32 	struct sae_temporary_data *tmp;  in sae_set_group()  local
35 	tmp = sae->tmp = os_zalloc(sizeof(*tmp));  in sae_set_group()
36 	if (tmp == NULL)  in sae_set_group()
40 	tmp->ec = crypto_ec_init(group);  in sae_set_group()
41 	if (tmp->ec) {  in sae_set_group()
45 		tmp->prime_len = crypto_ec_prime_len(tmp->ec);  in sae_set_group()
46 		tmp->prime = crypto_ec_get_prime(tmp->ec);  in sae_set_group()
47 		tmp->order = crypto_ec_get_order(tmp->ec);  in sae_set_group()
52 	tmp->dh = dh_groups_get(group);  in sae_set_group()
53 	if (tmp->dh) {  in sae_set_group()
57 		tmp->prime_len = tmp->dh->prime_len;  in sae_set_group()
58 		if (tmp->prime_len > SAE_MAX_PRIME_LEN) {  in sae_set_group()
63 		tmp->prime_buf = crypto_bignum_init_set(tmp->dh->prime,  in sae_set_group()
64 							tmp->prime_len);  in sae_set_group()
65 		if (tmp->prime_buf == NULL) {  in sae_set_group()
69 		tmp->prime = tmp->prime_buf;  in sae_set_group()
71 		tmp->order_buf = crypto_bignum_init_set(tmp->dh->order,  in sae_set_group()
72 							tmp->dh->order_len);  in sae_set_group()
73 		if (tmp->order_buf == NULL) {  in sae_set_group()
77 		tmp->order = tmp->order_buf;  in sae_set_group()
90 	struct sae_temporary_data *tmp;  in sae_clear_temp_data()  local
91 	if (sae == NULL || sae->tmp == NULL)  in sae_clear_temp_data()
93 	tmp = sae->tmp;  in sae_clear_temp_data()
94 	crypto_ec_deinit(tmp->ec);  in sae_clear_temp_data()
95 	crypto_bignum_deinit(tmp->prime_buf, 0);  in sae_clear_temp_data()
96 	crypto_bignum_deinit(tmp->order_buf, 0);  in sae_clear_temp_data()
97 	crypto_bignum_deinit(tmp->sae_rand, 1);  in sae_clear_temp_data()
98 	crypto_bignum_deinit(tmp->pwe_ffc, 1);  in sae_clear_temp_data()
99 	crypto_bignum_deinit(tmp->own_commit_scalar, 0);  in sae_clear_temp_data()
100 	crypto_bignum_deinit(tmp->own_commit_element_ffc, 0);  in sae_clear_temp_data()
101 	crypto_bignum_deinit(tmp->peer_commit_element_ffc, 0);  in sae_clear_temp_data()
102 	crypto_ec_point_deinit(tmp->pwe_ecc, 1);  in sae_clear_temp_data()
103 	crypto_ec_point_deinit(tmp->own_commit_element_ecc, 0);  in sae_clear_temp_data()
104 	crypto_ec_point_deinit(tmp->peer_commit_element_ecc, 0);  in sae_clear_temp_data()
105 	os_free(tmp->pw_id);  in sae_clear_temp_data()
106 	bin_clear_free(tmp, sizeof(*tmp));  in sae_clear_temp_data()
107 	sae->tmp = NULL;  in sae_clear_temp_data()
132 	int order_len_bits = crypto_bignum_bits(sae->tmp->order);  in sae_get_rand()
148 		    crypto_bignum_cmp(bn, sae->tmp->order) >= 0) {  in sae_get_rand()
161 	crypto_bignum_deinit(sae->tmp->sae_rand, 1);  in sae_get_rand_and_mask()
162 	sae->tmp->sae_rand = sae_get_rand(sae);  in sae_get_rand_and_mask()
163 	if (sae->tmp->sae_rand == NULL)  in sae_get_rand_and_mask()
187 		u8 tmp[SAE_MAX_ECC_PRIME_LEN];  in get_rand_1_to_p_1()  local
