X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=pygost%2Fgost3410_vko.py;h=4bc2d4e9df85410c7d21d6f7ab88999e1a95b25d;hb=82af8726ef5d5e2752089a45750e56c9910398c7;hp=046df9e1212cfaafe6712cbb7b80f2cd2e1f16d2;hpb=a2b4808f6628225be99874bd5f6a0f80a514db82;p=pygost.git

diff --git a/pygost/gost3410_vko.py b/pygost/gost3410_vko.py
index 046df9e..4bc2d4e 100644
--- a/pygost/gost3410_vko.py
+++ b/pygost/gost3410_vko.py
@@ -26,16 +26,16 @@ from pygost.utils import bytes2long
 def ukm_unmarshal(ukm):
     """Unmarshal UKM value
 
-    :type ukm: bytes
+    :type ukm: little-endian bytes
     :rtype: long
     """
     return bytes2long(ukm[::-1])
 
 
-def kek(curve, prv, pub, ukm, mode):
+def kek(curve, prv, pub, ukm):
     key = curve.exp(prv, pub[0], pub[1])
-    key = curve.exp(ukm, key[0], key[1])
-    return pub_marshal(key, mode)
+    key = curve.exp(curve.cofactor * ukm, key[0], key[1])
+    return pub_marshal(key)
 
 
 def kek_34102001(curve, prv, pub, ukm):
@@ -54,12 +54,12 @@ def kek_34102001(curve, prv, pub, ukm):
     hash output.
     """
     return GOST341194(
-        kek(curve, prv, pub, ukm, mode=2001),
-        "id-GostR3411-94-CryptoProParamSet",
+        kek(curve, prv, pub, ukm),
+        sbox="id-GostR3411-94-CryptoProParamSet",
     ).digest()
 
 
-def kek_34102012256(curve, prv, pub, ukm=1, mode=2012):
+def kek_34102012256(curve, prv, pub, ukm=1):
     """ Key agreement (34.10-2012, 34.11-2012 256 bit)
 
     :param GOST3410Curve curve: curve to use
@@ -73,7 +73,7 @@ def kek_34102012256(curve, prv, pub, ukm=1, mode=2012):
     Shared Key Encryption Key computation is based on
     :rfc:`7836` VKO GOST R 34.10-2012.
     """
-    return GOST34112012256(kek(curve, prv, pub, ukm, mode=mode)).digest()
+    return GOST34112012256(kek(curve, prv, pub, ukm)).digest()
 
 
 def kek_34102012512(curve, prv, pub, ukm=1):
@@ -90,4 +90,4 @@ def kek_34102012512(curve, prv, pub, ukm=1):
     Shared Key Encryption Key computation is based on
     :rfc:`7836` VKO GOST R 34.10-2012.
     """
-    return GOST34112012512(kek(curve, prv, pub, ukm, mode=2012)).digest()
+    return GOST34112012512(kek(curve, prv, pub, ukm)).digest()