tree 8eebe7fd374850e49fbfe9a862e973bc299b9f1c
parent e7b56750157ad9fcf40e58c22acc436bc4e9a9b9
author David Benjamin <davidben@google.com> 1612130579 -0500
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1614289933 +0000

Rearrange ECDSA implementation.

The extra computation in the "setup" half is a remnant of
ECDSA_sign_setup, which was designed to amortize the message-independent
portion of the signature. We don't care about this amortization, but we
do want some control over k for testing. Instead, have ecdsa_sign_impl
take k and do the rest.

In doing so, this lets us compute m and kinv slightly later, which means
fewer temporaries are needed.

Bug: 391
Change-Id: I398004a5388ce5b7e839db6c36edf8464643d16f
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/45866
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>