70928f16c8e606da59e6aa6">secp256k1_eckey_pubkey_serialize</a>(&elem, <a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>, &size, 0));</div><div class="line"><a name="l03466"></a><span class="lineno"> 3466</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&in[1], &<a class="code" href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">out</a>[1], 64) == 0);</div><div class="line"><a name="l03467"></a><span class="lineno"> 3467</span>  }</div><div class="line"><a name="l03468"></a><span class="lineno"> 3468</span>  }</div><div class="line"><a name="l03469"></a><span class="lineno"> 3469</span> }</div><div class="line"><a name="l03470"></a><span class="lineno"> 3470</span> </div><div class="line"><a name="l03471"></a><span class="lineno"><a class="line" href="tests_8c.html#a0697fbce6e63c1c95aec0c67cb27f31c"> 3471</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a0697fbce6e63c1c95aec0c67cb27f31c">run_random_pubkeys</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l03472"></a><span class="lineno"> 3472</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l03473"></a><span class="lineno"> 3473</span>  <span class="keywordflow">for</span> (i = 0; i < 10*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l03474"></a><span class="lineno"> 3474</span>  <a class="code" href="tests_8c.html#a9f06c34f3caa68b5da0ad133c86f5e3c">test_random_pubkeys</a>();</div><div class="line"><a name="l03475"></a><span class="lineno"> 3475</span>  }</div><div class="line"><a name="l03476"></a><span class="lineno"> 3476</span> }</div><div class="line"><a name="l03477"></a><span class="lineno"> 3477</span> </div><div class="line"><a name="l03478"></a><span class="lineno"><a class="line" href="tests_8c.html#ab05096657be701bf9ca8616475bb9491"> 3478</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ab05096657be701bf9ca8616475bb9491">run_ecdsa_end_to_end</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l03479"></a><span class="lineno"> 3479</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l03480"></a><span class="lineno"> 3480</span>  <span class="keywordflow">for</span> (i = 0; i < 64*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l03481"></a><span class="lineno"> 3481</span>  <a class="code" href="tests_8c.html#a3fc9dc1908215215a68690ea1bfa8bcd">test_ecdsa_end_to_end</a>();</div><div class="line"><a name="l03482"></a><span class="lineno"> 3482</span>  }</div><div class="line"><a name="l03483"></a><span class="lineno"> 3483</span> }</div><div class="line"><a name="l03484"></a><span class="lineno"> 3484</span> </div><div class="line"><a name="l03485"></a><span class="lineno"><a class="line" href="tests_8c.html#a1cb741ffd2cea46124f7abc2c506717a"> 3485</a></span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a1cb741ffd2cea46124f7abc2c506717a">test_ecdsa_der_parse</a>(<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *sig, <span class="keywordtype">size_t</span> siglen, <span class="keywordtype">int</span> certainly_der, <span class="keywordtype">int</span> certainly_not_der) {</div><div class="line"><a name="l03486"></a><span class="lineno"> 3486</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> zeroes[32] = {0};</div><div class="line"><a name="l03487"></a><span class="lineno"> 3487</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> max_scalar[32] = {</div><div class="line"><a name="l03488"></a><span class="lineno"> 3488</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l03489"></a><span class="lineno"> 3489</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe,</div><div class="line"><a name="l03490"></a><span class="lineno"> 3490</span>  0xba, 0xae, 0xdc, 0xe6, 0xaf, 0x48, 0xa0, 0x3b,</div><div class="line"><a name="l03491"></a><span class="lineno"> 3491</span>  0xbf, 0xd2, 0x5e, 0x8c, 0xd0, 0x36, 0x41, 0x40</div><div class="line"><a name="l03492"></a><span class="lineno"> 3492</span>  };</div><div class="line"><a name="l03493"></a><span class="lineno"> 3493</span> </div><div class="line"><a name="l03494"></a><span class="lineno"> 3494</span>  <span class="keywordtype">int</span> ret = 0;</div><div class="line"><a name="l03495"></a><span class="lineno"> 3495</span> </div><div class="line"><a name="l03496"></a><span class="lineno"> 3496</span>  <a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a> sig_der;</div><div class="line"><a name="l03497"></a><span class="lineno"> 3497</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> roundtrip_der[2048];</div><div class="line"><a name="l03498"></a><span class="lineno"> 3498</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> compact_der[64];</div><div class="line"><a name="l03499"></a><span class="lineno"> 3499</span>  <span class="keywordtype">size_t</span> len_der = 2048;</div><div class="line"><a name="l03500"></a><span class="lineno"> 3500</span>  <span class="keywordtype">int</span> parsed_der = 0, valid_der = 0, roundtrips_der = 0;</div><div class="line"><a name="l03501"></a><span class="lineno"> 3501</span> </div><div class="line"><a name="l03502"></a><span class="lineno"> 3502</span>  <a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a> sig_der_lax;</div><div class="line"><a name="l03503"></a><span class="lineno"> 3503</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> roundtrip_der_lax[2048];</div><div class="line"><a name="l03504"></a><span class="lineno"> 3504</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> compact_der_lax[64];</div><div class="line"><a name="l03505"></a><span class="lineno"> 3505</span>  <span class="keywordtype">size_t</span> len_der_lax = 2048;</div><div class="line"><a name="l03506"></a><span class="lineno"> 3506</span>  <span class="keywordtype">int</span> parsed_der_lax = 0, valid_der_lax = 0, roundtrips_der_lax = 0;</div><div class="line"><a name="l03507"></a><span class="lineno"> 3507</span> </div><div class="line"><a name="l03508"></a><span class="lineno"> 3508</span> <span class="preprocessor">#ifdef ENABLE_OPENSSL_TESTS</span></div><div class="line"><a name="l03509"></a><span class="lineno"> 3509</span>  ECDSA_SIG *sig_openssl;</div><div class="line"><a name="l03510"></a><span class="lineno"> 3510</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *sigptr;</div><div class="line"><a name="l03511"></a><span class="lineno"> 3511</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> roundtrip_openssl[2048];</div><div class="line"><a name="l03512"></a><span class="lineno"> 3512</span>  <span class="keywordtype">int</span> len_openssl = 2048;</div><div class="line"><a name="l03513"></a><span class="lineno"> 3513</span>  <span class="keywordtype">int</span> parsed_openssl, valid_openssl = 0, roundtrips_openssl = 0;</div><div class="line"><a name="l03514"></a><span class="lineno"> 3514</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l03515"></a><span class="lineno"> 3515</span> </div><div class="line"><a name="l03516"></a><span class="lineno"> 3516</span>  parsed_der = <a class="code" href="secp256k1_8h.html#a57d390dd5baa54855b0cb20628034b90">secp256k1_ecdsa_signature_parse_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig_der, sig, siglen);</div><div class="line"><a name="l03517"></a><span class="lineno"> 3517</span>  <span class="keywordflow">if</span> (parsed_der) {</div><div class="line"><a name="l03518"></a><span class="lineno"> 3518</span>  ret |= (!<a class="code" href="secp256k1_8h.html#af8571ca8dcfb7f892519b337504dc700">secp256k1_ecdsa_signature_serialize_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, compact_der, &sig_der)) << 0;</div><div class="line"><a name="l03519"></a><span class="lineno"> 3519</span>  valid_der = (memcmp(compact_der, zeroes, 32) != 0) && (memcmp(compact_der + 32, zeroes, 32) != 0);</div><div class="line"><a name="l03520"></a><span class="lineno"> 3520</span>  }</div><div class="line"><a name="l03521"></a><span class="lineno"> 3521</span>  <span class="keywordflow">if</span> (valid_der) {</div><div class="line"><a name="l03522"></a><span class="lineno"> 3522</span>  ret |= (!<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, roundtrip_der, &len_der, &sig_der)) << 1;</div><div class="line"><a name="l03523"></a><span class="lineno"> 3523</span>  roundtrips_der = (len_der == siglen) && memcmp(roundtrip_der, sig, siglen) == 0;</div><div class="line"><a name="l03524"></a><span class="lineno"> 3524</span>  }</div><div class="line"><a name="l03525"></a><span class="lineno"> 3525</span> </div><div class="line"><a name="l03526"></a><span class="lineno"> 3526</span>  parsed_der_lax = <a class="code" href="pubkey_8cpp.html#acd68762de13ffb2c909fcf12acfea0fd">ecdsa_signature_parse_der_lax</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig_der_lax, sig, siglen);</div><div class="line"><a name="l03527"></a><span class="lineno"> 3527</span>  <span class="keywordflow">if</span> (parsed_der_lax) {</div><div class="line"><a name="l03528"></a><span class="lineno"> 3528</span>  ret |= (!<a class="code" href="secp256k1_8h.html#af8571ca8dcfb7f892519b337504dc700">secp256k1_ecdsa_signature_serialize_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, compact_der_lax, &sig_der_lax)) << 10;</div><div class="line"><a name="l03529"></a><span class="lineno"> 3529</span>  valid_der_lax = (memcmp(compact_der_lax, zeroes, 32) != 0) && (memcmp(compact_der_lax + 32, zeroes, 32) != 0);</div><div class="line"><a name="l03530"></a><span class="lineno"> 3530</span>  }</div><div class="line"><a name="l03531"></a><span class="lineno"> 3531</span>  <span class="keywordflow">if</span> (valid_der_lax) {</div><div class="line"><a name="l03532"></a><span class="lineno"> 3532</span>  ret |= (!<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, roundtrip_der_lax, &len_der_lax, &sig_der_lax)) << 11;</div><div class="line"><a name="l03533"></a><span class="lineno"> 3533</span>  roundtrips_der_lax = (len_der_lax == siglen) && memcmp(roundtrip_der_lax, sig, siglen) == 0;</div><div class="line"><a name="l03534"></a><span class="lineno"> 3534</span>  }</div><div class="line"><a name="l03535"></a><span class="lineno"> 3535</span> </div><div class="line"><a name="l03536"></a><span class="lineno"> 3536</span>  <span class="keywordflow">if</span> (certainly_der) {</div><div class="line"><a name="l03537"></a><span class="lineno"> 3537</span>  ret |= (!parsed_der) << 2;</div><div class="line"><a name="l03538"></a><span class="lineno"> 3538</span>  }</div><div class="line"><a name="l03539"></a><span class="lineno"> 3539</span>  <span class="keywordflow">if</span> (certainly_not_der) {</div><div class="line"><a name="l03540"></a><span class="lineno"> 3540</span>  ret |= (parsed_der) << 17;</div><div class="line"><a name="l03541"></a><span class="lineno"> 3541</span>  }</div><div class="line"><a name="l03542"></a><span class="lineno"> 3542</span>  <span class="keywordflow">if</span> (valid_der) {</div><div class="line"><a name="l03543"></a><span class="lineno"> 3543</span>  ret |= (!roundtrips_der) << 3;</div><div class="line"><a name="l03544"></a><span class="lineno"> 3544</span>  }</div><div class="line"><a name="l03545"></a><span class="lineno"> 3545</span> </div><div class="line"><a name="l03546"></a><span class="lineno"> 3546</span>  <span class="keywordflow">if</span> (valid_der) {</div><div class="line"><a name="l03547"></a><span class="lineno"> 3547</span>  ret |= (!roundtrips_der_lax) << 12;</div><div class="line"><a name="l03548"></a><span class="lineno"> 3548</span>  ret |= (len_der != len_der_lax) << 13;</div><div class="line"><a name="l03549"></a><span class="lineno"> 3549</span>  ret |= (memcmp(roundtrip_der_lax, roundtrip_der, len_der) != 0) << 14;</div><div class="line"><a name="l03550"></a><span class="lineno"> 3550</span>  }</div><div class="line"><a name="l03551"></a><span class="lineno"> 3551</span>  ret |= (roundtrips_der != roundtrips_der_lax) << 15;</div><div class="line"><a name="l03552"></a><span class="lineno"> 3552</span>  <span class="keywordflow">if</span> (parsed_der) {</div><div class="line"><a name="l03553"></a><span class="lineno"> 3553</span>  ret |= (!parsed_der_lax) << 16;</div><div class="line"><a name="l03554"></a><span class="lineno"> 3554</span>  }</div><div class="line"><a name="l03555"></a><span class="lineno"> 3555</span> </div><div class="line"><a name="l03556"></a><span class="lineno"> 3556</span> <span class="preprocessor">#ifdef ENABLE_OPENSSL_TESTS</span></div><div class="line"><a name="l03557"></a><span class="lineno"> 3557</span>  sig_openssl = ECDSA_SIG_new();</div><div class="line"><a name="l03558"></a><span class="lineno"> 3558</span>  sigptr = sig;</div><div class="line"><a name="l03559"></a><span class="lineno"> 3559</span>  parsed_openssl = (d2i_ECDSA_SIG(&sig_openssl, &sigptr, siglen) != NULL);</div><div class="line"><a name="l03560"></a><span class="lineno"> 3560</span>  <span class="keywordflow">if</span> (parsed_openssl) {</div><div class="line"><a name="l03561"></a><span class="lineno"> 3561</span>  valid_openssl = !BN_is_negative(sig_openssl->r) && !BN_is_negative(sig_openssl->s) && BN_num_bits(sig_openssl->r) > 0 && BN_num_bits(sig_openssl->r) <= 256 && BN_num_bits(sig_openssl->s) > 0 && BN_num_bits(sig_openssl->s) <= 256;</div><div class="line"><a name="l03562"></a><span class="lineno"> 3562</span>  <span class="keywordflow">if</span> (valid_openssl) {</div><div class="line"><a name="l03563"></a><span class="lineno"> 3563</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> tmp[32] = {0};</div><div class="line"><a name="l03564"></a><span class="lineno"> 3564</span>  BN_bn2bin(sig_openssl->r, tmp + 32 - BN_num_bytes(sig_openssl->r));</div><div class="line"><a name="l03565"></a><span class="lineno"> 3565</span>  valid_openssl = memcmp(tmp, max_scalar, 32) < 0;</div><div class="line"><a name="l03566"></a><span class="lineno"> 3566</span>  }</div><div class="line"><a name="l03567"></a><span class="lineno"> 3567</span>  <span class="keywordflow">if</span> (valid_openssl) {</div><div class="line"><a name="l03568"></a><span class="lineno"> 3568</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> tmp[32] = {0};</div><div class="line"><a name="l03569"></a><span class="lineno"> 3569</span>  BN_bn2bin(sig_openssl->s, tmp + 32 - BN_num_bytes(sig_openssl->s));</div><div class="line"><a name="l03570"></a><span class="lineno"> 3570</span>  valid_openssl = memcmp(tmp, max_scalar, 32) < 0;</div><div class="line"><a name="l03571"></a><span class="lineno"> 3571</span>  }</div><div class="line"><a name="l03572"></a><span class="lineno"> 3572</span>  }</div><div class="line"><a name="l03573"></a><span class="lineno"> 3573</span>  len_openssl = i2d_ECDSA_SIG(sig_openssl, NULL);</div><div class="line"><a name="l03574"></a><span class="lineno"> 3574</span>  <span class="keywordflow">if</span> (len_openssl <= 2048) {</div><div class="line"><a name="l03575"></a><span class="lineno"> 3575</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *ptr = roundtrip_openssl;</div><div class="line"><a name="l03576"></a><span class="lineno"> 3576</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(i2d_ECDSA_SIG(sig_openssl, &ptr) == len_openssl);</div><div class="line"><a name="l03577"></a><span class="lineno"> 3577</span>  roundtrips_openssl = valid_openssl && ((size_t)len_openssl == siglen) && (memcmp(roundtrip_openssl, sig, siglen) == 0);</div><div class="line"><a name="l03578"></a><span class="lineno"> 3578</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l03579"></a><span class="lineno"> 3579</span>  len_openssl = 0;</div><div class="line"><a name="l03580"></a><span class="lineno"> 3580</span>  }</div><div class="line"><a name="l03581"></a><span class="lineno"> 3581</span>  ECDSA_SIG_free(sig_openssl);</div><div class="line"><a name="l03582"></a><span class="lineno"> 3582</span> </div><div class="line"><a name="l03583"></a><span class="lineno"> 3583</span>  ret |= (parsed_der && !parsed_openssl) << 4;</div><div class="line"><a name="l03584"></a><span class="lineno"> 3584</span>  ret |= (valid_der && !valid_openssl) << 5;</div><div class="line"><a name="l03585"></a><span class="lineno"> 3585</span>  ret |= (roundtrips_openssl && !parsed_der) << 6;</div><div class="line"><a name="l03586"></a><span class="lineno"> 3586</span>  ret |= (roundtrips_der != roundtrips_openssl) << 7;</div><div class="line"><a name="l03587"></a><span class="lineno"> 3587</span>  <span class="keywordflow">if</span> (roundtrips_openssl) {</div><div class="line"><a name="l03588"></a><span class="lineno"> 3588</span>  ret |= (len_der != (size_t)len_openssl) << 8;</div><div class="line"><a name="l03589"></a><span class="lineno"> 3589</span>  ret |= (memcmp(roundtrip_der, roundtrip_openssl, len_der) != 0) << 9;</div><div class="line"><a name="l03590"></a><span class="lineno"> 3590</span>  }</div><div class="line"><a name="l03591"></a><span class="lineno"> 3591</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l03592"></a><span class="lineno"> 3592</span>  <span class="keywordflow">return</span> ret;</div><div class="line"><a name="l03593"></a><span class="lineno"> 3593</span> }</div><div class="line"><a name="l03594"></a><span class="lineno"> 3594</span> </div><div class="line"><a name="l03595"></a><span class="lineno"><a class="line" href="tests_8c.html#a6271c140364653b98ad0c037c204b2a3"> 3595</a></span> <span class="keyword">static</span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a6271c140364653b98ad0c037c204b2a3">assign_big_endian</a>(<span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *ptr, <span class="keywordtype">size_t</span> ptrlen, uint32_t val) {</div><div class="line"><a name="l03596"></a><span class="lineno"> 3596</span>  <span class="keywordtype">size_t</span> i;</div><div class="line"><a name="l03597"></a><span class="lineno"> 3597</span>  <span class="keywordflow">for</span> (i = 0; i < ptrlen; i++) {</div><div class="line"><a name="l03598"></a><span class="lineno"> 3598</span>  <span class="keywordtype">int</span> shift = ptrlen - 1 - i;</div><div class="line"><a name="l03599"></a><span class="lineno"> 3599</span>  <span class="keywordflow">if</span> (shift >= 4) {</div><div class="line"><a name="l03600"></a><span class="lineno"> 3600</span>  ptr[i] = 0;</div><div class="line"><a name="l03601"></a><span class="lineno"> 3601</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l03602"></a><span class="lineno"> 3602</span>  ptr[i] = (val >> shift) & 0xFF;</div><div class="line"><a name="l03603"></a><span class="lineno"> 3603</span>  }</div><div class="line"><a name="l03604"></a><span class="lineno"> 3604</span>  }</div><div class="line"><a name="l03605"></a><span class="lineno"> 3605</span> }</div><div class="line"><a name="l03606"></a><span class="lineno"> 3606</span> </div><div class="line"><a name="l03607"></a><span class="lineno"><a class="line" href="tests_8c.html#afaaf1ae17d14e976bb0d6d7c9393269f"> 3607</a></span> <span class="keyword">static</span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#afaaf1ae17d14e976bb0d6d7c9393269f">damage_array</a>(<span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *sig, <span class="keywordtype">size_t</span> *len) {</div><div class="line"><a name="l03608"></a><span class="lineno"> 3608</span>  <span class="keywordtype">int</span> pos;</div><div class="line"><a name="l03609"></a><span class="lineno"> 3609</span>  <span class="keywordtype">int</span> action = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(3);</div><div class="line"><a name="l03610"></a><span class="lineno"> 3610</span>  <span class="keywordflow">if</span> (action < 1) {</div><div class="line"><a name="l03611"></a><span class="lineno"> 3611</span>  <span class="comment">/* Delete a byte. */</span></div><div class="line"><a name="l03612"></a><span class="lineno"> 3612</span>  pos = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(*len);</div><div class="line"><a name="l03613"></a><span class="lineno"> 3613</span>  <a class="code" href="glibc__compat_8cpp.html#a9778d49e9029dd75bc53ecbbf9f5e9a1">memmove</a>(sig + pos, sig + pos + 1, *len - pos - 1);</div><div class="line"><a name="l03614"></a><span class="lineno"> 3614</span>  (*len)--;</div><div class="line"><a name="l03615"></a><span class="lineno"> 3615</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l03616"></a><span class="lineno"> 3616</span>  } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (action < 2) {</div><div class="line"><a name="l03617"></a><span class="lineno"> 3617</span>  <span class="comment">/* Insert a byte. */</span></div><div class="line"><a name="l03618"></a><span class="lineno"> 3618</span>  pos = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(1 + *len);</div><div class="line"><a name="l03619"></a><span class="lineno"> 3619</span>  <a class="code" href="glibc__compat_8cpp.html#a9778d49e9029dd75bc53ecbbf9f5e9a1">memmove</a>(sig + pos + 1, sig + pos, *len - pos);</div><div class="line"><a name="l03620"></a><span class="lineno"> 3620</span>  sig[pos] = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(8);</div><div class="line"><a name="l03621"></a><span class="lineno"> 3621</span>  (*len)++;</div><div class="line"><a name="l03622"></a><span class="lineno"> 3622</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l03623"></a><span class="lineno"> 3623</span>  } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (action < 4) {</div><div class="line"><a name="l03624"></a><span class="lineno"> 3624</span>  <span class="comment">/* Modify a byte. */</span></div><div class="line"><a name="l03625"></a><span class="lineno"> 3625</span>  sig[<a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(*len)] += 1 + <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(255);</div><div class="line"><a name="l03626"></a><span class="lineno"> 3626</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l03627"></a><span class="lineno"> 3627</span>  } <span class="keywordflow">else</span> { <span class="comment">/* action < 8 */</span></div><div class="line"><a name="l03628"></a><span class="lineno"> 3628</span>  <span class="comment">/* Modify a bit. */</span></div><div class="line"><a name="l03629"></a><span class="lineno"> 3629</span>  sig[<a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(*len)] ^= 1 << <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(3);</div><div class="line"><a name="l03630"></a><span class="lineno"> 3630</span>  <span class="keywordflow">return</span>;</div><div class="line"><a name="l03631"></a><span class="lineno"> 3631</span>  }</div><div class="line"><a name="l03632"></a><span class="lineno"> 3632</span> }</div><div class="line"><a name="l03633"></a><span class="lineno"> 3633</span> </div><div class="line"><a name="l03634"></a><span class="lineno"><a class="line" href="tests_8c.html#a589ba162b5eadaf0ee1aebc22bb87705"> 3634</a></span> <span class="keyword">static</span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#a589ba162b5eadaf0ee1aebc22bb87705">random_ber_signature</a>(<span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *sig, <span class="keywordtype">size_t</span> *len, <span class="keywordtype">int</span>* certainly_der, <span class="keywordtype">int</span>* certainly_not_der) {</div><div class="line"><a name="l03635"></a><span class="lineno"> 3635</span>  <span class="keywordtype">int</span> der;</div><div class="line"><a name="l03636"></a><span class="lineno"> 3636</span>  <span class="keywordtype">int</span> nlow[2], nlen[2], nlenlen[2], nhbit[2], nhbyte[2], nzlen[2];</div><div class="line"><a name="l03637"></a><span class="lineno"> 3637</span>  <span class="keywordtype">size_t</span> tlen, elen, glen;</div><div class="line"><a name="l03638"></a><span class="lineno"> 3638</span>  <span class="keywordtype">int</span> indet;</div><div class="line"><a name="l03639"></a><span class="lineno"> 3639</span>  <span class="keywordtype">int</span> <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>;</div><div class="line"><a name="l03640"></a><span class="lineno"> 3640</span> </div><div class="line"><a name="l03641"></a><span class="lineno"> 3641</span>  *len = 0;</div><div class="line"><a name="l03642"></a><span class="lineno"> 3642</span>  der = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(2) == 0;</div><div class="line"><a name="l03643"></a><span class="lineno"> 3643</span>  *certainly_der = der;</div><div class="line"><a name="l03644"></a><span class="lineno"> 3644</span>  *certainly_not_der = 0;</div><div class="line"><a name="l03645"></a><span class="lineno"> 3645</span>  indet = der ? 0 : <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(10) == 0;</div><div class="line"><a name="l03646"></a><span class="lineno"> 3646</span> </div><div class="line"><a name="l03647"></a><span class="lineno"> 3647</span>  <span class="keywordflow">for</span> (<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a> = 0; <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a> < 2; <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>++) {</div><div class="line"><a name="l03648"></a><span class="lineno"> 3648</span>  <span class="comment">/* We generate two classes of numbers: nlow==1 "low" ones (up to 32 bytes), nlow==0 "high" ones (32 bytes with 129 top bits set, or larger than 32 bytes) */</span></div><div class="line"><a name="l03649"></a><span class="lineno"> 3649</span>  nlow[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] = der ? 1 : (<a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(3) != 0);</div><div class="line"><a name="l03650"></a><span class="lineno"> 3650</span>  <span class="comment">/* The length of the number in bytes (the first byte of which will always be nonzero) */</span></div><div class="line"><a name="l03651"></a><span class="lineno"> 3651</span>  nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] = nlow[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] ? <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(33) : 32 + <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(200) * <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(8) / 8;</div><div class="line"><a name="l03652"></a><span class="lineno"> 3652</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] <= 232);</div><div class="line"><a name="l03653"></a><span class="lineno"> 3653</span>  <span class="comment">/* The top bit of the number. */</span></div><div class="line"><a name="l03654"></a><span class="lineno"> 3654</span>  nhbit[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] = (nlow[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] == 0 && nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] == 32) ? 1 : (nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] == 0 ? 0 : <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1));</div><div class="line"><a name="l03655"></a><span class="lineno"> 3655</span>  <span class="comment">/* The top byte of the number (after the potential hardcoded 16 0xFF characters for "high" 32 bytes numbers) */</span></div><div class="line"><a name="l03656"></a><span class="lineno"> 3656</span>  nhbyte[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] = nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] == 0 ? 0 : (nhbit[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] ? 128 + <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(7) : 1 + <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(127));</div><div class="line"><a name="l03657"></a><span class="lineno"> 3657</span>  <span class="comment">/* The number of zero bytes in front of the number (which is 0 or 1 in case of DER, otherwise we extend up to 300 bytes) */</span></div><div class="line"><a name="l03658"></a><span class="lineno"> 3658</span>  nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] = der ? ((nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] == 0 || nhbit[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]) ? 1 : 0) : (nlow[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] ? <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(3) : <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(300 - nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]) * <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(8) / 8);</div><div class="line"><a name="l03659"></a><span class="lineno"> 3659</span>  <span class="keywordflow">if</span> (nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] > ((nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] == 0 || nhbit[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]) ? 