1 /* crypto/ec/ec_curve.c */
2 /*
3  * Written by Nils Larsch for the OpenSSL project.
4  */
5 /* ====================================================================
6  * Copyright (c) 1998-2004 The OpenSSL Project.  All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  *
12  * 1. Redistributions of source code must retain the above copyright
13  *    notice, this list of conditions and the following disclaimer.
14  *
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in
17  *    the documentation and/or other materials provided with the
18  *    distribution.
19  *
20  * 3. All advertising materials mentioning features or use of this
21  *    software must display the following acknowledgment:
22  *    "This product includes software developed by the OpenSSL Project
23  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
24  *
25  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26  *    endorse or promote products derived from this software without
27  *    prior written permission. For written permission, please contact
28  *    openssl-core@openssl.org.
29  *
30  * 5. Products derived from this software may not be called "OpenSSL"
31  *    nor may "OpenSSL" appear in their names without prior written
32  *    permission of the OpenSSL Project.
33  *
34  * 6. Redistributions of any form whatsoever must retain the following
35  *    acknowledgment:
36  *    "This product includes software developed by the OpenSSL Project
37  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
38  *
39  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
43  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50  * OF THE POSSIBILITY OF SUCH DAMAGE.
51  * ====================================================================
52  *
53  * This product includes cryptographic software written by Eric Young
54  * (eay@cryptsoft.com).  This product includes software written by Tim
55  * Hudson (tjh@cryptsoft.com).
56  *
57  */
58 /* ====================================================================
59  * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
60  *
61  * Portions of the attached software ("Contribution") are developed by
62  * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
63  *
64  * The Contribution is licensed pursuant to the OpenSSL open source
65  * license provided above.
66  *
67  * The elliptic curve binary polynomial software is originally written by
68  * Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems Laboratories.
69  *
70  */
71 
72 #include "ec_lcl.h"
73 #include <openssl/err.h>
74 #include <openssl/obj_mac.h>
75 
76 typedef struct {
77 	int	field_type,	/* either NID_X9_62_prime_field or
78 				 * NID_X9_62_characteristic_two_field */
79 		seed_len,
80 		param_len;
81 	unsigned int cofactor;	/* promoted to BN_ULONG */
82 } EC_CURVE_DATA;
83 
84 /* the nist prime curves */
85 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; }
86 	_EC_NIST_PRIME_192 = {
87 	{ NID_X9_62_prime_field,20,24,1 },
88 	{ 0x30,0x45,0xAE,0x6F,0xC8,0x42,0x2F,0x64,0xED,0x57,	/* seed */
89 	  0x95,0x28,0xD3,0x81,0x20,0xEA,0xE1,0x21,0x96,0xD5,
90 
91 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
92 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,
93 	  0xFF,0xFF,0xFF,0xFF,
94 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
95 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,
96 	  0xFF,0xFF,0xFF,0xFC,
97 	  0x64,0x21,0x05,0x19,0xE5,0x9C,0x80,0xE7,0x0F,0xA7,	/* b */
98 	  0xE9,0xAB,0x72,0x24,0x30,0x49,0xFE,0xB8,0xDE,0xEC,
99 	  0xC1,0x46,0xB9,0xB1,
100 	  0x18,0x8D,0xA8,0x0E,0xB0,0x30,0x90,0xF6,0x7C,0xBF,	/* x */
101 	  0x20,0xEB,0x43,0xA1,0x88,0x00,0xF4,0xFF,0x0A,0xFD,
102 	  0x82,0xFF,0x10,0x12,
103 	  0x07,0x19,0x2b,0x95,0xff,0xc8,0xda,0x78,0x63,0x10,	/* y */
104 	  0x11,0xed,0x6b,0x24,0xcd,0xd5,0x73,0xf9,0x77,0xa1,
105 	  0x1e,0x79,0x48,0x11,
106 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
107 	  0xFF,0xFF,0x99,0xDE,0xF8,0x36,0x14,0x6B,0xC9,0xB1,
108 	  0xB4,0xD2,0x28,0x31 }
109 	};
110 
111 static const struct { EC_CURVE_DATA h; unsigned char data[20+28*6]; }
112 	_EC_NIST_PRIME_224 = {
113 	{ NID_X9_62_prime_field,20,28,1 },
114 	{ 0xBD,0x71,0x34,0x47,0x99,0xD5,0xC7,0xFC,0xDC,0x45,	/* seed */
115 	  0xB5,0x9F,0xA3,0xB9,0xAB,0x8F,0x6A,0x94,0x8B,0xC5,
116 
117 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
118 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00,
119 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
120 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
121 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,
122 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,
123 	  0xB4,0x05,0x0A,0x85,0x0C,0x04,0xB3,0xAB,0xF5,0x41,	/* b */
124 	  0x32,0x56,0x50,0x44,0xB0,0xB7,0xD7,0xBF,0xD8,0xBA,
125 	  0x27,0x0B,0x39,0x43,0x23,0x55,0xFF,0xB4,
126 	  0xB7,0x0E,0x0C,0xBD,0x6B,0xB4,0xBF,0x7F,0x32,0x13,	/* x */
127 	  0x90,0xB9,0x4A,0x03,0xC1,0xD3,0x56,0xC2,0x11,0x22,
128 	  0x34,0x32,0x80,0xD6,0x11,0x5C,0x1D,0x21,
129 	  0xbd,0x37,0x63,0x88,0xb5,0xf7,0x23,0xfb,0x4c,0x22,	/* y */
130 	  0xdf,0xe6,0xcd,0x43,0x75,0xa0,0x5a,0x07,0x47,0x64,
131 	  0x44,0xd5,0x81,0x99,0x85,0x00,0x7e,0x34,
132 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
133 	  0xFF,0xFF,0xFF,0xFF,0x16,0xA2,0xE0,0xB8,0xF0,0x3E,
134 	  0x13,0xDD,0x29,0x45,0x5C,0x5C,0x2A,0x3D }
135 	};
136 
137 static const struct { EC_CURVE_DATA h; unsigned char data[20+48*6]; }
138 	_EC_NIST_PRIME_384 = {
139 	{ NID_X9_62_prime_field,20,48,1 },
140 	{ 0xA3,0x35,0x92,0x6A,0xA3,0x19,0xA2,0x7A,0x1D,0x00,	/* seed */
141 	  0x89,0x6A,0x67,0x73,0xA4,0x82,0x7A,0xCD,0xAC,0x73,
142 
143 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
144 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
145 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
146 	  0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00,
147 	  0x00,0x00,0x00,0x00,0xFF,0xFF,0xFF,0xFF,
