GD32W51x User Manual
987
Param eters
Range
output
Signature part r
0<r<n
Signature part s
0<s<n
Signature result:
ERROR
0x0: no error
0x1: Signature part r is 0
0x2: Signature part s is 0
Curve point kG
coordinate x
1
0≤x
1
<n
Curve point kG
coordinate y
1
0≤y
1
<n
If the error output is not 0, the content in PKCAU RAM will be cleared by hardware to avoid
leaking private key related information.
ECDSA verification
The ECDSA verification operation is selected by configuring MODSEL[5:0] in PKCAU_CTL
register as "100110". The operation declaration is shown in
.
Figure 29-23. ECDSA verification
Curve modulus p length
M
Curve coefficient |a|
PKCAU RAM
0x4B4
Curve modulus p
0x45C
Curve prime order n
length
0x404
Sign of curve coefficient
a
0x460
0x4B8
0x5E8
y coordinate of base
point G
...
x coordinate of base
point G
0x63C
...
Hash of message z
0xFE8
Curve prime order n
...
...
Verification result
0x5B0
...
Public key curve point Q
coordinate x
Q
0xF40
Public key curve point Q
coordinate
y
Q
0xF94
Signature part r
0x1098
Signature part s
0xA44
0xD5C
0x5B4
Offset address
input
output
Offset address
The range of parameters used ECDSA verification operation is shown in