1 : 0)) {</div><div class="line"><a name="l03660"></a><span class="lineno"> 3660</span>  *certainly_not_der = 1;</div><div class="line"><a name="l03661"></a><span class="lineno"> 3661</span>  }</div><div class="line"><a name="l03662"></a><span class="lineno"> 3662</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] + nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] <= 300);</div><div class="line"><a name="l03663"></a><span class="lineno"> 3663</span>  <span class="comment">/* The length of the length descriptor for the number. 0 means short encoding, anything else is long encoding. */</span></div><div class="line"><a name="l03664"></a><span class="lineno"> 3664</span>  nlenlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] = nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] + nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] < 128 ? 0 : (nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] + nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] < 256 ? 1 : 2);</div><div class="line"><a name="l03665"></a><span class="lineno"> 3665</span>  <span class="keywordflow">if</span> (!der) {</div><div class="line"><a name="l03666"></a><span class="lineno"> 3666</span>  <span class="comment">/* nlenlen[n] max 127 bytes */</span></div><div class="line"><a name="l03667"></a><span class="lineno"> 3667</span>  <span class="keywordtype">int</span> add = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(127 - nlenlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]) * <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(16) * <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(16) / 256;</div><div class="line"><a name="l03668"></a><span class="lineno"> 3668</span>  nlenlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] += add;</div><div class="line"><a name="l03669"></a><span class="lineno"> 3669</span>  <span class="keywordflow">if</span> (add != 0) {</div><div class="line"><a name="l03670"></a><span class="lineno"> 3670</span>  *certainly_not_der = 1;</div><div class="line"><a name="l03671"></a><span class="lineno"> 3671</span>  }</div><div class="line"><a name="l03672"></a><span class="lineno"> 3672</span>  }</div><div class="line"><a name="l03673"></a><span class="lineno"> 3673</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] + nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] + nlenlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] <= 427);</div><div class="line"><a name="l03674"></a><span class="lineno"> 3674</span>  }</div><div class="line"><a name="l03675"></a><span class="lineno"> 3675</span> </div><div class="line"><a name="l03676"></a><span class="lineno"> 3676</span>  <span class="comment">/* The total length of the data to go, so far */</span></div><div class="line"><a name="l03677"></a><span class="lineno"> 3677</span>  tlen = 2 + nlenlen[0] + nlen[0] + nzlen[0] + 2 + nlenlen[1] + nlen[1] + nzlen[1];</div><div class="line"><a name="l03678"></a><span class="lineno"> 3678</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(tlen <= 856);</div><div class="line"><a name="l03679"></a><span class="lineno"> 3679</span> </div><div class="line"><a name="l03680"></a><span class="lineno"> 3680</span>  <span class="comment">/* The length of the garbage inside the tuple. */</span></div><div class="line"><a name="l03681"></a><span class="lineno"> 3681</span>  elen = (der || indet) ? 0 : <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(980 - tlen) * <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(8) / 8;</div><div class="line"><a name="l03682"></a><span class="lineno"> 3682</span>  <span class="keywordflow">if</span> (elen != 0) {</div><div class="line"><a name="l03683"></a><span class="lineno"> 3683</span>  *certainly_not_der = 1;</div><div class="line"><a name="l03684"></a><span class="lineno"> 3684</span>  }</div><div class="line"><a name="l03685"></a><span class="lineno"> 3685</span>  tlen += elen;</div><div class="line"><a name="l03686"></a><span class="lineno"> 3686</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(tlen <= 980);</div><div class="line"><a name="l03687"></a><span class="lineno"> 3687</span> </div><div class="line"><a name="l03688"></a><span class="lineno"> 3688</span>  <span class="comment">/* The length of the garbage after the end of the tuple. */</span></div><div class="line"><a name="l03689"></a><span class="lineno"> 3689</span>  glen = der ? 0 : <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(990 - tlen) * <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(8) / 8;</div><div class="line"><a name="l03690"></a><span class="lineno"> 3690</span>  <span class="keywordflow">if</span> (glen != 0) {</div><div class="line"><a name="l03691"></a><span class="lineno"> 3691</span>  *certainly_not_der = 1;</div><div class="line"><a name="l03692"></a><span class="lineno"> 3692</span>  }</div><div class="line"><a name="l03693"></a><span class="lineno"> 3693</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(tlen + glen <= 990);</div><div class="line"><a name="l03694"></a><span class="lineno"> 3694</span> </div><div class="line"><a name="l03695"></a><span class="lineno"> 3695</span>  <span class="comment">/* Write the tuple header. */</span></div><div class="line"><a name="l03696"></a><span class="lineno"> 3696</span>  sig[(*len)++] = 0x30;</div><div class="line"><a name="l03697"></a><span class="lineno"> 3697</span>  <span class="keywordflow">if</span> (indet) {</div><div class="line"><a name="l03698"></a><span class="lineno"> 3698</span>  <span class="comment">/* Indeterminate length */</span></div><div class="line"><a name="l03699"></a><span class="lineno"> 3699</span>  sig[(*len)++] = 0x80;</div><div class="line"><a name="l03700"></a><span class="lineno"> 3700</span>  *certainly_not_der = 1;</div><div class="line"><a name="l03701"></a><span class="lineno"> 3701</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l03702"></a><span class="lineno"> 3702</span>  <span class="keywordtype">int</span> tlenlen = tlen < 128 ? 0 : (tlen < 256 ? 1 : 2);</div><div class="line"><a name="l03703"></a><span class="lineno"> 3703</span>  <span class="keywordflow">if</span> (!der) {</div><div class="line"><a name="l03704"></a><span class="lineno"> 3704</span>  <span class="keywordtype">int</span> add = <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(127 - tlenlen) * <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(16) * <a class="code" href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a>(16) / 256;</div><div class="line"><a name="l03705"></a><span class="lineno"> 3705</span>  tlenlen += add;</div><div class="line"><a name="l03706"></a><span class="lineno"> 3706</span>  <span class="keywordflow">if</span> (add != 0) {</div><div class="line"><a name="l03707"></a><span class="lineno"> 3707</span>  *certainly_not_der = 1;</div><div class="line"><a name="l03708"></a><span class="lineno"> 3708</span>  }</div><div class="line"><a name="l03709"></a><span class="lineno"> 3709</span>  }</div><div class="line"><a name="l03710"></a><span class="lineno"> 3710</span>  <span class="keywordflow">if</span> (tlenlen == 0) {</div><div class="line"><a name="l03711"></a><span class="lineno"> 3711</span>  <span class="comment">/* Short length notation */</span></div><div class="line"><a name="l03712"></a><span class="lineno"> 3712</span>  sig[(*len)++] = tlen;</div><div class="line"><a name="l03713"></a><span class="lineno"> 3713</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l03714"></a><span class="lineno"> 3714</span>  <span class="comment">/* Long length notation */</span></div><div class="line"><a name="l03715"></a><span class="lineno"> 3715</span>  sig[(*len)++] = 128 + tlenlen;</div><div class="line"><a name="l03716"></a><span class="lineno"> 3716</span>  <a class="code" href="tests_8c.html#a6271c140364653b98ad0c037c204b2a3">assign_big_endian</a>(sig + *len, tlenlen, tlen);</div><div class="line"><a name="l03717"></a><span class="lineno"> 3717</span>  *len += tlenlen;</div><div class="line"><a name="l03718"></a><span class="lineno"> 3718</span>  }</div><div class="line"><a name="l03719"></a><span class="lineno"> 3719</span>  tlen += tlenlen;</div><div class="line"><a name="l03720"></a><span class="lineno"> 3720</span>  }</div><div class="line"><a name="l03721"></a><span class="lineno"> 3721</span>  tlen += 2;</div><div class="line"><a name="l03722"></a><span class="lineno"> 3722</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(tlen + glen <= 1119);</div><div class="line"><a name="l03723"></a><span class="lineno"> 3723</span> </div><div class="line"><a name="l03724"></a><span class="lineno"> 3724</span>  <span class="keywordflow">for</span> (<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a> = 0; <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a> < 2; <a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>++) {</div><div class="line"><a name="l03725"></a><span class="lineno"> 3725</span>  <span class="comment">/* Write the integer header. */</span></div><div class="line"><a name="l03726"></a><span class="lineno"> 3726</span>  sig[(*len)++] = 0x02;</div><div class="line"><a name="l03727"></a><span class="lineno"> 3727</span>  <span class="keywordflow">if</span> (nlenlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] == 0) {</div><div class="line"><a name="l03728"></a><span class="lineno"> 3728</span>  <span class="comment">/* Short length notation */</span></div><div class="line"><a name="l03729"></a><span class="lineno"> 3729</span>  sig[(*len)++] = nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] + nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>];</div><div class="line"><a name="l03730"></a><span class="lineno"> 3730</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l03731"></a><span class="lineno"> 3731</span>  <span class="comment">/* Long length notation. */</span></div><div class="line"><a name="l03732"></a><span class="lineno"> 3732</span>  sig[(*len)++] = 128 + nlenlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>];</div><div class="line"><a name="l03733"></a><span class="lineno"> 3733</span>  <a class="code" href="tests_8c.html#a6271c140364653b98ad0c037c204b2a3">assign_big_endian</a>(sig + *len, nlenlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>], nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] + nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]);</div><div class="line"><a name="l03734"></a><span class="lineno"> 3734</span>  *len += nlenlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>];</div><div class="line"><a name="l03735"></a><span class="lineno"> 3735</span>  }</div><div class="line"><a name="l03736"></a><span class="lineno"> 3736</span>  <span class="comment">/* Write zero padding */</span></div><div class="line"><a name="l03737"></a><span class="lineno"> 3737</span>  <span class="keywordflow">while</span> (nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] > 0) {</div><div class="line"><a name="l03738"></a><span class="lineno"> 3738</span>  sig[(*len)++] = 0x00;</div><div class="line"><a name="l03739"></a><span class="lineno"> 3739</span>  nzlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]--;</div><div class="line"><a name="l03740"></a><span class="lineno"> 3740</span>  }</div><div class="line"><a name="l03741"></a><span class="lineno"> 3741</span>  <span class="keywordflow">if</span> (nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] == 32 && !nlow[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]) {</div><div class="line"><a name="l03742"></a><span class="lineno"> 3742</span>  <span class="comment">/* Special extra 16 0xFF bytes in "high" 32-byte numbers */</span></div><div class="line"><a name="l03743"></a><span class="lineno"> 3743</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l03744"></a><span class="lineno"> 3744</span>  <span class="keywordflow">for</span> (i = 0; i < 16; i++) {</div><div class="line"><a name="l03745"></a><span class="lineno"> 3745</span>  sig[(*len)++] = 0xFF;</div><div class="line"><a name="l03746"></a><span class="lineno"> 3746</span>  }</div><div class="line"><a name="l03747"></a><span class="lineno"> 3747</span>  nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] -= 16;</div><div class="line"><a name="l03748"></a><span class="lineno"> 3748</span>  }</div><div class="line"><a name="l03749"></a><span class="lineno"> 3749</span>  <span class="comment">/* Write first byte of number */</span></div><div class="line"><a name="l03750"></a><span class="lineno"> 3750</span>  <span class="keywordflow">if</span> (nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] > 0) {</div><div class="line"><a name="l03751"></a><span class="lineno"> 3751</span>  sig[(*len)++] = nhbyte[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>];</div><div class="line"><a name="l03752"></a><span class="lineno"> 3752</span>  nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]--;</div><div class="line"><a name="l03753"></a><span class="lineno"> 3753</span>  }</div><div class="line"><a name="l03754"></a><span class="lineno"> 3754</span>  <span class="comment">/* Generate remaining random bytes of number */</span></div><div class="line"><a name="l03755"></a><span class="lineno"> 3755</span>  <a class="code" href="testrand_8h.html#adf2bb4432b8c3b238d83297c067b41aa">secp256k1_rand_bytes_test</a>(sig + *len, nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>]);</div><div class="line"><a name="l03756"></a><span class="lineno"> 3756</span>  *len += nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>];</div><div class="line"><a name="l03757"></a><span class="lineno"> 3757</span>  nlen[<a class="code" href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">n</a>] = 0;</div><div class="line"><a name="l03758"></a><span class="lineno"> 3758</span>  }</div><div class="line"><a name="l03759"></a><span class="lineno"> 3759</span> </div><div class="line"><a name="l03760"></a><span class="lineno"> 3760</span>  <span class="comment">/* Generate random garbage inside tuple. */</span></div><div class="line"><a name="l03761"></a><span class="lineno"> 3761</span>  <a class="code" href="testrand_8h.html#adf2bb4432b8c3b238d83297c067b41aa">secp256k1_rand_bytes_test</a>(sig + *len, elen);</div><div class="line"><a name="l03762"></a><span class="lineno"> 3762</span>  *len += elen;</div><div class="line"><a name="l03763"></a><span class="lineno"> 3763</span> </div><div class="line"><a name="l03764"></a><span class="lineno"> 3764</span>  <span class="comment">/* Generate end-of-contents bytes. */</span></div><div class="line"><a name="l03765"></a><span class="lineno"> 3765</span>  <span class="keywordflow">if</span> (indet) {</div><div class="line"><a name="l03766"></a><span class="lineno"> 3766</span>  sig[(*len)++] = 0;</div><div class="line"><a name="l03767"></a><span class="lineno"> 3767</span>  sig[(*len)++] = 0;</div><div class="line"><a name="l03768"></a><span class="lineno"> 3768</span>  tlen += 2;</div><div class="line"><a name="l03769"></a><span class="lineno"> 3769</span>  }</div><div class="line"><a name="l03770"></a><span class="lineno"> 3770</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(tlen + glen <= 1121);</div><div class="line"><a name="l03771"></a><span class="lineno"> 3771</span> </div><div class="line"><a name="l03772"></a><span class="lineno"> 3772</span>  <span class="comment">/* Generate random garbage outside tuple. */</span></div><div class="line"><a name="l03773"></a><span class="lineno"> 3773</span>  <a class="code" href="testrand_8h.html#adf2bb4432b8c3b238d83297c067b41aa">secp256k1_rand_bytes_test</a>(sig + *len, glen);</div><div class="line"><a name="l03774"></a><span class="lineno"> 3774</span>  *len += glen;</div><div class="line"><a name="l03775"></a><span class="lineno"> 3775</span>  tlen += glen;</div><div class="line"><a name="l03776"></a><span class="lineno"> 3776</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(tlen <= 1121);</div><div class="line"><a name="l03777"></a><span class="lineno"> 3777</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(tlen == *len);</div><div class="line"><a name="l03778"></a><span class="lineno"> 3778</span> }</div><div class="line"><a name="l03779"></a><span class="lineno"> 3779</span> </div><div class="line"><a name="l03780"></a><span class="lineno"><a class="line" href="tests_8c.html#aed8d29b89e89ae8bf370483684b1f7d2"> 3780</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#aed8d29b89e89ae8bf370483684b1f7d2">run_ecdsa_der_parse</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l03781"></a><span class="lineno"> 3781</span>  <span class="keywordtype">int</span> i,j;</div><div class="line"><a name="l03782"></a><span class="lineno"> 3782</span>  <span class="keywordflow">for</span> (i = 0; i < 200 * <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l03783"></a><span class="lineno"> 3783</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> buffer[2048];</div><div class="line"><a name="l03784"></a><span class="lineno"> 3784</span>  <span class="keywordtype">size_t</span> buflen = 0;</div><div class="line"><a name="l03785"></a><span class="lineno"> 3785</span>  <span class="keywordtype">int</span> certainly_der = 0;</div><div class="line"><a name="l03786"></a><span class="lineno"> 3786</span>  <span class="keywordtype">int</span> certainly_not_der = 0;</div><div class="line"><a name="l03787"></a><span class="lineno"> 3787</span>  <a class="code" href="tests_8c.html#a589ba162b5eadaf0ee1aebc22bb87705">random_ber_signature</a>(buffer, &buflen, &certainly_der, &certainly_not_der);</div><div class="line"><a name="l03788"></a><span class="lineno"> 3788</span>  <span class="keywordflow">for</span> (j = 0; j < 16; j++) {</div><div class="line"><a name="l03789"></a><span class="lineno"> 3789</span>  <span class="keywordtype">int</span> ret = 0;</div><div class="line"><a name="l03790"></a><span class="lineno"> 3790</span>  <span class="keywordflow">if</span> (j > 0) {</div><div class="line"><a name="l03791"></a><span class="lineno"> 3791</span>  <a class="code" href="tests_8c.html#afaaf1ae17d14e976bb0d6d7c9393269f">damage_array</a>(buffer, &buflen);</div><div class="line"><a name="l03792"></a><span class="lineno"> 3792</span>  <span class="comment">/* We don't know anything anymore about the DERness of the result */</span></div><div class="line"><a name="l03793"></a><span class="lineno"> 3793</span>  certainly_der = 0;</div><div class="line"><a name="l03794"></a><span class="lineno"> 3794</span>  certainly_not_der = 0;</div><div class="line"><a name="l03795"></a><span class="lineno"> 3795</span>  }</div><div class="line"><a name="l03796"></a><span class="lineno"> 3796</span>  ret = <a class="code" href="tests_8c.html#a1cb741ffd2cea46124f7abc2c506717a">test_ecdsa_der_parse</a>(buffer, buflen, certainly_der, certainly_not_der);</div><div class="line"><a name="l03797"></a><span class="lineno"> 3797</span>  <span class="keywordflow">if</span> (ret != 0) {</div><div class="line"><a name="l03798"></a><span class="lineno"> 3798</span>  <span class="keywordtype">size_t</span> k;</div><div class="line"><a name="l03799"></a><span class="lineno"> 3799</span>  fprintf(<a class="code" href="namespaceoptimize-pngs.html#a98904564b461b52c82b042a4cbe21c0c">stderr</a>, <span class="stringliteral">"Failure %x on "</span>, ret);</div><div class="line"><a name="l03800"></a><span class="lineno"> 3800</span>  <span class="keywordflow">for</span> (k = 0; k < buflen; k++) {</div><div class="line"><a name="l03801"></a><span class="lineno"> 3801</span>  fprintf(<a class="code" href="namespaceoptimize-pngs.html#a98904564b461b52c82b042a4cbe21c0c">stderr</a>, <span class="stringliteral">"%02x "</span>, buffer[k]);</div><div class="line"><a name="l03802"></a><span class="lineno"> 3802</span>  }</div><div class="line"><a name="l03803"></a><span class="lineno"> 3803</span>  fprintf(<a class="code" href="namespaceoptimize-pngs.html#a98904564b461b52c82b042a4cbe21c0c">stderr</a>, <span class="stringliteral">"\n"</span>);</div><div class="line"><a name="l03804"></a><span class="lineno"> 3804</span>  }</div><div class="line"><a name="l03805"></a><span class="lineno"> 3805</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ret == 0);</div><div class="line"><a name="l03806"></a><span class="lineno"> 3806</span>  }</div><div class="line"><a name="l03807"></a><span class="lineno"> 3807</span>  }</div><div class="line"><a name="l03808"></a><span class="lineno"> 3808</span> }</div><div class="line"><a name="l03809"></a><span class="lineno"> 3809</span> </div><div class="line"><a name="l03810"></a><span class="lineno"> 3810</span> <span class="comment">/* Tests several edge cases. */</span></div><div class="line"><a name="l03811"></a><span class="lineno"><a class="line" href="tests_8c.html#abbcb27d1eb13654db9b2e281ffce021e"> 3811</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#abbcb27d1eb13654db9b2e281ffce021e">test_ecdsa_edge_cases</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l03812"></a><span class="lineno"> 3812</span>  <span class="keywordtype">int</span> t;</div><div class="line"><a name="l03813"></a><span class="lineno"> 3813</span>  <a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a> sig;</div><div class="line"><a name="l03814"></a><span class="lineno"> 3814</span> </div><div class="line"><a name="l03815"></a><span class="lineno"> 3815</span>  <span class="comment">/* Test the case where ECDSA recomputes a point that is infinity. */</span></div><div class="line"><a name="l03816"></a><span class="lineno"> 3816</span>  {</div><div class="line"><a name="l03817"></a><span class="lineno"> 3817</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> keyj;</div><div class="line"><a name="l03818"></a><span class="lineno"> 3818</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l03819"></a><span class="lineno"> 3819</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>;</div><div class="line"><a name="l03820"></a><span class="lineno"> 3820</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sr, ss;</div><div class="line"><a name="l03821"></a><span class="lineno"> 3821</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 1);</div><div class="line"><a name="l03822"></a><span class="lineno"> 3822</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&ss, &ss);</div><div class="line"><a name="l03823"></a><span class="lineno"> 3823</span>  <a class="code" href="scalar_8h.html#ac048cded7c9731249ada44d489a258d5">secp256k1_scalar_inverse</a>(&ss, &ss);</div><div class="line"><a name="l03824"></a><span class="lineno"> 3824</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&sr, 1);</div><div class="line"><a name="l03825"></a><span class="lineno"> 3825</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &keyj, &sr);</div><div class="line"><a name="l03826"></a><span class="lineno"> 3826</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &keyj);</div><div class="line"><a name="l03827"></a><span class="lineno"> 3827</span>  <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a> = ss;</div><div class="line"><a name="l03828"></a><span class="lineno"> 3828</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 0);</div><div class="line"><a name="l03829"></a><span class="lineno"> 3829</span>  }</div><div class="line"><a name="l03830"></a><span class="lineno"> 3830</span> </div><div class="line"><a name="l03831"></a><span class="lineno"> 3831</span>  <span class="comment">/* Verify signature with r of zero fails. */</span></div><div class="line"><a name="l03832"></a><span class="lineno"> 3832</span>  {</div><div class="line"><a name="l03833"></a><span class="lineno"> 3833</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkey_mods_zero[33] = {</div><div class="line"><a name="l03834"></a><span class="lineno"> 3834</span>  0x02, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l03835"></a><span class="lineno"> 3835</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l03836"></a><span class="lineno"> 3836</span>  0xfe, 0xba, 0xae, 0xdc, 0xe6, 0xaf, 0x48, 0xa0,</div><div class="line"><a name="l03837"></a><span class="lineno"> 3837</span>  0x3b, 0xbf, 0xd2, 0x5e, 0x8c, 0xd0, 0x36, 0x41,</div><div class="line"><a name="l03838"></a><span class="lineno"> 3838</span>  0x41</div><div class="line"><a name="l03839"></a><span class="lineno"> 3839</span>  };</div><div class="line"><a name="l03840"></a><span class="lineno"> 3840</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l03841"></a><span class="lineno"> 3841</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>;</div><div class="line"><a name="l03842"></a><span class="lineno"> 3842</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sr, ss;</div><div class="line"><a name="l03843"></a><span class="lineno"> 3843</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 1);</div><div class="line"><a name="l03844"></a><span class="lineno"> 3844</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, 0);</div><div class="line"><a name="l03845"></a><span class="lineno"> 3845</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&sr, 0);</div><div class="line"><a name="l03846"></a><span class="lineno"> 3846</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, pubkey_mods_zero, 33));</div><div class="line"><a name="l03847"></a><span class="lineno"> 3847</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 0);</div><div class="line"><a name="l03848"></a><span class="lineno"> 3848</span>  }</div><div class="line"><a name="l03849"></a><span class="lineno"> 3849</span> </div><div class="line"><a name="l03850"></a><span class="lineno"> 3850</span>  <span class="comment">/* Verify signature with s of zero fails. */</span></div><div class="line"><a name="l03851"></a><span class="lineno"> 3851</span>  {</div><div class="line"><a name="l03852"></a><span class="lineno"> 3852</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkey[33] = {</div><div class="line"><a name="l03853"></a><span class="lineno"> 3853</span>  0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03854"></a><span class="lineno"> 3854</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03855"></a><span class="lineno"> 3855</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03856"></a><span class="lineno"> 3856</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03857"></a><span class="lineno"> 3857</span>  0x01</div><div class="line"><a name="l03858"></a><span class="lineno"> 3858</span>  };</div><div class="line"><a name="l03859"></a><span class="lineno"> 3859</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l03860"></a><span class="lineno"> 3860</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>;</div><div class="line"><a name="l03861"></a><span class="lineno"> 3861</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sr, ss;</div><div class="line"><a name="l03862"></a><span class="lineno"> 3862</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 0);</div><div class="line"><a name="l03863"></a><span class="lineno"> 3863</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, 0);</div><div class="line"><a name="l03864"></a><span class="lineno"> 3864</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&sr, 1);</div><div class="line"><a name="l03865"></a><span class="lineno"> 3865</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, pubkey, 33));</div><div class="line"><a name="l03866"></a><span class="lineno"> 3866</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 0);</div><div class="line"><a name="l03867"></a><span class="lineno"> 3867</span>  }</div><div class="line"><a name="l03868"></a><span class="lineno"> 3868</span> </div><div class="line"><a name="l03869"></a><span class="lineno"> 3869</span>  <span class="comment">/* Verify signature with message 0 passes. */</span></div><div class="line"><a name="l03870"></a><span class="lineno"> 3870</span>  {</div><div class="line"><a name="l03871"></a><span class="lineno"> 3871</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkey[33] = {</div><div class="line"><a name="l03872"></a><span class="lineno"> 3872</span>  0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03873"></a><span class="lineno"> 3873</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03874"></a><span class="lineno"> 3874</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03875"></a><span class="lineno"> 3875</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03876"></a><span class="lineno"> 3876</span>  0x02</div><div class="line"><a name="l03877"></a><span class="lineno"> 3877</span>  };</div><div class="line"><a name="l03878"></a><span class="lineno"> 3878</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkey2[33] = {</div><div class="line"><a name="l03879"></a><span class="lineno"> 3879</span>  0x02, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l03880"></a><span class="lineno"> 3880</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l03881"></a><span