ed448.h

/* 2020-2026 Quantum Resistant Cryptographic Solutions Corporation
 * All Rights Reserved.
 *
 * NOTICE:
 * This software and all accompanying materials are the exclusive property of
 * Quantum Resistant Cryptographic Solutions Corporation (QRCS). The intellectual
 * and technical concepts contained herein are proprietary to QRCS and are
 * protected under applicable Canadian, U.S., and international copyright,
 * patent, and trade secret laws.
 *
 * CRYPTOGRAPHIC ALGORITHMS AND IMPLEMENTATIONS:
 * - This software includes implementations of cryptographic primitives and
 *   algorithms that are standardized or in the public domain, such as AES
 *   and SHA-3, which are not proprietary to QRCS.
 * - This software also includes cryptographic primitives, constructions, and
 *   algorithms designed by QRCS, including but not limited to RCS, SCB, CSX, QMAC, and
 *   related components, which are proprietary to QRCS.
 * - All source code, implementations, protocol compositions, optimizations,
 *   parameter selections, and engineering work contained in this software are
 *   original works of QRCS and are protected under this license.
 *
 * LICENSE AND USE RESTRICTIONS:
 * - This software is licensed under the Quantum Resistant Cryptographic Solutions
 *   Public Research and Evaluation License (QRCS-PREL), 2025-2026.
 * - Permission is granted solely for non-commercial evaluation, academic research,
 *   cryptographic analysis, interoperability testing, and feasibility assessment.
 * - Commercial use, production deployment, commercial redistribution, or
 *   integration into products or services is strictly prohibited without a
 *   separate written license agreement executed with QRCS.
 * - Licensing and authorized distribution are solely at the discretion of QRCS.
 *
 * EXPERIMENTAL CRYPTOGRAPHY NOTICE:
 * Portions of this software may include experimental, novel, or evolving
 * cryptographic designs. Use of this software is entirely at the user's risk.
 *
 * DISCLAIMER:
 * THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS
 * FOR A PARTICULAR PURPOSE, SECURITY, OR NON-INFRINGEMENT. QRCS DISCLAIMS ALL
 * LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES
 * ARISING FROM THE USE OR MISUSE OF THIS SOFTWARE.
 *
 * FULL LICENSE:
 * This software is subject to the Quantum Resistant Cryptographic Solutions
 * Public Research and Evaluation License (QRCS-PREL), 2025-2026. The complete license terms
 * are provided in the accompanying LICENSE file or at https://www.qrcscorp.ca.
 *
 * Written by: John G. Underhill
 * Contact: contact@qrcscorp.ca
 */
 
#ifndef QSC_ED448_H
#define QSC_ED448_H
 
#include "qsccommon.h"
 
/* \cond NO_DOCUMENT */
 
QSC_CPLUSPLUS_ENABLED_START


#define ED448_SEED_SIZE 57U

#define ED448_SIGNATURE_SIZE 114U

#define ED448_PUBLICKEY_SIZE 57U

#define ED448_PRIVATEKEY_SIZE 114U

#define ED448_CURVE_SIZE 56U

typedef int32_t qsc_fe448[16U];

typedef struct
{
    qsc_fe448 x; 
    qsc_fe448 y; 
    qsc_fe448 z; 
} qsc_ge448_p2;

typedef struct
{
    qsc_fe448 x; 
    qsc_fe448 y; 
    qsc_fe448 z; 
    qsc_fe448 t; 
} qsc_ge448_p3;

typedef struct
{
    qsc_fe448 x; 
    qsc_fe448 y; 
    qsc_fe448 z; 
    qsc_fe448 t; 
} qsc_ge448_p1p1;

typedef struct
{
    qsc_fe448 yplusx;  
    qsc_fe448 yminusx; 
    qsc_fe448 xy2d;    
} qsc_ge448_precomp;

typedef struct
{
    qsc_fe448 yplusx;  
    qsc_fe448 yminusx; 
    qsc_fe448 z;       
    qsc_fe448 t2d;     
} qsc_ge448_cached;
 
