#include "os.h"
#include <9pm/mp.h>
#include <9pm/libsec.h>

EGsig*
egsign(EGpriv *priv, mpint *m)
{
	EGpub *pub = &priv->pub;
	EGsig *sig;
	mpint *pm1, *k, *kinv, *r, *s;
	mpint *p = pub->p, *alpha = pub->alpha;
	int plen = mpsignif(p)+1;

	pm1 = mpnew(0);
	kinv = mpnew(0);
	r = mpnew(0);
	s = mpnew(0);
	mpsub(p, mpone, pm1);
	k = mprand(plen/2, genrandom, nil);
	if((k->p[0] & 1) == 0)
		mpadd(k, mpone, k);
	// can't assume p is a safe prime
	mpextendedgcd(k, pm1, r, kinv, s);
	while( mpcmp(r, mpone) != 0){
		mpsub(k, mptwo, k);
		mpextendedgcd(k, pm1, r, kinv, s);
	}
	mpmod(kinv, pm1, kinv);  // make kinv positive
	mpexp(alpha, k, p, r);
	mpmul(priv->secret, r, s);
	mpmod(s, pm1, s);
	mpsub(m, s, s);
	mpmul(kinv, s, s);
	mpmod(s, pm1, s);
	sig = egsigalloc();
	sig->r = r;
	sig->s = s;
	mpfree(pm1);
	mpfree(k);
	mpfree(kinv);
	return sig;
}