class="lineno"> 3881</span>  0xfe, 0xba, 0xae, 0xdc, 0xe6, 0xaf, 0x48, 0xa0,</div><div class="line"><a name="l03882"></a><span class="lineno"> 3882</span>  0x3b, 0xbf, 0xd2, 0x5e, 0x8c, 0xd0, 0x36, 0x41,</div><div class="line"><a name="l03883"></a><span class="lineno"> 3883</span>  0x43</div><div class="line"><a name="l03884"></a><span class="lineno"> 3884</span>  };</div><div class="line"><a name="l03885"></a><span class="lineno"> 3885</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l03886"></a><span class="lineno"> 3886</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> key2;</div><div class="line"><a name="l03887"></a><span class="lineno"> 3887</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>;</div><div class="line"><a name="l03888"></a><span class="lineno"> 3888</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sr, ss;</div><div class="line"><a name="l03889"></a><span class="lineno"> 3889</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 2);</div><div class="line"><a name="l03890"></a><span class="lineno"> 3890</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, 0);</div><div class="line"><a name="l03891"></a><span class="lineno"> 3891</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&sr, 2);</div><div class="line"><a name="l03892"></a><span class="lineno"> 3892</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, pubkey, 33));</div><div class="line"><a name="l03893"></a><span class="lineno"> 3893</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&key2, pubkey2, 33));</div><div class="line"><a name="l03894"></a><span class="lineno"> 3894</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03895"></a><span class="lineno"> 3895</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &key2, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03896"></a><span class="lineno"> 3896</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&ss, &ss);</div><div class="line"><a name="l03897"></a><span class="lineno"> 3897</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03898"></a><span class="lineno"> 3898</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &key2, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03899"></a><span class="lineno"> 3899</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 1);</div><div class="line"><a name="l03900"></a><span class="lineno"> 3900</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 0);</div><div class="line"><a name="l03901"></a><span class="lineno"> 3901</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &key2, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 0);</div><div class="line"><a name="l03902"></a><span class="lineno"> 3902</span>  }</div><div class="line"><a name="l03903"></a><span class="lineno"> 3903</span> </div><div class="line"><a name="l03904"></a><span class="lineno"> 3904</span>  <span class="comment">/* Verify signature with message 1 passes. */</span></div><div class="line"><a name="l03905"></a><span class="lineno"> 3905</span>  {</div><div class="line"><a name="l03906"></a><span class="lineno"> 3906</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkey[33] = {</div><div class="line"><a name="l03907"></a><span class="lineno"> 3907</span>  0x02, 0x14, 0x4e, 0x5a, 0x58, 0xef, 0x5b, 0x22,</div><div class="line"><a name="l03908"></a><span class="lineno"> 3908</span>  0x6f, 0xd2, 0xe2, 0x07, 0x6a, 0x77, 0xcf, 0x05,</div><div class="line"><a name="l03909"></a><span class="lineno"> 3909</span>  0xb4, 0x1d, 0xe7, 0x4a, 0x30, 0x98, 0x27, 0x8c,</div><div class="line"><a name="l03910"></a><span class="lineno"> 3910</span>  0x93, 0xe6, 0xe6, 0x3c, 0x0b, 0xc4, 0x73, 0x76,</div><div class="line"><a name="l03911"></a><span class="lineno"> 3911</span>  0x25</div><div class="line"><a name="l03912"></a><span class="lineno"> 3912</span>  };</div><div class="line"><a name="l03913"></a><span class="lineno"> 3913</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkey2[33] = {</div><div class="line"><a name="l03914"></a><span class="lineno"> 3914</span>  0x02, 0x8a, 0xd5, 0x37, 0xed, 0x73, 0xd9, 0x40,</div><div class="line"><a name="l03915"></a><span class="lineno"> 3915</span>  0x1d, 0xa0, 0x33, 0xd2, 0xdc, 0xf0, 0xaf, 0xae,</div><div class="line"><a name="l03916"></a><span class="lineno"> 3916</span>  0x34, 0xcf, 0x5f, 0x96, 0x4c, 0x73, 0x28, 0x0f,</div><div class="line"><a name="l03917"></a><span class="lineno"> 3917</span>  0x92, 0xc0, 0xf6, 0x9d, 0xd9, 0xb2, 0x09, 0x10,</div><div class="line"><a name="l03918"></a><span class="lineno"> 3918</span>  0x62</div><div class="line"><a name="l03919"></a><span class="lineno"> 3919</span>  };</div><div class="line"><a name="l03920"></a><span class="lineno"> 3920</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> csr[32] = {</div><div class="line"><a name="l03921"></a><span class="lineno"> 3921</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03922"></a><span class="lineno"> 3922</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l03923"></a><span class="lineno"> 3923</span>  0x45, 0x51, 0x23, 0x19, 0x50, 0xb7, 0x5f, 0xc4,</div><div class="line"><a name="l03924"></a><span class="lineno"> 3924</span>  0x40, 0x2d, 0xa1, 0x72, 0x2f, 0xc9, 0xba, 0xeb</div><div class="line"><a name="l03925"></a><span class="lineno"> 3925</span>  };</div><div class="line"><a name="l03926"></a><span class="lineno"> 3926</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l03927"></a><span class="lineno"> 3927</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> key2;</div><div class="line"><a name="l03928"></a><span class="lineno"> 3928</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>;</div><div class="line"><a name="l03929"></a><span class="lineno"> 3929</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sr, ss;</div><div class="line"><a name="l03930"></a><span class="lineno"> 3930</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 1);</div><div class="line"><a name="l03931"></a><span class="lineno"> 3931</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, 1);</div><div class="line"><a name="l03932"></a><span class="lineno"> 3932</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(&sr, csr, NULL);</div><div class="line"><a name="l03933"></a><span class="lineno"> 3933</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, pubkey, 33));</div><div class="line"><a name="l03934"></a><span class="lineno"> 3934</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&key2, pubkey2, 33));</div><div class="line"><a name="l03935"></a><span class="lineno"> 3935</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03936"></a><span class="lineno"> 3936</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &key2, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03937"></a><span class="lineno"> 3937</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&ss, &ss);</div><div class="line"><a name="l03938"></a><span class="lineno"> 3938</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03939"></a><span class="lineno"> 3939</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &key2, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03940"></a><span class="lineno"> 3940</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 2);</div><div class="line"><a name="l03941"></a><span class="lineno"> 3941</span>  <a class="code" href="scalar_8h.html#a58e84d0cabe81139df5c71759f833855">secp256k1_scalar_inverse_var</a>(&ss, &ss);</div><div class="line"><a name="l03942"></a><span class="lineno"> 3942</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 0);</div><div class="line"><a name="l03943"></a><span class="lineno"> 3943</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &key2, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 0);</div><div class="line"><a name="l03944"></a><span class="lineno"> 3944</span>  }</div><div class="line"><a name="l03945"></a><span class="lineno"> 3945</span> </div><div class="line"><a name="l03946"></a><span class="lineno"> 3946</span>  <span class="comment">/* Verify signature with message -1 passes. */</span></div><div class="line"><a name="l03947"></a><span class="lineno"> 3947</span>  {</div><div class="line"><a name="l03948"></a><span class="lineno"> 3948</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> pubkey[33] = {</div><div class="line"><a name="l03949"></a><span class="lineno"> 3949</span>  0x03, 0xaf, 0x97, 0xff, 0x7d, 0x3a, 0xf6, 0xa0,</div><div class="line"><a name="l03950"></a><span class="lineno"> 3950</span>  0x02, 0x94, 0xbd, 0x9f, 0x4b, 0x2e, 0xd7, 0x52,</div><div class="line"><a name="l03951"></a><span class="lineno"> 3951</span>  0x28, 0xdb, 0x49, 0x2a, 0x65, 0xcb, 0x1e, 0x27,</div><div class="line"><a name="l03952"></a><span class="lineno"> 3952</span>  0x57, 0x9c, 0xba, 0x74, 0x20, 0xd5, 0x1d, 0x20,</div><div class="line"><a name="l03953"></a><span class="lineno"> 3953</span>  0xf1</div><div class="line"><a name="l03954"></a><span class="lineno"> 3954</span>  };</div><div class="line"><a name="l03955"></a><span class="lineno"> 3955</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> csr[32] = {</div><div class="line"><a name="l03956"></a><span class="lineno"> 3956</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03957"></a><span class="lineno"> 3957</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l03958"></a><span class="lineno"> 3958</span>  0x45, 0x51, 0x23, 0x19, 0x50, 0xb7, 0x5f, 0xc4,</div><div class="line"><a name="l03959"></a><span class="lineno"> 3959</span>  0x40, 0x2d, 0xa1, 0x72, 0x2f, 0xc9, 0xba, 0xee</div><div class="line"><a name="l03960"></a><span class="lineno"> 3960</span>  };</div><div class="line"><a name="l03961"></a><span class="lineno"> 3961</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>;</div><div class="line"><a name="l03962"></a><span class="lineno"> 3962</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>;</div><div class="line"><a name="l03963"></a><span class="lineno"> 3963</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sr, ss;</div><div class="line"><a name="l03964"></a><span class="lineno"> 3964</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 1);</div><div class="line"><a name="l03965"></a><span class="lineno"> 3965</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, 1);</div><div class="line"><a name="l03966"></a><span class="lineno"> 3966</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>);</div><div class="line"><a name="l03967"></a><span class="lineno"> 3967</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(&sr, csr, NULL);</div><div class="line"><a name="l03968"></a><span class="lineno"> 3968</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, pubkey, 33));</div><div class="line"><a name="l03969"></a><span class="lineno"> 3969</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03970"></a><span class="lineno"> 3970</span>  <a class="code" href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a>(&ss, &ss);</div><div class="line"><a name="l03971"></a><span class="lineno"> 3971</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 1);</div><div class="line"><a name="l03972"></a><span class="lineno"> 3972</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&ss, 3);</div><div class="line"><a name="l03973"></a><span class="lineno"> 3973</span>  <a class="code" href="scalar_8h.html#a58e84d0cabe81139df5c71759f833855">secp256k1_scalar_inverse_var</a>(&ss, &ss);</div><div class="line"><a name="l03974"></a><span class="lineno"> 3974</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sr, &ss, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>) == 0);</div><div class="line"><a name="l03975"></a><span class="lineno"> 3975</span>  }</div><div class="line"><a name="l03976"></a><span class="lineno"> 3976</span> </div><div class="line"><a name="l03977"></a><span class="lineno"> 3977</span>  <span class="comment">/* Signature where s would be zero. */</span></div><div class="line"><a name="l03978"></a><span class="lineno"> 3978</span>  {</div><div class="line"><a name="l03979"></a><span class="lineno"> 3979</span>  <a class="code" href="structsecp256k1__pubkey.html">secp256k1_pubkey</a> pubkey;</div><div class="line"><a name="l03980"></a><span class="lineno"> 3980</span>  <span class="keywordtype">size_t</span> siglen;</div><div class="line"><a name="l03981"></a><span class="lineno"> 3981</span>  int32_t ecount;</div><div class="line"><a name="l03982"></a><span class="lineno"> 3982</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> signature[72];</div><div class="line"><a name="l03983"></a><span class="lineno"> 3983</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce[32] = {</div><div class="line"><a name="l03984"></a><span class="lineno"> 3984</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03985"></a><span class="lineno"> 3985</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03986"></a><span class="lineno"> 3986</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03987"></a><span class="lineno"> 3987</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l03988"></a><span class="lineno"> 3988</span>  };</div><div class="line"><a name="l03989"></a><span class="lineno"> 3989</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce2[32] = {</div><div class="line"><a name="l03990"></a><span class="lineno"> 3990</span>  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,</div><div class="line"><a name="l03991"></a><span class="lineno"> 3991</span>  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,</div><div class="line"><a name="l03992"></a><span class="lineno"> 3992</span>  0xBA,0xAE,0xDC,0xE6,0xAF,0x48,0xA0,0x3B,</div><div class="line"><a name="l03993"></a><span class="lineno"> 3993</span>  0xBF,0xD2,0x5E,0x8C,0xD0,0x36,0x41,0x40</div><div class="line"><a name="l03994"></a><span class="lineno"> 3994</span>  };</div><div class="line"><a name="l03995"></a><span class="lineno"> 3995</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>[32] = {</div><div class="line"><a name="l03996"></a><span class="lineno"> 3996</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03997"></a><span class="lineno"> 3997</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03998"></a><span class="lineno"> 3998</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,</div><div class="line"><a name="l03999"></a><span class="lineno"> 3999</span>  0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,</div><div class="line"><a name="l04000"></a><span class="lineno"> 4000</span>  };</div><div class="line"><a name="l04001"></a><span class="lineno"> 4001</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>[32] = {</div><div class="line"><a name="l04002"></a><span class="lineno"> 4002</span>  0x86, 0x41, 0x99, 0x81, 0x06, 0x23, 0x44, 0x53,</div><div class="line"><a name="l04003"></a><span class="lineno"> 4003</span>  0xaa, 0x5f, 0x9d, 0x6a, 0x31, 0x78, 0xf4, 0xf7,</div><div class="line"><a name="l04004"></a><span class="lineno"> 4004</span>  0xb8, 0x12, 0xe0, 0x0b, 0x81, 0x7a, 0x77, 0x62,</div><div class="line"><a name="l04005"></a><span class="lineno"> 4005</span>  0x65, 0xdf, 0xdd, 0x31, 0xb9, 0x3e, 0x29, 0xa9,</div><div class="line"><a name="l04006"></a><span class="lineno"> 4006</span>  };</div><div class="line"><a name="l04007"></a><span class="lineno"> 4007</span>  ecount = 0;</div><div class="line"><a name="l04008"></a><span class="lineno"> 4008</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, <a class="code" href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a>, &ecount);</div><div class="line"><a name="l04009"></a><span class="lineno"> 4009</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a>, nonce) == 0);</div><div class="line"><a name="l04010"></a><span class="lineno"> 4010</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a>, nonce2) == 0);</div><div class="line"><a name="l04011"></a><span class="lineno"> 4011</span>  <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>[31] = 0xaa;</div><div class="line"><a name="l04012"></a><span class="lineno"> 4012</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a>, nonce) == 1);</div><div class="line"><a name="l04013"></a><span class="lineno"> 4013</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 0);</div><div class="line"><a name="l04014"></a><span class="lineno"> 4014</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a>, nonce2) == 0);</div><div class="line"><a name="l04015"></a><span class="lineno"> 4015</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l04016"></a><span class="lineno"> 4016</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, NULL, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a>, nonce2) == 0);</div><div class="line"><a name="l04017"></a><span class="lineno"> 4017</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l04018"></a><span class="lineno"> 4018</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, NULL, <a class="code" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a>, nonce2) == 0);</div><div class="line"><a name="l04019"></a><span class="lineno"> 4019</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l04020"></a><span class="lineno"> 4020</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a>, nonce2) == 1);</div><div class="line"><a name="l04021"></a><span class="lineno"> 4021</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>) == 1);</div><div class="line"><a name="l04022"></a><span class="lineno"> 4022</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &pubkey) == 0);</div><div class="line"><a name="l04023"></a><span class="lineno"> 4023</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 4);</div><div class="line"><a name="l04024"></a><span class="lineno"> 4024</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, NULL, &pubkey) == 0);</div><div class="line"><a name="l04025"></a><span class="lineno"> 4025</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 5);</div><div class="line"><a name="l04026"></a><span class="lineno"> 4026</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, NULL) == 0);</div><div class="line"><a name="l04027"></a><span class="lineno"> 4027</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 6);</div><div class="line"><a name="l04028"></a><span class="lineno"> 4028</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &pubkey) == 1);</div><div class="line"><a name="l04029"></a><span class="lineno"> 4029</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 6);</div><div class="line"><a name="l04030"></a><span class="lineno"> 4030</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &pubkey, NULL) == 0);</div><div class="line"><a name="l04031"></a><span class="lineno"> 4031</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 7);</div><div class="line"><a name="l04032"></a><span class="lineno"> 4032</span>  <span class="comment">/* That pubkeyload fails via an ARGCHECK is a little odd but makes sense because pubkeys are an opaque data type. */</span></div><div class="line"><a name="l04033"></a><span class="lineno"> 4033</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &pubkey) == 0);</div><div class="line"><a name="l04034"></a><span class="lineno"> 4034</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 8);</div><div class="line"><a name="l04035"></a><span class="lineno"> 4035</span>  siglen = 72;</div><div class="line"><a name="l04036"></a><span class="lineno"> 4036</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, &siglen, &sig) == 0);</div><div class="line"><a name="l04037"></a><span class="lineno"> 4037</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 9);</div><div class="line"><a name="l04038"></a><span class="lineno"> 4038</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, signature, NULL, &sig) == 0);</div><div class="line"><a name="l04039"></a><span class="lineno"> 4039</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 10);</div><div class="line"><a name="l04040"></a><span class="lineno"> 4040</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, signature, &siglen, NULL) == 0);</div><div class="line"><a name="l04041"></a><span class="lineno"> 4041</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 11);</div><div class="line"><a name="l04042"></a><span class="lineno"> 4042</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, signature, &siglen, &sig) == 1);</div><div class="line"><a name="l04043"></a><span class="lineno"> 4043</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 11);</div><div class="line"><a name="l04044"></a><span class="lineno"> 4044</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a57d390dd5baa54855b0cb20628034b90">secp256k1_ecdsa_signature_parse_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, signature, siglen) == 0);</div><div class="line"><a name="l04045"></a><span class="lineno"> 4045</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 12);</div><div class="line"><a name="l04046"></a><span class="lineno"> 4046</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a57d390dd5baa54855b0cb20628034b90">secp256k1_ecdsa_signature_parse_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, NULL, siglen) == 0);</div><div class="line"><a name="l04047"></a><span class="lineno"> 4047</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 13);</div><div class="line"><a name="l04048"></a><span class="lineno"> 4048</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a57d390dd5baa54855b0cb20628034b90">secp256k1_ecdsa_signature_parse_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, signature, siglen) == 1);</div><div class="line"><a name="l04049"></a><span class="lineno"> 4049</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 13);</div><div class="line"><a name="l04050"></a><span class="lineno"> 4050</span>  siglen = 10;</div><div class="line"><a name="l04051"></a><span class="lineno"> 4051</span>  <span class="comment">/* Too little room for a signature does not fail via ARGCHECK. */</span></div><div class="line"><a name="l04052"></a><span class="lineno"> 4052</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, signature, &siglen, &sig) == 0);</div><div class="line"><a name="l04053"></a><span class="lineno"> 4053</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 13);</div><div class="line"><a name="l04054"></a><span class="lineno"> 4054</span>  ecount = 0;</div><div class="line"><a name="l04055"></a><span class="lineno"> 4055</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a93ec36a19229f08acc5ff1ca613ab3a1">secp256k1_ecdsa_signature_normalize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, NULL) == 0);</div><div class="line"><a name="l04056"></a><span class="lineno"> 4056</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 1);</div><div class="line"><a name="l04057"></a><span class="lineno"> 4057</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#af8571ca8dcfb7f892519b337504dc700">secp256k1_ecdsa_signature_serialize_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, &sig) == 0);</div><div class="line"><a name="l04058"></a><span class="lineno"> 4058</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 2);</div><div class="line"><a name="l04059"></a><span class="lineno"> 4059</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#af8571ca8dcfb7f892519b337504dc700">secp256k1_ecdsa_signature_serialize_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, signature, NULL) == 0);</div><div class="line"><a name="l04060"></a><span class="lineno"> 4060</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l04061"></a><span class="lineno"> 4061</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#af8571ca8dcfb7f892519b337504dc700">secp256k1_ecdsa_signature_serialize_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, signature, &sig) == 1);</div><div class="line"><a name="l04062"></a><span class="lineno"> 4062</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 3);</div><div class="line"><a name="l04063"></a><span class="lineno"> 4063</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2aff2802eca3d15ec54298e879579897">secp256k1_ecdsa_signature_parse_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, signature) == 0);</div><div class="line"><a name="l04064"></a><span class="lineno"> 4064</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 4);</div><div class="line"><a name="l04065"></a><span class="lineno"> 4065</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2aff2802eca3d15ec54298e879579897">secp256k1_ecdsa_signature_parse_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, NULL) == 0);</div><div class="line"><a name="l04066"></a><span class="lineno"> 4066</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 5);</div><div class="line"><a name="l04067"></a><span class="lineno"> 4067</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2aff2802eca3d15ec54298e879579897">secp256k1_ecdsa_signature_parse_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, signature) == 1);</div><div class="line"><a name="l04068"></a><span class="lineno"> 4068</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 5);</div><div class="line"><a name="l04069"></a><span class="lineno"> 4069</span>  memset(signature, 255, 64);</div><div class="line"><a name="l04070"></a><span class="lineno"> 4070</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a2aff2802eca3d15ec54298e879579897">secp256k1_ecdsa_signature_parse_compact</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, signature) == 0);</div><div class="line"><a name="l04071"></a><span class="lineno"> 4071</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ecount == 5);</div><div class="line"><a name="l04072"></a><span class="lineno"> 4072</span>  <a class="code" href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, NULL, NULL);</div><div class="line"><a name="l04073"></a><span class="lineno"> 4073</span>  }</div><div class="line"><a name="l04074"></a><span class="lineno"> 4074</span> </div><div class="line"><a name="l04075"></a><span class="lineno"> 4075</span>  <span class="comment">/* Nonce function corner cases. */</span></div><div class="line"><a name="l04076"></a><span class="lineno"> 4076</span>  <span class="keywordflow">for</span> (t = 0; t < 2; t++) {</div><div class="line"><a name="l04077"></a><span class="lineno"> 4077</span>  <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> zero[32] = {0x00};</div><div class="line"><a name="l04078"></a><span class="lineno"> 4078</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l04079"></a><span class="lineno"> 4079</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>[32];</div><div class="line"><a name="l04080"></a><span class="lineno"> 4080</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>[32];</div><div class="line"><a name="l04081"></a><span class="lineno"> 4081</span>  <a class="code" href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a> sig2;</div><div class="line"><a name="l04082"></a><span class="lineno"> 4082</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sr[512], ss;</div><div class="line"><a name="l04083"></a><span class="lineno"> 4083</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *extra;</div><div class="line"><a name="l04084"></a><span class="lineno"> 4084</span>  extra = t == 0 ? NULL : zero;</div><div class="line"><a name="l04085"></a><span class="lineno"> 4085</span>  memset(<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, 0, 32);</div><div class="line"><a name="l04086"></a><span class="lineno"> 4086</span>  <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>[31] = 1;</div><div class="line"><a name="l04087"></a><span class="lineno"> 4087</span>  <span class="comment">/* High key results in signature failure. */</span></div><div class="line"><a name="l04088"></a><span class="lineno"> 4088</span>  memset(<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, 0xFF, 32);</div><div class="line"><a name="l04089"></a><span class="lineno"> 4089</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, NULL, extra) == 0);</div><div class="line"><a name="l04090"></a><span class="lineno"> 4090</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(&sig));</div><div class="line"><a name="l04091"></a><span class="lineno"> 4091</span>  <span class="comment">/* Zero key results in signature failure. */</span></div><div class="line"><a name="l04092"></a><span class="lineno"> 4092</span>  memset(<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, 0, 32);</div><div class="line"><a name="l04093"></a><span class="lineno"> 4093</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, NULL, extra) == 0);</div><div class="line"><a name="l04094"></a><span class="lineno"> 4094</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(&sig));</div><div class="line"><a