tree 86d59f7de4f77a359efc5693b91ea22d5a941790
parent 8f574c37dae935a29bff56e750101e5b354503de
author David Benjamin <davidben@google.com> 1560535775 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1560549647 +0000

Split p224-64.c multiplication functions in three.

See I9c20b660ce4b58dc633588cfd5b2e97a40203ec3 for motivation. This aligns with
the other curves. In doing so, I removed the constant-time table lookups from
mul_public because it was easy, which gave a small performance improvement. I
did not further use ec_compute_wNAF, on the assumption that we do not care
enough about P-224 ECDSA performance to bother.

Before:
Did 63756 ECDSA P-224 verify operations in 5032477us (12668.9 ops/sec)
After:
Did 71914 ECDSA P-224 verify operations in 5042356us (14262.0 ops/sec) [+12.5%]

Change-Id: Ifd20293aca09e578c85d4692294caffc1b287909
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/36464
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>