ed25519.h

/* 2020-2026 Quantum Resistant Cryptographic Solutions Corporation
 * All Rights Reserved.
 *
 * NOTICE:
 * This software and all accompanying materials are the exclusive property of
 * Quantum Resistant Cryptographic Solutions Corporation (QRCS). The intellectual
 * and technical concepts contained herein are proprietary to QRCS and are
 * protected under applicable Canadian, U.S., and international copyright,
 * patent, and trade secret laws.
 *
 * CRYPTOGRAPHIC ALGORITHMS AND IMPLEMENTATIONS:
 * - This software includes implementations of cryptographic primitives and
 *   algorithms that are standardized or in the public domain, such as AES
 *   and SHA-3, which are not proprietary to QRCS.
 * - This software also includes cryptographic primitives, constructions, and
 *   algorithms designed by QRCS, including but not limited to RCS, SCB, CSX, QMAC, and
 *   related components, which are proprietary to QRCS.
 * - All source code, implementations, protocol compositions, optimizations,
 *   parameter selections, and engineering work contained in this software are
 *   original works of QRCS and are protected under this license.
 *
 * LICENSE AND USE RESTRICTIONS:
 * - This software is licensed under the Quantum Resistant Cryptographic Solutions
 *   Public Research and Evaluation License (QRCS-PREL), 2025-2026.
 * - Permission is granted solely for non-commercial evaluation, academic research,
 *   cryptographic analysis, interoperability testing, and feasibility assessment.
 * - Commercial use, production deployment, commercial redistribution, or
 *   integration into products or services is strictly prohibited without a
 *   separate written license agreement executed with QRCS.
 * - Licensing and authorized distribution are solely at the discretion of QRCS.
 *
 * EXPERIMENTAL CRYPTOGRAPHY NOTICE:
 * Portions of this software may include experimental, novel, or evolving
 * cryptographic designs. Use of this software is entirely at the user's risk.
 *
 * DISCLAIMER:
 * THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS
 * FOR A PARTICULAR PURPOSE, SECURITY, OR NON-INFRINGEMENT. QRCS DISCLAIMS ALL
 * LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES
 * ARISING FROM THE USE OR MISUSE OF THIS SOFTWARE.
 *
 * FULL LICENSE:
 * This software is subject to the Quantum Resistant Cryptographic Solutions
 * Public Research and Evaluation License (QRCS-PREL), 2025-2026. The complete license terms
 * are provided in the accompanying LICENSE file or at https://www.qrcscorp.ca.
 *
 * Written by: John G. Underhill
 * Contact: contact@qrcscorp.ca
 */
 
#ifndef QSC_ED25519_H
#define QSC_ED25519_H
 
#include "qsccommon.h"
 
 /* \cond NO_DOCUMENT */
 
QSC_CPLUSPLUS_ENABLED_START


#define ED25519_SEED_SIZE 32U

#define ED25519_SIGNATURE_SIZE 64U

#define ED25519_PUBLICKEY_SIZE 32U

#define ED25519_PRIVATEKEY_SIZE 64U

#define ED25519_CURVE_SIZE 32U

typedef int32_t qsc_fe25519[10U];

typedef struct 
{
    qsc_fe25519 x; 
    qsc_fe25519 y; 
    qsc_fe25519 z; 
} qsc_ge25519_p2;

typedef struct 
{
    qsc_fe25519 x; 
    qsc_fe25519 y; 
    qsc_fe25519 z; 
    qsc_fe25519 t; 
} qsc_ge25519_p3;

typedef struct 
{
    qsc_fe25519 x; 
    qsc_fe25519 y; 
    qsc_fe25519 z; 
    qsc_fe25519 t; 
} qsc_ge25519_p1p1;

typedef struct 
{
    qsc_fe25519 yplusx;  
    qsc_fe25519 yminusx; 
    qsc_fe25519 xy2d;    
} qsc_ge25519_precomp;

typedef struct 
{
    qsc_fe25519 yplusx; 
    qsc_fe25519 yminusx;
    qsc_fe25519 z;      
    qsc_fe25519 t2d;    
} qsc_ge25519_cached;