189 		if (random_get_bytes(tmp, prime_len) < 0)  in get_rand_1_to_p_1()
192 			buf_shift_right(tmp, prime_len, 8 - prime_bits % 8);  in get_rand_1_to_p_1()
193 		if (os_memcmp(tmp, prime, prime_len) >= 0)  in get_rand_1_to_p_1()
195 		r = crypto_bignum_init_set(tmp, prime_len);  in get_rand_1_to_p_1()
203 		*r_odd = tmp[prime_len - 1] & 0x01;  in get_rand_1_to_p_1()
228 	r = get_rand_1_to_p_1(prime, sae->tmp->prime_len, bits, &r_odd);  in is_quadratic_residue_blind()
234 	    crypto_bignum_mulmod(y_sqr, r, sae->tmp->prime, num) < 0 ||  in is_quadratic_residue_blind()
235 	    crypto_bignum_mulmod(num, r, sae->tmp->prime, num) < 0)  in is_quadratic_residue_blind()
243 		if (crypto_bignum_mulmod(num, qr, sae->tmp->prime, num) < 0)  in is_quadratic_residue_blind()
251 		if (crypto_bignum_mulmod(num, qnr, sae->tmp->prime, num) < 0)  in is_quadratic_residue_blind()
256 	res = crypto_bignum_legendre(num, sae->tmp->prime);  in is_quadratic_residue_blind()
284 	bits = crypto_ec_prime_len_bits(sae->tmp->ec);  in sae_test_pwd_seed_ecc()
286 			    prime, sae->tmp->prime_len, pwd_value, bits) < 0)  in sae_test_pwd_seed_ecc()
291 			pwd_value, sae->tmp->prime_len);  in sae_test_pwd_seed_ecc()
293 	if (os_memcmp(pwd_value, prime, sae->tmp->prime_len) >= 0)  in sae_test_pwd_seed_ecc()
296 	x_cand = crypto_bignum_init_set(pwd_value, sae->tmp->prime_len);  in sae_test_pwd_seed_ecc()
299 	y_sqr = crypto_ec_point_compute_y_sqr(sae->tmp->ec, x_cand);  in sae_test_pwd_seed_ecc()
320 	size_t bits = sae->tmp->prime_len * 8;  in sae_test_pwd_seed_ffc()
329 			    sae->tmp->dh->prime, sae->tmp->prime_len, pwd_value,  in sae_test_pwd_seed_ffc()
333 			sae->tmp->prime_len);  in sae_test_pwd_seed_ffc()
335 	if (os_memcmp(pwd_value, sae->tmp->dh->prime, sae->tmp->prime_len) >= 0)  in sae_test_pwd_seed_ffc()
343 	a = crypto_bignum_init_set(pwd_value, sae->tmp->prime_len);  in sae_test_pwd_seed_ffc()
345 	if (sae->tmp->dh->safe_prime) {  in sae_test_pwd_seed_ffc()
357 		    crypto_bignum_sub(sae->tmp->prime, b, b) < 0 ||  in sae_test_pwd_seed_ffc()
358 		    crypto_bignum_div(b, sae->tmp->order, b) < 0) {  in sae_test_pwd_seed_ffc()
367 		res = crypto_bignum_exptmod(a, b, sae->tmp->prime, pwe);  in sae_test_pwd_seed_ffc()
396 		u8 tmp[SAE_MAX_ECC_PRIME_LEN];  in get_random_qr_qnr()  local
400 		if (random_get_bytes(tmp, prime_len) < 0)  in get_random_qr_qnr()
403 			buf_shift_right(tmp, prime_len, 8 - prime_bits % 8);  in get_random_qr_qnr()
404 		if (os_memcmp(tmp, prime, prime_len) >= 0)  in get_random_qr_qnr()
406 		q = crypto_bignum_init_set(tmp, prime_len);  in get_random_qr_qnr()
446 	prime_len = sae->tmp->prime_len;  in sae_derive_pwe_ecc()
447 	if (crypto_bignum_to_bin(sae->tmp->prime, prime, sizeof(prime),  in sae_derive_pwe_ecc()
