src/bls192.c.in [29:115]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
static void recover_coefficients(int k, octet* X, BIG_XXX* coefs)
{
    BIG_XXX r;
    BIG_XXX_rcopy(r,CURVE_Order_ZZZ);

    BIG_XXX x2[k];

    for(int i=0; i<k; i++)
    {
        BIG_XXX_fromBytes(x2[i],X[i].val);
    }

    // Compute numerators in place using partial products
    // to achieve it in O(n)
    // c_i = x_0 * ... * x_(i-1) * x_(i+1) * ... * x_(k-1)

    // Compute partial left products
    // leave c_0 alone since it only has a right partial product
    BIG_XXX_copy(coefs[1], x2[0]);

    for(int i=2; i < k; i++)
    {
        // lp_i = x_0 * ... * x_(i-1) = lp_(i-1) * x_(i-1)
        BIG_XXX_modmul(coefs[i], coefs[i-1], x2[i-1], r);
    }

    // Compute partial right products and combine

    // Store partial right products in c_0 so at the end
    // of the procedure c_0 = x_1 * ... x_(k-1)
    BIG_XXX_copy(coefs[0], x2[k-1]);

    for(int i=k-2; i > 0; i--)
    {
        // c_i = lp_i * rp_i
        BIG_XXX_modmul(coefs[i], coefs[i], coefs[0], r);

        // rp_(i-1) = x_i * ... * x_k = x_i * rp_i
        BIG_XXX_modmul(coefs[0], coefs[0], x2[i], r);
    }

    BIG_XXX cneg;
    BIG_XXX denominator;
    BIG_XXX s;

    for(int i=0; i<k; i++)
    {
        BIG_XXX_one(denominator);

        // cneg = -x_i mod r
        BIG_XXX_sub(cneg, r, x2[i]);

        for(int j=0; j<k; j++)
        {
            if (i != j)
            {
                // denominator = denominator * (x_j - x_i)
                BIG_XXX_add(s,x2[j],cneg);
                BIG_XXX_modmul(denominator,denominator,s,r);
            }
        }

        BIG_XXX_moddiv(coefs[i], coefs[i], denominator, r);
    }
}

/* hash a message, M, to an ECP point, using SHA3 */
static void BLS_HASHIT(ECP_ZZZ *P,octet *M)
{
    int i;
    int j;
    sha3 hs;
    char h[MODBYTES_XXX];
    octet HM= {0,sizeof(h),h};
    SHA3_init(&hs,SHAKE256);
    for (i=0; i<M->len; i++)
    {
        j = (unsigned char) M->val[i];
        SHA3_process(&hs,j);
    }
    SHA3_shake(&hs,HM.val,MODBYTES_XXX);
    HM.len=MODBYTES_XXX;
    ECP_ZZZ_mapit(P,&HM);
}

/* generate key pair, private key S, public key W */
int BLS_ZZZ_KEY_PAIR_GENERATE(csprng *RNG,octet* S,octet *W)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



src/bls256.c.in [29:115]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
static void recover_coefficients(int k, octet* X, BIG_XXX* coefs)
{
    BIG_XXX r;
    BIG_XXX_rcopy(r,CURVE_Order_ZZZ);

    BIG_XXX x2[k];

    for(int i=0; i<k; i++)
    {
        BIG_XXX_fromBytes(x2[i],X[i].val);
    }

    // Compute numerators in place using partial products
    // to achieve it in O(n)
    // c_i = x_0 * ... * x_(i-1) * x_(i+1) * ... * x_(k-1)

    // Compute partial left products
    // leave c_0 alone since it only has a right partial product
    BIG_XXX_copy(coefs[1], x2[0]);

    for(int i=2; i < k; i++)
    {
        // lp_i = x_0 * ... * x_(i-1) = lp_(i-1) * x_(i-1)
        BIG_XXX_modmul(coefs[i], coefs[i-1], x2[i-1], r);
    }

    // Compute partial right products and combine

    // Store partial right products in c_0 so at the end
    // of the procedure c_0 = x_1 * ... x_(k-1)
    BIG_XXX_copy(coefs[0], x2[k-1]);

    for(int i=k-2; i > 0; i--)
    {
        // c_i = lp_i * rp_i
        BIG_XXX_modmul(coefs[i], coefs[i], coefs[0], r);

        // rp_(i-1) = x_i * ... * x_k = x_i * rp_i
        BIG_XXX_modmul(coefs[0], coefs[0], x2[i], r);
    }

    BIG_XXX cneg;
    BIG_XXX denominator;
    BIG_XXX s;

    for(int i=0; i<k; i++)
    {
        BIG_XXX_one(denominator);

        // cneg = -x_i mod r
        BIG_XXX_sub(cneg, r, x2[i]);

        for(int j=0; j<k; j++)
        {
            if (i != j)
            {
                // denominator = denominator * (x_j - x_i)
                BIG_XXX_add(s,x2[j],cneg);
                BIG_XXX_modmul(denominator,denominator,s,r);
            }
        }

        BIG_XXX_moddiv(coefs[i], coefs[i], denominator, r);
    }
}

/* hash a message, M, to an ECP point, using SHA3 */
static void BLS_HASHIT(ECP_ZZZ *P,octet *M)
{
    int i;
    int j;
    sha3 hs;
    char h[MODBYTES_XXX];
    octet HM= {0,sizeof(h),h};
    SHA3_init(&hs,SHAKE256);
    for (i=0; i<M->len; i++)
    {
        j = (unsigned char) M->val[i];
        SHA3_process(&hs,j);
    }
    SHA3_shake(&hs,HM.val,MODBYTES_XXX);
    HM.len=MODBYTES_XXX;
    ECP_ZZZ_mapit(P,&HM);
}

/* generate key pair, private key S, public key W */
int BLS_ZZZ_KEY_PAIR_GENERATE(csprng *RNG,octet* S,octet *W)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -