ST STM32L4+ Series Reference Manual page 1184

Public key accelerator (PKA) applied to STM32L4P5xx and STM32L4Q5xx only
OUT
36.4.17 ECDSA verification
ECDSA verification operation (outlined in
parameters) and
The epplication should check if the output error is equal to zero, if it is different from zero,
the signature is not verified.
Parameters with direction
MODE
Curve prime order n
length
Curve modulus p length
Curve coefficient a sign
Curve coefficient |a|
Curve modulus value p
Curve base point G
IN
coordinate x
Curve base point G
coordinate y
Public-key curve point Q
coordinate x
Public-key curve point Q
coordinate y
Signature part r
Signature part s
Hash of message z
Curve prime order n
Parameters with direction
OUT Result: ECDSA verify
1184/2301
Table 261. Extended ECDSA sign (extra outputs)
Parameters with direction
Curve point kG coordinate x
Curve point kG coordinate y
Table 263 (output parameters).
Table 262. ECDSA verification (inputs)
Q
Q
Table 263. ECDSA verification (outputs)
Value (Note)
(0 ≤ x
1
(0 ≤ y
1
Section 36.3.5) is summarized in
Value (Note)
0x26
(In bits, not null)
(In bits, not null,
8 < value < 640)
0x0: positive
0x1: negative
(Absolute value, |a| < p)
(Odd integer prime,
640
0 < p < 2 )
(x < p)
(y < p)
(x < p)
Q
(y < p)
Q
(0 < r < n)
(0 < s < n)
M
(z < 2 )
(integer prime)
Value (Note)
0x0: valid signature
Not 0x0: invalid signature
RM0432 Rev 6
Storage
< p) RAM@0x103C
1
< p) RAM@0x1090
1
Table 262
Storage
PKA_CR
RAM@0x404
RAM@0x4B4
RAM@0x45C
RAM@0x460
RAM@0x4B8
RAM@0x5E8
RAM@0x63C
RAM@0xF40
RAM@0xF94
RAM@0x1098
RAM@0xA44
RAM@0xFE8
RAM@0xD5C
Storage
RAM@0x5B0
RM0432
Size
EOS
(input
Size
6 bits
32 bits
EOS
Size
32 bits