450 	bits = crypto_ec_prime_len_bits(sae->tmp->ec);  in sae_derive_pwe_ecc()
456 	if (get_random_qr_qnr(prime, prime_len, sae->tmp->prime, bits,  in sae_derive_pwe_ecc()
535 	if (!sae->tmp->pwe_ecc)  in sae_derive_pwe_ecc()
536 		sae->tmp->pwe_ecc = crypto_ec_point_init(sae->tmp->ec);  in sae_derive_pwe_ecc()
537 	if (!sae->tmp->pwe_ecc)  in sae_derive_pwe_ecc()
540 		res = crypto_ec_point_solve_y_coord(sae->tmp->ec,  in sae_derive_pwe_ecc()
541 						    sae->tmp->pwe_ecc, x,  in sae_derive_pwe_ecc()
570 	if (sae->tmp->pwe_ffc == NULL) {  in sae_derive_pwe_ffc()
571 		sae->tmp->pwe_ffc = crypto_bignum_init();  in sae_derive_pwe_ffc()
572 		if (sae->tmp->pwe_ffc == NULL)  in sae_derive_pwe_ffc()
612 		res = sae_test_pwd_seed_ffc(sae, pwd_seed, sae->tmp->pwe_ffc);  in sae_derive_pwe_ffc()
628 	if (!sae->tmp->own_commit_element_ecc) {  in sae_derive_commit_element_ecc()
629 		sae->tmp->own_commit_element_ecc =  in sae_derive_commit_element_ecc()
630 			crypto_ec_point_init(sae->tmp->ec);  in sae_derive_commit_element_ecc()
631 		if (!sae->tmp->own_commit_element_ecc)  in sae_derive_commit_element_ecc()
635 	if (crypto_ec_point_mul(sae->tmp->ec, sae->tmp->pwe_ecc, mask,  in sae_derive_commit_element_ecc()
636 				sae->tmp->own_commit_element_ecc) < 0 ||  in sae_derive_commit_element_ecc()
637 	    crypto_ec_point_invert(sae->tmp->ec,  in sae_derive_commit_element_ecc()
638 				   sae->tmp->own_commit_element_ecc) < 0) {  in sae_derive_commit_element_ecc()
650 	if (!sae->tmp->own_commit_element_ffc) {  in sae_derive_commit_element_ffc()
651 		sae->tmp->own_commit_element_ffc = crypto_bignum_init();  in sae_derive_commit_element_ffc()
652 		if (!sae->tmp->own_commit_element_ffc)  in sae_derive_commit_element_ffc()
656 	if (crypto_bignum_exptmod(sae->tmp->pwe_ffc, mask, sae->tmp->prime,  in sae_derive_commit_element_ffc()
657 				  sae->tmp->own_commit_element_ffc) < 0 ||  in sae_derive_commit_element_ffc()
658 	    crypto_bignum_inverse(sae->tmp->own_commit_element_ffc,  in sae_derive_commit_element_ffc()
659 				  sae->tmp->prime,  in sae_derive_commit_element_ffc()
660 				  sae->tmp->own_commit_element_ffc) < 0) {  in sae_derive_commit_element_ffc()
696 		if (!sae->tmp->own_commit_scalar) {  in sae_derive_commit()
697 			sae->tmp->own_commit_scalar = crypto_bignum_init();  in sae_derive_commit()
698 			if (!sae->tmp->own_commit_scalar)  in sae_derive_commit()
701 		crypto_bignum_add(sae->tmp->sae_rand, mask,  in sae_derive_commit()
702 				  sae->tmp->own_commit_scalar);  in sae_derive_commit()
703 		crypto_bignum_mod(sae->tmp->own_commit_scalar, sae->tmp->order,  in sae_derive_commit()
704 				  sae->tmp->own_commit_scalar);  in sae_derive_commit()
705 	} while (crypto_bignum_is_zero(sae->tmp->own_commit_scalar) ||  in sae_derive_commit()
706 		 crypto_bignum_is_one(sae->tmp->own_commit_scalar));  in sae_derive_commit()
