1058 	struct crypto_ec *ec;  in dpp_auth_derive_l_responder()  local
1066 	ec = crypto_ec_init(crypto_ec_key_group(auth->peer_bi->pubkey));  in dpp_auth_derive_l_responder()
1067 	if (!ec)  in dpp_auth_derive_l_responder()
1070 	q = crypto_ec_get_order(ec);  in dpp_auth_derive_l_responder()
1075 	L = crypto_ec_point_init(ec);  in dpp_auth_derive_l_responder()
1079 	    crypto_ec_point_mul(ec, BI, sum, L) ||  in dpp_auth_derive_l_responder()
1080 	    crypto_ec_point_x(ec, L, lx) ||  in dpp_auth_derive_l_responder()
1095 	crypto_ec_deinit(ec);  in dpp_auth_derive_l_responder()
1102 	struct crypto_ec *ec;  in dpp_auth_derive_l_initiator()  local
1109 	ec = crypto_ec_init(crypto_ec_key_group(auth->peer_bi->pubkey));  in dpp_auth_derive_l_initiator()
1110 	if (!ec)  in dpp_auth_derive_l_initiator()
1116 	sum = crypto_ec_point_init(ec);  in dpp_auth_derive_l_initiator()
1117 	L = crypto_ec_point_init(ec);  in dpp_auth_derive_l_initiator()
1120 	    crypto_ec_point_add(ec, BR, PR, sum) ||  in dpp_auth_derive_l_initiator()
1121 	    crypto_ec_point_mul(ec, sum, bI, L) ||  in dpp_auth_derive_l_initiator()
1122 	    crypto_ec_point_x(ec, L, lx) ||  in dpp_auth_derive_l_initiator()
1137 	crypto_ec_deinit(ec);  in dpp_auth_derive_l_initiator()
1471 	struct crypto_ec *ec = NULL;  in dpp_pkex_derive_Qi()  local
1503 	ec = crypto_ec_init(curve->ike_group);  in dpp_pkex_derive_Qi()
1504 	if (!ec)  in dpp_pkex_derive_Qi()
1508 	Qi = crypto_ec_point_init(ec);  in dpp_pkex_derive_Qi()
1510 	if (!Pi || !Qi || !hash_bn || crypto_ec_point_mul(ec, Pi, hash_bn, Qi))  in dpp_pkex_derive_Qi()
1513 	if (crypto_ec_point_is_at_infinity(ec, Qi)) {  in dpp_pkex_derive_Qi()
1517 	crypto_ec_point_debug_print(ec, Qi, "DPP: Qi");  in dpp_pkex_derive_Qi()
1523 		*ret_ec = ec;  in dpp_pkex_derive_Qi()
1525 		crypto_ec_deinit(ec);  in dpp_pkex_derive_Qi()
1546 	struct crypto_ec *ec = NULL;  in dpp_pkex_derive_Qr()  local
1578 	ec = crypto_ec_init(curve->ike_group);  in dpp_pkex_derive_Qr()
1579 	if (!ec)  in dpp_pkex_derive_Qr()
1583 	Qr = crypto_ec_point_init(ec);  in dpp_pkex_derive_Qr()
1585 	if (!Pr || !Qr || !hash_bn || crypto_ec_point_mul(ec, Pr, hash_bn, Qr))  in dpp_pkex_derive_Qr()
1588 	if (crypto_ec_point_is_at_infinity(ec, Qr)) {  in dpp_pkex_derive_Qr()
1592 	crypto_ec_point_debug_print(ec, Qr, "DPP: Qr");  in dpp_pkex_derive_Qr()
1599 		*ret_ec = ec;  in dpp_pkex_derive_Qr()
1601 		crypto_ec_deinit(ec);  in dpp_pkex_derive_Qr()
1690 	struct crypto_ec *ec = NULL;  in dpp_reconfig_derive_ke_responder()  local
1729 	ec = crypto_ec_init(curve->ike_group);  in dpp_reconfig_derive_ke_responder()
1730 	if (!ec)  in dpp_reconfig_derive_ke_responder()
1734 	q = crypto_ec_get_order(ec);  in dpp_reconfig_derive_ke_responder()
1735 	M = crypto_ec_point_init(ec);  in dpp_reconfig_derive_ke_responder()
1741 	    crypto_ec_point_mul(ec, CI, sum, M) ||  in dpp_reconfig_derive_ke_responder()
1742 	    crypto_ec_point_to_bin(ec, M, Mx, NULL)) {  in dpp_reconfig_derive_ke_responder()
1780 	crypto_ec_deinit(ec);  in dpp_reconfig_derive_ke_responder()
1791 	struct crypto_ec *ec = NULL;  in dpp_reconfig_derive_ke_initiator()  local
1822 	ec = crypto_ec_init(curve->ike_group);  in dpp_reconfig_derive_ke_initiator()
1823 	if (!ec)  in dpp_reconfig_derive_ke_initiator()
