psa_generator_import_key (ECC): minor corrections
This commit is contained in:
parent
2de2c0d9ce
commit
5579971cb1
1 changed files with 3 additions and 3 deletions
|
@ -2941,10 +2941,10 @@ psa_status_t psa_generator_read(psa_crypto_generator_t *generator,
|
||||||
* in big-endian order. Discard it if it is not in the range
|
* in big-endian order. Discard it if it is not in the range
|
||||||
* [0, *N* - 2] where *N* is the boundary of the private key domain
|
* [0, *N* - 2] where *N* is the boundary of the private key domain
|
||||||
* (the prime *p* for Diffie-Hellman, the subprime *q* for DSA,
|
* (the prime *p* for Diffie-Hellman, the subprime *q* for DSA,
|
||||||
* or the order of the curve's coordinate field for ECC).
|
* or the order of the curve's base point for ECC).
|
||||||
* Add 1 to the resulting integer and use this as the private key *x*.
|
* Add 1 to the resulting integer and use this as the private key *x*.
|
||||||
* This is the method described as
|
* This method allows compliance to NIST standards, specifically
|
||||||
* "key-pair generation by testing candidates"
|
* the methods titled "key-pair generation by testing candidates"
|
||||||
* in NIST SP 800-56A §5.6.1.1.4 for Diffie-Hellman,
|
* in NIST SP 800-56A §5.6.1.1.4 for Diffie-Hellman,
|
||||||
* in FIPS 186-4 §B.1.2 for DSA, and
|
* in FIPS 186-4 §B.1.2 for DSA, and
|
||||||
* in NIST SP 800-56A §5.6.1.2.2 or
|
* in NIST SP 800-56A §5.6.1.2.2 or
|
||||||
|
|
Loading…
Reference in a new issue