708 	if ((sae->tmp->ec && sae_derive_commit_element_ecc(sae, mask) < 0) ||  in sae_derive_commit()
709 	    (sae->tmp->dh && sae_derive_commit_element_ffc(sae, mask) < 0))  in sae_derive_commit()
722 	if (sae->tmp == NULL ||  in sae_prepare_commit()
723 	    (sae->tmp->ec && sae_derive_pwe_ecc(sae, addr1, addr2, password,  in sae_prepare_commit()
726 	    (sae->tmp->dh && sae_derive_pwe_ffc(sae, addr1, addr2, password,  in sae_prepare_commit()
739 	K = crypto_ec_point_init(sae->tmp->ec);  in sae_derive_k_ecc()
750 	if (crypto_ec_point_mul(sae->tmp->ec, sae->tmp->pwe_ecc,  in sae_derive_k_ecc()
752 	    crypto_ec_point_add(sae->tmp->ec, K,  in sae_derive_k_ecc()
753 				sae->tmp->peer_commit_element_ecc, K) < 0 ||  in sae_derive_k_ecc()
754 	    crypto_ec_point_mul(sae->tmp->ec, K, sae->tmp->sae_rand, K) < 0 ||  in sae_derive_k_ecc()
755 	    crypto_ec_point_is_at_infinity(sae->tmp->ec, K) ||  in sae_derive_k_ecc()
756 	    crypto_ec_point_to_bin(sae->tmp->ec, K, k, NULL) < 0) {  in sae_derive_k_ecc()
761 	wpa_hexdump_key(MSG_DEBUG, "SAE: k", k, sae->tmp->prime_len);  in sae_derive_k_ecc()
785 	if (crypto_bignum_exptmod(sae->tmp->pwe_ffc, sae->peer_commit_scalar,  in sae_derive_k_ffc()
786 				  sae->tmp->prime, K) < 0 ||  in sae_derive_k_ffc()
787 	    crypto_bignum_mulmod(K, sae->tmp->peer_commit_element_ffc,  in sae_derive_k_ffc()
788 				 sae->tmp->prime, K) < 0 ||  in sae_derive_k_ffc()
789 	    crypto_bignum_exptmod(K, sae->tmp->sae_rand, sae->tmp->prime, K) < 0  in sae_derive_k_ffc()
792 	    crypto_bignum_to_bin(K, k, SAE_MAX_PRIME_LEN, sae->tmp->prime_len) <  in sae_derive_k_ffc()
798 	wpa_hexdump_key(MSG_DEBUG, "SAE: k", k, sae->tmp->prime_len);  in sae_derive_k_ffc()
811 	struct crypto_bignum *tmp;  in sae_derive_keys()  local
814 	tmp = crypto_bignum_init();  in sae_derive_keys()
815 	if (tmp == NULL)  in sae_derive_keys()
825 	hmac_sha256(null_key, sizeof(null_key), k, sae->tmp->prime_len,  in sae_derive_keys()
829 	crypto_bignum_add(sae->tmp->own_commit_scalar, sae->peer_commit_scalar,  in sae_derive_keys()
830 			  tmp);  in sae_derive_keys()
831 	crypto_bignum_mod(tmp, sae->tmp->order, tmp);  in sae_derive_keys()
832 	crypto_bignum_to_bin(tmp, val, sizeof(val), sae->tmp->prime_len);  in sae_derive_keys()
835 		       val, sae->tmp->prime_len, keys, sizeof(keys)) < 0)  in sae_derive_keys()
838 	os_memcpy(sae->tmp->kck, keys, SAE_KCK_LEN);  in sae_derive_keys()
842 	wpa_hexdump_key(MSG_DEBUG, "SAE: KCK", sae->tmp->kck, SAE_KCK_LEN);  in sae_derive_keys()
847 	crypto_bignum_deinit(tmp, 0);  in sae_derive_keys()
854 	if (sae->tmp == NULL ||  in sae_process_commit()
855 	    (sae->tmp->ec && sae_derive_k_ecc(sae, k) < 0) ||  in sae_process_commit()
856 	    (sae->tmp->dh && sae_derive_k_ffc(sae, k) < 0) ||  in sae_process_commit()