148 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
149 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
150 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
151 	  0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00,
152 	  0x00,0x00,0x00,0x00,0xFF,0xFF,0xFF,0xFC,
153 	  0xB3,0x31,0x2F,0xA7,0xE2,0x3E,0xE7,0xE4,0x98,0x8E,	/* b */
154 	  0x05,0x6B,0xE3,0xF8,0x2D,0x19,0x18,0x1D,0x9C,0x6E,
155 	  0xFE,0x81,0x41,0x12,0x03,0x14,0x08,0x8F,0x50,0x13,
156 	  0x87,0x5A,0xC6,0x56,0x39,0x8D,0x8A,0x2E,0xD1,0x9D,
157 	  0x2A,0x85,0xC8,0xED,0xD3,0xEC,0x2A,0xEF,
158 	  0xAA,0x87,0xCA,0x22,0xBE,0x8B,0x05,0x37,0x8E,0xB1,	/* x */
159 	  0xC7,0x1E,0xF3,0x20,0xAD,0x74,0x6E,0x1D,0x3B,0x62,
160 	  0x8B,0xA7,0x9B,0x98,0x59,0xF7,0x41,0xE0,0x82,0x54,
161 	  0x2A,0x38,0x55,0x02,0xF2,0x5D,0xBF,0x55,0x29,0x6C,
162 	  0x3A,0x54,0x5E,0x38,0x72,0x76,0x0A,0xB7,
163 	  0x36,0x17,0xde,0x4a,0x96,0x26,0x2c,0x6f,0x5d,0x9e,	/* y */
164 	  0x98,0xbf,0x92,0x92,0xdc,0x29,0xf8,0xf4,0x1d,0xbd,
165 	  0x28,0x9a,0x14,0x7c,0xe9,0xda,0x31,0x13,0xb5,0xf0,
166 	  0xb8,0xc0,0x0a,0x60,0xb1,0xce,0x1d,0x7e,0x81,0x9d,
167 	  0x7a,0x43,0x1d,0x7c,0x90,0xea,0x0e,0x5f,
168 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
169 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
170 	  0xFF,0xFF,0xFF,0xFF,0xC7,0x63,0x4D,0x81,0xF4,0x37,
171 	  0x2D,0xDF,0x58,0x1A,0x0D,0xB2,0x48,0xB0,0xA7,0x7A,
172 	  0xEC,0xEC,0x19,0x6A,0xCC,0xC5,0x29,0x73 }
173 	};
174 
175 static const struct { EC_CURVE_DATA h; unsigned char data[20+66*6]; }
176 	_EC_NIST_PRIME_521 = {
177 	{ NID_X9_62_prime_field,20,66,1 },
178 	{ 0xD0,0x9E,0x88,0x00,0x29,0x1C,0xB8,0x53,0x96,0xCC,	/* seed */
179 	  0x67,0x17,0x39,0x32,0x84,0xAA,0xA0,0xDA,0x64,0xBA,
180 
181 	  0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
182 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
183 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
184 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
185 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
186 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
187 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
188 	  0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
189 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
190 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
191 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
192 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
193 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
194 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFC,
195 	  0x00,0x51,0x95,0x3E,0xB9,0x61,0x8E,0x1C,0x9A,0x1F,	/* b */
196 	  0x92,0x9A,0x21,0xA0,0xB6,0x85,0x40,0xEE,0xA2,0xDA,
197 	  0x72,0x5B,0x99,0xB3,0x15,0xF3,0xB8,0xB4,0x89,0x91,
198 	  0x8E,0xF1,0x09,0xE1,0x56,0x19,0x39,0x51,0xEC,0x7E,
199 	  0x93,0x7B,0x16,0x52,0xC0,0xBD,0x3B,0xB1,0xBF,0x07,
200 	  0x35,0x73,0xDF,0x88,0x3D,0x2C,0x34,0xF1,0xEF,0x45,
201 	  0x1F,0xD4,0x6B,0x50,0x3F,0x00,
202 	  0x00,0xC6,0x85,0x8E,0x06,0xB7,0x04,0x04,0xE9,0xCD,	/* x */
203 	  0x9E,0x3E,0xCB,0x66,0x23,0x95,0xB4,0x42,0x9C,0x64,
204 	  0x81,0x39,0x05,0x3F,0xB5,0x21,0xF8,0x28,0xAF,0x60,
205 	  0x6B,0x4D,0x3D,0xBA,0xA1,0x4B,0x5E,0x77,0xEF,0xE7,
206 	  0x59,0x28,0xFE,0x1D,0xC1,0x27,0xA2,0xFF,0xA8,0xDE,
207 	  0x33,0x48,0xB3,0xC1,0x85,0x6A,0x42,0x9B,0xF9,0x7E,
208 	  0x7E,0x31,0xC2,0xE5,0xBD,0x66,
209 	  0x01,0x18,0x39,0x29,0x6a,0x78,0x9a,0x3b,0xc0,0x04,	/* y */
210 	  0x5c,0x8a,0x5f,0xb4,0x2c,0x7d,0x1b,0xd9,0x98,0xf5,
211 	  0x44,0x49,0x57,0x9b,0x44,0x68,0x17,0xaf,0xbd,0x17,
212 	  0x27,0x3e,0x66,0x2c,0x97,0xee,0x72,0x99,0x5e,0xf4,
213 	  0x26,0x40,0xc5,0x50,0xb9,0x01,0x3f,0xad,0x07,0x61,
214 	  0x35,0x3c,0x70,0x86,0xa2,0x72,0xc2,0x40,0x88,0xbe,
215 	  0x94,0x76,0x9f,0xd1,0x66,0x50,
216 	  0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
217 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
218 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
219 	  0xFF,0xFF,0xFF,0xFA,0x51,0x86,0x87,0x83,0xBF,0x2F,
220 	  0x96,0x6B,0x7F,0xCC,0x01,0x48,0xF7,0x09,0xA5,0xD0,
221 	  0x3B,0xB5,0xC9,0xB8,0x89,0x9C,0x47,0xAE,0xBB,0x6F,
222 	  0xB7,0x1E,0x91,0x38,0x64,0x09 }
223 	};
224 
225 /* the x9.62 prime curves (minus the nist prime curves) */
226 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; }
227 	_EC_X9_62_PRIME_192V2 = {
228 	{ NID_X9_62_prime_field,20,24,1 },
229 	{ 0x31,0xA9,0x2E,0xE2,0x02,0x9F,0xD1,0x0D,0x90,0x1B,	/* seed */
230 	  0x11,0x3E,0x99,0x07,0x10,0xF0,0xD2,0x1A,0xC6,0xB6,
231 
232 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
233 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,
234 	  0xFF,0xFF,0xFF,0xFF,
235 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
236 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,
237 	  0xFF,0xFF,0xFF,0xFC,
238 	  0xCC,0x22,0xD6,0xDF,0xB9,0x5C,0x6B,0x25,0xE4,0x9C,	/* b */
239 	  0x0D,0x63,0x64,0xA4,0xE5,0x98,0x0C,0x39,0x3A,0xA2,
240 	  0x16,0x68,0xD9,0x53,
241 	  0xEE,0xA2,0xBA,0xE7,0xE1,0x49,0x78,0x42,0xF2,0xDE,	/* x */
242 	  0x77,0x69,0xCF,0xE9,0xC9,0x89,0xC0,0x72,0xAD,0x69,
243 	  0x6F,0x48,0x03,0x4A,
244 	  0x65,0x74,0xd1,0x1d,0x69,0xb6,0xec,0x7a,0x67,0x2b,	/* y */
245 	  0xb8,0x2a,0x08,0x3d,0xf2,0xf2,0xb0,0x84,0x7d,0xe9,
246 	  0x70,0xb2,0xde,0x15,
247 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
248 	  0xFF,0xFE,0x5F,0xB1,0xA7,0x24,0xDC,0x80,0x41,0x86,
249 	  0x48,0xD8,0xDD,0x31 }
250 	};
251 
252 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; }
253 	_EC_X9_62_PRIME_192V3 = {
254 	{ NID_X9_62_prime_field,20,24,1 },
255 	{ 0xC4,0x69,0x68,0x44,0x35,0xDE,0xB3,0x78,0xC4,0xB6,	/* seed */
256 	  0x5C,0xA9,0x59,0x1E,0x2A,0x57,0x63,0x05,0x9A,0x2E,
257 
258 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
259 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,
260 	  0xFF,0xFF,0xFF,0xFF,
261 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
262 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,