name="l04095"></a><span class="lineno"> 4095</span>  <span class="comment">/* Nonce function failure results in signature failure. */</span></div><div class="line"><a name="l04096"></a><span class="lineno"> 4096</span>  <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>[31] = 1;</div><div class="line"><a name="l04097"></a><span class="lineno"> 4097</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="tests_8c.html#a2631070201e67210b08603a358e0a622">nonce_function_test_fail</a>, extra) == 0);</div><div class="line"><a name="l04098"></a><span class="lineno"> 4098</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(&sig));</div><div class="line"><a name="l04099"></a><span class="lineno"> 4099</span>  <span class="comment">/* The retry loop successfully makes its way to the first good value. */</span></div><div class="line"><a name="l04100"></a><span class="lineno"> 4100</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="tests_8c.html#a2643b34ae08799d0c3442f610ffe9c53">nonce_function_test_retry</a>, extra) == 1);</div><div class="line"><a name="l04101"></a><span class="lineno"> 4101</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(&sig));</div><div class="line"><a name="l04102"></a><span class="lineno"> 4102</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig2, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="secp256k1_8c.html#aaeed37b3a1d669fc6031755d37a5b2c4">nonce_function_rfc6979</a>, extra) == 1);</div><div class="line"><a name="l04103"></a><span class="lineno"> 4103</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(&sig2));</div><div class="line"><a name="l04104"></a><span class="lineno"> 4104</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&sig, &sig2, <span class="keyword">sizeof</span>(sig)) == 0);</div><div class="line"><a name="l04105"></a><span class="lineno"> 4105</span>  <span class="comment">/* The default nonce function is deterministic. */</span></div><div class="line"><a name="l04106"></a><span class="lineno"> 4106</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig2, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, NULL, extra) == 1);</div><div class="line"><a name="l04107"></a><span class="lineno"> 4107</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(&sig2));</div><div class="line"><a name="l04108"></a><span class="lineno"> 4108</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(&sig, &sig2, <span class="keyword">sizeof</span>(sig)) == 0);</div><div class="line"><a name="l04109"></a><span class="lineno"> 4109</span>  <span class="comment">/* The default nonce function changes output with different messages. */</span></div><div class="line"><a name="l04110"></a><span class="lineno"> 4110</span>  <span class="keywordflow">for</span>(i = 0; i < 256; i++) {</div><div class="line"><a name="l04111"></a><span class="lineno"> 4111</span>  <span class="keywordtype">int</span> j;</div><div class="line"><a name="l04112"></a><span class="lineno"> 4112</span>  <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>[0] = i;</div><div class="line"><a name="l04113"></a><span class="lineno"> 4113</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig2, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, NULL, extra) == 1);</div><div class="line"><a name="l04114"></a><span class="lineno"> 4114</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(&sig2));</div><div class="line"><a name="l04115"></a><span class="lineno"> 4115</span>  <a class="code" href="secp256k1_8c.html#af2027241c9dfc85fa5b6a3bb5fe41d18">secp256k1_ecdsa_signature_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sr[i], &ss, &sig2);</div><div class="line"><a name="l04116"></a><span class="lineno"> 4116</span>  <span class="keywordflow">for</span> (j = 0; j < i; j++) {</div><div class="line"><a name="l04117"></a><span class="lineno"> 4117</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&sr[i], &sr[j]));</div><div class="line"><a name="l04118"></a><span class="lineno"> 4118</span>  }</div><div class="line"><a name="l04119"></a><span class="lineno"> 4119</span>  }</div><div class="line"><a name="l04120"></a><span class="lineno"> 4120</span>  <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>[0] = 0;</div><div class="line"><a name="l04121"></a><span class="lineno"> 4121</span>  <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>[31] = 2;</div><div class="line"><a name="l04122"></a><span class="lineno"> 4122</span>  <span class="comment">/* The default nonce function changes output with different keys. */</span></div><div class="line"><a name="l04123"></a><span class="lineno"> 4123</span>  <span class="keywordflow">for</span>(i = 256; i < 512; i++) {</div><div class="line"><a name="l04124"></a><span class="lineno"> 4124</span>  <span class="keywordtype">int</span> j;</div><div class="line"><a name="l04125"></a><span class="lineno"> 4125</span>  <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>[0] = i - 256;</div><div class="line"><a name="l04126"></a><span class="lineno"> 4126</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sig2, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, NULL, extra) == 1);</div><div class="line"><a name="l04127"></a><span class="lineno"> 4127</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a>(&sig2));</div><div class="line"><a name="l04128"></a><span class="lineno"> 4128</span>  <a class="code" href="secp256k1_8c.html#af2027241c9dfc85fa5b6a3bb5fe41d18">secp256k1_ecdsa_signature_load</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, &sr[i], &ss, &sig2);</div><div class="line"><a name="l04129"></a><span class="lineno"> 4129</span>  <span class="keywordflow">for</span> (j = 0; j < i; j++) {</div><div class="line"><a name="l04130"></a><span class="lineno"> 4130</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a>(&sr[i], &sr[j]));</div><div class="line"><a name="l04131"></a><span class="lineno"> 4131</span>  }</div><div class="line"><a name="l04132"></a><span class="lineno"> 4132</span>  }</div><div class="line"><a name="l04133"></a><span class="lineno"> 4133</span>  <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>[0] = 0;</div><div class="line"><a name="l04134"></a><span class="lineno"> 4134</span>  }</div><div class="line"><a name="l04135"></a><span class="lineno"> 4135</span> </div><div class="line"><a name="l04136"></a><span class="lineno"> 4136</span>  {</div><div class="line"><a name="l04137"></a><span class="lineno"> 4137</span>  <span class="comment">/* Check that optional nonce arguments do not have equivalent effect. */</span></div><div class="line"><a name="l04138"></a><span class="lineno"> 4138</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> zeros[32] = {0};</div><div class="line"><a name="l04139"></a><span class="lineno"> 4139</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce[32];</div><div class="line"><a name="l04140"></a><span class="lineno"> 4140</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce2[32];</div><div class="line"><a name="l04141"></a><span class="lineno"> 4141</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce3[32];</div><div class="line"><a name="l04142"></a><span class="lineno"> 4142</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> nonce4[32];</div><div class="line"><a name="l04143"></a><span class="lineno"> 4143</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(nonce,32);</div><div class="line"><a name="l04144"></a><span class="lineno"> 4144</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(nonce2,32);</div><div class="line"><a name="l04145"></a><span class="lineno"> 4145</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(nonce3,32);</div><div class="line"><a name="l04146"></a><span class="lineno"> 4146</span>  <a class="code" href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a>(nonce4,32);</div><div class="line"><a name="l04147"></a><span class="lineno"> 4147</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#aaeed37b3a1d669fc6031755d37a5b2c4">nonce_function_rfc6979</a>(nonce, zeros, zeros, NULL, NULL, 0) == 1);</div><div class="line"><a name="l04148"></a><span class="lineno"> 4148</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(nonce,32);</div><div class="line"><a name="l04149"></a><span class="lineno"> 4149</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#aaeed37b3a1d669fc6031755d37a5b2c4">nonce_function_rfc6979</a>(nonce2, zeros, zeros, zeros, NULL, 0) == 1);</div><div class="line"><a name="l04150"></a><span class="lineno"> 4150</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(nonce2,32);</div><div class="line"><a name="l04151"></a><span class="lineno"> 4151</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#aaeed37b3a1d669fc6031755d37a5b2c4">nonce_function_rfc6979</a>(nonce3, zeros, zeros, NULL, (<span class="keywordtype">void</span> *)zeros, 0) == 1);</div><div class="line"><a name="l04152"></a><span class="lineno"> 4152</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(nonce3,32);</div><div class="line"><a name="l04153"></a><span class="lineno"> 4153</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8c.html#aaeed37b3a1d669fc6031755d37a5b2c4">nonce_function_rfc6979</a>(nonce4, zeros, zeros, zeros, (<span class="keywordtype">void</span> *)zeros, 0) == 1);</div><div class="line"><a name="l04154"></a><span class="lineno"> 4154</span>  <a class="code" href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a>(nonce4,32);</div><div class="line"><a name="l04155"></a><span class="lineno"> 4155</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(nonce, nonce2, 32) != 0);</div><div class="line"><a name="l04156"></a><span class="lineno"> 4156</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(nonce, nonce3, 32) != 0);</div><div class="line"><a name="l04157"></a><span class="lineno"> 4157</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(nonce, nonce4, 32) != 0);</div><div class="line"><a name="l04158"></a><span class="lineno"> 4158</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(nonce2, nonce3, 32) != 0);</div><div class="line"><a name="l04159"></a><span class="lineno"> 4159</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(nonce2, nonce4, 32) != 0);</div><div class="line"><a name="l04160"></a><span class="lineno"> 4160</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(memcmp(nonce3, nonce4, 32) != 0);</div><div class="line"><a name="l04161"></a><span class="lineno"> 4161</span>  }</div><div class="line"><a name="l04162"></a><span class="lineno"> 4162</span> </div><div class="line"><a name="l04163"></a><span class="lineno"> 4163</span> </div><div class="line"><a name="l04164"></a><span class="lineno"> 4164</span>  <span class="comment">/* Privkey export where pubkey is the point at infinity. */</span></div><div class="line"><a name="l04165"></a><span class="lineno"> 4165</span>  {</div><div class="line"><a name="l04166"></a><span class="lineno"> 4166</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> privkey[300];</div><div class="line"><a name="l04167"></a><span class="lineno"> 4167</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> seckey[32] = {</div><div class="line"><a name="l04168"></a><span class="lineno"> 4168</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,</div><div class="line"><a name="l04169"></a><span class="lineno"> 4169</span>  0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfe,</div><div class="line"><a name="l04170"></a><span class="lineno"> 4170</span>  0xba, 0xae, 0xdc, 0xe6, 0xaf, 0x48, 0xa0, 0x3b,</div><div class="line"><a name="l04171"></a><span class="lineno"> 4171</span>  0xbf, 0xd2, 0x5e, 0x8c, 0xd0, 0x36, 0x41, 0x41,</div><div class="line"><a name="l04172"></a><span class="lineno"> 4172</span>  };</div><div class="line"><a name="l04173"></a><span class="lineno"> 4173</span>  <span class="keywordtype">size_t</span> outlen = 300;</div><div class="line"><a name="l04174"></a><span class="lineno"> 4174</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="key_8cpp.html#a8cafc8a5eaf9a41f141e31d7c42ed7b9">ec_privkey_export_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, privkey, &outlen, seckey, 0));</div><div class="line"><a name="l04175"></a><span class="lineno"> 4175</span>  outlen = 300;</div><div class="line"><a name="l04176"></a><span class="lineno"> 4176</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="key_8cpp.html#a8cafc8a5eaf9a41f141e31d7c42ed7b9">ec_privkey_export_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, privkey, &outlen, seckey, 1));</div><div class="line"><a name="l04177"></a><span class="lineno"> 4177</span>  }</div><div class="line"><a name="l04178"></a><span class="lineno"> 4178</span> }</div><div class="line"><a name="l04179"></a><span class="lineno"> 4179</span> </div><div class="line"><a name="l04180"></a><span class="lineno"><a class="line" href="tests_8c.html#ad6c8109b62ea1d0ed1b382678a2a08b1"> 4180</a></span> <span class="keywordtype">void</span> <a class="code" href="tests_8c.html#ad6c8109b62ea1d0ed1b382678a2a08b1">run_ecdsa_edge_cases</a>(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l04181"></a><span class="lineno"> 4181</span>  <a class="code" href="tests_8c.html#abbcb27d1eb13654db9b2e281ffce021e">test_ecdsa_edge_cases</a>();</div><div class="line"><a name="l04182"></a><span class="lineno"> 4182</span> }</div><div class="line"><a name="l04183"></a><span class="lineno"> 4183</span> </div><div class="line"><a name="l04184"></a><span class="lineno"> 4184</span> <span class="preprocessor">#ifdef ENABLE_OPENSSL_TESTS</span></div><div class="line"><a name="l04185"></a><span class="lineno"> 4185</span> EC_KEY *get_openssl_key(<span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *key32) {</div><div class="line"><a name="l04186"></a><span class="lineno"> 4186</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> privkey[300];</div><div class="line"><a name="l04187"></a><span class="lineno"> 4187</span>  <span class="keywordtype">size_t</span> privkeylen;</div><div class="line"><a name="l04188"></a><span class="lineno"> 4188</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span>* pbegin = privkey;</div><div class="line"><a name="l04189"></a><span class="lineno"> 4189</span>  <span class="keywordtype">int</span> compr = <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1);</div><div class="line"><a name="l04190"></a><span class="lineno"> 4190</span>  EC_KEY *ec_key = EC_KEY_new_by_curve_name(<a class="code" href="namespacetest__framework_1_1key.html#af9f0b591f24f44290936f436182368ee">NID_secp256k1</a>);</div><div class="line"><a name="l04191"></a><span class="lineno"> 4191</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="key_8cpp.html#a8cafc8a5eaf9a41f141e31d7c42ed7b9">ec_privkey_export_der</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, privkey, &privkeylen, key32, compr));</div><div class="line"><a name="l04192"></a><span class="lineno"> 4192</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(d2i_ECPrivateKey(&ec_key, &pbegin, privkeylen));</div><div class="line"><a name="l04193"></a><span class="lineno"> 4193</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(EC_KEY_check_key(ec_key));</div><div class="line"><a name="l04194"></a><span class="lineno"> 4194</span>  <span class="keywordflow">return</span> ec_key;</div><div class="line"><a name="l04195"></a><span class="lineno"> 4195</span> }</div><div class="line"><a name="l04196"></a><span class="lineno"> 4196</span> </div><div class="line"><a name="l04197"></a><span class="lineno"> 4197</span> <span class="keywordtype">void</span> test_ecdsa_openssl(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l04198"></a><span class="lineno"> 4198</span>  <a class="code" href="structsecp256k1__gej.html">secp256k1_gej</a> qj;</div><div class="line"><a name="l04199"></a><span class="lineno"> 4199</span>  <a class="code" href="structsecp256k1__ge.html">secp256k1_ge</a> q;</div><div class="line"><a name="l04200"></a><span class="lineno"> 4200</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> sigr, sigs;</div><div class="line"><a name="l04201"></a><span class="lineno"> 4201</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> one;</div><div class="line"><a name="l04202"></a><span class="lineno"> 4202</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> msg2;</div><div class="line"><a name="l04203"></a><span class="lineno"> 4203</span>  <a class="code" href="structsecp256k1__scalar.html">secp256k1_scalar</a> <a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, <a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>;</div><div class="line"><a name="l04204"></a><span class="lineno"> 4204</span>  EC_KEY *ec_key;</div><div class="line"><a name="l04205"></a><span class="lineno"> 4205</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> sigsize = 80;</div><div class="line"><a name="l04206"></a><span class="lineno"> 4206</span>  <span class="keywordtype">size_t</span> secp_sigsize = 80;</div><div class="line"><a name="l04207"></a><span class="lineno"> 4207</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> message[32];</div><div class="line"><a name="l04208"></a><span class="lineno"> 4208</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> signature[80];</div><div class="line"><a name="l04209"></a><span class="lineno"> 4209</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> key32[32];</div><div class="line"><a name="l04210"></a><span class="lineno"> 4210</span>  <a class="code" href="testrand_8h.html#ac7dd7cc19d5d0ae9b50791656b57af7b">secp256k1_rand256_test</a>(message);</div><div class="line"><a name="l04211"></a><span class="lineno"> 4211</span>  <a class="code" href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a>(&<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, message, NULL);</div><div class="line"><a name="l04212"></a><span class="lineno"> 4212</span>  <a class="code" href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a>(&<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l04213"></a><span class="lineno"> 4213</span>  <a class="code" href="scalar_8h.html#a4fa08f8af5a23f505b44c9ef1bec1831">secp256k1_scalar_get_b32</a>(key32, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l04214"></a><span class="lineno"> 4214</span>  <a class="code" href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">ecmult_gen_ctx</a>, &qj, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>);</div><div class="line"><a name="l04215"></a><span class="lineno"> 4215</span>  <a class="code" href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a>(&q, &qj);</div><div class="line"><a name="l04216"></a><span class="lineno"> 4216</span>  ec_key = get_openssl_key(key32);</div><div class="line"><a name="l04217"></a><span class="lineno"> 4217</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ec_key != NULL);</div><div class="line"><a name="l04218"></a><span class="lineno"> 4218</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ECDSA_sign(0, message, <span class="keyword">sizeof</span>(message), signature, &sigsize, ec_key));</div><div class="line"><a name="l04219"></a><span class="lineno"> 4219</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#aae25c4b1cdf2ccaddc49b42d43cc82a1">secp256k1_ecdsa_sig_parse</a>(&sigr, &sigs, signature, sigsize));</div><div class="line"><a name="l04220"></a><span class="lineno"> 4220</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sigr, &sigs, &q, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>));</div><div class="line"><a name="l04221"></a><span class="lineno"> 4221</span>  <a class="code" href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a>(&one, 1);</div><div class="line"><a name="l04222"></a><span class="lineno"> 4222</span>  <a class="code" href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a>(&msg2, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, &one);</div><div class="line"><a name="l04223"></a><span class="lineno"> 4223</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(!<a class="code" href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a>(&<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>-><a class="code" href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">ecmult_ctx</a>, &sigr, &sigs, &q, &msg2));</div><div class="line"><a name="l04224"></a><span class="lineno"> 4224</span> </div><div class="line"><a name="l04225"></a><span class="lineno"> 4225</span>  <a class="code" href="tests_8c.html#a5c5253164e8444359849fd66e27bbe5a">random_sign</a>(&sigr, &sigs, &<a class="code" href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">key</a>, &<a class="code" href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">msg</a>, NULL);</div><div class="line"><a name="l04226"></a><span class="lineno"> 4226</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="ecdsa_8h.html#a313b6733f5b079162fa15332d4b2ef36">secp256k1_ecdsa_sig_serialize</a>(signature, &secp_sigsize, &sigr, &sigs));</div><div class="line"><a name="l04227"></a><span class="lineno"> 4227</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(ECDSA_verify(0, message, <span class="keyword">sizeof</span>(message), signature, secp_sigsize, ec_key) == 1);</div><div class="line"><a name="l04228"></a><span class="lineno"> 4228</span> </div><div class="line"><a name="l04229"></a><span class="lineno"> 4229</span>  EC_KEY_free(ec_key);</div><div class="line"><a name="l04230"></a><span class="lineno"> 4230</span> }</div><div class="line"><a name="l04231"></a><span class="lineno"> 4231</span> </div><div class="line"><a name="l04232"></a><span class="lineno"> 4232</span> <span class="keywordtype">void</span> run_ecdsa_openssl(<span class="keywordtype">void</span>) {</div><div class="line"><a name="l04233"></a><span class="lineno"> 4233</span>  <span class="keywordtype">int</span> i;</div><div class="line"><a name="l04234"></a><span class="lineno"> 4234</span>  <span class="keywordflow">for</span> (i = 0; i < 10*<a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>; i++) {</div><div class="line"><a name="l04235"></a><span class="lineno"> 4235</span>  test_ecdsa_openssl();</div><div class="line"><a name="l04236"></a><span class="lineno"> 4236</span>  }</div><div class="line"><a name="l04237"></a><span class="lineno"> 4237</span> }</div><div class="line"><a name="l04238"></a><span class="lineno"> 4238</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04239"></a><span class="lineno"> 4239</span> </div><div class="line"><a name="l04240"></a><span class="lineno"> 4240</span> <span class="preprocessor">#ifdef ENABLE_MODULE_ECDH</span></div><div class="line"><a name="l04241"></a><span class="lineno"> 4241</span> <span class="preprocessor"># include "<a class="code" href="ecdh_2tests__impl_8h.html">modules/ecdh/tests_impl.h</a>"</span></div><div class="line"><a name="l04242"></a><span class="lineno"> 4242</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04243"></a><span class="lineno"> 4243</span> </div><div class="line"><a name="l04244"></a><span class="lineno"> 4244</span> <span class="preprocessor">#ifdef ENABLE_MODULE_SCHNORR</span></div><div class="line"><a name="l04245"></a><span class="lineno"> 4245</span> <span class="preprocessor"># include "<a class="code" href="schnorr_2tests__impl_8h.html">modules/schnorr/tests_impl.h</a>"</span></div><div class="line"><a name="l04246"></a><span class="lineno"> 4246</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04247"></a><span class="lineno"> 4247</span> </div><div class="line"><a name="l04248"></a><span class="lineno"> 4248</span> <span class="preprocessor">#ifdef ENABLE_MODULE_RECOVERY</span></div><div class="line"><a name="l04249"></a><span class="lineno"> 4249</span> <span class="preprocessor"># include "<a class="code" href="recovery_2tests__impl_8h.html">modules/recovery/tests_impl.h</a>"</span></div><div class="line"><a name="l04250"></a><span class="lineno"> 4250</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04251"></a><span class="lineno"> 4251</span> </div><div class="line"><a name="l04252"></a><span class="lineno"><a class="line" href="tests_8c.html#a3c04138a5bfe5d72780bb7e82a18e627"> 4252</a></span> <span class="keywordtype">int</span> <a class="code" href="tests_8c.html#a3c04138a5bfe5d72780bb7e82a18e627">main</a>(<span class="keywordtype">int</span> argc, <span class="keywordtype">char</span> **argv) {</div><div class="line"><a name="l04253"></a><span class="lineno"> 4253</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> seed16[16] = {0};</div><div class="line"><a name="l04254"></a><span class="lineno"> 4254</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> run32[32] = {0};</div><div class="line"><a name="l04255"></a><span class="lineno"> 4255</span>  <span class="comment">/* find iteration count */</span></div><div class="line"><a name="l04256"></a><span class="lineno"> 4256</span>  <span class="keywordflow">if</span> (argc > 1) {</div><div class="line"><a name="l04257"></a><span class="lineno"> 4257</span>  <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a> = strtol(argv[1], NULL, 0);</div><div class="line"><a name="l04258"></a><span class="lineno"> 4258</span>  }</div><div class="line"><a name="l04259"></a><span class="lineno"> 4259</span> </div><div class="line"><a name="l04260"></a><span class="lineno"> 4260</span>  <span class="comment">/* find random seed */</span></div><div class="line"><a name="l04261"></a><span class="lineno"> 4261</span>  <span class="keywordflow">if</span> (argc > 2) {</div><div class="line"><a name="l04262"></a><span class="lineno"> 4262</span>  <span class="keywordtype">int</span> pos = 0;</div><div class="line"><a name="l04263"></a><span class="lineno"> 4263</span>  <span class="keyword">const</span> <span class="keywordtype">char</span>* ch = argv[2];</div><div class="line"><a name="l04264"></a><span class="lineno"> 4264</span>  <span class="keywordflow">while</span> (pos < 16 && ch[0] != 0 && ch[1] != 0) {</div><div class="line"><a name="l04265"></a><span class="lineno"> 4265</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">short</span> sh;</div><div class="line"><a name="l04266"></a><span class="lineno"> 4266</span>  <span class="keywordflow">if</span> (sscanf(ch, <span class="stringliteral">"%2hx"</span>, &sh)) {</div><div class="line"><a name="l04267"></a><span class="lineno"> 4267</span>  seed16[pos] = sh;</div><div class="line"><a name="l04268"></a><span class="lineno"> 4268</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l04269"></a><span class="lineno"> 4269</span>  <span class="keywordflow">break</span>;</div><div class="line"><a name="l04270"></a><span class="lineno"> 4270</span>  }</div><div class="line"><a name="l04271"></a><span class="lineno"> 4271</span>  ch += 2;</div><div class="line"><a name="l04272"></a><span class="lineno"> 4272</span>  pos++;</div><div class="line"><a name="l04273"></a><span class="lineno"> 4273</span>  }</div><div class="line"><a name="l04274"></a><span class="lineno"> 4274</span>  } <span class="keywordflow">else</span> {</div><div class="line"><a name="l04275"></a><span class="lineno"> 4275</span>  FILE *frand = fopen(<span class="stringliteral">"/dev/urandom"</span>, <span class="stringliteral">"r"</span>);</div><div class="line"><a name="l04276"></a><span class="lineno"> 4276</span>  <span class="keywordflow">if</span> ((frand == NULL) || !fread(&seed16, <span class="keyword">sizeof</span>(seed16), 1, frand)) {</div><div class="line"><a name="l04277"></a><span class="lineno"> 4277</span>  uint64_t t = time(NULL) * (uint64_t)1337;</div><div class="line"><a name="l04278"></a><span class="lineno"> 4278</span>  seed16[0] ^= t;</div><div class="line"><a name="l04279"></a><span class="lineno"> 4279</span>  seed16[1] ^= t >> 8;</div><div class="line"><a name="l04280"></a><span class="lineno"> 4280</span>  seed16[2] ^= t >> 16;</div><div class="line"><a name="l04281"></a><span class="lineno"> 4281</span>  seed16[3] ^= t >> 24;</div><div class="line"><a name="l04282"></a><span class="lineno"> 4282</span>  seed16[4] ^= t >> 32;</div><div class="line"><a name="l04283"></a><span class="lineno"> 4283</span>  seed16[5] ^= t >> 40;</div><div class="line"><a name="l04284"></a><span class="lineno"> 4284</span>  seed16[6] ^= t >> 48;</div><div class="line"><a name="l04285"></a><span class="lineno"> 4285</span>  seed16[7] ^= t >> 56;</div><div class="line"><a name="l04286"></a><span class="lineno"> 4286</span>  }</div><div class="line"><a name="l04287"></a><span class="lineno"> 4287</span>  fclose(frand);</div><div class="line"><a name="l04288"></a><span class="lineno"> 4288</span>  }</div><div class="line"><a name="l04289"></a><span class="lineno"> 4289</span>  <a