867 	if (sae->tmp == NULL)  in sae_write_commit()
876 	pos = wpabuf_put(buf, sae->tmp->prime_len);  in sae_write_commit()
877 	if (crypto_bignum_to_bin(sae->tmp->own_commit_scalar, pos,  in sae_write_commit()
878 				 sae->tmp->prime_len, sae->tmp->prime_len) < 0) {  in sae_write_commit()
883 		    pos, sae->tmp->prime_len);  in sae_write_commit()
884 	if (sae->tmp->ec) {  in sae_write_commit()
885 		pos = wpabuf_put(buf, 2 * sae->tmp->prime_len);  in sae_write_commit()
886 		if (crypto_ec_point_to_bin(sae->tmp->ec,  in sae_write_commit()
887 					   sae->tmp->own_commit_element_ecc,  in sae_write_commit()
888 					   pos, pos + sae->tmp->prime_len) < 0) {  in sae_write_commit()
893 			    pos, sae->tmp->prime_len);  in sae_write_commit()
895 			    pos + sae->tmp->prime_len, sae->tmp->prime_len);  in sae_write_commit()
897 		pos = wpabuf_put(buf, sae->tmp->prime_len);  in sae_write_commit()
898 		if (crypto_bignum_to_bin(sae->tmp->own_commit_element_ffc, pos,  in sae_write_commit()
899 					 sae->tmp->prime_len, sae->tmp->prime_len) < 0) {  in sae_write_commit()
904 			    pos, sae->tmp->prime_len);  in sae_write_commit()
946 	if (sae->tmp == NULL) {  in sae_group_allowed()
951 	if (sae->tmp->dh && !allowed_groups) {  in sae_group_allowed()
983 	scalar_elem_len = (sae->tmp->ec ? 3 : 2) * sae->tmp->prime_len;  in sae_parse_commit_token()
1032 	if (sae->tmp->prime_len > end - *pos) {  in sae_parse_commit_scalar()
1037 	peer_scalar = crypto_bignum_init_set(*pos, sae->tmp->prime_len);  in sae_parse_commit_scalar()
1058 	    crypto_bignum_cmp(peer_scalar, sae->tmp->order) >= 0) {  in sae_parse_commit_scalar()
1067 		    *pos, sae->tmp->prime_len);  in sae_parse_commit_scalar()
1068 	*pos += sae->tmp->prime_len;  in sae_parse_commit_scalar()
1078 	if (2 * sae->tmp->prime_len > end - *pos) {  in sae_parse_commit_element_ecc()
1084 	if (crypto_bignum_to_bin(sae->tmp->prime, prime, sizeof(prime),  in sae_parse_commit_element_ecc()
1085 				 sae->tmp->prime_len) < 0)  in sae_parse_commit_element_ecc()
1089 	if (os_memcmp(*pos, prime, sae->tmp->prime_len) >= 0 ||  in sae_parse_commit_element_ecc()
1090 	    os_memcmp(*pos + sae->tmp->prime_len, prime,  in sae_parse_commit_element_ecc()
1091 		      sae->tmp->prime_len) >= 0) {  in sae_parse_commit_element_ecc()
1098 		    *pos, sae->tmp->prime_len);  in sae_parse_commit_element_ecc()
1100 		    *pos + sae->tmp->prime_len, sae->tmp->prime_len);  in sae_parse_commit_element_ecc()
1102 	crypto_ec_point_deinit(sae->tmp->peer_commit_element_ecc, 0);  in sae_parse_commit_element_ecc()
1103 	sae->tmp->peer_commit_element_ecc =  in sae_parse_commit_element_ecc()
1104 		crypto_ec_point_from_bin(sae->tmp->ec, *pos);  in sae_parse_commit_element_ecc()