263 	  0xFF,0xFF,0xFF,0xFC,
264 	  0x22,0x12,0x3D,0xC2,0x39,0x5A,0x05,0xCA,0xA7,0x42,	/* b */
265 	  0x3D,0xAE,0xCC,0xC9,0x47,0x60,0xA7,0xD4,0x62,0x25,
266 	  0x6B,0xD5,0x69,0x16,
267 	  0x7D,0x29,0x77,0x81,0x00,0xC6,0x5A,0x1D,0xA1,0x78,	/* x */
268 	  0x37,0x16,0x58,0x8D,0xCE,0x2B,0x8B,0x4A,0xEE,0x8E,
269 	  0x22,0x8F,0x18,0x96,
270 	  0x38,0xa9,0x0f,0x22,0x63,0x73,0x37,0x33,0x4b,0x49,	/* y */
271 	  0xdc,0xb6,0x6a,0x6d,0xc8,0xf9,0x97,0x8a,0xca,0x76,
272 	  0x48,0xa9,0x43,0xb0,
273 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
274 	  0xFF,0xFF,0x7A,0x62,0xD0,0x31,0xC8,0x3F,0x42,0x94,
275 	  0xF6,0x40,0xEC,0x13 }
276 	};
277 
278 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; }
279 	_EC_X9_62_PRIME_239V1 = {
280 	{ NID_X9_62_prime_field,20,30,1 },
281 	{ 0xE4,0x3B,0xB4,0x60,0xF0,0xB8,0x0C,0xC0,0xC0,0xB0,	/* seed */
282 	  0x75,0x79,0x8E,0x94,0x80,0x60,0xF8,0x32,0x1B,0x7D,
283 
284 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
285 	  0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00,
286 	  0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,
287 
288 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
289 	  0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00,
290 	  0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFC,
291 
292 	  0x6B,0x01,0x6C,0x3B,0xDC,0xF1,0x89,0x41,0xD0,0xD6,	/* b */
293 	  0x54,0x92,0x14,0x75,0xCA,0x71,0xA9,0xDB,0x2F,0xB2,
294 	  0x7D,0x1D,0x37,0x79,0x61,0x85,0xC2,0x94,0x2C,0x0A,
295 
296 	  0x0F,0xFA,0x96,0x3C,0xDC,0xA8,0x81,0x6C,0xCC,0x33,	/* x */
297 	  0xB8,0x64,0x2B,0xED,0xF9,0x05,0xC3,0xD3,0x58,0x57,
298 	  0x3D,0x3F,0x27,0xFB,0xBD,0x3B,0x3C,0xB9,0xAA,0xAF,
299 
300 	  0x7d,0xeb,0xe8,0xe4,0xe9,0x0a,0x5d,0xae,0x6e,0x40,	/* y */
301 	  0x54,0xca,0x53,0x0b,0xa0,0x46,0x54,0xb3,0x68,0x18,
302 	  0xce,0x22,0x6b,0x39,0xfc,0xcb,0x7b,0x02,0xf1,0xae,
303 
304 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
305 	  0xFF,0xFF,0x7F,0xFF,0xFF,0x9E,0x5E,0x9A,0x9F,0x5D,
306 	  0x90,0x71,0xFB,0xD1,0x52,0x26,0x88,0x90,0x9D,0x0B }
307 	};
308 
309 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; }
310 	_EC_X9_62_PRIME_239V2 = {
311 	{ NID_X9_62_prime_field,20,30,1 },
312 	{ 0xE8,0xB4,0x01,0x16,0x04,0x09,0x53,0x03,0xCA,0x3B,	/* seed */
313 	  0x80,0x99,0x98,0x2B,0xE0,0x9F,0xCB,0x9A,0xE6,0x16,
314 
315 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
316 	  0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00,
317 	  0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,
318 
319 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
320 	  0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00,
321 	  0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFC,
322 
323 	  0x61,0x7F,0xAB,0x68,0x32,0x57,0x6C,0xBB,0xFE,0xD5,	/* b */
324 	  0x0D,0x99,0xF0,0x24,0x9C,0x3F,0xEE,0x58,0xB9,0x4B,
325 	  0xA0,0x03,0x8C,0x7A,0xE8,0x4C,0x8C,0x83,0x2F,0x2C,
326 
327 	  0x38,0xAF,0x09,0xD9,0x87,0x27,0x70,0x51,0x20,0xC9,	/* x */
328 	  0x21,0xBB,0x5E,0x9E,0x26,0x29,0x6A,0x3C,0xDC,0xF2,
329 	  0xF3,0x57,0x57,0xA0,0xEA,0xFD,0x87,0xB8,0x30,0xE7,
330 
331 	  0x5b,0x01,0x25,0xe4,0xdb,0xea,0x0e,0xc7,0x20,0x6d,	/* y */
332 	  0xa0,0xfc,0x01,0xd9,0xb0,0x81,0x32,0x9f,0xb5,0x55,
333 	  0xde,0x6e,0xf4,0x60,0x23,0x7d,0xff,0x8b,0xe4,0xba,
334 
335 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
336 	  0xFF,0xFF,0x80,0x00,0x00,0xCF,0xA7,0xE8,0x59,0x43,
337 	  0x77,0xD4,0x14,0xC0,0x38,0x21,0xBC,0x58,0x20,0x63 }
338 	};
339 
340 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; }
341 	_EC_X9_62_PRIME_239V3 = {
342 	{ NID_X9_62_prime_field,20,30,1 },
343 	{ 0x7D,0x73,0x74,0x16,0x8F,0xFE,0x34,0x71,0xB6,0x0A,	/* seed */
344 	  0x85,0x76,0x86,0xA1,0x94,0x75,0xD3,0xBF,0xA2,0xFF,
345 
346 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
347 	  0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00,
348 	  0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,
349 
350 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
351 	  0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00,
352 	  0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFC,
353 
354 	  0x25,0x57,0x05,0xFA,0x2A,0x30,0x66,0x54,0xB1,0xF4,	/* b */
355 	  0xCB,0x03,0xD6,0xA7,0x50,0xA3,0x0C,0x25,0x01,0x02,
356 	  0xD4,0x98,0x87,0x17,0xD9,0xBA,0x15,0xAB,0x6D,0x3E,
357 
358 	  0x67,0x68,0xAE,0x8E,0x18,0xBB,0x92,0xCF,0xCF,0x00,	/* x */
359 	  0x5C,0x94,0x9A,0xA2,0xC6,0xD9,0x48,0x53,0xD0,0xE6,
360 	  0x60,0xBB,0xF8,0x54,0xB1,0xC9,0x50,0x5F,0xE9,0x5A,
361 
362 	  0x16,0x07,0xe6,0x89,0x8f,0x39,0x0c,0x06,0xbc,0x1d,	/* y */
363 	  0x55,0x2b,0xad,0x22,0x6f,0x3b,0x6f,0xcf,0xe4,0x8b,
364 	  0x6e,0x81,0x84,0x99,0xaf,0x18,0xe3,0xed,0x6c,0xf3,
365 
366 	  0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
367 	  0xFF,0xFF,0x7F,0xFF,0xFF,0x97,0x5D,0xEB,0x41,0xB3,
368 	  0xA6,0x05,0x7C,0x3C,0x43,0x21,0x46,0x52,0x65,0x51 }
369 	};
370 
371 
372 static const struct { EC_CURVE_DATA h; unsigned char data[20+32*6]; }
373 	_EC_X9_62_PRIME_256V1 = {
374 	{ NID_X9_62_prime_field,20,32,1 },
375 	{ 0xC4,0x9D,0x36,0x08,0x86,0xE7,0x04,0x93,0x6A,0x66,	/* seed */
376 	  0x78,0xE1,0x13,0x9D,0x26,0xB7,0x81,0x9F,0x7E,0x90,
377 
378 	  0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x01,0x00,0x00,	/* p */
379 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
380 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
381 	  0xFF,0xFF,
382 	  0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x01,0x00,0x00,	/* a */
383 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
384 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
385 	  0xFF,0xFC,
386 	  0x5A,0xC6,0x35,0xD8,0xAA,0x3A,0x93,0xE7,0xB3,0xEB,	/* b */
387 	  0xBD,0x55,0x76,0x98,0x86,0xBC,0x65,0x1D,0x06,0xB0,
388 	  0xCC,0x53,0xB0,0xF6,0x3B,0xCE,0x3C,0x3E,0x27,0xD2,
389 	  0x60,0x4B,
390 	  0x6B,0x17,0xD1,0xF2,0xE1,0x2C,0x42,0x47,0xF8,0xBC,	/* x */
391 	  0xE6,0xE5,0x63,0xA4,0x40,0xF2,0x77,0x03,0x7D,0x81,