void qsc_fe25519_0(qsc_fe25519 h);

void qsc_fe25519_1(qsc_fe25519 h);

void qsc_fe25519_copy(qsc_fe25519 h, const qsc_fe25519 f);

void qsc_fe25519_add(qsc_fe25519 h, const qsc_fe25519 f, const qsc_fe25519 g);

void qsc_fe25519_cswap(qsc_fe25519 f, qsc_fe25519 g, uint32_t b);

void qsc_fe25519_sub(qsc_fe25519 h, const qsc_fe25519 f, const qsc_fe25519 g);

void qsc_fe25519_neg(qsc_fe25519 h, const qsc_fe25519 f);

void qsc_fe25519_cmov(qsc_fe25519 f, const qsc_fe25519 g, uint32_t b);

int32_t qsc_fe25519_is_negative(const qsc_fe25519 f);

int32_t qsc_fe25519_is_zero(const qsc_fe25519 f);

void qsc_fe25519_mul(qsc_fe25519 h, const qsc_fe25519 f, const qsc_fe25519 g);

void qsc_fe25519_mul32(qsc_fe25519 h, const qsc_fe25519 f, uint32_t n);

void qsc_fe25519_sq(qsc_fe25519 h, const qsc_fe25519 f);

void qsc_fe25519_sq2(qsc_fe25519 h, const qsc_fe25519 f);

void qsc_fe25519_from_bytes(qsc_fe25519 h, const uint8_t* s);

void qsc_fe25519_reduce(qsc_fe25519 h, const qsc_fe25519 f);

void qsc_fe25519_to_bytes(uint8_t* s, const qsc_fe25519 h);

void qsc_fe25519_invert(qsc_fe25519 out, const qsc_fe25519 z);

void qsc_ge25519_p1p1_to_p3(qsc_ge25519_p3* r, const qsc_ge25519_p1p1* p);

void qsc_ge25519_p1p1_to_p2(qsc_ge25519_p2* r, const qsc_ge25519_p1p1* p);

void qsc_ge25519_scalarmult_base(qsc_ge25519_p3* h, const uint8_t* a);

void qsc_ge25519_p3_to_bytes(uint8_t* s, const qsc_ge25519_p3* h);

int32_t qsc_ge25519_is_canonical(const uint8_t* s);

int32_t qsc_ge25519_has_small_order(const uint8_t s[32U]);

int32_t qsc_ge25519_from_bytes_negate_vartime(qsc_ge25519_p3* h, const uint8_t* s);

void qsc_ge25519_p3_to_cached(qsc_ge25519_cached* r, const qsc_ge25519_p3* p);

void qsc_ge25519_add_cached(qsc_ge25519_p1p1* r, const qsc_ge25519_p3* p, const qsc_ge25519_cached* q);

void qsc_ge25519_sub_precomp(qsc_ge25519_p1p1* r, const qsc_ge25519_p3* p, const qsc_ge25519_precomp* q);

void qsc_ge25519_double_scalarmult_vartime(qsc_ge25519_p2* r, const uint8_t* a, const qsc_ge25519_p3* A, const uint8_t* b);

void qsc_ge25519_sub_cached(qsc_ge25519_p1p1* r, const qsc_ge25519_p3* p, const qsc_ge25519_cached* q);

void qsc_ge25519_to_bytes(uint8_t* s, const qsc_ge25519_p2* h);

void qsc_sc25519_clamp(uint8_t* k);

int32_t qsc_ed25519_small_order(const uint8_t s[32U]);

int32_t qsc_sc25519_is_canonical(const uint8_t s[32U]);

void qsc_sc25519_muladd(uint8_t s[32U], const uint8_t a[32U], const uint8_t b[32U], const uint8_t c[32U]);

void qsc_sc25519_reduce(uint8_t s[64U]);

int32_t qsc_sc25519_verify(const uint8_t* x, const uint8_t* y, const size_t n);
 
QSC_CPLUSPLUS_ENABLED_END
 
/* \endcond NO_DOCUMENT */
 
#endif