Use curve's cofactor during VKO calculations

[pygost.git] / pygost / gost3410_vko.py

diff --git a/pygost/gost3410_vko.py b/pygost/gost3410_vko.py
index 7b7e10d42a608fa778f2a5dc118e45a6ee533cd8..7bc71113b69e99bcf10dbe2d819d2d8b96361a47 100644 (file)
--- a/pygost/gost3410_vko.py
+++ b/pygost/gost3410_vko.py
@@ -1,11 +1,10 @@
 # coding: utf-8
 # PyGOST -- Pure Python GOST cryptographic functions library
-# Copyright (C) 2015-2018 Sergey Matveev <stargrave@stargrave.org>
+# Copyright (C) 2015-2020 Sergey Matveev <stargrave@stargrave.org>
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
+# the Free Software Foundation, version 3 of the License.
 #
 # This program is distributed in the hope that it will be useful,
 # but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ -27,7 +26,7 @@ from pygost.utils import bytes2long
 def ukm_unmarshal(ukm):
     """Unmarshal UKM value
 
-    :type ukm: bytes
+    :type ukm: little-endian bytes
     :rtype: long
     """
     return bytes2long(ukm[::-1])
@@ -35,7 +34,7 @@ def ukm_unmarshal(ukm):
 
 def kek(curve, prv, pub, ukm, mode):
     key = curve.exp(prv, pub[0], pub[1])
-    key = curve.exp(ukm, key[0], key[1])
+    key = curve.exp(curve.cofactor * ukm, key[0], key[1])
     return pub_marshal(key, mode)
 
 
@@ -56,7 +55,7 @@ def kek_34102001(curve, prv, pub, ukm):
     """
     return GOST341194(
         kek(curve, prv, pub, ukm, mode=2001),
-        "GostR3411_94_CryptoProParamSet",
+        sbox="id-GostR3411-94-CryptoProParamSet",
     ).digest()