1105 	if (sae->tmp->peer_commit_element_ecc == NULL)  in sae_parse_commit_element_ecc()
1108 	if (!crypto_ec_point_is_on_curve(sae->tmp->ec,  in sae_parse_commit_element_ecc()
1109 					 sae->tmp->peer_commit_element_ecc)) {  in sae_parse_commit_element_ecc()
1114 	*pos += 2 * sae->tmp->prime_len;  in sae_parse_commit_element_ecc()
1125 	if (sae->tmp->prime_len > end - *pos) {  in sae_parse_commit_element_ffc()
1131 		    sae->tmp->prime_len);  in sae_parse_commit_element_ffc()
1133 	crypto_bignum_deinit(sae->tmp->peer_commit_element_ffc, 0);  in sae_parse_commit_element_ffc()
1134 	sae->tmp->peer_commit_element_ffc =  in sae_parse_commit_element_ffc()
1135 		crypto_bignum_init_set(*pos, sae->tmp->prime_len);  in sae_parse_commit_element_ffc()
1136 	if (sae->tmp->peer_commit_element_ffc == NULL)  in sae_parse_commit_element_ffc()
1142 	    crypto_bignum_sub(sae->tmp->prime, one, res) ||  in sae_parse_commit_element_ffc()
1143 	    crypto_bignum_is_zero(sae->tmp->peer_commit_element_ffc) ||  in sae_parse_commit_element_ffc()
1144 	    crypto_bignum_is_one(sae->tmp->peer_commit_element_ffc) ||  in sae_parse_commit_element_ffc()
1145 	    crypto_bignum_cmp(sae->tmp->peer_commit_element_ffc, res) >= 0) {  in sae_parse_commit_element_ffc()
1154 	if (crypto_bignum_exptmod(sae->tmp->peer_commit_element_ffc,  in sae_parse_commit_element_ffc()
1155 				  sae->tmp->order, sae->tmp->prime, res) < 0 ||  in sae_parse_commit_element_ffc()
1163 	*pos += sae->tmp->prime_len;  in sae_parse_commit_element_ffc()
1171 	if (sae->tmp->dh)  in sae_parse_commit_element()
1182 		if (sae->tmp->pw_id) {  in sae_parse_password_identifier()
1185 				   sae->tmp->pw_id);  in sae_parse_password_identifier()
1188 		os_free(sae->tmp->pw_id);  in sae_parse_password_identifier()
1189 		sae->tmp->pw_id = NULL;  in sae_parse_password_identifier()
1193 	if (sae->tmp->pw_id &&  in sae_parse_password_identifier()
1194 	    (pos[1] - 1 != (int) os_strlen(sae->tmp->pw_id) ||  in sae_parse_password_identifier()
1195 	     os_memcmp(sae->tmp->pw_id, pos + 3, pos[1] - 1) != 0)) {  in sae_parse_password_identifier()
1198 			   sae->tmp->pw_id);  in sae_parse_password_identifier()
1202 	os_free(sae->tmp->pw_id);  in sae_parse_password_identifier()
1203 	sae->tmp->pw_id = os_malloc(pos[1]);  in sae_parse_password_identifier()
1204 	if (!sae->tmp->pw_id)  in sae_parse_password_identifier()
1206 	os_memcpy(sae->tmp->pw_id, pos + 3, pos[1] - 1);  in sae_parse_password_identifier()
1207 	sae->tmp->pw_id[pos[1] - 1] = '\0';  in sae_parse_password_identifier()
1247 	if (!sae->tmp->own_commit_scalar ||  in sae_parse_commit()
1248 	    crypto_bignum_cmp(sae->tmp->own_commit_scalar,  in sae_parse_commit()
1250 	    (sae->tmp->dh &&  in sae_parse_commit()
1251 	     (!sae->tmp->own_commit_element_ffc ||  in sae_parse_commit()