/* ------------------------------------------------------------------ */
/* Field element arithmetic                                            */
/* ------------------------------------------------------------------ */

void qsc_fe448_0(qsc_fe448 h);

void qsc_fe448_1(qsc_fe448 h);

void qsc_fe448_copy(qsc_fe448 h, const qsc_fe448 f);

void qsc_fe448_add(qsc_fe448 h, const qsc_fe448 f, const qsc_fe448 g);

void qsc_fe448_sub(qsc_fe448 h, const qsc_fe448 f, const qsc_fe448 g);

void qsc_fe448_neg(qsc_fe448 h, const qsc_fe448 f);

void qsc_fe448_cswap(qsc_fe448 f, qsc_fe448 g, uint32_t b);

void qsc_fe448_cmov(qsc_fe448 f, const qsc_fe448 g, uint32_t b);

int32_t qsc_fe448_is_negative(const qsc_fe448 f);

int32_t qsc_fe448_is_zero(const qsc_fe448 f);

void qsc_fe448_mul(qsc_fe448 h, const qsc_fe448 f, const qsc_fe448 g);

void qsc_fe448_mul32(qsc_fe448 h, const qsc_fe448 f, uint32_t n);

void qsc_fe448_sq(qsc_fe448 h, const qsc_fe448 f);

void qsc_fe448_sq2(qsc_fe448 h, const qsc_fe448 f);

void qsc_fe448_from_bytes(qsc_fe448 h, const uint8_t* s);

void qsc_fe448_reduce(qsc_fe448 h, const qsc_fe448 f);

void qsc_fe448_to_bytes(uint8_t* s, const qsc_fe448 h);

void qsc_fe448_invert(qsc_fe448 out, const qsc_fe448 z);
 
/* ------------------------------------------------------------------ */
/* Group element operations                                            */
/* ------------------------------------------------------------------ */

void qsc_ge448_p1p1_to_p3(qsc_ge448_p3* r, const qsc_ge448_p1p1* p);

void qsc_ge448_p1p1_to_p2(qsc_ge448_p2* r, const qsc_ge448_p1p1* p);

void qsc_ge448_scalarmult_base(qsc_ge448_p3* h, const uint8_t* a);

void qsc_ge448_p3_to_bytes(uint8_t* s, const qsc_ge448_p3* h);

int32_t qsc_ge448_is_canonical(const uint8_t* s);

int32_t qsc_ge448_has_small_order(const uint8_t s[57U]);

int32_t qsc_ge448_from_bytes_negate_vartime(qsc_ge448_p3* h, const uint8_t* s);

void qsc_ge448_p3_to_cached(qsc_ge448_cached* r, const qsc_ge448_p3* p);

void qsc_ge448_add_cached(qsc_ge448_p1p1* r, const qsc_ge448_p3* p, const qsc_ge448_cached* q);

void qsc_ge448_sub_cached(qsc_ge448_p1p1* r, const qsc_ge448_p3* p, const qsc_ge448_cached* q);

void qsc_ge448_add_precomp(qsc_ge448_p1p1* r, const qsc_ge448_p3* p, const qsc_ge448_precomp* q);

void qsc_ge448_sub_precomp(qsc_ge448_p1p1* r, const qsc_ge448_p3* p, const qsc_ge448_precomp* q);

void qsc_ge448_double_scalarmult_vartime(qsc_ge448_p2* r, const uint8_t* a,
    const qsc_ge448_p3* A, const uint8_t* b);

void qsc_ge448_to_bytes(uint8_t* s, const qsc_ge448_p2* h);
 
/* ------------------------------------------------------------------ */
/* Scalar arithmetic                                                   */
/* ------------------------------------------------------------------ */

void qsc_sc448_clamp(uint8_t* k);

int32_t qsc_ed448_small_order(const uint8_t s[57U]);

int32_t qsc_sc448_is_canonical(const uint8_t s[57U]);

void qsc_sc448_muladd(uint8_t s[57U], const uint8_t a[57U], const uint8_t b[57U],
    const uint8_t c[57U]);

void qsc_sc448_reduce(uint8_t s[114U]);

int32_t qsc_sc448_verify(const uint8_t* x, const uint8_t* y, size_t n);
 
QSC_CPLUSPLUS_ENABLED_END
 
/* \endcond NO_DOCUMENT */
 
#endif