GD32W51x User Manual
987
Param eters
Range
output
Signature part r
0<r<n
Signature part s
0<s<n
Signature result:
ERROR
0x0: no error
0x1: Signature part r is 0
0x2: Signature part s is 0
Curve point kG
coordinate x
1
0≤x
1
<n
Curve point kG
coordinate y
1
0≤y
1
<n
If the error output is not 0, the content in PKCAU RAM will be cleared by hardware to avoid
leaking private key related information.
ECDSA verification
The ECDSA verification operation is selected by configuring MODSEL[5:0] in PKCAU_CTL
register as "100110". The operation declaration is shown in
.
Figure 29-23. ECDSA verification
Curve modulus p length
M
Curve coefficient |a|
PKCAU RAM
0x4B4
Curve modulus p
0x45C
Curve prime order n
length
0x404
Sign of curve coefficient
a
0x460
0x4B8
0x5E8
y coordinate of base
point G
...
x coordinate of base
point G
0x63C
...
Hash of message z
0xFE8
Curve prime order n
...
...
Verification result
0x5B0
...
Public key curve point Q
coordinate x
Q
0xF40
Public key curve point Q
coordinate
y
Q
0xF94
Signature part r
0x1098
Signature part s
0xA44
0xD5C
0x5B4
Offset address
input
output
Offset address
The range of parameters used ECDSA verification operation is shown in
Содержание GD32W515 Series
Страница 1: ...GigaDevice Semiconductor Inc GD32W51x Arm Cortex M33 32 bit MCU User Manual Revision 1 0 Nov 2021 ...
Страница 66: ...GD32W51x User Manual 66 Bits Fields Descriptions 31 0 UNIQUE_ID 95 64 Unique device ID ...
Страница 389: ...GD32W51x User Manual 389 The FWDGT timeout can be more accurate by calibrating the IRC32K ...
Страница 504: ...GD32W51x User Manual 504 ...
Страница 710: ...GD32W51x User Manual 710 ...