1252 	      crypto_bignum_cmp(sae->tmp->own_commit_element_ffc,  in sae_parse_commit()
1253 				sae->tmp->peer_commit_element_ffc) != 0)) ||  in sae_parse_commit()
1254 	    (sae->tmp->ec &&  in sae_parse_commit()
1255 	     (!sae->tmp->own_commit_element_ecc ||  in sae_parse_commit()
1256 	      crypto_ec_point_cmp(sae->tmp->ec,  in sae_parse_commit()
1257 				  sae->tmp->own_commit_element_ecc,  in sae_parse_commit()
1258 				  sae->tmp->peer_commit_element_ecc) != 0)))  in sae_parse_commit()
1291 			     sae->tmp->prime_len);  in sae_cn_confirm()
1293 	len[1] = sae->tmp->prime_len;  in sae_cn_confirm()
1297 			     sae->tmp->prime_len);  in sae_cn_confirm()
1299 	len[3] = sae->tmp->prime_len;  in sae_cn_confirm()
1302 	hmac_sha256_vector(sae->tmp->kck, sizeof(sae->tmp->kck), 5, addr, len,  in sae_cn_confirm()
1316 	if (crypto_ec_point_to_bin(sae->tmp->ec, element1, element_b1,  in sae_cn_confirm_ecc()
1317 			       element_b1 + sae->tmp->prime_len) < 0) {  in sae_cn_confirm_ecc()
1321 	if (crypto_ec_point_to_bin(sae->tmp->ec, element2, element_b2,  in sae_cn_confirm_ecc()
1322 			       element_b2 + sae->tmp->prime_len) < 0) {  in sae_cn_confirm_ecc()
1327 	sae_cn_confirm(sae, sc, scalar1, element_b1, 2 * sae->tmp->prime_len,  in sae_cn_confirm_ecc()
1328 		       scalar2, element_b2, 2 * sae->tmp->prime_len, confirm);  in sae_cn_confirm_ecc()
1343 			         sae->tmp->prime_len) < 0) {  in sae_cn_confirm_ffc()
1348 				 sae->tmp->prime_len) < 0) {  in sae_cn_confirm_ffc()
1353 	sae_cn_confirm(sae, sc, scalar1, element_b1, sae->tmp->prime_len,  in sae_cn_confirm_ffc()
1354 		       scalar2, element_b2, sae->tmp->prime_len, confirm);  in sae_cn_confirm_ffc()
1362 	if (sae->tmp == NULL)  in sae_write_confirm()
1371 	if (sae->tmp->ec) {  in sae_write_confirm()
1372 		if (sae_cn_confirm_ecc(sae, sc, sae->tmp->own_commit_scalar,  in sae_write_confirm()
1373 				       sae->tmp->own_commit_element_ecc,  in sae_write_confirm()
1375 				       sae->tmp->peer_commit_element_ecc,  in sae_write_confirm()
1381 		if (sae_cn_confirm_ffc(sae, sc, sae->tmp->own_commit_scalar,  in sae_write_confirm()
1382 				       sae->tmp->own_commit_element_ffc,  in sae_write_confirm()
1384 				       sae->tmp->peer_commit_element_ffc,  in sae_write_confirm()
1404 	if (sae->tmp == NULL) {  in sae_check_confirm()
1409 	if (sae->tmp->ec) {  in sae_check_confirm()
1411 				       sae->tmp->peer_commit_element_ecc,  in sae_check_confirm()
1412 				       sae->tmp->own_commit_scalar,  in sae_check_confirm()
1413 				       sae->tmp->own_commit_element_ecc,  in sae_check_confirm()
1420 				       sae->tmp->peer_commit_element_ffc,  in sae_check_confirm()
1421 				       sae->tmp->own_commit_scalar,  in sae_check_confirm()
1422 				       sae->tmp->own_commit_element_ffc,  in sae_check_confirm()