GD32W51x User Manual
986
Figure 29-22. ECDSA sign
Curve modulus p
length M
Curve coefficient |a|
PKCAU RAM
0x404
Curve modulus p
0x408
Curve prime order n
length
0x400
Sign of curve
coefficient a
0x40C
0x460
0x55C
y coordinate of base
point G
x coordinate of base
point G
0x5B0
Integer k
0x508
Hash of message z
0xDE8
Private key d
0xE3C
Curve prime order n
0xE94
...
Offset address
input
output
Offset address
...
0x700
Signature part s
Signature part r
0x754
...
Result: ERROR
0xEE8
Curve point kG
coordinate x
1
0x103C
0x1090
Curve point kG
coordinate y
1
extra outputs
The range of parameters used ECDSA sign operation is shown in
.
Table 29-7. Range of parameters used by ECDSA sign
Param eters
Range
input
Curve prime order n
length (LEN)
0<LEN≤640
Curve modulus p
length (M)
0<M≤640
Sign of curve
coefficient a
0x0: positive
0x1: negative
Curve coefficient |a|
Absolute value |a|
<
p
Curve modulus p
Odd prime
0<p<2
M
Integer k
0≤k<2
LEN
x coordinate of base
point G
x<p
y coordinate of base
point G
y<p
Hash of message z
z<2
LEN
Private key d
positive integer d < n
Curve prime order n
prime
n<2
LEN