1827 	sum = crypto_ec_point_init(ec);  in dpp_reconfig_derive_ke_initiator()
1828 	M = crypto_ec_point_init(ec);  in dpp_reconfig_derive_ke_initiator()
1832 	    crypto_ec_point_add(ec, CR, PR, sum) ||  in dpp_reconfig_derive_ke_initiator()
1833 	    crypto_ec_point_mul(ec, sum, cI, M) ||  in dpp_reconfig_derive_ke_initiator()
1834 	    crypto_ec_point_to_bin(ec, M, Mx, NULL)) {  in dpp_reconfig_derive_ke_initiator()
1870 	crypto_ec_deinit(ec);  in dpp_reconfig_derive_ke_initiator()
2232 	struct crypto_ec *ec = NULL;  in dpp_gen_reconfig_id()  local
2248 	ec = crypto_ec_init(crypto_ec_key_group(csign));  in dpp_gen_reconfig_id()
2249 	if (!ec)  in dpp_gen_reconfig_id()
2252 	e_id = crypto_ec_point_init(ec);  in dpp_gen_reconfig_id()
2254 	q = crypto_ec_get_order(ec);  in dpp_gen_reconfig_id()
2255 	generator = crypto_ec_get_generator(ec);  in dpp_gen_reconfig_id()
2258 	    crypto_ec_point_mul(ec, generator, bn, e_id))  in dpp_gen_reconfig_id()
2261 	crypto_ec_point_debug_print(ec, e_id,  in dpp_gen_reconfig_id()
2268 	id->ec = ec;  in dpp_gen_reconfig_id()
2269 	ec = NULL;  in dpp_gen_reconfig_id()
2281 	crypto_ec_deinit(ec);  in dpp_gen_reconfig_id()
2295 	e_prime_id = crypto_ec_point_init(id->ec);  in dpp_update_reconfig_id()
2296 	a_nonce = crypto_ec_point_init(id->ec);  in dpp_update_reconfig_id()
2298 	q = crypto_ec_get_order(id->ec);  in dpp_update_reconfig_id()
2299 	generator = crypto_ec_get_generator(id->ec);  in dpp_update_reconfig_id()
2306 	    crypto_ec_point_mul(id->ec, generator, bn, a_nonce) ||  in dpp_update_reconfig_id()
2307 	    crypto_ec_point_mul(id->ec, pp, bn, e_prime_id) ||  in dpp_update_reconfig_id()
2308 	    crypto_ec_point_add(id->ec, id->e_id, e_prime_id, e_prime_id))  in dpp_update_reconfig_id()
2311 	crypto_ec_point_debug_print(id->ec, a_nonce,  in dpp_update_reconfig_id()
2313 	crypto_ec_point_debug_print(id->ec, e_prime_id,  in dpp_update_reconfig_id()
2318 	id->a_nonce = crypto_ec_key_set_pub_point(id->ec, a_nonce);  in dpp_update_reconfig_id()
2319 	id->e_prime_id = crypto_ec_key_set_pub_point(id->ec, e_prime_id);  in dpp_update_reconfig_id()
2342 		crypto_ec_deinit(id->ec);  in dpp_free_reconfig_id()
2352 	struct crypto_ec *ec;  in dpp_decrypt_e_id()  local
2361 	ec = crypto_ec_init(crypto_ec_key_group(ppkey));  in dpp_decrypt_e_id()
2362 	if (!ec)  in dpp_decrypt_e_id()
2368 	e_id = crypto_ec_point_init(ec);  in dpp_decrypt_e_id()
2370 	    crypto_ec_point_mul(ec, a_nonce_point, pp, e_id) ||  in dpp_decrypt_e_id()
2371 	    crypto_ec_point_invert(ec, e_id) ||  in dpp_decrypt_e_id()
2372 	    crypto_ec_point_add(ec, e_id, e_prime_id_point, e_id)) {  in dpp_decrypt_e_id()
2377 	crypto_ec_point_debug_print(ec, e_id, "DPP: Decrypted E-id");  in dpp_decrypt_e_id()
2383 	crypto_ec_deinit(ec);  in dpp_decrypt_e_id()
2528 	struct crypto_ec *ec;  in dpp_test_gen_invalid_key()  local
2534 	ec = crypto_ec_init(curve->ike_group);  in dpp_test_gen_invalid_key()
2537 	if (!ec)  in dpp_test_gen_invalid_key()
2548 	if (!pub_key || crypto_ec_point_to_bin(ec, pub_key, x, y))  in dpp_test_gen_invalid_key()
2553 	p = crypto_ec_point_from_bin(ec, x);  in dpp_test_gen_invalid_key()
2554 	if (p && crypto_ec_point_is_on_curve(ec, p)) {  in dpp_test_gen_invalid_key()
2565 	crypto_ec_deinit(ec);  in dpp_test_gen_invalid_key()