commit 54fc34ea683167260ec5df3dc94a7c544b08325c
author Nicholas Wilson <nicholas.wilson@realvnc.com> Mon May 16 15:15:45 2016 +0100
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Wed Mar 28 11:08:30 2018 +0200
tree bb061b8a7a077062c26f23cdbdb240cbf174310d
parent f65379bc400707baac9466cce88a759685ac6c01

Include order of Curve25519 base point in curve data

library/ecp_curves.c

diff --git a/library/ecp_curves.c b/library/ecp_curves.c
index df5ac3e..5b38a87 100644
--- a/library/ecp_curves.c
+++ b/library/ecp_curves.c
@@ -670,6 +670,11 @@
     MBEDTLS_MPI_CHK( mbedtls_mpi_sub_int( &grp->P, &grp->P, 19 ) );
     grp->pbits = mbedtls_mpi_bitlen( &grp->P );
 
+    /* N = 2^252 + 27742317777372353535851937790883648493 */
+    MBEDTLS_MPI_CHK( mbedtls_mpi_read_string( &grp->N, 16,
+                                              "14DEF9DEA2F79CD65812631A5CF5D3ED" ) );
+    MBEDTLS_MPI_CHK( mbedtls_mpi_set_bit( &grp->N, 252, 1 ) );
+
     /* Y intentionaly not set, since we use x/z coordinates.
      * This is used as a marker to identify Montgomery curves! */
     MBEDTLS_MPI_CHK( mbedtls_mpi_lset( &grp->G.X, 9 ) );