class="code" href="testrand_8h.html#a5e49c3d0caa741c53ea23b4b0a6b0202">secp256k1_rand_seed</a>(seed16);</div><div class="line"><a name="l04290"></a><span class="lineno"> 4290</span> </div><div class="line"><a name="l04291"></a><span class="lineno"> 4291</span>  printf(<span class="stringliteral">"test count = %i\n"</span>, <a class="code" href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a>);</div><div class="line"><a name="l04292"></a><span class="lineno"> 4292</span>  printf(<span class="stringliteral">"random seed = %02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x\n"</span>, seed16[0], seed16[1], seed16[2], seed16[3], seed16[4], seed16[5], seed16[6], seed16[7], seed16[8], seed16[9], seed16[10], seed16[11], seed16[12], seed16[13], seed16[14], seed16[15]);</div><div class="line"><a name="l04293"></a><span class="lineno"> 4293</span> </div><div class="line"><a name="l04294"></a><span class="lineno"> 4294</span>  <span class="comment">/* initialize */</span></div><div class="line"><a name="l04295"></a><span class="lineno"> 4295</span>  <a class="code" href="tests_8c.html#a2f9713526b1e988694c6e2026a6fce69">run_context_tests</a>();</div><div class="line"><a name="l04296"></a><span class="lineno"> 4296</span>  <a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a> = <a class="code" href="secp256k1_8h.html#a769d478f352afbb55200e33970533a3c">secp256k1_context_create</a>(<a class="code" href="secp256k1_8h.html#a0d34fe6baa73d3145f2e376e43de0b15">SECP256K1_CONTEXT_SIGN</a> | <a class="code" href="secp256k1_8h.html#add20a6c320e247ca7bd524cbc4259d64">SECP256K1_CONTEXT_VERIFY</a>);</div><div class="line"><a name="l04297"></a><span class="lineno"> 4297</span>  <span class="keywordflow">if</span> (<a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1)) {</div><div class="line"><a name="l04298"></a><span class="lineno"> 4298</span>  <a class="code" href="testrand_8h.html#ac6eab6443f98bba198f7df69e658173c">secp256k1_rand256</a>(run32);</div><div class="line"><a name="l04299"></a><span class="lineno"> 4299</span>  <a class="code" href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a>(<a class="code" href="secp256k1_8h.html#a1b81d70feb6ed24dc902cbbd5ba569e7">secp256k1_context_randomize</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>, <a class="code" href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a>(1) ? run32 : NULL));</div><div class="line"><a name="l04300"></a><span class="lineno"> 4300</span>  }</div><div class="line"><a name="l04301"></a><span class="lineno"> 4301</span> </div><div class="line"><a name="l04302"></a><span class="lineno"> 4302</span>  <a class="code" href="tests_8c.html#a90b7eac05cebf27de5b429888bb5beff">run_rand_bits</a>();</div><div class="line"><a name="l04303"></a><span class="lineno"> 4303</span>  <a class="code" href="tests_8c.html#a775a4718709171ff67d821ff4a97c9a7">run_rand_int</a>();</div><div class="line"><a name="l04304"></a><span class="lineno"> 4304</span> </div><div class="line"><a name="l04305"></a><span class="lineno"> 4305</span>  <a class="code" href="tests_8c.html#a2d74e805d6154620fef868e2319c99c9">run_sha256_tests</a>();</div><div class="line"><a name="l04306"></a><span class="lineno"> 4306</span>  <a class="code" href="tests_8c.html#a696245307bfe2110594f353cf47dad17">run_hmac_sha256_tests</a>();</div><div class="line"><a name="l04307"></a><span class="lineno"> 4307</span>  <a class="code" href="tests_8c.html#add06855ef2be3d3b6a4506590a7b468e">run_rfc6979_hmac_sha256_tests</a>();</div><div class="line"><a name="l04308"></a><span class="lineno"> 4308</span> </div><div class="line"><a name="l04309"></a><span class="lineno"> 4309</span> <span class="preprocessor">#ifndef USE_NUM_NONE</span></div><div class="line"><a name="l04310"></a><span class="lineno"> 4310</span>  <span class="comment">/* num tests */</span></div><div class="line"><a name="l04311"></a><span class="lineno"> 4311</span>  <a class="code" href="tests_8c.html#a6744389614cf74a9b2c10c29e2ddba5c">run_num_smalltests</a>();</div><div class="line"><a name="l04312"></a><span class="lineno"> 4312</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04313"></a><span class="lineno"> 4313</span> </div><div class="line"><a name="l04314"></a><span class="lineno"> 4314</span>  <span class="comment">/* scalar tests */</span></div><div class="line"><a name="l04315"></a><span class="lineno"> 4315</span>  <a class="code" href="tests_8c.html#afc29a3cda8faeba097ce967f24fcb9d1">run_scalar_tests</a>();</div><div class="line"><a name="l04316"></a><span class="lineno"> 4316</span> </div><div class="line"><a name="l04317"></a><span class="lineno"> 4317</span>  <span class="comment">/* field tests */</span></div><div class="line"><a name="l04318"></a><span class="lineno"> 4318</span>  <a class="code" href="tests_8c.html#ad636c10e982fafdb8f6ddeb3d1424b2d">run_field_inv</a>();</div><div class="line"><a name="l04319"></a><span class="lineno"> 4319</span>  <a class="code" href="tests_8c.html#ad83214628412557c86e3c1d01270c83a">run_field_inv_var</a>();</div><div class="line"><a name="l04320"></a><span class="lineno"> 4320</span>  <a class="code" href="tests_8c.html#afb738ef4c7077ce703c56beefcb29653">run_field_inv_all_var</a>();</div><div class="line"><a name="l04321"></a><span class="lineno"> 4321</span>  <a class="code" href="tests_8c.html#a407b4cff8cbc365e753f2a1d70b45f81">run_field_misc</a>();</div><div class="line"><a name="l04322"></a><span class="lineno"> 4322</span>  <a class="code" href="tests_8c.html#a3fb0153a38fe54783b46ab4bc39d9912">run_field_convert</a>();</div><div class="line"><a name="l04323"></a><span class="lineno"> 4323</span>  <a class="code" href="tests_8c.html#aebe6e77bbe66e58eb7d0230d9506dc61">run_sqr</a>();</div><div class="line"><a name="l04324"></a><span class="lineno"> 4324</span>  <a class="code" href="tests_8c.html#a9f14566c39814625ca83d68d1dddb684">run_sqrt</a>();</div><div class="line"><a name="l04325"></a><span class="lineno"> 4325</span> </div><div class="line"><a name="l04326"></a><span class="lineno"> 4326</span>  <span class="comment">/* group tests */</span></div><div class="line"><a name="l04327"></a><span class="lineno"> 4327</span>  <a class="code" href="tests_8c.html#aa7ad70a73e9a44f0b9486ffe6f46ca39">run_ge</a>();</div><div class="line"><a name="l04328"></a><span class="lineno"> 4328</span>  <a class="code" href="tests_8c.html#a03817b02604d9e2c9b5f049fc01d4a99">run_group_decompress</a>();</div><div class="line"><a name="l04329"></a><span class="lineno"> 4329</span> </div><div class="line"><a name="l04330"></a><span class="lineno"> 4330</span>  <span class="comment">/* ecmult tests */</span></div><div class="line"><a name="l04331"></a><span class="lineno"> 4331</span>  <a class="code" href="tests_8c.html#af3c34e47a9088ad0f5f0df779303a85a">run_wnaf</a>();</div><div class="line"><a name="l04332"></a><span class="lineno"> 4332</span>  <a class="code" href="tests_8c.html#accc1ed100e6e73e61ce30e82cf4f0bbb">run_point_times_order</a>();</div><div class="line"><a name="l04333"></a><span class="lineno"> 4333</span>  <a class="code" href="tests_8c.html#aec6ef7189f31c2b9628cedf9154f6929">run_ecmult_chain</a>();</div><div class="line"><a name="l04334"></a><span class="lineno"> 4334</span>  <a class="code" href="tests_8c.html#a93c275726298d7a59a4f027996a958b4">run_ecmult_constants</a>();</div><div class="line"><a name="l04335"></a><span class="lineno"> 4335</span>  <a class="code" href="tests_8c.html#ac3003b8a1d7eed5ebb0497a3f0dd97b6">run_ecmult_gen_blind</a>();</div><div class="line"><a name="l04336"></a><span class="lineno"> 4336</span>  <a class="code" href="tests_8c.html#af69d927b217be17f076754b9d4e4f326">run_ecmult_const_tests</a>();</div><div class="line"><a name="l04337"></a><span class="lineno"> 4337</span>  <a class="code" href="tests_8c.html#a394075284eed27ac8d87935f73d4c673">run_ec_combine</a>();</div><div class="line"><a name="l04338"></a><span class="lineno"> 4338</span> </div><div class="line"><a name="l04339"></a><span class="lineno"> 4339</span>  <span class="comment">/* endomorphism tests */</span></div><div class="line"><a name="l04340"></a><span class="lineno"> 4340</span> <span class="preprocessor">#ifdef USE_ENDOMORPHISM</span></div><div class="line"><a name="l04341"></a><span class="lineno"> 4341</span>  run_endomorphism_tests();</div><div class="line"><a name="l04342"></a><span class="lineno"> 4342</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04343"></a><span class="lineno"> 4343</span> </div><div class="line"><a name="l04344"></a><span class="lineno"> 4344</span>  <span class="comment">/* EC point parser test */</span></div><div class="line"><a name="l04345"></a><span class="lineno"> 4345</span>  <a class="code" href="tests_8c.html#a24bd2af11fcef9c3f2abb62862d6fe97">run_ec_pubkey_parse_test</a>();</div><div class="line"><a name="l04346"></a><span class="lineno"> 4346</span> </div><div class="line"><a name="l04347"></a><span class="lineno"> 4347</span>  <span class="comment">/* EC key edge cases */</span></div><div class="line"><a name="l04348"></a><span class="lineno"> 4348</span>  <a class="code" href="tests_8c.html#a32498e86a99a258f68cd4b1176f47966">run_eckey_edge_case_test</a>();</div><div class="line"><a name="l04349"></a><span class="lineno"> 4349</span> </div><div class="line"><a name="l04350"></a><span class="lineno"> 4350</span> <span class="preprocessor">#ifdef ENABLE_MODULE_ECDH</span></div><div class="line"><a name="l04351"></a><span class="lineno"> 4351</span>  <span class="comment">/* ecdh tests */</span></div><div class="line"><a name="l04352"></a><span class="lineno"> 4352</span>  <a class="code" href="ecdh_2tests__impl_8h.html#aab6cd779f0b87dc8a7afdf4eaf873407">run_ecdh_tests</a>();</div><div class="line"><a name="l04353"></a><span class="lineno"> 4353</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04354"></a><span class="lineno"> 4354</span> </div><div class="line"><a name="l04355"></a><span class="lineno"> 4355</span>  <span class="comment">/* ecdsa tests */</span></div><div class="line"><a name="l04356"></a><span class="lineno"> 4356</span>  <a class="code" href="tests_8c.html#a0697fbce6e63c1c95aec0c67cb27f31c">run_random_pubkeys</a>();</div><div class="line"><a name="l04357"></a><span class="lineno"> 4357</span>  <a class="code" href="tests_8c.html#aed8d29b89e89ae8bf370483684b1f7d2">run_ecdsa_der_parse</a>();</div><div class="line"><a name="l04358"></a><span class="lineno"> 4358</span>  <a class="code" href="tests_8c.html#a8b33b5c265c09b165c29d92c05c641d8">run_ecdsa_sign_verify</a>();</div><div class="line"><a name="l04359"></a><span class="lineno"> 4359</span>  <a class="code" href="tests_8c.html#ab05096657be701bf9ca8616475bb9491">run_ecdsa_end_to_end</a>();</div><div class="line"><a name="l04360"></a><span class="lineno"> 4360</span>  <a class="code" href="tests_8c.html#ad6c8109b62ea1d0ed1b382678a2a08b1">run_ecdsa_edge_cases</a>();</div><div class="line"><a name="l04361"></a><span class="lineno"> 4361</span> <span class="preprocessor">#ifdef ENABLE_OPENSSL_TESTS</span></div><div class="line"><a name="l04362"></a><span class="lineno"> 4362</span>  run_ecdsa_openssl();</div><div class="line"><a name="l04363"></a><span class="lineno"> 4363</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04364"></a><span class="lineno"> 4364</span> </div><div class="line"><a name="l04365"></a><span class="lineno"> 4365</span> <span class="preprocessor">#ifdef ENABLE_MODULE_SCHNORR</span></div><div class="line"><a name="l04366"></a><span class="lineno"> 4366</span>  <span class="comment">/* Schnorr tests */</span></div><div class="line"><a name="l04367"></a><span class="lineno"> 4367</span>  <a class="code" href="schnorr_2tests__impl_8h.html#a6b31cc8facecda629cf588196a4c936b">run_schnorr_tests</a>();</div><div class="line"><a name="l04368"></a><span class="lineno"> 4368</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04369"></a><span class="lineno"> 4369</span> </div><div class="line"><a name="l04370"></a><span class="lineno"> 4370</span> <span class="preprocessor">#ifdef ENABLE_MODULE_RECOVERY</span></div><div class="line"><a name="l04371"></a><span class="lineno"> 4371</span>  <span class="comment">/* ECDSA pubkey recovery tests */</span></div><div class="line"><a name="l04372"></a><span class="lineno"> 4372</span>  <a class="code" href="recovery_2tests__impl_8h.html#a3a06f71955483e9502f3c408857407f2">run_recovery_tests</a>();</div><div class="line"><a name="l04373"></a><span class="lineno"> 4373</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l04374"></a><span class="lineno"> 4374</span> </div><div class="line"><a name="l04375"></a><span class="lineno"> 4375</span>  <a class="code" href="testrand_8h.html#ac6eab6443f98bba198f7df69e658173c">secp256k1_rand256</a>(run32);</div><div class="line"><a name="l04376"></a><span class="lineno"> 4376</span>  printf(<span class="stringliteral">"random run = %02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x\n"</span>, run32[0], run32[1], run32[2], run32[3], run32[4], run32[5], run32[6], run32[7], run32[8], run32[9], run32[10], run32[11], run32[12], run32[13], run32[14], run32[15]);</div><div class="line"><a name="l04377"></a><span class="lineno"> 4377</span> </div><div class="line"><a name="l04378"></a><span class="lineno"> 4378</span>  <span class="comment">/* shutdown */</span></div><div class="line"><a name="l04379"></a><span class="lineno"> 4379</span>  <a class="code" href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a>(<a class="code" href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a>);</div><div class="line"><a name="l04380"></a><span class="lineno"> 4380</span> </div><div class="line"><a name="l04381"></a><span class="lineno"> 4381</span>  printf(<span class="stringliteral">"no problems found\n"</span>);</div><div class="line"><a name="l04382"></a><span class="lineno"> 4382</span>  <span class="keywordflow">return</span> 0;</div><div class="line"><a name="l04383"></a><span class="lineno"> 4383</span> }</div><div class="ttc" id="scalar_8h_html_a4ba37c67745038e5ff23ca66f051837d"><div class="ttname"><a href="scalar_8h.html#a4ba37c67745038e5ff23ca66f051837d">secp256k1_scalar_eq</a></div><div class="ttdeci">static int secp256k1_scalar_eq(const secp256k1_scalar *a, const secp256k1_scalar *b)</div></div>
|
|
<div class="ttc" id="scalar_8h_html_a89db15f705c8eafcd10c08181523acd0"><div class="ttname"><a href="scalar_8h.html#a89db15f705c8eafcd10c08181523acd0">secp256k1_scalar_mul</a></div><div class="ttdeci">static void secp256k1_scalar_mul(secp256k1_scalar *r, const secp256k1_scalar *a, const secp256k1_scalar *b)</div></div>
|
|
<div class="ttc" id="group_8h_html_ac83592db46af97faf7ba9b9a39a1f6ff"><div class="ttname"><a href="group_8h.html#ac83592db46af97faf7ba9b9a39a1f6ff">secp256k1_ge_is_infinity</a></div><div class="ttdeci">static int secp256k1_ge_is_infinity(const secp256k1_ge *a)</div></div>
|
|
<div class="ttc" id="secp256k1_2src_2util_8h_html_aca8ac5ae73fd966db106de59160a178b"><div class="ttname"><a href="secp256k1_2src_2util_8h.html#aca8ac5ae73fd966db106de59160a178b">VERIFY_CHECK</a></div><div class="ttdeci">#define VERIFY_CHECK(cond)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_2src_2util_8h_source.html#l00064">util.h:64</a></div></div>
|
|
<div class="ttc" id="scalar__4x64__impl_8h_html_a13e982915006b138de5e2b3ab68238cb"><div class="ttname"><a href="scalar__4x64__impl_8h.html#a13e982915006b138de5e2b3ab68238cb">secp256k1_scalar_check_overflow</a></div><div class="ttdeci">static SECP256K1_INLINE int secp256k1_scalar_check_overflow(const secp256k1_scalar *a)</div><div class="ttdef"><b>Definition:</b> <a href="scalar__4x64__impl_8h_source.html#l00057">scalar_4x64_impl.h:57</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a696245307bfe2110594f353cf47dad17"><div class="ttname"><a href="tests_8c.html#a696245307bfe2110594f353cf47dad17">run_hmac_sha256_tests</a></div><div class="ttdeci">void run_hmac_sha256_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00277">tests.c:277</a></div></div>
|
|
<div class="ttc" id="group_8h_html_a33786d5853579c92d46fac51f6a40093"><div class="ttname"><a href="group_8h.html#a33786d5853579c92d46fac51f6a40093">secp256k1_gej_is_infinity</a></div><div class="ttdeci">static int secp256k1_gej_is_infinity(const secp256k1_gej *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_ae88750c3ab1238b2d8f8fa8a8ab67855"><div class="ttname"><a href="tests_8c.html#ae88750c3ab1238b2d8f8fa8a8ab67855">check_fe_equal</a></div><div class="ttdeci">int check_fe_equal(const secp256k1_fe *a, const secp256k1_fe *b)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01454">tests.c:1454</a></div></div>
|
|
<div class="ttc" id="num_8h_html_a8763cac72f4a6760d12cb93897f468c5"><div class="ttname"><a href="num_8h.html#a8763cac72f4a6760d12cb93897f468c5">secp256k1_num_eq</a></div><div class="ttdeci">static int secp256k1_num_eq(const secp256k1_num *a, const secp256k1_num *b)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a2381cde2a0ee44d90dcfa77e28b5eb79"><div class="ttname"><a href="secp256k1_8h.html#a2381cde2a0ee44d90dcfa77e28b5eb79">secp256k1_ec_pubkey_tweak_add</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_tweak_add(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *tweak) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00456">secp256k1.c:456</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__fe_html"><div class="ttname"><a href="structsecp256k1__fe.html">secp256k1_fe</a></div><div class="ttdef"><b>Definition:</b> <a href="field__10x26_8h_source.html#l00012">field_10x26.h:12</a></div></div>
|
|
<div class="ttc" id="field__10x26__impl_8h_html_aa213f05a02544f894a8829f672b6e4ea"><div class="ttname"><a href="field__10x26__impl_8h.html#aa213f05a02544f894a8829f672b6e4ea">secp256k1_fe_clear</a></div><div class="ttdeci">static SECP256K1_INLINE void secp256k1_fe_clear(secp256k1_fe *a)</div><div class="ttdef"><b>Definition:</b> <a href="field__10x26__impl_8h_source.html#l00299">field_10x26_impl.h:299</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_abe078cbb6b642d792f123ea67494f7e3"><div class="ttname"><a href="secp256k1_8h.html#abe078cbb6b642d792f123ea67494f7e3">secp256k1_ec_privkey_tweak_mul</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_privkey_tweak_mul(const secp256k1_context *ctx, unsigned char *seckey, const unsigned char *tweak) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00480">secp256k1.c:480</a></div></div>
|
|
<div class="ttc" id="testrand_8h_html_adf2bb4432b8c3b238d83297c067b41aa"><div class="ttname"><a href="testrand_8h.html#adf2bb4432b8c3b238d83297c067b41aa">secp256k1_rand_bytes_test</a></div><div class="ttdeci">static void secp256k1_rand_bytes_test(unsigned char *bytes, size_t len)</div></div>
|
|
<div class="ttc" id="group_8h_html_a8df21f3ef7412e6c4d39fb67dc0140c6"><div class="ttname"><a href="group_8h.html#a8df21f3ef7412e6c4d39fb67dc0140c6">secp256k1_gej_add_var</a></div><div class="ttdeci">static void secp256k1_gej_add_var(secp256k1_gej *r, const secp256k1_gej *a, const secp256k1_gej *b, secp256k1_fe *rzr)</div></div>
|
|
<div class="ttc" id="field_8h_html_a619ec4805df6cc54d70e6682ceebd098"><div class="ttname"><a href="field_8h.html#a619ec4805df6cc54d70e6682ceebd098">secp256k1_fe_is_zero</a></div><div class="ttdeci">static int secp256k1_fe_is_zero(const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_ad49b2c3065041ff986c8a4d71a329c79"><div class="ttname"><a href="tests_8c.html#ad49b2c3065041ff986c8a4d71a329c79">random_fe</a></div><div class="ttdeci">void random_fe(secp256k1_fe *x)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01413">tests.c:1413</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a3ec29bece9974f9535337eb7d91b351c"><div class="ttname"><a href="secp256k1_8h.html#a3ec29bece9974f9535337eb7d91b351c">secp256k1_context_set_illegal_callback</a></div><div class="ttdeci">SECP256K1_API void secp256k1_context_set_illegal_callback(secp256k1_context *ctx, void(*fun)(const char *message, void *data), const void *data) SECP256K1_ARG_NONNULL(1)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00103">secp256k1.c:103</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a849e08074670ab1644fdec5cc5ef08a7"><div class="ttname"><a href="tests_8c.html#a849e08074670ab1644fdec5cc5ef08a7">test_add_neg_y_diff_x</a></div><div class="ttdeci">void test_add_neg_y_diff_x(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01944">tests.c:1944</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a3eb65cf9bfad7c430cbb3dc26d494a95"><div class="ttname"><a href="scalar_8h.html#a3eb65cf9bfad7c430cbb3dc26d494a95">secp256k1_scalar_is_even</a></div><div class="ttdeci">static int secp256k1_scalar_is_even(const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_af69d927b217be17f076754b9d4e4f326"><div class="ttname"><a href="tests_8c.html#af69d927b217be17f076754b9d4e4f326">run_ecmult_const_tests</a></div><div class="ttdeci">void run_ecmult_const_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02326">tests.c:2326</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_af8571ca8dcfb7f892519b337504dc700"><div class="ttname"><a href="secp256k1_8h.html#af8571ca8dcfb7f892519b337504dc700">secp256k1_ecdsa_signature_serialize_compact</a></div><div class="ttdeci">SECP256K1_API int secp256k1_ecdsa_signature_serialize_compact(const secp256k1_context *ctx, unsigned char *output64, const secp256k1_ecdsa_signature *sig) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00265">secp256k1.c:265</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a5760a028e03f061e5aed00cb7839138e"><div class="ttname"><a href="tests_8c.html#a5760a028e03f061e5aed00cb7839138e">test_point_times_order</a></div><div class="ttdeci">void test_point_times_order(const secp256k1_gej *point)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02173">tests.c:2173</a></div></div>
|
|
<div class="ttc" id="group_8h_html_af46c307c9174e2aa45dbf6f32e61ed21"><div class="ttname"><a href="group_8h.html#af46c307c9174e2aa45dbf6f32e61ed21">SECP256K1_GEJ_CONST</a></div><div class="ttdeci">#define SECP256K1_GEJ_CONST(a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p)</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00031">group.h:31</a></div></div>
|
|
<div class="ttc" id="group_8h_html_abcb34de0cfdf82a125e059f4f98de1d9"><div class="ttname"><a href="group_8h.html#abcb34de0cfdf82a125e059f4f98de1d9">secp256k1_ge_neg</a></div><div class="ttdeci">static void secp256k1_ge_neg(secp256k1_ge *r, const secp256k1_ge *a)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a93ec36a19229f08acc5ff1ca613ab3a1"><div class="ttname"><a href="secp256k1_8h.html#a93ec36a19229f08acc5ff1ca613ab3a1">secp256k1_ecdsa_signature_normalize</a></div><div class="ttdeci">SECP256K1_API int secp256k1_ecdsa_signature_normalize(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sigout, const secp256k1_ecdsa_signature *sigin) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00278">secp256k1.c:278</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a03817b02604d9e2c9b5f049fc01d4a99"><div class="ttname"><a href="tests_8c.html#a03817b02604d9e2c9b5f049fc01d4a99">run_group_decompress</a></div><div class="ttdeci">void run_group_decompress(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02098">tests.c:2098</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a542b97d2574d9687c563d002587cf9a2"><div class="ttname"><a href="field_8h.html#a542b97d2574d9687c563d002587cf9a2">secp256k1_fe_mul</a></div><div class="ttdeci">static void secp256k1_fe_mul(secp256k1_fe *r, const secp256k1_fe *a, const secp256k1_fe *SECP256K1_RESTRICT b)</div></div>
|
|
<div class="ttc" id="ecmult__gen_8h_html_a5ed744c720cbb0a397c8d4c42c637f24"><div class="ttname"><a href="ecmult__gen_8h.html#a5ed744c720cbb0a397c8d4c42c637f24">secp256k1_ecmult_gen</a></div><div class="ttdeci">static void secp256k1_ecmult_gen(const secp256k1_ecmult_gen_context *ctx, secp256k1_gej *r, const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="field_8h_html_a2d45c987537eadb2923c93aa3af9db71"><div class="ttname"><a href="field_8h.html#a2d45c987537eadb2923c93aa3af9db71">secp256k1_fe_normalize_var</a></div><div class="ttdeci">static void secp256k1_fe_normalize_var(secp256k1_fe *r)</div></div>
|
|
<div class="ttc" id="recovery_2tests__impl_8h_html"><div class="ttname"><a href="recovery_2tests__impl_8h.html">tests_impl.h</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__gej_html_a7d2451c89411d62628ac466eb28c8ff5"><div class="ttname"><a href="structsecp256k1__gej.html#a7d2451c89411d62628ac466eb28c8ff5">secp256k1_gej::x</a></div><div class="ttdeci">secp256k1_fe x</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00025">group.h:25</a></div></div>
|
|
<div class="ttc" id="ecdh_2tests__impl_8h_html"><div class="ttname"><a href="ecdh_2tests__impl_8h.html">tests_impl.h</a></div></div>
|
|
<div class="ttc" id="num_8h_html_a4a7f500a93d330df44bbe3adda388868"><div class="ttname"><a href="num_8h.html#a4a7f500a93d330df44bbe3adda388868">secp256k1_num_set_bin</a></div><div class="ttdeci">static void secp256k1_num_set_bin(secp256k1_num *r, const unsigned char *a, unsigned int alen)</div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_a9dd561651b3373fe94e80295dfdd43a7"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#a9dd561651b3373fe94e80295dfdd43a7">secp256k1_rfc6979_hmac_sha256_initialize</a></div><div class="ttdeci">static void secp256k1_rfc6979_hmac_sha256_initialize(secp256k1_rfc6979_hmac_sha256_t *rng, const unsigned char *key, size_t keylen)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a5b444bc3ba72dbbc46729ebd85204a6d"><div class="ttname"><a href="tests_8c.html#a5b444bc3ba72dbbc46729ebd85204a6d">fe_memcmp</a></div><div class="ttdeci">int fe_memcmp(const secp256k1_fe *a, const secp256k1_fe *b)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01499">tests.c:1499</a></div></div>
|
|
<div class="ttc" id="ecdsa_8h_html_a5bf6905e00ae8571465a52e3165c6e6e"><div class="ttname"><a href="ecdsa_8h.html#a5bf6905e00ae8571465a52e3165c6e6e">secp256k1_ecdsa_sig_sign</a></div><div class="ttdeci">static int secp256k1_ecdsa_sig_sign(const secp256k1_ecmult_gen_context *ctx, secp256k1_scalar *r, secp256k1_scalar *s, const secp256k1_scalar *seckey, const secp256k1_scalar *message, const secp256k1_scalar *nonce, int *recid)</div></div>
|
|
<div class="ttc" id="tests_8c_html_afc29a3cda8faeba097ce967f24fcb9d1"><div class="ttname"><a href="tests_8c.html#afc29a3cda8faeba097ce967f24fcb9d1">run_scalar_tests</a></div><div class="ttdeci">void run_scalar_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00799">tests.c:799</a></div></div>
|
|
<div class="ttc" id="lax__der__parsing_8c_html"><div class="ttname"><a href="lax__der__parsing_8c.html">lax_der_parsing.c</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a42744351538fd01fc266d1cac41401a8"><div class="ttname"><a href="tests_8c.html#a42744351538fd01fc266d1cac41401a8">test_sqrt</a></div><div class="ttdeci">void test_sqrt(const secp256k1_fe *a, const secp256k1_fe *k)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01642">tests.c:1642</a></div></div>
|
|
<div class="ttc" id="namespacetest__framework_1_1key_html_af9f0b591f24f44290936f436182368ee"><div class="ttname"><a href="namespacetest__framework_1_1key.html#af9f0b591f24f44290936f436182368ee">test_framework.key.NID_secp256k1</a></div><div class="ttdeci">int NID_secp256k1</div><div class="ttdef"><b>Definition:</b> <a href="key_8py_source.html#l00076">key.py:76</a></div></div>
|
|
<div class="ttc" id="libsecp256k1-config_8h_html"><div class="ttname"><a href="libsecp256k1-config_8h.html">libsecp256k1-config.h</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a1b81d70feb6ed24dc902cbbd5ba569e7"><div class="ttname"><a href="secp256k1_8h.html#a1b81d70feb6ed24dc902cbbd5ba569e7">secp256k1_context_randomize</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_context_randomize(secp256k1_context *ctx, const unsigned char *seed32) SECP256K1_ARG_NONNULL(1)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00527">secp256k1.c:527</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a2631070201e67210b08603a358e0a622"><div class="ttname"><a href="tests_8c.html#a2631070201e67210b08603a358e0a622">nonce_function_test_fail</a></div><div class="ttdeci">static int nonce_function_test_fail(unsigned char *nonce32, const unsigned char *msg32, const unsigned char *key32, const unsigned char *algo16, void *data, unsigned int counter)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03245">tests.c:3245</a></div></div>
|
|
<div class="ttc" id="secp256k1_8c_html_aaeed37b3a1d669fc6031755d37a5b2c4"><div class="ttname"><a href="secp256k1_8c.html#aaeed37b3a1d669fc6031755d37a5b2c4">nonce_function_rfc6979</a></div><div class="ttdeci">static int nonce_function_rfc6979(unsigned char *nonce32, const unsigned char *msg32, const unsigned char *key32, const unsigned char *algo16, void *data, unsigned int counter)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00314">secp256k1.c:314</a></div></div>
|
|
<div class="ttc" id="group__impl_8h_html_aea803cf52c0f33c2cb3bfb82d5790d71"><div class="ttname"><a href="group__impl_8h.html#aea803cf52c0f33c2cb3bfb82d5790d71">secp256k1_ge_set_gej_var</a></div><div class="ttdeci">static void secp256k1_ge_set_gej_var(secp256k1_ge *r, secp256k1_gej *a)</div><div class="ttdef"><b>Definition:</b> <a href="group__impl_8h_source.html#l00065">group_impl.h:65</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a9f06c34f3caa68b5da0ad133c86f5e3c"><div class="ttname"><a href="tests_8c.html#a9f06c34f3caa68b5da0ad133c86f5e3c">test_random_pubkeys</a></div><div class="ttdeci">void test_random_pubkeys(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03411">tests.c:3411</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a4543ff08a66fc870acd56c921f2b30f7"><div class="ttname"><a href="field_8h.html#a4543ff08a66fc870acd56c921f2b30f7">secp256k1_fe_negate</a></div><div class="ttdeci">static void secp256k1_fe_negate(secp256k1_fe *r, const secp256k1_fe *a, int m)</div></div>
|
|
<div class="ttc" id="scalar_8h_html_a75c8cc0159d53eefaf86a296ba882420"><div class="ttname"><a href="scalar_8h.html#a75c8cc0159d53eefaf86a296ba882420">secp256k1_scalar_get_num</a></div><div class="ttdeci">static void secp256k1_scalar_get_num(secp256k1_num *r, const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a2643b34ae08799d0c3442f610ffe9c53"><div class="ttname"><a href="tests_8c.html#a2643b34ae08799d0c3442f610ffe9c53">nonce_function_test_retry</a></div><div class="ttdeci">static int nonce_function_test_retry(unsigned char *nonce32, const unsigned char *msg32, const unsigned char *key32, const unsigned char *algo16, void *data, unsigned int counter)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03253">tests.c:3253</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a6271c140364653b98ad0c037c204b2a3"><div class="ttname"><a href="tests_8c.html#a6271c140364653b98ad0c037c204b2a3">assign_big_endian</a></div><div class="ttdeci">static void assign_big_endian(unsigned char *ptr, size_t ptrlen, uint32_t val)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03595">tests.c:3595</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a644783b01d20445b5b2f3c9c2abfbae3"><div class="ttname"><a href="field_8h.html#a644783b01d20445b5b2f3c9c2abfbae3">secp256k1_fe_from_storage</a></div><div class="ttdeci">static void secp256k1_fe_from_storage(secp256k1_fe *r, const secp256k1_fe_storage *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_ab02e05e21c96c34d9497e2bdd44d2e3a"><div class="ttname"><a href="tests_8c.html#ab02e05e21c96c34d9497e2bdd44d2e3a">test_ecmult_constants</a></div><div class="ttdeci">void test_ecmult_constants(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02451">tests.c:2451</a></div></div>
|
|
<div class="ttc" id="num_8h_html_a8e164da794a6a512b0bce7a2339d35f9"><div class="ttname"><a href="num_8h.html#a8e164da794a6a512b0bce7a2339d35f9">secp256k1_num_copy</a></div><div class="ttdeci">static void secp256k1_num_copy(secp256k1_num *r, const secp256k1_num *a)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a4f7b286aa714c2e0fb279c180f67e9b3"><div class="ttname"><a href="secp256k1_8h.html#a4f7b286aa714c2e0fb279c180f67e9b3">SECP256K1_CONTEXT_NONE</a></div><div class="ttdeci">#define SECP256K1_CONTEXT_NONE</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8h_source.html#l00162">secp256k1.h:162</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a70d7af05e9c9a579ed5cb20d9f22eeba"><div class="ttname"><a href="scalar_8h.html#a70d7af05e9c9a579ed5cb20d9f22eeba">secp256k1_scalar_get_bits</a></div><div class="ttdeci">static unsigned int secp256k1_scalar_get_bits(const secp256k1_scalar *a, unsigned int offset, unsigned int count)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a407b4cff8cbc365e753f2a1d70b45f81"><div class="ttname"><a href="tests_8c.html#a407b4cff8cbc365e753f2a1d70b45f81">run_field_misc</a></div><div class="ttdeci">void run_field_misc(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01508">tests.c:1508</a></div></div>
|
|
<div class="ttc" id="ecdsa_8h_html_aae25c4b1cdf2ccaddc49b42d43cc82a1"><div class="ttname"><a href="ecdsa_8h.html#aae25c4b1cdf2ccaddc49b42d43cc82a1">secp256k1_ecdsa_sig_parse</a></div><div class="ttdeci">static int secp256k1_ecdsa_sig_parse(secp256k1_scalar *r, secp256k1_scalar *s, const unsigned char *sig, size_t size)</div></div>
|
|
<div class="ttc" id="scalar_8h_html_aa3f1c1d4536adf835ee256878c222968"><div class="ttname"><a href="scalar_8h.html#aa3f1c1d4536adf835ee256878c222968">secp256k1_scalar_negate</a></div><div class="ttdeci">static void secp256k1_scalar_negate(secp256k1_scalar *r, const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="field_8h_html_ae9d61c6568f3a63bcea9146c056b18dc"><div class="ttname"><a href="field_8h.html#ae9d61c6568f3a63bcea9146c056b18dc">secp256k1_fe_storage_cmov</a></div><div class="ttdeci">static void secp256k1_fe_storage_cmov(secp256k1_fe_storage *r, const secp256k1_fe_storage *a, int flag)</div></div>
|
|
<div class="ttc" id="testrand_8h_html_a2e2064cdf87588f68f4ba3131f5d9353"><div class="ttname"><a href="testrand_8h.html#a2e2064cdf87588f68f4ba3131f5d9353">secp256k1_rand_int</a></div><div class="ttdeci">static uint32_t secp256k1_rand_int(uint32_t range)</div></div>
|
|
<div class="ttc" id="key_8cpp_html_a8cafc8a5eaf9a41f141e31d7c42ed7b9"><div class="ttname"><a href="key_8cpp.html#a8cafc8a5eaf9a41f141e31d7c42ed7b9">ec_privkey_export_der</a></div><div class="ttdeci">static int ec_privkey_export_der(const secp256k1_context *ctx, unsigned char *privkey, size_t *privkeylen, const unsigned char *key32, int compressed)</div><div class="ttdef"><b>Definition:</b> <a href="key_8cpp_source.html#l00063">key.cpp:63</a></div></div>
|
|
<div class="ttc" id="ecmult__gen_8h_html_a7e41f045cb4901a4eba781966fa35abd"><div class="ttname"><a href="ecmult__gen_8h.html#a7e41f045cb4901a4eba781966fa35abd">secp256k1_ecmult_gen_blind</a></div><div class="ttdeci">static void secp256k1_ecmult_gen_blind(secp256k1_ecmult_gen_context *ctx, const unsigned char *seed32)</div></div>
|
|
<div class="ttc" id="eckey_8h_html_ae1f52342d70928f16c8e606da59e6aa6"><div class="ttname"><a href="eckey_8h.html#ae1f52342d70928f16c8e606da59e6aa6">secp256k1_eckey_pubkey_serialize</a></div><div class="ttdeci">static int secp256k1_eckey_pubkey_serialize(secp256k1_ge *elem, unsigned char *pub, size_t *size, int compressed)</div></div>
|
|
<div class="ttc" id="tests_8c_html_aa7ad70a73e9a44f0b9486ffe6f46ca39"><div class="ttname"><a href="tests_8c.html#aa7ad70a73e9a44f0b9486ffe6f46ca39">run_ge</a></div><div class="ttdeci">void run_ge(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02011">tests.c:2011</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a9f14566c39814625ca83d68d1dddb684"><div class="ttname"><a href="tests_8c.html#a9f14566c39814625ca83d68d1dddb684">run_sqrt</a></div><div class="ttdeci">void run_sqrt(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01656">tests.c:1656</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a3f0ac84fe49a1c1f51212582a2c149d4"><div class="ttname"><a href="scalar_8h.html#a3f0ac84fe49a1c1f51212582a2c149d4">secp256k1_scalar_is_zero</a></div><div class="ttdeci">static int secp256k1_scalar_is_zero(const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a0697fbce6e63c1c95aec0c67cb27f31c"><div class="ttname"><a href="tests_8c.html#a0697fbce6e63c1c95aec0c67cb27f31c">run_random_pubkeys</a></div><div class="ttdeci">void run_random_pubkeys(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03471">tests.c:3471</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a775a4718709171ff67d821ff4a97c9a7"><div class="ttname"><a href="tests_8c.html#a775a4718709171ff67d821ff4a97c9a7">run_rand_int</a></div><div class="ttdeci">void run_rand_int(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00423">tests.c:423</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_ae9fcdf1db22cb93c2a2f06b0a9c957d3"><div class="ttname"><a href="scalar_8h.html#ae9fcdf1db22cb93c2a2f06b0a9c957d3">secp256k1_scalar_shr_int</a></div><div class="ttdeci">static int secp256k1_scalar_shr_int(secp256k1_scalar *r, int n)</div></div>
|
|
<div class="ttc" id="group_8h_html_af9194949a7aaf18aceab1dee73fe4027"><div class="ttname"><a href="group_8h.html#af9194949a7aaf18aceab1dee73fe4027">secp256k1_gej_neg</a></div><div class="ttdeci">static void secp256k1_gej_neg(secp256k1_gej *r, const secp256k1_gej *a)</div></div>
|
|
<div class="ttc" id="secp256k1_8c_html_aa061c9c5c861017bef990e5c4653e0f4"><div class="ttname"><a href="secp256k1_8c.html#aa061c9c5c861017bef990e5c4653e0f4">secp256k1_pubkey_save</a></div><div class="ttdeci">static void secp256k1_pubkey_save(secp256k1_pubkey *pubkey, secp256k1_ge *ge)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00138">secp256k1.c:138</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a3e9ecf6eef0181f8f086611253f6776f"><div class="ttname"><a href="field_8h.html#a3e9ecf6eef0181f8f086611253f6776f">secp256k1_fe_cmov</a></div><div class="ttdeci">static void secp256k1_fe_cmov(secp256k1_fe *r, const secp256k1_fe *a, int flag)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a7ca78a9b379dc40e8b025b145dd5648a"><div class="ttname"><a href="tests_8c.html#a7ca78a9b379dc40e8b025b145dd5648a">test_wnaf</a></div><div class="ttdeci">void test_wnaf(const secp256k1_scalar *number, int w)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02333">tests.c:2333</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__rfc6979__hmac__sha256__t_html"><div class="ttname"><a href="structsecp256k1__rfc6979__hmac__sha256__t.html">secp256k1_rfc6979_hmac_sha256_t</a></div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_2src_2hash_8h_source.html#l00031">hash.h:31</a></div></div>
|
|
<div class="ttc" id="group_8h_html_a180d4e54e906f101ce0f1e74563ce5f6"><div class="ttname"><a href="group_8h.html#a180d4e54e906f101ce0f1e74563ce5f6">secp256k1_gej_add_zinv_var</a></div><div class="ttdeci">static void secp256k1_gej_add_zinv_var(secp256k1_gej *r, const secp256k1_gej *a, const secp256k1_ge *b, const secp256k1_fe *bzinv)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a01cf4b4fc9b4ab8cb3e04fd3dc2ff57f"><div class="ttname"><a href="tests_8c.html#a01cf4b4fc9b4ab8cb3e04fd3dc2ff57f">random_scalar_order</a></div><div class="ttdeci">void random_scalar_order(secp256k1_scalar *num)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00123">tests.c:123</a></div></div>
|
|
<div class="ttc" id="group_8h_html_a0143422e1ce1601b00ff71c20c455ceb"><div class="ttname"><a href="group_8h.html#a0143422e1ce1601b00ff71c20c455ceb">SECP256K1_GEJ_CONST_INFINITY</a></div><div class="ttdeci">#define SECP256K1_GEJ_CONST_INFINITY</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00032">group.h:32</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a7f2c9aa1daa06bbd70798f8b8a6d978a"><div class="ttname"><a href="tests_8c.html#a7f2c9aa1daa06bbd70798f8b8a6d978a">random_fe_non_zero</a></div><div class="ttdeci">void random_fe_non_zero(secp256k1_fe *nz)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01433">tests.c:1433</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a34977bf00322e510e881160c421836d7"><div class="ttname"><a href="secp256k1_8h.html#a34977bf00322e510e881160c421836d7">secp256k1_ec_pubkey_serialize</a></div><div class="ttdeci">SECP256K1_API int secp256k1_ec_pubkey_serialize(const secp256k1_context *ctx, unsigned char *output, size_t *outputlen, const secp256k1_pubkey *pubkey, unsigned int flags) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00168">secp256k1.c:168</a></div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_a993c3261472ef00e4738e0fe7a99b7cb"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#a993c3261472ef00e4738e0fe7a99b7cb">secp256k1_rfc6979_hmac_sha256_generate</a></div><div class="ttdeci">static void secp256k1_rfc6979_hmac_sha256_generate(secp256k1_rfc6979_hmac_sha256_t *rng, unsigned char *out, size_t outlen)</div></div>
|
|
<div class="ttc" id="ecmult__const_8h_html_a91d964b6d73b3bc6dbb913b4b2307288"><div class="ttname"><a href="ecmult__const_8h.html#a91d964b6d73b3bc6dbb913b4b2307288">secp256k1_ecmult_const</a></div><div class="ttdeci">static void secp256k1_ecmult_const(secp256k1_gej *r, const secp256k1_ge *a, const secp256k1_scalar *q)</div></div>
|
|
<div class="ttc" id="testrand__impl_8h_html"><div class="ttname"><a href="testrand__impl_8h.html">testrand_impl.h</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a93c275726298d7a59a4f027996a958b4"><div class="ttname"><a href="tests_8c.html#a93c275726298d7a59a4f027996a958b4">run_ecmult_constants</a></div><div class="ttdeci">void run_ecmult_constants(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02484">tests.c:2484</a></div></div>
|
|
<div class="ttc" id="ecmult_8h_html_aacf8b6ba48671daf24d549adb176366c"><div class="ttname"><a href="ecmult_8h.html#aacf8b6ba48671daf24d549adb176366c">secp256k1_ecmult</a></div><div class="ttdeci">static void secp256k1_ecmult(const secp256k1_ecmult_context *ctx, secp256k1_gej *r, const secp256k1_gej *a, const secp256k1_scalar *na, const secp256k1_scalar *ng)</div></div>
|
|
<div class="ttc" id="structsecp256k1__callback_html_ab53dda8f586b668b302a0955de4de44c"><div class="ttname"><a href="structsecp256k1__callback.html#ab53dda8f586b668b302a0955de4de44c">secp256k1_callback::fn</a></div><div class="ttdeci">void(* fn)(const char *text, void *data)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_2src_2util_8h_source.html#l00019">util.h:19</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a25cc2d45ae1d1765d07c3313cdf46fa0"><div class="ttname"><a href="scalar_8h.html#a25cc2d45ae1d1765d07c3313cdf46fa0">secp256k1_scalar_set_b32</a></div><div class="ttdeci">static void secp256k1_scalar_set_b32(secp256k1_scalar *r, const unsigned char *bin, int *overflow)</div></div>
|
|
<div class="ttc" id="structsecp256k1__gej_html"><div class="ttname"><a href="structsecp256k1__gej.html">secp256k1_gej</a></div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00024">group.h:24</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a4bfba9980b6d6960ad623f1ddbbc547e"><div class="ttname"><a href="field_8h.html#a4bfba9980b6d6960ad623f1ddbbc547e">secp256k1_fe_set_int</a></div><div class="ttdeci">static void secp256k1_fe_set_int(secp256k1_fe *r, int a)</div></div>
|
|
<div class="ttc" id="Examples_8cpp_html_a936f4b586a8f869a9d0d197cc5110653"><div class="ttname"><a href="Examples_8cpp.html#a936f4b586a8f869a9d0d197cc5110653">sum</a></div><div class="ttdeci">volatile double sum</div><div class="ttdef"><b>Definition:</b> <a href="Examples_8cpp_source.html#l00023">Examples.cpp:23</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__context__struct_html"><div class="ttname"><a href="structsecp256k1__context__struct.html">secp256k1_context_struct</a></div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00053">secp256k1.c:53</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a90b7eac05cebf27de5b429888bb5beff"><div class="ttname"><a href="tests_8c.html#a90b7eac05cebf27de5b429888bb5beff">run_rand_bits</a></div><div class="ttdeci">void run_rand_bits(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00415">tests.c:415</a></div></div>
|
|
<div class="ttc" id="field_8h_html_ab2813c5c17c63e222d5a15a60f239b12"><div class="ttname"><a href="field_8h.html#ab2813c5c17c63e222d5a15a60f239b12">secp256k1_fe_to_storage</a></div><div class="ttdeci">static void secp256k1_fe_to_storage(secp256k1_fe_storage *r, const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a6e3e2f3948ab2013a46f0a356f1057ae"><div class="ttname"><a href="tests_8c.html#a6e3e2f3948ab2013a46f0a356f1057ae">ge_equals_ge</a></div><div class="ttdeci">void ge_equals_ge(const secp256k1_ge *a, const secp256k1_ge *b)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01692">tests.c:1692</a></div></div>
|
|
<div class="ttc" id="ecmult__gen_8h_html_afaf90b2a6554053187cdc89df0dafd21"><div class="ttname"><a href="ecmult__gen_8h.html#afaf90b2a6554053187cdc89df0dafd21">secp256k1_ecmult_gen_context_build</a></div><div class="ttdeci">static void secp256k1_ecmult_gen_context_build(secp256k1_ecmult_gen_context *ctx, const secp256k1_callback *cb)</div></div>
|
|
<div class="ttc" id="num_8h_html_a96a66a341ddf203e7dbf85d1cca1c178"><div class="ttname"><a href="num_8h.html#a96a66a341ddf203e7dbf85d1cca1c178">secp256k1_num_mod_inverse</a></div><div class="ttdeci">static void secp256k1_num_mod_inverse(secp256k1_num *r, const secp256k1_num *a, const secp256k1_num *m)</div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_abc4bd0d379fd229865df44284d5cfc3b"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#abc4bd0d379fd229865df44284d5cfc3b">secp256k1_hmac_sha256_initialize</a></div><div class="ttdeci">static void secp256k1_hmac_sha256_initialize(secp256k1_hmac_sha256_t *hash, const unsigned char *key, size_t size)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a0d34fe6baa73d3145f2e376e43de0b15"><div class="ttname"><a href="secp256k1_8h.html#a0d34fe6baa73d3145f2e376e43de0b15">SECP256K1_CONTEXT_SIGN</a></div><div class="ttdeci">#define SECP256K1_CONTEXT_SIGN</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8h_source.html#l00161">secp256k1.h:161</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_afee6025ad0daa3ed03a0e666a42bb0e7"><div class="ttname"><a href="tests_8c.html#afee6025ad0daa3ed03a0e666a42bb0e7">test_num_add_sub</a></div><div class="ttdeci">void test_num_add_sub(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00475">tests.c:475</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a8b33b5c265c09b165c29d92c05c641d8"><div class="ttname"><a href="tests_8c.html#a8b33b5c265c09b165c29d92c05c641d8">run_ecdsa_sign_verify</a></div><div class="ttdeci">void run_ecdsa_sign_verify(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03229">tests.c:3229</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_af038dec65d22bf5050a82de7b4ad4bca"><div class="ttname"><a href="tests_8c.html#af038dec65d22bf5050a82de7b4ad4bca">random_field_element_test</a></div><div class="ttdeci">void random_field_element_test(secp256k1_fe *fe)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00060">tests.c:60</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a0f9125cd8c970342ec5118f7bfacc0c5"><div class="ttname"><a href="secp256k1_8h.html#a0f9125cd8c970342ec5118f7bfacc0c5">secp256k1_ec_privkey_tweak_add</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_privkey_tweak_add(const secp256k1_context *ctx, unsigned char *seckey, const unsigned char *tweak) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00432">secp256k1.c:432</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_af668387a475fa94107e316b2ddc003cf"><div class="ttname"><a href="tests_8c.html#af668387a475fa94107e316b2ddc003cf">test_ec_combine</a></div><div class="ttdeci">void test_ec_combine(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02019">tests.c:2019</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a6cccf1ffe3b4863fec653e8bae8c0cb0"><div class="ttname"><a href="tests_8c.html#a6cccf1ffe3b4863fec653e8bae8c0cb0">test_num_negate</a></div><div class="ttdeci">void test_num_negate(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00455">tests.c:455</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a5c5253164e8444359849fd66e27bbe5a"><div class="ttname"><a href="tests_8c.html#a5c5253164e8444359849fd66e27bbe5a">random_sign</a></div><div class="ttdeci">void random_sign(secp256k1_scalar *sigr, secp256k1_scalar *sigs, const secp256k1_scalar *key, const secp256k1_scalar *msg, int *recid)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03199">tests.c:3199</a></div></div>
|
|
<div class="ttc" id="secp256k1_8c_html_a94e522f94c4819bebf8e854952eb6a8f"><div class="ttname"><a href="secp256k1_8c.html#a94e522f94c4819bebf8e854952eb6a8f">secp256k1_ecdsa_signature_save</a></div><div class="ttdeci">static void secp256k1_ecdsa_signature_save(secp256k1_ecdsa_signature *sig, const secp256k1_scalar *r, const secp256k1_scalar *s)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00206">secp256k1.c:206</a></div></div>
|
|
<div class="ttc" id="field__10x26_8h_html_a8c00ba3d97ea0d9b0d461463e890de15"><div class="ttname"><a href="field__10x26_8h.html#a8c00ba3d97ea0d9b0d461463e890de15">SECP256K1_FE_CONST</a></div><div class="ttdeci">#define SECP256K1_FE_CONST(d7, d6, d5, d4, d3, d2, d1, d0)</div><div class="ttdef"><b>Definition:</b> <a href="field__10x26_8h_source.html#l00038">field_10x26.h:38</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a375b2994cf6e867644abdf5ae3f93abe"><div class="ttname"><a href="tests_8c.html#a375b2994cf6e867644abdf5ae3f93abe">test_ecmult_gen_blind_reset</a></div><div class="ttdeci">void test_ecmult_gen_blind_reset(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02511">tests.c:2511</a></div></div>
|
|
<div class="ttc" id="group__impl_8h_html_aaf14c34acab0a279530f58c7e7d50749"><div class="ttname"><a href="group__impl_8h.html#aaf14c34acab0a279530f58c7e7d50749">secp256k1_gej_is_valid_var</a></div><div class="ttdeci">static int secp256k1_gej_is_valid_var(const secp256k1_gej *a)</div><div class="ttdef"><b>Definition:</b> <a href="group__impl_8h_source.html#l00219">group_impl.h:219</a></div></div>
|
|
<div class="ttc" id="group_8h_html_a2c6b24a2db08260d89e891eab7035b2c"><div class="ttname"><a href="group_8h.html#a2c6b24a2db08260d89e891eab7035b2c">secp256k1_gej_set_infinity</a></div><div class="ttdeci">static void secp256k1_gej_set_infinity(secp256k1_gej *r)</div></div>
|
|
<div class="ttc" id="eckey_8h_html_ae0cdb1eef2dc770d70aac0ad50a35e9a"><div class="ttname"><a href="eckey_8h.html#ae0cdb1eef2dc770d70aac0ad50a35e9a">secp256k1_eckey_pubkey_parse</a></div><div class="ttdeci">static int secp256k1_eckey_pubkey_parse(secp256k1_ge *elem, const unsigned char *pub, size_t size)</div></div>
|
|
<div class="ttc" id="field_8h_html_a7512f80b60598e4af89c004890880fc7"><div class="ttname"><a href="field_8h.html#a7512f80b60598e4af89c004890880fc7">secp256k1_fe_add</a></div><div class="ttdeci">static void secp256k1_fe_add(secp256k1_fe *r, const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_afaaf1ae17d14e976bb0d6d7c9393269f"><div class="ttname"><a href="tests_8c.html#afaaf1ae17d14e976bb0d6d7c9393269f">damage_array</a></div><div class="ttdeci">static void damage_array(unsigned char *sig, size_t *len)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03607">tests.c:3607</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a3f7b55267ed0d5135530283da6314416"><div class="ttname"><a href="field_8h.html#a3f7b55267ed0d5135530283da6314416">secp256k1_fe_mul_int</a></div><div class="ttdeci">static void secp256k1_fe_mul_int(secp256k1_fe *r, int a)</div></div>
|
|
<div class="ttc" id="namespaceoptimize-pngs_html_a98904564b461b52c82b042a4cbe21c0c"><div class="ttname"><a href="namespaceoptimize-pngs.html#a98904564b461b52c82b042a4cbe21c0c">optimize-pngs.stderr</a></div><div class="ttdeci">stderr</div><div class="ttdef"><b>Definition:</b> <a href="optimize-pngs_8py_source.html#l00052">optimize-pngs.py:52</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a7930deeb9d6815fba34afad98b8dfa69"><div class="ttname"><a href="tests_8c.html#a7930deeb9d6815fba34afad98b8dfa69">ge_equals_gej</a></div><div class="ttdeci">void ge_equals_gej(const secp256k1_ge *a, const secp256k1_gej *b)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01723">tests.c:1723</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a4657d3eea1cc59c7a20cc2d19663bf02"><div class="ttname"><a href="field_8h.html#a4657d3eea1cc59c7a20cc2d19663bf02">secp256k1_fe_is_odd</a></div><div class="ttdeci">static int secp256k1_fe_is_odd(const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="group_8h_html_a4d0338f50b08d082caa32f8e72707b55"><div class="ttname"><a href="group_8h.html#a4d0338f50b08d082caa32f8e72707b55">secp256k1_gej_add_ge_var</a></div><div class="ttdeci">static void secp256k1_gej_add_ge_var(secp256k1_gej *r, const secp256k1_gej *a, const secp256k1_ge *b, secp256k1_fe *rzr)</div></div>
|
|
<div class="ttc" id="namespacelinearize-data_html_af01cfbce273b138c21938509627f15aa"><div class="ttname"><a href="namespacelinearize-data.html#af01cfbce273b138c21938509627f15aa">linearize-data.m</a></div><div class="ttdeci">m</div><div class="ttdef"><b>Definition:</b> <a href="linearize-data_8py_source.html#l00260">linearize-data.py:260</a></div></div>
|
|
<div class="ttc" id="namespacegen__base58__test__vectors_html_a8d12b07536a476098e3d74b6a79dfc9a"><div class="ttname"><a href="namespacegen__base58__test__vectors.html#a8d12b07536a476098e3d74b6a79dfc9a">gen_base58_test_vectors.data</a></div><div class="ttdeci">data</div><div class="ttdef"><b>Definition:</b> <a href="gen__base58__test__vectors_8py_source.html#l00123">gen_base58_test_vectors.py:123</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a32498e86a99a258f68cd4b1176f47966"><div class="ttname"><a href="tests_8c.html#a32498e86a99a258f68cd4b1176f47966">run_eckey_edge_case_test</a></div><div class="ttdeci">void run_eckey_edge_case_test(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02963">tests.c:2963</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a2f9713526b1e988694c6e2026a6fce69"><div class="ttname"><a href="tests_8c.html#a2f9713526b1e988694c6e2026a6fce69">run_context_tests</a></div><div class="ttdeci">void run_context_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00136">tests.c:136</a></div></div>
|
|
<div class="ttc" id="group_8h_html_a033aa434a4d0838f649ad757dd44db46"><div class="ttname"><a href="group_8h.html#a033aa434a4d0838f649ad757dd44db46">secp256k1_gej_double_var</a></div><div class="ttdeci">static void secp256k1_gej_double_var(secp256k1_gej *r, const secp256k1_gej *a, secp256k1_fe *rzr)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_af8569fb9aa73c0acf46afce4df662950"><div class="ttname"><a href="secp256k1_8h.html#af8569fb9aa73c0acf46afce4df662950">secp256k1_context_destroy</a></div><div class="ttdeci">SECP256K1_API void secp256k1_context_destroy(secp256k1_context *ctx)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00094">secp256k1.c:94</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a1cb741ffd2cea46124f7abc2c506717a"><div class="ttname"><a href="tests_8c.html#a1cb741ffd2cea46124f7abc2c506717a">test_ecdsa_der_parse</a></div><div class="ttdeci">int test_ecdsa_der_parse(const unsigned char *sig, size_t siglen, int certainly_der, int certainly_not_der)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03485">tests.c:3485</a></div></div>
|
|
<div class="ttc" id="ecdh_2tests__impl_8h_html_aab6cd779f0b87dc8a7afdf4eaf873407"><div class="ttname"><a href="ecdh_2tests__impl_8h.html#aab6cd779f0b87dc8a7afdf4eaf873407">run_ecdh_tests</a></div><div class="ttdeci">void run_ecdh_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="ecdh_2tests__impl_8h_source.html#l00070">tests_impl.h:70</a></div></div>
|
|
<div class="ttc" id="group__impl_8h_html_ac2075a99877abe469ea60a119fe68e6c"><div class="ttname"><a href="group__impl_8h.html#ac2075a99877abe469ea60a119fe68e6c">secp256k1_ge_const_g</a></div><div class="ttdeci">static const secp256k1_ge secp256k1_ge_const_g</div><div class="ttdef"><b>Definition:</b> <a href="group__impl_8h_source.html#l00019">group_impl.h:19</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_afb738ef4c7077ce703c56beefcb29653"><div class="ttname"><a href="tests_8c.html#afb738ef4c7077ce703c56beefcb29653">run_field_inv_all_var</a></div><div class="ttdeci">void run_field_inv_all_var(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01604">tests.c:1604</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a7438071aa8a6dc4697abe4f4659f2161"><div class="ttname"><a href="secp256k1_8h.html#a7438071aa8a6dc4697abe4f4659f2161">secp256k1_ec_pubkey_create</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_create(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00409">secp256k1.c:409</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a72cd51f28d0b6b8e83edde291fb1bd75"><div class="ttname"><a href="tests_8c.html#a72cd51f28d0b6b8e83edde291fb1bd75">test_rand_int</a></div><div class="ttdeci">void test_rand_int(uint32_t range, uint32_t subrange)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00399">tests.c:399</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_ab8e25dc58843e83926f95795f9e8a6e2"><div class="ttname"><a href="secp256k1_8h.html#ab8e25dc58843e83926f95795f9e8a6e2">SECP256K1_EC_UNCOMPRESSED</a></div><div class="ttdeci">#define SECP256K1_EC_UNCOMPRESSED</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8h_source.html#l00166">secp256k1.h:166</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a7b8f642c65e8b5c81fa4421b7c42ab57"><div class="ttname"><a href="secp256k1_8h.html#a7b8f642c65e8b5c81fa4421b7c42ab57">SECP256K1_EC_COMPRESSED</a></div><div class="ttdeci">#define SECP256K1_EC_COMPRESSED</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8h_source.html#l00165">secp256k1.h:165</a></div></div>
