mirror of
https://github.com/emmansun/gmsm.git
synced 2025-05-11 03:26:17 +08:00
Updated SM2 WWMM (2) (markdown)
parent
8346a1d1ad
commit
dd2e16d3b2
@ -585,20 +585,7 @@ $T_2=T_1 \ast O=Y \ast O= Y \ast 2^{256}-(Y \ast 2^{32}) \ast 2^{192} - Y \ast 2
|
||||
$T_3=T + T_2=t_4 \ast 2^{256} + t_3 \ast 2^{192} + t_2 \ast 2^{128} + t_1 \ast 2^{64} + t_0 + Y \ast 2^{256}-(Y \ast 2^{32}) \ast 2^{192} - Y \ast 2^{128} + (Y \ast O_1) \ast 2^{64} + (Y \ast O_0) $
|
||||
$T_3=(t_4+Y) \ast 2^{256}+(t_3 - Y \ast 2^{32}) \ast 2^{192} + (t_2 - Y) \ast 2^{128} + (t_1 + Y \ast O_1) \ast 2^{64} + (t_0 + Y \ast O_0) $
|
||||
|
||||
|
||||
先处理加法,后处理减法,后五个加法是带进位加法
|
||||
$t_0=t_0 + Y \ast O_0$
|
||||
$t_1=t_1 + Y \ast O_1$
|
||||
$t_2=t_2 + 0$
|
||||
$t_3=t_3 + 0$
|
||||
$t_4=t_4 + t_0$
|
||||
$t_5=0 + 0$
|
||||
|
||||
接着处理减法,假定a<sub>0</sub>是 $Y \ast 2^{32}$ 的低64位,a<sub>1</sub>是 $Y \ast 2^{32}$ 的高64位。后四个减法是带借位减法:
|
||||
$t_2=t_2 - Y$
|
||||
$t_3=t_3 - a_0$
|
||||
$t_4=t_4 - a_1$
|
||||
$t_5=t_5 - 0$
|
||||
**依然采用先减后加!**
|
||||
|
||||
伪代码:
|
||||
```asm
|
||||
|
Loading…
x
Reference in New Issue
Block a user