5812-DS01-R datasheet(41/84 Pages) BOARDCOM

41 / 84 page

Advance Data Sheet

BCM5812

3/11/03

B roa dcom Co rpo rat ion

Document

5812-DS01-405-R

Cryptographic Operations

Page 33

DSA sign using a single input message fragment and optional explicitly provided random number. Generate random number

should be one of these two values.

The random number is not needed for verification and is usually discarded following creation of the signature. The BCM5812

generates a 20 byte random value, which is not output.

The signature values, r and s, are output in two fragment buffers, as shown in Figure 29.

Figure 29: DSA Sign

Figure 30 on page 34 shows the DSA verify operation. As with DSA sign, the message M may be input as a pre-computed

SHA-1 hash value or explicitly hashed by the BCM5812. If the hash is supplied, the hash generated parameter must be

0x0000. If the message is supplied, hash generated should be set to 0x0001. The same message fragmentation rules must

be followed as for DSA sign, with intermediate fragments other than the last 64 bytes long. The signature values, r and s,

are input following the hash or message, with s at the buffer address supplied in the last input fragment chain entry.

DSA verify uses MCR2@, and opcode 0x06.

At least three input fragments must be supplied, and the lengths of the last two (r and s) must be 20 bytes each. The host

software can then compare the output V value to the input R value to verify the signature.

COMMAND CONTEXT ADDRESS

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

INPUT FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

DLENGTH

RESERVED

NEXT OUTPUT FRAGMENT CHAIN ENTRY

RESERVED

OUTPUT BUFFER LENGTH

OUTPUT FRAGMENT ADDRESS

Input Message

Or Hash Value

Output R Value

(20 Bytes)

LENGTH

Command Context

OPCODE

RESERVED

MODULUS Q

20 Bytes

HASH GENERATED

MODULUS P

32-128

Bytes

BASE G

32-128

Bytes

MODULUS P LENGTH

GENERATE RANDOM NUMBER

PRIVATE KEY X

20 Bytes

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

Input Random Number

(20 Bytes)

If supplied by software

(Generate Ramdom == 0)

NEXT OUTPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

OUTPUT FRAGMENT ADDRESS

Output S Value

(20 Bytes)

Packet Descriptor

COMMAND CONTEXT ADDRESS

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

INPUT FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

DLENGTH

RESERVED

NEXT OUTPUT FRAGMENT CHAIN ENTRY

RESERVED

OUTPUT BUFFER LENGTH

OUTPUT FRAGMENT ADDRESS

Input Message

Or Hash Value

Output R Value

(20 Bytes)

LENGTH

Command Context

OPCODE

RESERVED

MODULUS Q

20 Bytes

HASH GENERATED

MODULUS P

32-128

Bytes

BASE G

32-128

Bytes

MODULUS P LENGTH

GENERATE RANDOM NUMBER

PRIVATE KEY X

20 Bytes

LENGTH

Command Context

OPCODE

RESERVED

MODULUS Q

20 Bytes

MODULUS Q

20 Bytes

HASH GENERATED

MODULUS P

32-128

Bytes

MODULUS P

32-128

Bytes

BASE G

32-128

Bytes

BASE G

32-128

Bytes

MODULUS P LENGTH

GENERATE RANDOM NUMBER

PRIVATE KEY X

20 Bytes

PRIVATE KEY X

20 Bytes

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

Input Random Number

(20 Bytes)

If supplied by software

(Generate Ramdom == 0)

NEXT OUTPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

OUTPUT FRAGMENT ADDRESS

Output S Value

(20 Bytes)

Packet Descriptor

5812-DS01-R 데이터시트(PDF) 41 Page - Broadcom Corporation.

5812-DS01-R 데이터시트(HTML) 41 Page - Broadcom Corporation.

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84

데이터시트 다운로드

링크 URL