|
|
<div class="ttc" id="ecmult__const__impl_8h_html_a23d9fb349265ae338b9977f7f7aab065"><div class="ttname"><a href="ecmult__const__impl_8h.html#a23d9fb349265ae338b9977f7f7aab065">WNAF_SIZE</a></div><div class="ttdeci">#define WNAF_SIZE(w)</div><div class="ttdef"><b>Definition:</b> <a href="ecmult__const__impl_8h_source.html#l00020">ecmult_const_impl.h:20</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a8d19fb29bd4c9d863572eba08e97af20"><div class="ttname"><a href="scalar_8h.html#a8d19fb29bd4c9d863572eba08e97af20">secp256k1_scalar_mul_shift_var</a></div><div class="ttdeci">static void secp256k1_scalar_mul_shift_var(secp256k1_scalar *r, const secp256k1_scalar *a, const secp256k1_scalar *b, unsigned int shift)</div></div>
|
|
<div class="ttc" id="tests_8c_html_add06855ef2be3d3b6a4506590a7b468e"><div class="ttname"><a href="tests_8c.html#add06855ef2be3d3b6a4506590a7b468e">run_rfc6979_hmac_sha256_tests</a></div><div class="ttdeci">void run_rfc6979_hmac_sha256_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00321">tests.c:321</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_ad83214628412557c86e3c1d01270c83a"><div class="ttname"><a href="tests_8c.html#ad83214628412557c86e3c1d01270c83a">run_field_inv_var</a></div><div class="ttdeci">void run_field_inv_var(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01592">tests.c:1592</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a15c58dba0f6924a65cfd4441083dbba8"><div class="ttname"><a href="tests_8c.html#a15c58dba0f6924a65cfd4441083dbba8">random_num_order</a></div><div class="ttdeci">void random_num_order(secp256k1_num *num)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00449">tests.c:449</a></div></div>
|
|
<div class="ttc" id="namespacefix-copyright-headers_html_aed10e06fbf20b2e50f73ff2d61f59e45"><div class="ttname"><a href="namespacefix-copyright-headers.html#aed10e06fbf20b2e50f73ff2d61f59e45">fix-copyright-headers.n</a></div><div class="ttdeci">int n</div><div class="ttdef"><b>Definition:</b> <a href="fix-copyright-headers_8py_source.html#l00046">fix-copyright-headers.py:46</a></div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_a27832ea2666bbf9e5c7a18559660e9da"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#a27832ea2666bbf9e5c7a18559660e9da">secp256k1_rfc6979_hmac_sha256_finalize</a></div><div class="ttdeci">static void secp256k1_rfc6979_hmac_sha256_finalize(secp256k1_rfc6979_hmac_sha256_t *rng)</div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_ab88a555e2b13d6d06e20a6a459abae08"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#ab88a555e2b13d6d06e20a6a459abae08">secp256k1_sha256_finalize</a></div><div class="ttdeci">static void secp256k1_sha256_finalize(secp256k1_sha256_t *hash, unsigned char *out32)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a24bd2af11fcef9c3f2abb62862d6fe97"><div class="ttname"><a href="tests_8c.html#a24bd2af11fcef9c3f2abb62862d6fe97">run_ec_pubkey_parse_test</a></div><div class="ttdeci">void run_ec_pubkey_parse_test(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02636">tests.c:2636</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_ac048cded7c9731249ada44d489a258d5"><div class="ttname"><a href="scalar_8h.html#ac048cded7c9731249ada44d489a258d5">secp256k1_scalar_inverse</a></div><div class="ttdeci">static void secp256k1_scalar_inverse(secp256k1_scalar *r, const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_ad636c10e982fafdb8f6ddeb3d1424b2d"><div class="ttname"><a href="tests_8c.html#ad636c10e982fafdb8f6ddeb3d1424b2d">run_field_inv</a></div><div class="ttdeci">void run_field_inv(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01580">tests.c:1580</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a366f922fc0c787351e82ff8e3a95f652"><div class="ttname"><a href="secp256k1_8h.html#a366f922fc0c787351e82ff8e3a95f652">secp256k1_ec_seckey_verify</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_seckey_verify(const secp256k1_context *ctx, const unsigned char *seckey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00395">secp256k1.c:395</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_ac3003b8a1d7eed5ebb0497a3f0dd97b6"><div class="ttname"><a href="tests_8c.html#ac3003b8a1d7eed5ebb0497a3f0dd97b6">run_ecmult_gen_blind</a></div><div class="ttdeci">void run_ecmult_gen_blind(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02523">tests.c:2523</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__num_html"><div class="ttname"><a href="structsecp256k1__num.html">secp256k1_num</a></div><div class="ttdef"><b>Definition:</b> <a href="num__gmp_8h_source.html#l00014">num_gmp.h:14</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_aed8d29b89e89ae8bf370483684b1f7d2"><div class="ttname"><a href="tests_8c.html#aed8d29b89e89ae8bf370483684b1f7d2">run_ecdsa_der_parse</a></div><div class="ttdeci">void run_ecdsa_der_parse(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03780">tests.c:3780</a></div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_adfccd8d918a52e1cec42ea89a4c3f8ab"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#adfccd8d918a52e1cec42ea89a4c3f8ab">secp256k1_sha256_write</a></div><div class="ttdeci">static void secp256k1_sha256_write(secp256k1_sha256_t *hash, const unsigned char *data, size_t size)</div></div>
|
|
<div class="ttc" id="structsecp256k1__ecmult__gen__context_html_af2f3064a367e86f936ab1c8b93d6f27e"><div class="ttname"><a href="structsecp256k1__ecmult__gen__context.html#af2f3064a367e86f936ab1c8b93d6f27e">secp256k1_ecmult_gen_context::blind</a></div><div class="ttdeci">secp256k1_scalar blind</div><div class="ttdef"><b>Definition:</b> <a href="ecmult__gen_8h_source.html#l00027">ecmult_gen.h:27</a></div></div>
|
|
<div class="ttc" id="num_8h_html_ad5ad0fd05f4f7d29d75f92fa540ede0a"><div class="ttname"><a href="num_8h.html#ad5ad0fd05f4f7d29d75f92fa540ede0a">secp256k1_num_sub</a></div><div class="ttdeci">static void secp256k1_num_sub(secp256k1_num *r, const secp256k1_num *a, const secp256k1_num *b)</div></div>
|
|
<div class="ttc" id="group_8h_html_a1cf9611464711ed63bde94d92ecc70de"><div class="ttname"><a href="group_8h.html#a1cf9611464711ed63bde94d92ecc70de">secp256k1_ge_set_table_gej_var</a></div><div class="ttdeci">static void secp256k1_ge_set_table_gej_var(size_t len, secp256k1_ge *r, const secp256k1_gej *a, const secp256k1_fe *zr)</div></div>
|
|
<div class="ttc" id="structsecp256k1__context__struct_html_aacc2071a68f9c5a6c05eb783f523b9eb"><div class="ttname"><a href="structsecp256k1__context__struct.html#aacc2071a68f9c5a6c05eb783f523b9eb">secp256k1_context_struct::ecmult_gen_ctx</a></div><div class="ttdeci">secp256k1_ecmult_gen_context ecmult_gen_ctx</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00055">secp256k1.c:55</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a3fb0153a38fe54783b46ab4bc39d9912"><div class="ttname"><a href="tests_8c.html#a3fb0153a38fe54783b46ab4bc39d9912">run_field_convert</a></div><div class="ttdeci">void run_field_convert(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01469">tests.c:1469</a></div></div>
|
|
<div class="ttc" id="scalar__4x64_8h_html_aacfea2d1debc522154567ac4ac7b4fc9"><div class="ttname"><a href="scalar__4x64_8h.html#aacfea2d1debc522154567ac4ac7b4fc9">SECP256K1_SCALAR_CONST</a></div><div class="ttdeci">#define SECP256K1_SCALAR_CONST(d7, d6, d5, d4, d3, d2, d1, d0)</div><div class="ttdef"><b>Definition:</b> <a href="scalar__4x64_8h_source.html#l00017">scalar_4x64.h:17</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a6744389614cf74a9b2c10c29e2ddba5c"><div class="ttname"><a href="tests_8c.html#a6744389614cf74a9b2c10c29e2ddba5c">run_num_smalltests</a></div><div class="ttdeci">void run_num_smalltests(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00503">tests.c:503</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_aa7d1b408b3e21121300c1a6348251ab2"><div class="ttname"><a href="tests_8c.html#aa7d1b408b3e21121300c1a6348251ab2">ecmult_const_mult_zero_one</a></div><div class="ttdeci">void ecmult_const_mult_zero_one(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02278">tests.c:2278</a></div></div>
|
|
<div class="ttc" id="group_8h_html_a767d4255b822bcd84f84d9b440b3af86"><div class="ttname"><a href="group_8h.html#a767d4255b822bcd84f84d9b440b3af86">secp256k1_ge_set_xquad_var</a></div><div class="ttdeci">static int secp256k1_ge_set_xquad_var(secp256k1_ge *r, const secp256k1_fe *x)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a06a3e29ada83211a695a49e8f7405842"><div class="ttname"><a href="tests_8c.html#a06a3e29ada83211a695a49e8f7405842">ctx</a></div><div class="ttdeci">static secp256k1_context * ctx</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00042">tests.c:42</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_aec6ef7189f31c2b9628cedf9154f6929"><div class="ttname"><a href="tests_8c.html#aec6ef7189f31c2b9628cedf9154f6929">run_ecmult_chain</a></div><div class="ttdeci">void run_ecmult_chain(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02109">tests.c:2109</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a7e817ef3d73f5d5b1dbf1ccffa0cf77b"><div class="ttname"><a href="tests_8c.html#a7e817ef3d73f5d5b1dbf1ccffa0cf77b">is_empty_signature</a></div><div class="ttdeci">int is_empty_signature(const secp256k1_ecdsa_signature *sig)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03283">tests.c:3283</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a691c048f3a3b4e7f51417c57ec058be7"><div class="ttname"><a href="secp256k1_8h.html#a691c048f3a3b4e7f51417c57ec058be7">secp256k1_ecdsa_sign</a></div><div class="ttdeci">SECP256K1_API int secp256k1_ecdsa_sign(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *msg32, const unsigned char *seckey, secp256k1_nonce_function noncefp, const void *ndata) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00349">secp256k1.c:349</a></div></div>
|
|
<div class="ttc" id="group_8h_html_aa511eebf8cd7419763f06555ed4fb62d"><div class="ttname"><a href="group_8h.html#aa511eebf8cd7419763f06555ed4fb62d">secp256k1_ge_set_gej</a></div><div class="ttdeci">static void secp256k1_ge_set_gej(secp256k1_ge *r, secp256k1_gej *a)</div></div>
|
|
<div class="ttc" id="structsecp256k1__gej_html_ab3ec8168caf27aa3a092d512eaadaad9"><div class="ttname"><a href="structsecp256k1__gej.html#ab3ec8168caf27aa3a092d512eaadaad9">secp256k1_gej::infinity</a></div><div class="ttdeci">int infinity</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00028">group.h:28</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a6b8df892995b6bb70db94dbbd6988d20"><div class="ttname"><a href="tests_8c.html#a6b8df892995b6bb70db94dbbd6988d20">VG_UNDEF</a></div><div class="ttdeci">#define VG_UNDEF(x, y)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00036">tests.c:36</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_aab66620cbbe49bec3c7c02f4a1219c05"><div class="ttname"><a href="scalar_8h.html#aab66620cbbe49bec3c7c02f4a1219c05">secp256k1_scalar_is_high</a></div><div class="ttdeci">static int secp256k1_scalar_is_high(const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="num_8h_html_a2a2407a291e6646a94ade2d5c90f961b"><div class="ttname"><a href="num_8h.html#a2a2407a291e6646a94ade2d5c90f961b">secp256k1_num_add</a></div><div class="ttdeci">static void secp256k1_num_add(secp256k1_num *r, const secp256k1_num *a, const secp256k1_num *b)</div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_a985f5f05c10dca7f592541d95c84081f"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#a985f5f05c10dca7f592541d95c84081f">secp256k1_hmac_sha256_write</a></div><div class="ttdeci">static void secp256k1_hmac_sha256_write(secp256k1_hmac_sha256_t *hash, const unsigned char *data, size_t size)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a0351b25239f1146573d62477c3b2119a"><div class="ttname"><a href="secp256k1_8h.html#a0351b25239f1146573d62477c3b2119a">secp256k1_ec_pubkey_tweak_mul</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_tweak_mul(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *tweak) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00503">secp256k1.c:503</a></div></div>
|
|
<div class="ttc" id="num_8h_html_adc4af999a060e6310b0fdeb99418b31c"><div class="ttname"><a href="num_8h.html#adc4af999a060e6310b0fdeb99418b31c">secp256k1_num_shift</a></div><div class="ttdeci">static void secp256k1_num_shift(secp256k1_num *r, int bits)</div></div>
|
|
<div class="ttc" id="scalar_8h_html_a2e65618baa17c59e89149a9f7e632f69"><div class="ttname"><a href="scalar_8h.html#a2e65618baa17c59e89149a9f7e632f69">secp256k1_scalar_sqr</a></div><div class="ttdeci">static void secp256k1_scalar_sqr(secp256k1_scalar *r, const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_a6f85fe02b7546db62cc03adb03613d16"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#a6f85fe02b7546db62cc03adb03613d16">secp256k1_hmac_sha256_finalize</a></div><div class="ttdeci">static void secp256k1_hmac_sha256_finalize(secp256k1_hmac_sha256_t *hash, unsigned char *out32)</div></div>
|
|
<div class="ttc" id="secp256k1_2src_2hash_8h_html_abcb6a95ed605c2bfb19eda1ced4a8f7e"><div class="ttname"><a href="secp256k1_2src_2hash_8h.html#abcb6a95ed605c2bfb19eda1ced4a8f7e">secp256k1_sha256_initialize</a></div><div class="ttdeci">static void secp256k1_sha256_initialize(secp256k1_sha256_t *hash)</div></div>
|
|
<div class="ttc" id="tests_8c_html_abf8379c326274c3162ebb26491a31611"><div class="ttname"><a href="tests_8c.html#abf8379c326274c3162ebb26491a31611">test_group_decompress</a></div><div class="ttdeci">void test_group_decompress(const secp256k1_fe *x)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02051">tests.c:2051</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_ab05096657be701bf9ca8616475bb9491"><div class="ttname"><a href="tests_8c.html#ab05096657be701bf9ca8616475bb9491">run_ecdsa_end_to_end</a></div><div class="ttdeci">void run_ecdsa_end_to_end(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03478">tests.c:3478</a></div></div>
|
|
<div class="ttc" id="num_8h_html_a3a5b983d5028a690f4446c10f78c2978"><div class="ttname"><a href="num_8h.html#a3a5b983d5028a690f4446c10f78c2978">secp256k1_num_mul</a></div><div class="ttdeci">static void secp256k1_num_mul(secp256k1_num *r, const secp256k1_num *a, const secp256k1_num *b)</div></div>
|
|
<div class="ttc" id="tests_8c_html_ad9c7802400ac86e07d8b5eb46055afaf"><div class="ttname"><a href="tests_8c.html#ad9c7802400ac86e07d8b5eb46055afaf">test_constant_wnaf_negate</a></div><div class="ttdeci">void test_constant_wnaf_negate(const secp256k1_scalar *number)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02367">tests.c:2367</a></div></div>
|
|
<div class="ttc" id="field_8h_html_adeed9551ce946187f98c5e3d789e9575"><div class="ttname"><a href="field_8h.html#adeed9551ce946187f98c5e3d789e9575">secp256k1_fe_sqrt_var</a></div><div class="ttdeci">static int secp256k1_fe_sqrt_var(secp256k1_fe *r, const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_ab33610b81949f135f12a8f2aab3dc192"><div class="ttname"><a href="tests_8c.html#ab33610b81949f135f12a8f2aab3dc192">ec_pubkey_parse_pointtest</a></div><div class="ttdeci">void ec_pubkey_parse_pointtest(const unsigned char *input, int xvalid, int yvalid)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02561">tests.c:2561</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a4e5dc8952c9a7e791376505ef2023ca1"><div class="ttname"><a href="secp256k1_8h.html#a4e5dc8952c9a7e791376505ef2023ca1">secp256k1_ec_pubkey_parse</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_parse(const secp256k1_context *ctx, secp256k1_pubkey *pubkey, const unsigned char *input, size_t inputlen) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00152">secp256k1.c:152</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_ad6596a0249548deb678f0b630204254f"><div class="ttname"><a href="scalar_8h.html#ad6596a0249548deb678f0b630204254f">secp256k1_scalar_cadd_bit</a></div><div class="ttdeci">static void secp256k1_scalar_cadd_bit(secp256k1_scalar *r, unsigned int bit, int flag)</div></div>
|
|
<div class="ttc" id="structsecp256k1__context__struct_html_ab6a825dd98cab724df0f0060cf515eab"><div class="ttname"><a href="structsecp256k1__context__struct.html#ab6a825dd98cab724df0f0060cf515eab">secp256k1_context_struct::ecmult_ctx</a></div><div class="ttdeci">secp256k1_ecmult_context ecmult_ctx</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00054">secp256k1.c:54</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__ge_html"><div class="ttname"><a href="structsecp256k1__ge.html">secp256k1_ge</a></div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00014">group.h:14</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__ecdsa__signature_html"><div class="ttname"><a href="structsecp256k1__ecdsa__signature.html">secp256k1_ecdsa_signature</a></div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8h_source.html#l00072">secp256k1.h:72</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__ge_html_a3c04a97b606c82ea87e55d4a06f06b6e"><div class="ttname"><a href="structsecp256k1__ge.html#a3c04a97b606c82ea87e55d4a06f06b6e">secp256k1_ge::x</a></div><div class="ttdeci">secp256k1_fe x</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00015">group.h:15</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a728a757d8960973603be6f3b2aa13f4e"><div class="ttname"><a href="field_8h.html#a728a757d8960973603be6f3b2aa13f4e">secp256k1_fe_inv_all_var</a></div><div class="ttdeci">static void secp256k1_fe_inv_all_var(size_t len, secp256k1_fe *r, const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_aebe6e77bbe66e58eb7d0230d9506dc61"><div class="ttname"><a href="tests_8c.html#aebe6e77bbe66e58eb7d0230d9506dc61">run_sqr</a></div><div class="ttdeci">void run_sqr(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01626">tests.c:1626</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a0aaec7df2f708a451a8e1f41a943d8b1"><div class="ttname"><a href="field_8h.html#a0aaec7df2f708a451a8e1f41a943d8b1">secp256k1_fe_normalize_weak</a></div><div class="ttdeci">static void secp256k1_fe_normalize_weak(secp256k1_fe *r)</div></div>
|
|
<div class="ttc" id="testrand_8h_html_a253bfecd8b27ee9e51ec9ae676c352be"><div class="ttname"><a href="testrand_8h.html#a253bfecd8b27ee9e51ec9ae676c352be">secp256k1_rand32</a></div><div class="ttdeci">static uint32_t secp256k1_rand32(void)</div></div>
|
|
<div class="ttc" id="group_8h_html_a34793cf48794f089bb28597d1a9f23b2"><div class="ttname"><a href="group_8h.html#a34793cf48794f089bb28597d1a9f23b2">secp256k1_ge_clear</a></div><div class="ttdeci">static void secp256k1_ge_clear(secp256k1_ge *r)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a4219659d3b30fc34dea25be22dccae04"><div class="ttname"><a href="tests_8c.html#a4219659d3b30fc34dea25be22dccae04">VG_CHECK</a></div><div class="ttdeci">#define VG_CHECK(x, y)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00037">tests.c:37</a></div></div>
|
|
<div class="ttc" id="key_8cpp_html_a4b55d97662f6589a6319c363469c501e"><div class="ttname"><a href="key_8cpp.html#a4b55d97662f6589a6319c363469c501e">ec_privkey_import_der</a></div><div class="ttdeci">static int ec_privkey_import_der(const secp256k1_context *ctx, unsigned char *out32, const unsigned char *privkey, size_t privkeylen)</div><div class="ttdef"><b>Definition:</b> <a href="key_8cpp_source.html#l00019">key.cpp:19</a></div></div>
|
|
<div class="ttc" id="schnorr_2tests__impl_8h_html"><div class="ttname"><a href="schnorr_2tests__impl_8h.html">tests_impl.h</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a279d9ab9cbf85037ed552544b15c69fd"><div class="ttname"><a href="tests_8c.html#a279d9ab9cbf85037ed552544b15c69fd">SECP256K1_EC_PARSE_TEST_NINVALID</a></div><div class="ttdeci">#define SECP256K1_EC_PARSE_TEST_NINVALID</div></div>
|
|
<div class="ttc" id="secp256k1_8c_html"><div class="ttname"><a href="secp256k1_8c.html">secp256k1.c</a></div></div>
|
|
<div class="ttc" id="num_8h_html_a678834381238e96e24f63c317740df95"><div class="ttname"><a href="num_8h.html#a678834381238e96e24f63c317740df95">secp256k1_num_negate</a></div><div class="ttdeci">static void secp256k1_num_negate(secp256k1_num *r)</div></div>
|
|
<div class="ttc" id="secp256k1_2src_2util_8h_html_aba1590ff86288c886c47dc8a27b30467"><div class="ttname"><a href="secp256k1_2src_2util_8h.html#aba1590ff86288c886c47dc8a27b30467">CHECK</a></div><div class="ttdeci">#define CHECK(cond)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_2src_2util_8h_source.html#l00052">util.h:52</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__scalar_html"><div class="ttname"><a href="structsecp256k1__scalar.html">secp256k1_scalar</a></div><div class="ttdef"><b>Definition:</b> <a href="scalar__4x64_8h_source.html#l00013">scalar_4x64.h:13</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a35106efb325f03468bcf5faa524c1cc4"><div class="ttname"><a href="secp256k1_8h.html#a35106efb325f03468bcf5faa524c1cc4">secp256k1_context_set_error_callback</a></div><div class="ttdeci">SECP256K1_API void secp256k1_context_set_error_callback(secp256k1_context *ctx, void(*fun)(const char *message, void *data), const void *data) SECP256K1_ARG_NONNULL(1)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00111">secp256k1.c:111</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__ge_html_a1cdb35fe7abf6f17c08e4375eeb26628"><div class="ttname"><a href="structsecp256k1__ge.html#a1cdb35fe7abf6f17c08e4375eeb26628">secp256k1_ge::infinity</a></div><div class="ttdeci">int infinity</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00017">group.h:17</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a520b78be2bca742daa8d5efa5c343291"><div class="ttname"><a href="scalar_8h.html#a520b78be2bca742daa8d5efa5c343291">secp256k1_scalar_cond_negate</a></div><div class="ttdeci">static int secp256k1_scalar_cond_negate(secp256k1_scalar *a, int flag)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a3c04138a5bfe5d72780bb7e82a18e627"><div class="ttname"><a href="tests_8c.html#a3c04138a5bfe5d72780bb7e82a18e627">main</a></div><div class="ttdeci">int main(int argc, char **argv)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l04252">tests.c:4252</a></div></div>
|
|
<div class="ttc" id="secp256k1_8c_html_af2027241c9dfc85fa5b6a3bb5fe41d18"><div class="ttname"><a href="secp256k1_8c.html#af2027241c9dfc85fa5b6a3bb5fe41d18">secp256k1_ecdsa_signature_load</a></div><div class="ttdeci">static void secp256k1_ecdsa_signature_load(const secp256k1_context *ctx, secp256k1_scalar *r, secp256k1_scalar *s, const secp256k1_ecdsa_signature *sig)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00192">secp256k1.c:192</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__sha256__t_html"><div class="ttname"><a href="structsecp256k1__sha256__t.html">secp256k1_sha256_t</a></div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_2src_2hash_8h_source.html#l00013">hash.h:13</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a57d390dd5baa54855b0cb20628034b90"><div class="ttname"><a href="secp256k1_8h.html#a57d390dd5baa54855b0cb20628034b90">secp256k1_ecdsa_signature_parse_der</a></div><div class="ttdeci">SECP256K1_API int secp256k1_ecdsa_signature_parse_der(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *input, size_t inputlen) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00216">secp256k1.c:216</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a2d74e805d6154620fef868e2319c99c9"><div class="ttname"><a href="tests_8c.html#a2d74e805d6154620fef868e2319c99c9">run_sha256_tests</a></div><div class="ttdeci">void run_sha256_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00241">tests.c:241</a></div></div>
|
|
<div class="ttc" id="namespacezmq__sub_html_ab82b53c595929ff5ab2d30ec91fd539a"><div class="ttname"><a href="namespacezmq__sub.html#ab82b53c595929ff5ab2d30ec91fd539a">zmq_sub.msg</a></div><div class="ttdeci">msg</div><div class="ttdef"><b>Definition:</b> <a href="zmq__sub_8py_source.html#l00022">zmq_sub.py:22</a></div></div>
|
|
<div class="ttc" id="lax__der__privatekey__parsing_8c_html"><div class="ttname"><a href="lax__der__privatekey__parsing_8c.html">lax_der_privatekey_parsing.c</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a4fa08f8af5a23f505b44c9ef1bec1831"><div class="ttname"><a href="scalar_8h.html#a4fa08f8af5a23f505b44c9ef1bec1831">secp256k1_scalar_get_b32</a></div><div class="ttdeci">static void secp256k1_scalar_get_b32(unsigned char *bin, const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="group_8h_html_a3c3d9154b093bb4ed48ba55e4c28a0b5"><div class="ttname"><a href="group_8h.html#a3c3d9154b093bb4ed48ba55e4c28a0b5">secp256k1_ge_set_xo_var</a></div><div class="ttdeci">static int secp256k1_ge_set_xo_var(secp256k1_ge *r, const secp256k1_fe *x, int odd)</div></div>
|
|
<div class="ttc" id="tests_8c_html_abbcb27d1eb13654db9b2e281ffce021e"><div class="ttname"><a href="tests_8c.html#abbcb27d1eb13654db9b2e281ffce021e">test_ecdsa_edge_cases</a></div><div class="ttdeci">void test_ecdsa_edge_cases(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03811">tests.c:3811</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a6cbe550ca5eb35e683b1c8d68d8de26b"><div class="ttname"><a href="field_8h.html#a6cbe550ca5eb35e683b1c8d68d8de26b">secp256k1_fe_sqr</a></div><div class="ttdeci">static void secp256k1_fe_sqr(secp256k1_fe *r, const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="group_8h_html_adb0cb248ca6d0aabe3a82423233e6ce3"><div class="ttname"><a href="group_8h.html#adb0cb248ca6d0aabe3a82423233e6ce3">SECP256K1_GE_CONST</a></div><div class="ttdeci">#define SECP256K1_GE_CONST(a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p)</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00020">group.h:20</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a5c86a65052e3b135919c00fe2233a43d"><div class="ttname"><a href="field_8h.html#a5c86a65052e3b135919c00fe2233a43d">secp256k1_fe_set_b32</a></div><div class="ttdeci">static int secp256k1_fe_set_b32(secp256k1_fe *r, const unsigned char *a)</div></div>
|
|
<div class="ttc" id="field_8h_html_af372f2088796ef5338bb43dbb6dd5277"><div class="ttname"><a href="field_8h.html#af372f2088796ef5338bb43dbb6dd5277">secp256k1_fe_cmp_var</a></div><div class="ttdeci">static int secp256k1_fe_cmp_var(const secp256k1_fe *a, const secp256k1_fe *b)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_add20a6c320e247ca7bd524cbc4259d64"><div class="ttname"><a href="secp256k1_8h.html#add20a6c320e247ca7bd524cbc4259d64">SECP256K1_CONTEXT_VERIFY</a></div><div class="ttdeci">#define SECP256K1_CONTEXT_VERIFY</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8h_source.html#l00160">secp256k1.h:160</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a74bdea41233e26f6348ebab5c660db90"><div class="ttname"><a href="secp256k1_8h.html#a74bdea41233e26f6348ebab5c660db90">secp256k1_context_clone</a></div><div class="ttdeci">SECP256K1_API secp256k1_context * secp256k1_context_clone(const secp256k1_context *ctx) SECP256K1_ARG_NONNULL(1) SECP256K1_WARN_UNUSED_RESULT</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00085">secp256k1.c:85</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a16ab4d0dd8bcb5da1b888288063014f3"><div class="ttname"><a href="field_8h.html#a16ab4d0dd8bcb5da1b888288063014f3">secp256k1_fe_equal_var</a></div><div class="ttdeci">static int secp256k1_fe_equal_var(const secp256k1_fe *a, const secp256k1_fe *b)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a92dafcbafa2a878e07b5ff22f573be7f"><div class="ttname"><a href="tests_8c.html#a92dafcbafa2a878e07b5ff22f573be7f">random_group_element_jacobian_test</a></div><div class="ttdeci">void random_group_element_jacobian_test(secp256k1_gej *gej, const secp256k1_ge *ge)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00095">tests.c:95</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html"><div class="ttname"><a href="secp256k1_8h.html">secp256k1.h</a></div></div>
|
|
<div class="ttc" id="schnorr_2tests__impl_8h_html_a6b31cc8facecda629cf588196a4c936b"><div class="ttname"><a href="schnorr_2tests__impl_8h.html#a6b31cc8facecda629cf588196a4c936b">run_schnorr_tests</a></div><div class="ttdeci">void run_schnorr_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="schnorr_2tests__impl_8h_source.html#l00159">tests_impl.h:159</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__scalar_html_a4aba1d263d205acdd537ed9a995393cd"><div class="ttname"><a href="structsecp256k1__scalar.html#a4aba1d263d205acdd537ed9a995393cd">secp256k1_scalar::d</a></div><div class="ttdeci">uint64_t d[4]</div><div class="ttdef"><b>Definition:</b> <a href="scalar__4x64_8h_source.html#l00014">scalar_4x64.h:14</a></div></div>
|
|
<div class="ttc" id="num_8h_html_a2ede1c020471b52d634890089c5374be"><div class="ttname"><a href="num_8h.html#a2ede1c020471b52d634890089c5374be">secp256k1_num_cmp</a></div><div class="ttdeci">static int secp256k1_num_cmp(const secp256k1_num *a, const secp256k1_num *b)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_ac07809ca872ec967ab4d3b1a95eafe0b"><div class="ttname"><a href="secp256k1_8h.html#ac07809ca872ec967ab4d3b1a95eafe0b">secp256k1_ecdsa_signature_serialize_der</a></div><div class="ttdeci">SECP256K1_API int secp256k1_ecdsa_signature_serialize_der(const secp256k1_context *ctx, unsigned char *output, size_t *outputlen, const secp256k1_ecdsa_signature *sig) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00253">secp256k1.c:253</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a51e09e6745e0afdb0d596ee0f4b3c3f7"><div class="ttname"><a href="tests_8c.html#a51e09e6745e0afdb0d596ee0f4b3c3f7">random_scalar_order_test</a></div><div class="ttdeci">void random_scalar_order_test(secp256k1_scalar *num)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00110">tests.c:110</a></div></div>
|
|
<div class="ttc" id="group_8h_html_a96ba360f6eb5f21c88e019e741a098ee"><div class="ttname"><a href="group_8h.html#a96ba360f6eb5f21c88e019e741a098ee">secp256k1_gej_rescale</a></div><div class="ttdeci">static void secp256k1_gej_rescale(secp256k1_gej *r, const secp256k1_fe *b)</div></div>
|
|
<div class="ttc" id="scalar_8h_html_a83257652850276cd74c7cdd1f9444d9c"><div class="ttname"><a href="scalar_8h.html#a83257652850276cd74c7cdd1f9444d9c">secp256k1_scalar_add</a></div><div class="ttdeci">static int secp256k1_scalar_add(secp256k1_scalar *r, const secp256k1_scalar *a, const secp256k1_scalar *b)</div></div>
|
|
<div class="ttc" id="testrand_8h_html_a70a3e97a30b94a77f4a59807ba01e6ba"><div class="ttname"><a href="testrand_8h.html#a70a3e97a30b94a77f4a59807ba01e6ba">secp256k1_rand_bits</a></div><div class="ttdeci">static uint32_t secp256k1_rand_bits(int bits)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a63a7c68b6b72356c59cfdaaab131c73b"><div class="ttname"><a href="tests_8c.html#a63a7c68b6b72356c59cfdaaab131c73b">random_group_element_test</a></div><div class="ttdeci">void random_group_element_test(secp256k1_ge *ge)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00084">tests.c:84</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a41cb11650e4dea0fe7ac5b59b9fce9dc"><div class="ttname"><a href="scalar_8h.html#a41cb11650e4dea0fe7ac5b59b9fce9dc">secp256k1_scalar_set_int</a></div><div class="ttdeci">static void secp256k1_scalar_set_int(secp256k1_scalar *r, unsigned int v)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a2aff2802eca3d15ec54298e879579897"><div class="ttname"><a href="secp256k1_8h.html#a2aff2802eca3d15ec54298e879579897">secp256k1_ecdsa_signature_parse_compact</a></div><div class="ttdeci">SECP256K1_API int secp256k1_ecdsa_signature_parse_compact(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *input64) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00232">secp256k1.c:232</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a58e84d0cabe81139df5c71759f833855"><div class="ttname"><a href="scalar_8h.html#a58e84d0cabe81139df5c71759f833855">secp256k1_scalar_inverse_var</a></div><div class="ttdeci">static void secp256k1_scalar_inverse_var(secp256k1_scalar *r, const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_af3c34e47a9088ad0f5f0df779303a85a"><div class="ttname"><a href="tests_8c.html#af3c34e47a9088ad0f5f0df779303a85a">run_wnaf</a></div><div class="ttdeci">void run_wnaf(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02427">tests.c:2427</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a2e747532c49b7e398aff44547a7ff477"><div class="ttname"><a href="tests_8c.html#a2e747532c49b7e398aff44547a7ff477">ecmult_const_random_mult</a></div><div class="ttdeci">void ecmult_const_random_mult(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02230">tests.c:2230</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a589ba162b5eadaf0ee1aebc22bb87705"><div class="ttname"><a href="tests_8c.html#a589ba162b5eadaf0ee1aebc22bb87705">random_ber_signature</a></div><div class="ttdeci">static void random_ber_signature(unsigned char *sig, size_t *len, int *certainly_der, int *certainly_not_der)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03634">tests.c:3634</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__gej_html_ae41776408dba32cbe28b5e345b5f2286"><div class="ttname"><a href="structsecp256k1__gej.html#ae41776408dba32cbe28b5e345b5f2286">secp256k1_gej::z</a></div><div class="ttdeci">secp256k1_fe z</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00027">group.h:27</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a4064b14fff65941d6f9046d53e900e89"><div class="ttname"><a href="tests_8c.html#a4064b14fff65941d6f9046d53e900e89">SECP256K1_EC_PARSE_TEST_NVALID</a></div><div class="ttdeci">#define SECP256K1_EC_PARSE_TEST_NVALID</div></div>
|
|
<div class="ttc" id="group_8h_html_ada58b0cf328a74cfdd1f8b35083668a1"><div class="ttname"><a href="group_8h.html#ada58b0cf328a74cfdd1f8b35083668a1">secp256k1_ge_set_all_gej_var</a></div><div class="ttdeci">static void secp256k1_ge_set_all_gej_var(size_t len, secp256k1_ge *r, const secp256k1_gej *a, const secp256k1_callback *cb)</div></div>
|
|
<div class="ttc" id="glibc__compat_8cpp_html_a0f46826ab0466591e136db24394923cf"><div class="ttname"><a href="glibc__compat_8cpp.html#a0f46826ab0466591e136db24394923cf">memcpy</a></div><div class="ttdeci">void * memcpy(void *a, const void *b, size_t c)</div><div class="ttdef"><b>Definition:</b> <a href="glibc__compat_8cpp_source.html#l00017">glibc_compat.cpp:17</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a786a875eccc29ad918255883d89f00a1"><div class="ttname"><a href="tests_8c.html#a786a875eccc29ad918255883d89f00a1">random_fe_test</a></div><div class="ttdeci">void random_fe_test(secp256k1_fe *x)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01423">tests.c:1423</a></div></div>
|
|
<div class="ttc" id="field_8h_html_a8e925e94d5a7330d2ae68f6642d0c7b9"><div class="ttname"><a href="field_8h.html#a8e925e94d5a7330d2ae68f6642d0c7b9">secp256k1_fe_normalize</a></div><div class="ttdeci">static void secp256k1_fe_normalize(secp256k1_fe *r)</div></div>
|
|
<div class="ttc" id="field__10x26_8h_html_ae6927483c41044bd04e5f8efb42f53ba"><div class="ttname"><a href="field__10x26_8h.html#ae6927483c41044bd04e5f8efb42f53ba">SECP256K1_FE_STORAGE_CONST</a></div><div class="ttdeci">#define SECP256K1_FE_STORAGE_CONST(d7, d6, d5, d4, d3, d2, d1, d0)</div><div class="ttdef"><b>Definition:</b> <a href="field__10x26_8h_source.html#l00045">field_10x26.h:45</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__hmac__sha256__t_html"><div class="ttname"><a href="structsecp256k1__hmac__sha256__t.html">secp256k1_hmac_sha256_t</a></div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_2src_2hash_8h_source.html#l00023">hash.h:23</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a9f741d7d63a637666b9884c5241abd00"><div class="ttname"><a href="tests_8c.html#a9f741d7d63a637666b9884c5241abd00">test_ecdsa_sign_verify</a></div><div class="ttdeci">void test_ecdsa_sign_verify(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03206">tests.c:3206</a></div></div>
|
|
<div class="ttc" id="ecdsa_8h_html_a6e24b57323f9c38b266c5e28b60c92bd"><div class="ttname"><a href="ecdsa_8h.html#a6e24b57323f9c38b266c5e28b60c92bd">secp256k1_ecdsa_sig_verify</a></div><div class="ttdeci">static int secp256k1_ecdsa_sig_verify(const secp256k1_ecmult_context *ctx, const secp256k1_scalar *r, const secp256k1_scalar *s, const secp256k1_ge *pubkey, const secp256k1_scalar *message)</div></div>
|
|
<div class="ttc" id="num_8h_html_ad15ded36e7a6704a702666bd2fd5cbff"><div class="ttname"><a href="num_8h.html#ad15ded36e7a6704a702666bd2fd5cbff">secp256k1_num_is_zero</a></div><div class="ttdeci">static int secp256k1_num_is_zero(const secp256k1_num *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a7f4f829c342ef68f7ca2a733ab9e9acf"><div class="ttname"><a href="tests_8c.html#a7f4f829c342ef68f7ca2a733ab9e9acf">precomputed_nonce_function</a></div><div class="ttdeci">static int precomputed_nonce_function(unsigned char *nonce32, const unsigned char *msg32, const unsigned char *key32, const unsigned char *algo16, void *data, unsigned int counter)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03237">tests.c:3237</a></div></div>
|
|
<div class="ttc" id="testrand_8h_html_ac6eab6443f98bba198f7df69e658173c"><div class="ttname"><a href="testrand_8h.html#ac6eab6443f98bba198f7df69e658173c">secp256k1_rand256</a></div><div class="ttdeci">static void secp256k1_rand256(unsigned char *b32)</div></div>
|
|
<div class="ttc" id="keccak_8c_html_a98a822ea2bafa14fb7b509f97b38b464"><div class="ttname"><a href="keccak_8c.html#a98a822ea2bafa14fb7b509f97b38b464">low</a></div><div class="ttdeci">sph_u32 low</div><div class="ttdef"><b>Definition:</b> <a href="keccak_8c_source.html#l00370">keccak.c:370</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_abede7dbe3b5a38a51b388d46f4c5b52d"><div class="ttname"><a href="scalar_8h.html#abede7dbe3b5a38a51b388d46f4c5b52d">secp256k1_scalar_get_bits_var</a></div><div class="ttdeci">static unsigned int secp256k1_scalar_get_bits_var(const secp256k1_scalar *a, unsigned int offset, unsigned int count)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a3fc9dc1908215215a68690ea1bfa8bcd"><div class="ttname"><a href="tests_8c.html#a3fc9dc1908215215a68690ea1bfa8bcd">test_ecdsa_end_to_end</a></div><div class="ttdeci">void test_ecdsa_end_to_end(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l03288">tests.c:3288</a></div></div>
|
|
<div class="ttc" id="field_8h_html_abb1017649be14b9ac1823be3c573e542"><div class="ttname"><a href="field_8h.html#abb1017649be14b9ac1823be3c573e542">secp256k1_fe_get_b32</a></div><div class="ttdeci">static void secp256k1_fe_get_b32(unsigned char *r, const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="group_8h_html_a586b55d5921edcd68799f584c0a3c58d"><div class="ttname"><a href="group_8h.html#a586b55d5921edcd68799f584c0a3c58d">secp256k1_gej_add_ge</a></div><div class="ttdeci">static void secp256k1_gej_add_ge(secp256k1_gej *r, const secp256k1_gej *a, const secp256k1_ge *b)</div></div>
|
|
<div class="ttc" id="namespacerpc-tests_html_a5634cc986fc764eff8c617f53bf2e8dc"><div class="ttname"><a href="namespacerpc-tests.html#a5634cc986fc764eff8c617f53bf2e8dc">rpc-tests.p</a></div><div class="ttdeci">p</div><div class="ttdef"><b>Definition:</b> <a href="rpc-tests_8py_source.html#l00049">rpc-tests.py:49</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_ad43c3812e6d13e0518d9f8b8f463ffcf"><div class="ttname"><a href="tests_8c.html#ad43c3812e6d13e0518d9f8b8f463ffcf">count</a></div><div class="ttdeci">static int count</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00041">tests.c:41</a></div></div>
|
|
<div class="ttc" id="secp256k1_8c_html_a9966ec041e71010d1593ae2211ffb843"><div class="ttname"><a href="secp256k1_8c.html#a9966ec041e71010d1593ae2211ffb843">secp256k1_pubkey_load</a></div><div class="ttdeci">static int secp256k1_pubkey_load(const secp256k1_context *ctx, secp256k1_ge *ge, const secp256k1_pubkey *pubkey)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00119">secp256k1.c:119</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__context__struct_html_aa34a996f869676899e8625adfb6c6f1d"><div class="ttname"><a href="structsecp256k1__context__struct.html#aa34a996f869676899e8625adfb6c6f1d">secp256k1_context_struct::error_callback</a></div><div class="ttdeci">secp256k1_callback error_callback</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00057">secp256k1.c:57</a></div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a4d9b18720afc67f3685a9f171bac6737"><div class="ttname"><a href="secp256k1_8h.html#a4d9b18720afc67f3685a9f171bac6737">secp256k1_ec_pubkey_combine</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ec_pubkey_combine(const secp256k1_context *ctx, secp256k1_pubkey *out, const secp256k1_pubkey *const *ins, size_t n) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00534">secp256k1.c:534</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_ab1b83b06f2b16b37ec472a91775d1a94"><div class="ttname"><a href="tests_8c.html#ab1b83b06f2b16b37ec472a91775d1a94">test_constant_wnaf</a></div><div class="ttdeci">void test_constant_wnaf(const secp256k1_scalar *number, int w)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02382">tests.c:2382</a></div></div>
|
|
<div class="ttc" id="num_8h_html_af30b363582f76292c16da36d8240bbed"><div class="ttname"><a href="num_8h.html#af30b363582f76292c16da36d8240bbed">secp256k1_num_mod</a></div><div class="ttdeci">static void secp256k1_num_mod(secp256k1_num *r, const secp256k1_num *m)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a4affe0b607e5c6beab553c6668f9ab34"><div class="ttname"><a href="tests_8c.html#a4affe0b607e5c6beab553c6668f9ab34">random_num_negate</a></div><div class="ttdeci">void random_num_negate(secp256k1_num *num)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00437">tests.c:437</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a4ae0ffabe31b809b14bc5e14e3f4e953"><div class="ttname"><a href="tests_8c.html#a4ae0ffabe31b809b14bc5e14e3f4e953">random_field_element_magnitude</a></div><div class="ttdeci">void random_field_element_magnitude(secp256k1_fe *fe)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00070">tests.c:70</a></div></div>
|
|
<div class="ttc" id="group_8h_html_ad5f813e26afb239f03e83f0e61e05498"><div class="ttname"><a href="group_8h.html#ad5f813e26afb239f03e83f0e61e05498">secp256k1_gej_set_ge</a></div><div class="ttdeci">static void secp256k1_gej_set_ge(secp256k1_gej *r, const secp256k1_ge *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_ab1ac8e94f017ab831c8c50cc7384fd87"><div class="ttname"><a href="tests_8c.html#ab1ac8e94f017ab831c8c50cc7384fd87">ecmult_const_commutativity</a></div><div class="ttdeci">void ecmult_const_commutativity(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02257">tests.c:2257</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_aca891583e3aabfd8139ca28e7d12e28d"><div class="ttname"><a href="tests_8c.html#aca891583e3aabfd8139ca28e7d12e28d">counting_illegal_callback_fn</a></div><div class="ttdeci">static void counting_illegal_callback_fn(const char *str, void *data)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00044">tests.c:44</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_ae0a527e6943a8aeeb762d6d386930148"><div class="ttname"><a href="tests_8c.html#ae0a527e6943a8aeeb762d6d386930148">random_num_order_test</a></div><div class="ttdeci">void random_num_order_test(secp256k1_num *num)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00443">tests.c:443</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a5f38325377d0160eb1c5100b1a4f1c0f"><div class="ttname"><a href="tests_8c.html#a5f38325377d0160eb1c5100b1a4f1c0f">ecmult_const_chain_multiply</a></div><div class="ttdeci">void ecmult_const_chain_multiply(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02300">tests.c:2300</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__gej_html_a29d5184060ad790d85a0c89a13820e0d"><div class="ttname"><a href="structsecp256k1__gej.html#a29d5184060ad790d85a0c89a13820e0d">secp256k1_gej::y</a></div><div class="ttdeci">secp256k1_fe y</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00026">group.h:26</a></div></div>
|
|
<div class="ttc" id="ecmult__impl_8h_html_a48a8b6bbead18d4475c8a29d28376c5b"><div class="ttname"><a href="ecmult__impl_8h.html#a48a8b6bbead18d4475c8a29d28376c5b">secp256k1_ecmult_wnaf</a></div><div class="ttdeci">static int secp256k1_ecmult_wnaf(int *wnaf, int len, const secp256k1_scalar *a, int w)</div><div class="ttdef"><b>Definition:</b> <a href="ecmult__impl_8h_source.html#l00218">ecmult_impl.h:218</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_a54e25150a9e06c01bcc4518b68aa288c"><div class="ttname"><a href="scalar_8h.html#a54e25150a9e06c01bcc4518b68aa288c">secp256k1_scalar_order_get_num</a></div><div class="ttdeci">static void secp256k1_scalar_order_get_num(secp256k1_num *r)</div></div>
|
|
<div class="ttc" id="structsecp256k1__fe__storage_html"><div class="ttname"><a href="structsecp256k1__fe__storage.html">secp256k1_fe_storage</a></div><div class="ttdef"><b>Definition:</b> <a href="field__10x26_8h_source.html#l00041">field_10x26.h:41</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_ab353fbc77d15cd48e25d995ea3f33795"><div class="ttname"><a href="tests_8c.html#ab353fbc77d15cd48e25d995ea3f33795">test_ecmult_gen_blind</a></div><div class="ttdeci">void test_ecmult_gen_blind(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02488">tests.c:2488</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a9ce0d67d2ba57bdc32e660cafcaaef2f"><div class="ttname"><a href="tests_8c.html#a9ce0d67d2ba57bdc32e660cafcaaef2f">gej_xyz_equals_gej</a></div><div class="ttdeci">int gej_xyz_equals_gej(const secp256k1_gej *a, const secp256k1_gej *b)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01702">tests.c:1702</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a3084bb11900a5e4d33115904d0ceb847"><div class="ttname"><a href="tests_8c.html#a3084bb11900a5e4d33115904d0ceb847">test_ge</a></div><div class="ttdeci">void test_ge(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01740">tests.c:1740</a></div></div>
|
|
<div class="ttc" id="namespaceextract__strings__qt_html_ab8166b91ad54a98ce8450593d2a3d827"><div class="ttname"><a href="namespaceextract__strings__qt.html#ab8166b91ad54a98ce8450593d2a3d827">extract_strings_qt.out</a></div><div class="ttdeci">out</div><div class="ttdef"><b>Definition:</b> <a href="extract__strings__qt_8py_source.html#l00056">extract_strings_qt.py:56</a></div></div>
|
|
<div class="ttc" id="group_8h_html_a83600b0c4d8e95a8b2e730b4e2f207dc"><div class="ttname"><a href="group_8h.html#a83600b0c4d8e95a8b2e730b4e2f207dc">secp256k1_ge_is_valid_var</a></div><div class="ttdeci">static int secp256k1_ge_is_valid_var(const secp256k1_ge *a)</div></div>
|
|
<div class="ttc" id="structsecp256k1__ge_html_a604295983a1f4aa6e8b5b0f1e46f9ee0"><div class="ttname"><a href="structsecp256k1__ge.html#a604295983a1f4aa6e8b5b0f1e46f9ee0">secp256k1_ge::y</a></div><div class="ttdeci">secp256k1_fe y</div><div class="ttdef"><b>Definition:</b> <a href="group_8h_source.html#l00016">group.h:16</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__ecmult__gen__context_html_a1ebfe4de83e25248ea9d989d06c9b069"><div class="ttname"><a href="structsecp256k1__ecmult__gen__context.html#a1ebfe4de83e25248ea9d989d06c9b069">secp256k1_ecmult_gen_context::initial</a></div><div class="ttdeci">secp256k1_gej initial</div><div class="ttdef"><b>Definition:</b> <a href="ecmult__gen_8h_source.html#l00028">ecmult_gen.h:28</a></div></div>
|
|
<div class="ttc" id="ecmult_8h_html_acc2494f319c79f6cc15982f43e7a6f00"><div class="ttname"><a href="ecmult_8h.html#acc2494f319c79f6cc15982f43e7a6f00">secp256k1_ecmult_context_build</a></div><div class="ttdeci">static void secp256k1_ecmult_context_build(secp256k1_ecmult_context *ctx, const secp256k1_callback *cb)</div></div>
|
|
<div class="ttc" id="testrand_8h_html_a5e49c3d0caa741c53ea23b4b0a6b0202"><div class="ttname"><a href="testrand_8h.html#a5e49c3d0caa741c53ea23b4b0a6b0202">secp256k1_rand_seed</a></div><div class="ttdeci">static SECP256K1_INLINE void secp256k1_rand_seed(const unsigned char *seed16)</div></div>
|
|
<div class="ttc" id="tests_8c_html_acb56afe8a17a3048470c0c299150a36a"><div class="ttname"><a href="tests_8c.html#acb56afe8a17a3048470c0c299150a36a">random_fe_non_square</a></div><div class="ttdeci">void random_fe_non_square(secp256k1_fe *ns)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01446">tests.c:1446</a></div></div>
|
|
<div class="ttc" id="glibc__compat_8cpp_html_a9778d49e9029dd75bc53ecbbf9f5e9a1"><div class="ttname"><a href="glibc__compat_8cpp.html#a9778d49e9029dd75bc53ecbbf9f5e9a1">memmove</a></div><div class="ttdeci">void * memmove(void *a, const void *b, size_t c)</div></div>
|
|
<div class="ttc" id="field_8h_html_a0090ecfb39b34a8965cc16ae1feca5aa"><div class="ttname"><a href="field_8h.html#a0090ecfb39b34a8965cc16ae1feca5aa">secp256k1_fe_inv_var</a></div><div class="ttdeci">static void secp256k1_fe_inv_var(secp256k1_fe *r, const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="num_8h_html_aada7ead84b86388284323f31b9d05bca"><div class="ttname"><a href="num_8h.html#aada7ead84b86388284323f31b9d05bca">secp256k1_num_get_bin</a></div><div class="ttdeci">static void secp256k1_num_get_bin(unsigned char *r, unsigned int rlen, const secp256k1_num *a)</div></div>
|
|
<div class="ttc" id="field_8h_html_a3a071aa04ce0d88003b059c0a8ee0c0e"><div class="ttname"><a href="field_8h.html#a3a071aa04ce0d88003b059c0a8ee0c0e">secp256k1_fe_inv</a></div><div class="ttdeci">static void secp256k1_fe_inv(secp256k1_fe *r, const secp256k1_fe *a)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a769d478f352afbb55200e33970533a3c"><div class="ttname"><a href="secp256k1_8h.html#a769d478f352afbb55200e33970533a3c">secp256k1_context_create</a></div><div class="ttdeci">SECP256K1_API secp256k1_context * secp256k1_context_create(unsigned int flags) SECP256K1_WARN_UNUSED_RESULT</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00060">secp256k1.c:60</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a394075284eed27ac8d87935f73d4c673"><div class="ttname"><a href="tests_8c.html#a394075284eed27ac8d87935f73d4c673">run_ec_combine</a></div><div class="ttdeci">void run_ec_combine(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02044">tests.c:2044</a></div></div>
|
|
<div class="ttc" id="ecmult__const__impl_8h_html_ac252ac4f8c905ddc178ce056bd45b8ec"><div class="ttname"><a href="ecmult__const__impl_8h.html#ac252ac4f8c905ddc178ce056bd45b8ec">secp256k1_wnaf_const</a></div><div class="ttdeci">static int secp256k1_wnaf_const(int *wnaf, secp256k1_scalar s, int w)</div><div class="ttdef"><b>Definition:</b> <a href="ecmult__const__impl_8h_source.html#l00057">ecmult_const_impl.h:57</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_acd831563a1c9edb9b7be83b206b51e4b"><div class="ttname"><a href="tests_8c.html#acd831563a1c9edb9b7be83b206b51e4b">uncounting_illegal_callback_fn</a></div><div class="ttdeci">static void uncounting_illegal_callback_fn(const char *str, void *data)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00052">tests.c:52</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_ad6c8109b62ea1d0ed1b382678a2a08b1"><div class="ttname"><a href="tests_8c.html#ad6c8109b62ea1d0ed1b382678a2a08b1">run_ecdsa_edge_cases</a></div><div class="ttdeci">void run_ecdsa_edge_cases(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l04180">tests.c:4180</a></div></div>
|
|
<div class="ttc" id="scalar_8h_html_aa1118b3273d3c9d15541f29373b93e97"><div class="ttname"><a href="scalar_8h.html#aa1118b3273d3c9d15541f29373b93e97">secp256k1_scalar_is_one</a></div><div class="ttdeci">static int secp256k1_scalar_is_one(const secp256k1_scalar *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_afbb9dd769d4d12035edc846bb697a0a3"><div class="ttname"><a href="tests_8c.html#afbb9dd769d4d12035edc846bb697a0a3">test_rand_bits</a></div><div class="ttdeci">void test_rand_bits(int rand32, int bits)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00364">tests.c:364</a></div></div>
|
|
<div class="ttc" id="recovery_2tests__impl_8h_html_a3a06f71955483e9502f3c408857407f2"><div class="ttname"><a href="recovery_2tests__impl_8h.html#a3a06f71955483e9502f3c408857407f2">run_recovery_tests</a></div><div class="ttdeci">void run_recovery_tests(void)</div><div class="ttdef"><b>Definition:</b> <a href="recovery_2tests__impl_8h_source.html#l00242">tests_impl.h:242</a></div></div>
|
|
<div class="ttc" id="num_8h_html_a15349a6540e199082bde2ce0466d82cb"><div class="ttname"><a href="num_8h.html#a15349a6540e199082bde2ce0466d82cb">secp256k1_num_is_neg</a></div><div class="ttdeci">static int secp256k1_num_is_neg(const secp256k1_num *a)</div></div>
|
|
<div class="ttc" id="tests_8c_html_a9fe4a53634c0f9e17b1f74e55ea8de99"><div class="ttname"><a href="tests_8c.html#a9fe4a53634c0f9e17b1f74e55ea8de99">check_fe_inverse</a></div><div class="ttdeci">int check_fe_inverse(const secp256k1_fe *a, const secp256k1_fe *ai)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l01462">tests.c:1462</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_afa8c0d29706dca1ca0cffb9b3bb6d209"><div class="ttname"><a href="tests_8c.html#afa8c0d29706dca1ca0cffb9b3bb6d209">SECP256K1_EC_PARSE_TEST_NXVALID</a></div><div class="ttdeci">#define SECP256K1_EC_PARSE_TEST_NXVALID</div></div>
|
|
<div class="ttc" id="namespaceextract__strings__qt_html_a1b7a78cde0039f63310f11692b713dca"><div class="ttname"><a href="namespaceextract__strings__qt.html#a1b7a78cde0039f63310f11692b713dca">extract_strings_qt.key</a></div><div class="ttdeci">key</div><div class="ttdef"><b>Definition:</b> <a href="extract__strings__qt_8py_source.html#l00073">extract_strings_qt.py:73</a></div></div>
|
|
<div class="ttc" id="pubkey_8cpp_html_acd68762de13ffb2c909fcf12acfea0fd"><div class="ttname"><a href="pubkey_8cpp.html#acd68762de13ffb2c909fcf12acfea0fd">ecdsa_signature_parse_der_lax</a></div><div class="ttdeci">static int ecdsa_signature_parse_der_lax(const secp256k1_context *ctx, secp256k1_ecdsa_signature *sig, const unsigned char *input, size_t inputlen)</div><div class="ttdef"><b>Definition:</b> <a href="pubkey_8cpp_source.html#l00026">pubkey.cpp:26</a></div></div>
|
|
<div class="ttc" id="ecdsa_8h_html_a313b6733f5b079162fa15332d4b2ef36"><div class="ttname"><a href="ecdsa_8h.html#a313b6733f5b079162fa15332d4b2ef36">secp256k1_ecdsa_sig_serialize</a></div><div class="ttdeci">static int secp256k1_ecdsa_sig_serialize(unsigned char *sig, size_t *size, const secp256k1_scalar *r, const secp256k1_scalar *s)</div></div>
|
|
<div class="ttc" id="tests_8c_html_accc1ed100e6e73e61ce30e82cf4f0bbb"><div class="ttname"><a href="tests_8c.html#accc1ed100e6e73e61ce30e82cf4f0bbb">run_point_times_order</a></div><div class="ttdeci">void run_point_times_order(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l02208">tests.c:2208</a></div></div>
|
|
<div class="ttc" id="tests_8c_html_a0ac2e9ed5b8ba27e48fba5150cebfa82"><div class="ttname"><a href="tests_8c.html#a0ac2e9ed5b8ba27e48fba5150cebfa82">scalar_test</a></div><div class="ttdeci">void scalar_test(void)</div><div class="ttdef"><b>Definition:</b> <a href="tests_8c_source.html#l00514">tests.c:514</a></div></div>
|
|
<div class="ttc" id="structsecp256k1__pubkey_html"><div class="ttname"><a href="structsecp256k1__pubkey.html">secp256k1_pubkey</a></div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8h_source.html#l00056">secp256k1.h:56</a></div></div>
|
|
<div class="ttc" id="testrand_8h_html_ac7dd7cc19d5d0ae9b50791656b57af7b"><div class="ttname"><a href="testrand_8h.html#ac7dd7cc19d5d0ae9b50791656b57af7b">secp256k1_rand256_test</a></div><div class="ttdeci">static void secp256k1_rand256_test(unsigned char *b32)</div></div>
|
|
<div class="ttc" id="secp256k1_8h_html_a41065390f9039c4140ec04999724987d"><div class="ttname"><a href="secp256k1_8h.html#a41065390f9039c4140ec04999724987d">secp256k1_ecdsa_verify</a></div><div class="ttdeci">SECP256K1_API SECP256K1_WARN_UNUSED_RESULT int secp256k1_ecdsa_verify(const secp256k1_context *ctx, const secp256k1_ecdsa_signature *sig, const unsigned char *msg32, const secp256k1_pubkey *pubkey) SECP256K1_ARG_NONNULL(1) SECP256K1_ARG_NONNULL(2) SECP256K1_ARG_NONNULL(3) SECP256K1_ARG_NONNULL(4)</div><div class="ttdef"><b>Definition:</b> <a href="secp256k1_8c_source.html#l00297">secp256k1.c:297</a></div></div>
|
|
</div><!-- fragment --></div><!-- contents -->
|
|
</div><!-- doc-content -->
|
|
<!-- start footer part -->
|
|
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
|
|
<ul>
|
|
<li class="navelem"><a class="el" href="dir_68267d1309a1af8e8297ef4c3efbcdba.html">src</a></li><li class="navelem"><a class="el" href="dir_44f34d1e62fda08bdb4ca69ab2d205ae.html">secp256k1</a></li><li class="navelem"><a class="el" href="dir_8db2ef784512d48b2a7d00369dfaac28.html">src</a></li><li class="navelem"><a class="el" href="tests_8c.html">tests.c</a></li>
|
|
<li class="footer">Generated on Thu Dec 14 2017 13:15:09 for Dash Core by
|
|
<a href="http://www.doxygen.org/index.html">
|
|
<img class="footer" src="doxygen.png" alt="doxygen"/></a> 1.8.14 </li>
|
|
</ul>
|
|
</div>
|
|
</body>
|
|
</html>
|