392 	  0x2D,0xEB,0x33,0xA0,0xF4,0xA1,0x39,0x45,0xD8,0x98,
393 	  0xC2,0x96,
394 	  0x4f,0xe3,0x42,0xe2,0xfe,0x1a,0x7f,0x9b,0x8e,0xe7,	/* y */
395 	  0xeb,0x4a,0x7c,0x0f,0x9e,0x16,0x2b,0xce,0x33,0x57,
396 	  0x6b,0x31,0x5e,0xce,0xcb,0xb6,0x40,0x68,0x37,0xbf,
397 	  0x51,0xf5,
398 	  0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00,0xFF,0xFF,	/* order */
399 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xBC,0xE6,0xFA,0xAD,
400 	  0xA7,0x17,0x9E,0x84,0xF3,0xB9,0xCA,0xC2,0xFC,0x63,
401 	  0x25,0x51 }
402 	};
403 
404 /* the secg prime curves (minus the nist and x9.62 prime curves) */
405 static const struct { EC_CURVE_DATA h; unsigned char data[20+14*6]; }
406 	_EC_SECG_PRIME_112R1 = {
407 	{ NID_X9_62_prime_field,20,14,1 },
408 	{ 0x00,0xF5,0x0B,0x02,0x8E,0x4D,0x69,0x6E,0x67,0x68,	/* seed */
409 	  0x75,0x61,0x51,0x75,0x29,0x04,0x72,0x78,0x3F,0xB1,
410 
411 	  0xDB,0x7C,0x2A,0xBF,0x62,0xE3,0x5E,0x66,0x80,0x76,	/* p */
412 	  0xBE,0xAD,0x20,0x8B,
413 	  0xDB,0x7C,0x2A,0xBF,0x62,0xE3,0x5E,0x66,0x80,0x76,	/* a */
414 	  0xBE,0xAD,0x20,0x88,
415 	  0x65,0x9E,0xF8,0xBA,0x04,0x39,0x16,0xEE,0xDE,0x89,	/* b */
416 	  0x11,0x70,0x2B,0x22,
417 	  0x09,0x48,0x72,0x39,0x99,0x5A,0x5E,0xE7,0x6B,0x55,	/* x */
418 	  0xF9,0xC2,0xF0,0x98,
419 	  0xa8,0x9c,0xe5,0xaf,0x87,0x24,0xc0,0xa2,0x3e,0x0e,	/* y */
420 	  0x0f,0xf7,0x75,0x00,
421 	  0xDB,0x7C,0x2A,0xBF,0x62,0xE3,0x5E,0x76,0x28,0xDF,	/* order */
422 	  0xAC,0x65,0x61,0xC5 }
423 	};
424 
425 static const struct { EC_CURVE_DATA h; unsigned char data[20+14*6]; }
426 	_EC_SECG_PRIME_112R2 = {
427 	{ NID_X9_62_prime_field,20,14,4 },
428 	{ 0x00,0x27,0x57,0xA1,0x11,0x4D,0x69,0x6E,0x67,0x68,	/* seed */
429 	  0x75,0x61,0x51,0x75,0x53,0x16,0xC0,0x5E,0x0B,0xD4,
430 
431 	  0xDB,0x7C,0x2A,0xBF,0x62,0xE3,0x5E,0x66,0x80,0x76,	/* p */
432 	  0xBE,0xAD,0x20,0x8B,
433 	  0x61,0x27,0xC2,0x4C,0x05,0xF3,0x8A,0x0A,0xAA,0xF6,	/* a */
434 	  0x5C,0x0E,0xF0,0x2C,
435 	  0x51,0xDE,0xF1,0x81,0x5D,0xB5,0xED,0x74,0xFC,0xC3,	/* b */
436 	  0x4C,0x85,0xD7,0x09,
437 	  0x4B,0xA3,0x0A,0xB5,0xE8,0x92,0xB4,0xE1,0x64,0x9D,	/* x */
438 	  0xD0,0x92,0x86,0x43,
439 	  0xad,0xcd,0x46,0xf5,0x88,0x2e,0x37,0x47,0xde,0xf3,	/* y */
440 	  0x6e,0x95,0x6e,0x97,
441 	  0x36,0xDF,0x0A,0xAF,0xD8,0xB8,0xD7,0x59,0x7C,0xA1,	/* order */
442 	  0x05,0x20,0xD0,0x4B }
443 	};
444 
445 static const struct { EC_CURVE_DATA h; unsigned char data[20+16*6]; }
446 	_EC_SECG_PRIME_128R1 = {
447 	{ NID_X9_62_prime_field,20,16,1 },
448 	{ 0x00,0x0E,0x0D,0x4D,0x69,0x6E,0x67,0x68,0x75,0x61,	/* seed */
449 	  0x51,0x75,0x0C,0xC0,0x3A,0x44,0x73,0xD0,0x36,0x79,
450 
451 	  0xFF,0xFF,0xFF,0xFD,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
452 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
453 	  0xFF,0xFF,0xFF,0xFD,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
454 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFC,
455 	  0xE8,0x75,0x79,0xC1,0x10,0x79,0xF4,0x3D,0xD8,0x24,	/* b */
456 	  0x99,0x3C,0x2C,0xEE,0x5E,0xD3,
457 	  0x16,0x1F,0xF7,0x52,0x8B,0x89,0x9B,0x2D,0x0C,0x28,	/* x */
458 	  0x60,0x7C,0xA5,0x2C,0x5B,0x86,
459 	  0xcf,0x5a,0xc8,0x39,0x5b,0xaf,0xeb,0x13,0xc0,0x2d,	/* y */
460 	  0xa2,0x92,0xdd,0xed,0x7a,0x83,
461 	  0xFF,0xFF,0xFF,0xFE,0x00,0x00,0x00,0x00,0x75,0xA3,	/* order */
462 	  0x0D,0x1B,0x90,0x38,0xA1,0x15 }
463 	};
464 
465 static const struct { EC_CURVE_DATA h; unsigned char data[20+16*6]; }
466 	_EC_SECG_PRIME_128R2 = {
467 	{ NID_X9_62_prime_field,20,16,4 },
468 	{ 0x00,0x4D,0x69,0x6E,0x67,0x68,0x75,0x61,0x51,0x75,	/* seed */
469 	  0x12,0xD8,0xF0,0x34,0x31,0xFC,0xE6,0x3B,0x88,0xF4,
470 
471 	  0xFF,0xFF,0xFF,0xFD,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
472 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
473 	  0xD6,0x03,0x19,0x98,0xD1,0xB3,0xBB,0xFE,0xBF,0x59,	/* a */
474 	  0xCC,0x9B,0xBF,0xF9,0xAE,0xE1,
475 	  0x5E,0xEE,0xFC,0xA3,0x80,0xD0,0x29,0x19,0xDC,0x2C,	/* b */
476 	  0x65,0x58,0xBB,0x6D,0x8A,0x5D,
477 	  0x7B,0x6A,0xA5,0xD8,0x5E,0x57,0x29,0x83,0xE6,0xFB,	/* x */
478 	  0x32,0xA7,0xCD,0xEB,0xC1,0x40,
479 	  0x27,0xb6,0x91,0x6a,0x89,0x4d,0x3a,0xee,0x71,0x06,	/* y */
480 	  0xfe,0x80,0x5f,0xc3,0x4b,0x44,
481 	  0x3F,0xFF,0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xBE,0x00,	/* order */
482 	  0x24,0x72,0x06,0x13,0xB5,0xA3 }
483 	};
484 
485 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; }
486 	_EC_SECG_PRIME_160K1 = {
487 	{ NID_X9_62_prime_field,0,21,1 },
488 	{							/* no seed */
489 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
490 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xAC,
491 	  0x73,
492 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
493 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
494 	  0x00,
495 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
496 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
497 	  0x07,
498 	  0x00,0x3B,0x4C,0x38,0x2C,0xE3,0x7A,0xA1,0x92,0xA4,	/* x */
499 	  0x01,0x9E,0x76,0x30,0x36,0xF4,0xF5,0xDD,0x4D,0x7E,
500 	  0xBB,
501 	  0x00,0x93,0x8c,0xf9,0x35,0x31,0x8f,0xdc,0xed,0x6b,	/* y */
502 	  0xc2,0x82,0x86,0x53,0x17,0x33,0xc3,0xf0,0x3c,0x4f,
503 	  0xee,
504 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
505 	  0x01,0xB8,0xFA,0x16,0xDF,0xAB,0x9A,0xCA,0x16,0xB6,
506 	  0xB3 }
507 	};
508 
509 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; }
510 	_EC_SECG_PRIME_160R1 = {
511 	{ NID_X9_62_prime_field,20,21,1 },
512 	{ 0x10,0x53,0xCD,0xE4,0x2C,0x14,0xD6,0x96,0xE6,0x76,	/* seed */
513 	  0x87,0x56,0x15,0x17,0x53,0x3B,0xF3,0xF8,0x33,0x45,
514 
515 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
516 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x7F,0xFF,0xFF,
517 	  0xFF,
518 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
519 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x7F,0xFF,0xFF,
520 	  0xFC,
521 	  0x00,0x1C,0x97,0xBE,0xFC,0x54,0xBD,0x7A,0x8B,0x65,	/* b */
522 	  0xAC,0xF8,0x9F,0x81,0xD4,0xD4,0xAD,0xC5,0x65,0xFA,
523 	  0x45,
524 	  0x00,0x4A,0x96,0xB5,0x68,0x8E,0xF5,0x73,0x28,0x46,	/* x */
525 	  0x64,0x69,0x89,0x68,0xC3,0x8B,0xB9,0x13,0xCB,0xFC,
526 	  0x82,
527 	  0x00,0x23,0xa6,0x28,0x55,0x31,0x68,0x94,0x7d,0x59,	/* y */
528 	  0xdc,0xc9,0x12,0x04,0x23,0x51,0x37,0x7a,0xc5,0xfb,
529 	  0x32,
530 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
531 	  0x01,0xF4,0xC8,0xF9,0x27,0xAE,0xD3,0xCA,0x75,0x22,
532 	  0x57 }
533 	};
534 
535 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; }
536 	_EC_SECG_PRIME_160R2 = {
537 	{ NID_X9_62_prime_field,20,21,1 },
538 	{ 0xB9,0x9B,0x99,0xB0,0x99,0xB3,0x23,0xE0,0x27,0x09,	/* seed */
539 	  0xA4,0xD6,0x96,0xE6,0x76,0x87,0x56,0x15,0x17,0x51,
540 
541 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
542 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xAC,
543 	  0x73,
544 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
545 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xAC,
546 	  0x70,
547 	  0x00,0xB4,0xE1,0x34,0xD3,0xFB,0x59,0xEB,0x8B,0xAB,	/* b */
548 	  0x57,0x27,0x49,0x04,0x66,0x4D,0x5A,0xF5,0x03,0x88,
549 	  0xBA,
550 	  0x00,0x52,0xDC,0xB0,0x34,0x29,0x3A,0x11,0x7E,0x1F,	/* x */
551 	  0x4F,0xF1,0x1B,0x30,0xF7,0x19,0x9D,0x31,0x44,0xCE,
552 	  0x6D,
553 	  0x00,0xfe,0xaf,0xfe,0xf2,0xe3,0x31,0xf2,0x96,0xe0,	/* y */
554 	  0x71,0xfa,0x0d,0xf9,0x98,0x2c,0xfe,0xa7,0xd4,0x3f,
555 	  0x2e,
556 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
557 	  0x00,0x35,0x1E,0xE7,0x86,0xA8,0x18,0xF3,0xA1,0xA1,
558 	  0x6B }
559 	};
560 
561 static const struct { EC_CURVE_DATA h; unsigned char data[0+24*6]; }
562 	_EC_SECG_PRIME_192K1 = {
563 	{ NID_X9_62_prime_field,0,24,1 },
564 	{							/* no seed */
565 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
566 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,
567 	  0xFF,0xFF,0xEE,0x37,
568 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
569 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
570 	  0x00,0x00,0x00,0x00,
571 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
572 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
573 	  0x00,0x00,0x00,0x03,
574 	  0xDB,0x4F,0xF1,0x0E,0xC0,0x57,0xE9,0xAE,0x26,0xB0,	/* x */
575 	  0x7D,0x02,0x80,0xB7,0xF4,0x34,0x1D,0xA5,0xD1,0xB1,
576 	  0xEA,0xE0,0x6C,0x7D,
577 	  0x9b,0x2f,0x2f,0x6d,0x9c,0x56,0x28,0xa7,0x84,0x41,	/* y */
578 	  0x63,0xd0,0x15,0xbe,0x86,0x34,0x40,0x82,0xaa,0x88,
579 	  0xd9,0x5e,0x2f,0x9d,
580 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
581 	  0xFF,0xFE,0x26,0xF2,0xFC,0x17,0x0F,0x69,0x46,0x6A,
582 	  0x74,0xDE,0xFD,0x8D }
583 	};
584 
585 static const struct { EC_CURVE_DATA h; unsigned char data[0+29*6]; }
586 	_EC_SECG_PRIME_224K1 = {
587 	{ NID_X9_62_prime_field,0,29,1 },
588 	{							/* no seed */
589 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
590 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
591 	  0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xE5,0x6D,
592 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
593 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
594 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
595 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
596 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
597 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x05,
598 	  0x00,0xA1,0x45,0x5B,0x33,0x4D,0xF0,0x99,0xDF,0x30,	/* x */
599 	  0xFC,0x28,0xA1,0x69,0xA4,0x67,0xE9,0xE4,0x70,0x75,
600 	  0xA9,0x0F,0x7E,0x65,0x0E,0xB6,0xB7,0xA4,0x5C,
601 	  0x00,0x7e,0x08,0x9f,0xed,0x7f,0xba,0x34,0x42,0x82,	/* y */
602 	  0xca,0xfb,0xd6,0xf7,0xe3,0x19,0xf7,0xc0,0xb0,0xbd,
603 	  0x59,0xe2,0xca,0x4b,0xdb,0x55,0x6d,0x61,0xa5,
604 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
605 	  0x00,0x00,0x00,0x00,0x01,0xDC,0xE8,0xD2,0xEC,0x61,
606 	  0x84,0xCA,0xF0,0xA9,0x71,0x76,0x9F,0xB1,0xF7 }
607 	};
608 
609 static const struct { EC_CURVE_DATA h; unsigned char data[0+32*6]; }
610 	_EC_SECG_PRIME_256K1 = {
611 	{ NID_X9_62_prime_field,0,32,1 },
612 	{							/* no seed */
613 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
614 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
615 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,
616 	  0xFC,0x2F,
617 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
618 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
619 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
620 	  0x00,0x00,
621 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
622 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
623 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
624 	  0x00,0x07,
625 	  0x79,0xBE,0x66,0x7E,0xF9,0xDC,0xBB,0xAC,0x55,0xA0,	/* x */
626 	  0x62,0x95,0xCE,0x87,0x0B,0x07,0x02,0x9B,0xFC,0xDB,
627 	  0x2D,0xCE,0x28,0xD9,0x59,0xF2,0x81,0x5B,0x16,0xF8,
628 	  0x17,0x98,
629 	  0x48,0x3a,0xda,0x77,0x26,0xa3,0xc4,0x65,0x5d,0xa4,	/* y */
630 	  0xfb,0xfc,0x0e,0x11,0x08,0xa8,0xfd,0x17,0xb4,0x48,
631 	  0xa6,0x85,0x54,0x19,0x9c,0x47,0xd0,0x8f,0xfb,0x10,
632 	  0xd4,0xb8,
633 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
634 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xBA,0xAE,0xDC,0xE6,
635 	  0xAF,0x48,0xA0,0x3B,0xBF,0xD2,0x5E,0x8C,0xD0,0x36,
636 	  0x41,0x41 }
637 	};
638 
639 /* some wap/wtls curves */
640 static const struct { EC_CURVE_DATA h; unsigned char data[0+15*6]; }
641 	_EC_WTLS_8 = {
642 	{ NID_X9_62_prime_field,0,15,1 },
643 	{							/* no seed */
644 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
645 	  0xFF,0xFF,0xFF,0xFD,0xE7,
646 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
647 	  0x00,0x00,0x00,0x00,0x00,
648 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
649 	  0x00,0x00,0x00,0x00,0x03,
650 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* x */
651 	  0x00,0x00,0x00,0x00,0x01,
652 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* y */
653 	  0x00,0x00,0x00,0x00,0x02,
654 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0xEC,0xEA,	/* order */
655 	  0x55,0x1A,0xD8,0x37,0xE9 }
656 	};
657 
658 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; }
659 	_EC_WTLS_9 = {
660 	{ NID_X9_62_prime_field,0,21,1 },
661 	{							/* no seed */
662 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
663 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFC,0x80,
664 	  0x8F,
665 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
666 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
667 	  0x00,
668 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
669 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
670 	  0x03,
671 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* x */
672 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
673 	  0x01,
674 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* y */
675 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
676 	  0x02,
677 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
678 	  0x01,0xCD,0xC9,0x8A,0xE0,0xE2,0xDE,0x57,0x4A,0xBF,
679 	  0x33 }
680 	};
681 
682 static const struct { EC_CURVE_DATA h; unsigned char data[0+28*6]; }
683 	_EC_WTLS_12 = {
684 	{ NID_X9_62_prime_field,0,28,1 },
685 	{							/* no seed */
686 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* p */
687 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00,
688 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
689 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* a */
690 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,
691 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,
692 	  0xB4,0x05,0x0A,0x85,0x0C,0x04,0xB3,0xAB,0xF5,0x41,	/* b */
693 	  0x32,0x56,0x50,0x44,0xB0,0xB7,0xD7,0xBF,0xD8,0xBA,
694 	  0x27,0x0B,0x39,0x43,0x23,0x55,0xFF,0xB4,
695 	  0xB7,0x0E,0x0C,0xBD,0x6B,0xB4,0xBF,0x7F,0x32,0x13,	/* x */
696 	  0x90,0xB9,0x4A,0x03,0xC1,0xD3,0x56,0xC2,0x11,0x22,
697 	  0x34,0x32,0x80,0xD6,0x11,0x5C,0x1D,0x21,
698 	  0xbd,0x37,0x63,0x88,0xb5,0xf7,0x23,0xfb,0x4c,0x22,	/* y */
699 	  0xdf,0xe6,0xcd,0x43,0x75,0xa0,0x5a,0x07,0x47,0x64,
700 	  0x44,0xd5,0x81,0x99,0x85,0x00,0x7e,0x34,
701 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
702 	  0xFF,0xFF,0xFF,0xFF,0x16,0xA2,0xE0,0xB8,0xF0,0x3E,
703 	  0x13,0xDD,0x29,0x45,0x5C,0x5C,0x2A,0x3D }
704 	};
705 
706 /* characteristic two curves */
707 static const struct { EC_CURVE_DATA h; unsigned char data[20+15*6]; }
708 	_EC_SECG_CHAR2_113R1 = {
709 	{ NID_X9_62_characteristic_two_field,20,15,2 },
710 	{ 0x10,0xE7,0x23,0xAB,0x14,0xD6,0x96,0xE6,0x76,0x87,	/* seed */
711 	  0x56,0x15,0x17,0x56,0xFE,0xBF,0x8F,0xCB,0x49,0xA9,
712 
713 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
714 	  0x00,0x00,0x00,0x02,0x01,
715 	  0x00,0x30,0x88,0x25,0x0C,0xA6,0xE7,0xC7,0xFE,0x64,	/* a */
716 	  0x9C,0xE8,0x58,0x20,0xF7,
717 	  0x00,0xE8,0xBE,0xE4,0xD3,0xE2,0x26,0x07,0x44,0x18,	/* b */
718 	  0x8B,0xE0,0xE9,0xC7,0x23,
719 	  0x00,0x9D,0x73,0x61,0x6F,0x35,0xF4,0xAB,0x14,0x07,	/* x */
720 	  0xD7,0x35,0x62,0xC1,0x0F,
721 	  0x00,0xA5,0x28,0x30,0x27,0x79,0x58,0xEE,0x84,0xD1,	/* y */
722 	  0x31,0x5E,0xD3,0x18,0x86,
723 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xD9,0xCC,	/* order */
724 	  0xEC,0x8A,0x39,0xE5,0x6F }
725 	};
726 
727 static const struct { EC_CURVE_DATA h; unsigned char data[20+15*6]; }
728 	_EC_SECG_CHAR2_113R2 = {
729 	{ NID_X9_62_characteristic_two_field,20,15,2 },
730 	{ 0x10,0xC0,0xFB,0x15,0x76,0x08,0x60,0xDE,0xF1,0xEE,	/* seed */
731 	  0xF4,0xD6,0x96,0xE6,0x76,0x87,0x56,0x15,0x17,0x5D,
732 
733 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
734 	  0x00,0x00,0x00,0x02,0x01,
735 	  0x00,0x68,0x99,0x18,0xDB,0xEC,0x7E,0x5A,0x0D,0xD6,	/* a */
736 	  0xDF,0xC0,0xAA,0x55,0xC7,
737 	  0x00,0x95,0xE9,0xA9,0xEC,0x9B,0x29,0x7B,0xD4,0xBF,	/* b */
738 	  0x36,0xE0,0x59,0x18,0x4F,
739 	  0x01,0xA5,0x7A,0x6A,0x7B,0x26,0xCA,0x5E,0xF5,0x2F,	/* x */
740 	  0xCD,0xB8,0x16,0x47,0x97,
741 	  0x00,0xB3,0xAD,0xC9,0x4E,0xD1,0xFE,0x67,0x4C,0x06,	/* y */
742 	  0xE6,0x95,0xBA,0xBA,0x1D,
743 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x08,0x78,	/* order */
744 	  0x9B,0x24,0x96,0xAF,0x93 }
745 	};
746 
747 static const struct { EC_CURVE_DATA h; unsigned char data[20+17*6]; }
748 	_EC_SECG_CHAR2_131R1 = {
749 	{ NID_X9_62_characteristic_two_field,20,17,2 },
750 	{ 0x4D,0x69,0x6E,0x67,0x68,0x75,0x61,0x51,0x75,0x98,	/* seed */
751 	  0x5B,0xD3,0xAD,0xBA,0xDA,0x21,0xB4,0x3A,0x97,0xE2,
752 
753 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
754 	  0x00,0x00,0x00,0x00,0x00,0x01,0x0D,
755 	  0x07,0xA1,0x1B,0x09,0xA7,0x6B,0x56,0x21,0x44,0x41,	/* a */
756 	  0x8F,0xF3,0xFF,0x8C,0x25,0x70,0xB8,
757 	  0x02,0x17,0xC0,0x56,0x10,0x88,0x4B,0x63,0xB9,0xC6,	/* b */
758 	  0xC7,0x29,0x16,0x78,0xF9,0xD3,0x41,
759 	  0x00,0x81,0xBA,0xF9,0x1F,0xDF,0x98,0x33,0xC4,0x0F,	/* x */
760 	  0x9C,0x18,0x13,0x43,0x63,0x83,0x99,
761 	  0x07,0x8C,0x6E,0x7E,0xA3,0x8C,0x00,0x1F,0x73,0xC8,	/* y */
762 	  0x13,0x4B,0x1B,0x4E,0xF9,0xE1,0x50,
763 	  0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x02,0x31,	/* order */
764 	  0x23,0x95,0x3A,0x94,0x64,0xB5,0x4D }
765 	};
766 
767 static const struct { EC_CURVE_DATA h; unsigned char data[20+17*6]; }
768 	_EC_SECG_CHAR2_131R2 = {
769 	{ NID_X9_62_characteristic_two_field,20,17,2 },
770 	{ 0x98,0x5B,0xD3,0xAD,0xBA,0xD4,0xD6,0x96,0xE6,0x76,	/* seed */
771 	  0x87,0x56,0x15,0x17,0x5A,0x21,0xB4,0x3A,0x97,0xE3,
772 
773 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
774 	  0x00,0x00,0x00,0x00,0x00,0x01,0x0D,
775 	  0x03,0xE5,0xA8,0x89,0x19,0xD7,0xCA,0xFC,0xBF,0x41,	/* a */
776 	  0x5F,0x07,0xC2,0x17,0x65,0x73,0xB2,
777 	  0x04,0xB8,0x26,0x6A,0x46,0xC5,0x56,0x57,0xAC,0x73,	/* b */
778 	  0x4C,0xE3,0x8F,0x01,0x8F,0x21,0x92,
779 	  0x03,0x56,0xDC,0xD8,0xF2,0xF9,0x50,0x31,0xAD,0x65,	/* x */
780 	  0x2D,0x23,0x95,0x1B,0xB3,0x66,0xA8,
781 	  0x06,0x48,0xF0,0x6D,0x86,0x79,0x40,0xA5,0x36,0x6D,	/* y */
782 	  0x9E,0x26,0x5D,0xE9,0xEB,0x24,0x0F,
783 	  0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x69,	/* order */
784 	  0x54,0xA2,0x33,0x04,0x9B,0xA9,0x8F }
785 	};
786 
787 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; }
788 	_EC_NIST_CHAR2_163K = {
789 	{ NID_X9_62_characteristic_two_field,0,21,2 },
790 	{							/* no seed */
791 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
792 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
793 	  0xC9,
794 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
795 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
796 	  0x01,
797 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
798 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
799 	  0x01,
800 	  0x02,0xFE,0x13,0xC0,0x53,0x7B,0xBC,0x11,0xAC,0xAA,	/* x */
801 	  0x07,0xD7,0x93,0xDE,0x4E,0x6D,0x5E,0x5C,0x94,0xEE,
802 	  0xE8,
803 	  0x02,0x89,0x07,0x0F,0xB0,0x5D,0x38,0xFF,0x58,0x32,	/* y */
804 	  0x1F,0x2E,0x80,0x05,0x36,0xD5,0x38,0xCC,0xDA,0xA3,
805 	  0xD9,
806 	  0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
807 	  0x02,0x01,0x08,0xA2,0xE0,0xCC,0x0D,0x99,0xF8,0xA5,
808 	  0xEF }
809 	};
810 
811 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; }
812 	_EC_SECG_CHAR2_163R1 = {
813 	{ NID_X9_62_characteristic_two_field,0,21,2 },
814 	{							/* no seed */
815 #if 0
816 /* The algorithm used to derive the curve parameters from
817  * the seed used here is slightly different than the
818  * algorithm described in X9.62 . */
819 	  0x24,0xB7,0xB1,0x37,0xC8,0xA1,0x4D,0x69,0x6E,0x67,
820 	  0x68,0x75,0x61,0x51,0x75,0x6F,0xD0,0xDA,0x2E,0x5C,
821 #endif
822 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
823 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
824 	  0xC9,
825 	  0x07,0xB6,0x88,0x2C,0xAA,0xEF,0xA8,0x4F,0x95,0x54,	/* a */
826 	  0xFF,0x84,0x28,0xBD,0x88,0xE2,0x46,0xD2,0x78,0x2A,
827 	  0xE2,
828 	  0x07,0x13,0x61,0x2D,0xCD,0xDC,0xB4,0x0A,0xAB,0x94,	/* b */
829 	  0x6B,0xDA,0x29,0xCA,0x91,0xF7,0x3A,0xF9,0x58,0xAF,
830 	  0xD9,
831 	  0x03,0x69,0x97,0x96,0x97,0xAB,0x43,0x89,0x77,0x89,	/* x */
832 	  0x56,0x67,0x89,0x56,0x7F,0x78,0x7A,0x78,0x76,0xA6,
833 	  0x54,
834 	  0x00,0x43,0x5E,0xDB,0x42,0xEF,0xAF,0xB2,0x98,0x9D,	/* y */
835 	  0x51,0xFE,0xFC,0xE3,0xC8,0x09,0x88,0xF4,0x1F,0xF8,
836 	  0x83,
837 	  0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
838 	  0xFF,0x48,0xAA,0xB6,0x89,0xC2,0x9C,0xA7,0x10,0x27,
839 	  0x9B }
840 	};
841 
842 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; }
843 	_EC_NIST_CHAR2_163B = {
844 	{ NID_X9_62_characteristic_two_field,0,21,2 },
845 	{							/* no seed */
846 #if 0
847 /* The seed here was used to created the curve parameters in normal
848  * basis representation (and not the polynomial representation used here) */
849 	  0x85,0xE2,0x5B,0xFE,0x5C,0x86,0x22,0x6C,0xDB,0x12,
850 	  0x01,0x6F,0x75,0x53,0xF9,0xD0,0xE6,0x93,0xA2,0x68,
851 #endif
852 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
853 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
854 	  0xC9,
855 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
856 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
857 	  0x01,
858 	  0x02,0x0A,0x60,0x19,0x07,0xB8,0xC9,0x53,0xCA,0x14,	/* b */
859 	  0x81,0xEB,0x10,0x51,0x2F,0x78,0x74,0x4A,0x32,0x05,
860 	  0xFD,
861 	  0x03,0xF0,0xEB,0xA1,0x62,0x86,0xA2,0xD5,0x7E,0xA0,	/* x */
862 	  0x99,0x11,0x68,0xD4,0x99,0x46,0x37,0xE8,0x34,0x3E,
863 	  0x36,
864 	  0x00,0xD5,0x1F,0xBC,0x6C,0x71,0xA0,0x09,0x4F,0xA2,	/* y */
865 	  0xCD,0xD5,0x45,0xB1,0x1C,0x5C,0x0C,0x79,0x73,0x24,
866 	  0xF1,
867 	  0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
868 	  0x02,0x92,0xFE,0x77,0xE7,0x0C,0x12,0xA4,0x23,0x4C,
869 	  0x33 }
870 	};
871 
872 static const struct { EC_CURVE_DATA h; unsigned char data[20+25*6]; }
873 	_EC_SECG_CHAR2_193R1 = {
874 	{ NID_X9_62_characteristic_two_field,20,25,2 },
875 	{ 0x10,0x3F,0xAE,0xC7,0x4D,0x69,0x6E,0x67,0x68,0x75,	/* seed */
876 	  0x61,0x51,0x75,0x77,0x7F,0xC5,0xB1,0x91,0xEF,0x30,
877 
878 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
879 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
880 	  0x00,0x00,0x00,0x80,0x01,
881 	  0x00,0x17,0x85,0x8F,0xEB,0x7A,0x98,0x97,0x51,0x69,	/* a */
882 	  0xE1,0x71,0xF7,0x7B,0x40,0x87,0xDE,0x09,0x8A,0xC8,
883 	  0xA9,0x11,0xDF,0x7B,0x01,
884 	  0x00,0xFD,0xFB,0x49,0xBF,0xE6,0xC3,0xA8,0x9F,0xAC,	/* b */
885 	  0xAD,0xAA,0x7A,0x1E,0x5B,0xBC,0x7C,0xC1,0xC2,0xE5,
886 	  0xD8,0x31,0x47,0x88,0x14,
887 	  0x01,0xF4,0x81,0xBC,0x5F,0x0F,0xF8,0x4A,0x74,0xAD,	/* x */
888 	  0x6C,0xDF,0x6F,0xDE,0xF4,0xBF,0x61,0x79,0x62,0x53,
889 	  0x72,0xD8,0xC0,0xC5,0xE1,
890 	  0x00,0x25,0xE3,0x99,0xF2,0x90,0x37,0x12,0xCC,0xF3,	/* y */
891 	  0xEA,0x9E,0x3A,0x1A,0xD1,0x7F,0xB0,0xB3,0x20,0x1B,
892 	  0x6A,0xF7,0xCE,0x1B,0x05,
893 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
894 	  0x00,0x00,0x00,0xC7,0xF3,0x4A,0x77,0x8F,0x44,0x3A,
895 	  0xCC,0x92,0x0E,0xBA,0x49 }
896 	};
897 
898 static const struct { EC_CURVE_DATA h; unsigned char data[20+25*6]; }
899 	_EC_SECG_CHAR2_193R2 = {
900 	{ NID_X9_62_characteristic_two_field,20,25,2 },
901 	{ 0x10,0xB7,0xB4,0xD6,0x96,0xE6,0x76,0x87,0x56,0x15,	/* seed */
902 	  0x17,0x51,0x37,0xC8,0xA1,0x6F,0xD0,0xDA,0x22,0x11,
903 
904 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
905 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
906 	  0x00,0x00,0x00,0x80,0x01,
907 	  0x01,0x63,0xF3,0x5A,0x51,0x37,0xC2,0xCE,0x3E,0xA6,	/* a */
908 	  0xED,0x86,0x67,0x19,0x0B,0x0B,0xC4,0x3E,0xCD,0x69,
909 	  0x97,0x77,0x02,0x70,0x9B,
910 	  0x00,0xC9,0xBB,0x9E,0x89,0x27,0xD4,0xD6,0x4C,0x37,	/* b */
911 	  0x7E,0x2A,0xB2,0x85,0x6A,0x5B,0x16,0xE3,0xEF,0xB7,
912 	  0xF6,0x1D,0x43,0x16,0xAE,
913 	  0x00,0xD9,0xB6,0x7D,0x19,0x2E,0x03,0x67,0xC8,0x03,	/* x */
914 	  0xF3,0x9E,0x1A,0x7E,0x82,0xCA,0x14,0xA6,0x51,0x35,
915 	  0x0A,0xAE,0x61,0x7E,0x8F,
916 	  0x01,0xCE,0x94,0x33,0x56,0x07,0xC3,0x04,0xAC,0x29,	/* y */
917 	  0xE7,0xDE,0xFB,0xD9,0xCA,0x01,0xF5,0x96,0xF9,0x27,
918 	  0x22,0x4C,0xDE,0xCF,0x6C,
919 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
920 	  0x00,0x00,0x01,0x5A,0xAB,0x56,0x1B,0x00,0x54,0x13,
921 	  0xCC,0xD4,0xEE,0x99,0xD5 }
922 	};
923 
924 static const struct { EC_CURVE_DATA h; unsigned char data[0+30*6]; }
925 	_EC_NIST_CHAR2_233K = {
926 	{ NID_X9_62_characteristic_two_field,0,30,4 },
927 	{							/* no seed */
928 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
929 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
930 	  0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
931 
932 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
933 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
934 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
935 
936 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
937 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
938 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
939 
940 	  0x01,0x72,0x32,0xBA,0x85,0x3A,0x7E,0x73,0x1A,0xF1,	/* x */
941 	  0x29,0xF2,0x2F,0xF4,0x14,0x95,0x63,0xA4,0x19,0xC2,
942 	  0x6B,0xF5,0x0A,0x4C,0x9D,0x6E,0xEF,0xAD,0x61,0x26,
943 
944 	  0x01,0xDB,0x53,0x7D,0xEC,0xE8,0x19,0xB7,0xF7,0x0F,	/* y */
945 	  0x55,0x5A,0x67,0xC4,0x27,0xA8,0xCD,0x9B,0xF1,0x8A,
946 	  0xEB,0x9B,0x56,0xE0,0xC1,0x10,0x56,0xFA,0xE6,0xA3,
947 
948 	  0x00,0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
949 	  0x00,0x00,0x00,0x00,0x00,0x06,0x9D,0x5B,0xB9,0x15,
950 	  0xBC,0xD4,0x6E,0xFB,0x1A,0xD5,0xF1,0x73,0xAB,0xDF }
951 	};
952 
953 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; }
954 	_EC_NIST_CHAR2_233B = {
955 	{ NID_X9_62_characteristic_two_field,20,30,2 },
956 	{ 0x74,0xD5,0x9F,0xF0,0x7F,0x6B,0x41,0x3D,0x0E,0xA1,	/* seed */
957 	  0x4B,0x34,0x4B,0x20,0xA2,0xDB,0x04,0x9B,0x50,0xC3,
958 
959 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
960 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
961 	  0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
962 
963 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
964 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
965 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
966 
967 	  0x00,0x66,0x64,0x7E,0xDE,0x6C,0x33,0x2C,0x7F,0x8C,	/* b */
968 	  0x09,0x23,0xBB,0x58,0x21,0x3B,0x33,0x3B,0x20,0xE9,
969 	  0xCE,0x42,0x81,0xFE,0x11,0x5F,0x7D,0x8F,0x90,0xAD,
970 
971 	  0x00,0xFA,0xC9,0xDF,0xCB,0xAC,0x83,0x13,0xBB,0x21,	/* x */
972 	  0x39,0xF1,0xBB,0x75,0x5F,0xEF,0x65,0xBC,0x39,0x1F,
973 	  0x8B,0x36,0xF8,0xF8,0xEB,0x73,0x71,0xFD,0x55,0x8B,
974 
975 	  0x01,0x00,0x6A,0x08,0xA4,0x19,0x03,0x35,0x06,0x78,	/* y */
976 	  0xE5,0x85,0x28,0xBE,0xBF,0x8A,0x0B,0xEF,0xF8,0x67,
977 	  0xA7,0xCA,0x36,0x71,0x6F,0x7E,0x01,0xF8,0x10,0x52,
978 
979 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
980 	  0x00,0x00,0x00,0x00,0x00,0x13,0xE9,0x74,0xE7,0x2F,
981 	  0x8A,0x69,0x22,0x03,0x1D,0x26,0x03,0xCF,0xE0,0xD7 }
982 	};
983 
984 static const struct { EC_CURVE_DATA h; unsigned char data[0+30*6]; }
985 	_EC_SECG_CHAR2_239K1 = {
986 	{ NID_X9_62_characteristic_two_field,0,30,4 },
987 	{							/* no seed */
988 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
989 	  0x40,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
990 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
991 
992 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
993 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
994 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
995 
996 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
997 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
998 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
999 
1000 	  0x29,0xA0,0xB6,0xA8,0x87,0xA9,0x83,0xE9,0x73,0x09,	/* x */
1001 	  0x88,0xA6,0x87,0x27,0xA8,0xB2,0xD1,0x26,0xC4,0x4C,
1002 	  0xC2,0xCC,0x7B,0x2A,0x65,0x55,0x19,0x30,0x35,0xDC,
1003 
1004 	  0x76,0x31,0x08,0x04,0xF1,0x2E,0x54,0x9B,0xDB,0x01,	/* y */
1005 	  0x1C,0x10,0x30,0x89,0xE7,0x35,0x10,0xAC,0xB2,0x75,
1006 	  0xFC,0x31,0x2A,0x5D,0xC6,0xB7,0x65,0x53,0xF0,0xCA,
1007 
1008 	  0x20,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
1009 	  0x00,0x00,0x00,0x00,0x00,0x5A,0x79,0xFE,0xC6,0x7C,
1010 	  0xB6,0xE9,0x1F,0x1C,0x1D,0xA8,0x00,0xE4,0x78,0xA5 }
1011 	};
1012 
1013 static const struct { EC_CURVE_DATA h; unsigned char data[0+36*6]; }
1014 	_EC_NIST_CHAR2_283K = {
1015 	{ NID_X9_62_characteristic_two_field,0,36,4 },
1016 	{							/* no seed */
1017 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1018 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1019 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1020 	  0x00,0x00,0x00,0x00,0x10,0xA1,
1021 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1022 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1023 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1024 	  0x00,0x00,0x00,0x00,0x00,0x00,
1025 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
1026 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1027 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1028 	  0x00,0x00,0x00,0x00,0x00,0x01,
1029 	  0x05,0x03,0x21,0x3F,0x78,0xCA,0x44,0x88,0x3F,0x1A,	/* x */
1030 	  0x3B,0x81,0x62,0xF1,0x88,0xE5,0x53,0xCD,0x26,0x5F,
1031 	  0x23,0xC1,0x56,0x7A,0x16,0x87,0x69,0x13,0xB0,0xC2,
1032 	  0xAC,0x24,0x58,0x49,0x28,0x36,
1033 	  0x01,0xCC,0xDA,0x38,0x0F,0x1C,0x9E,0x31,0x8D,0x90,	/* y */
1034 	  0xF9,0x5D,0x07,0xE5,0x42,0x6F,0xE8,0x7E,0x45,0xC0,
1035 	  0xE8,0x18,0x46,0x98,0xE4,0x59,0x62,0x36,0x4E,0x34,
1036 	  0x11,0x61,0x77,0xDD,0x22,0x59,
1037 	  0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
1038 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xE9,0xAE,
1039 	  0x2E,0xD0,0x75,0x77,0x26,0x5D,0xFF,0x7F,0x94,0x45,
1040 	  0x1E,0x06,0x1E,0x16,0x3C,0x61 }
1041 	};
1042 
1043 static const struct { EC_CURVE_DATA h; unsigned char data[20+36*6]; }
1044 	_EC_NIST_CHAR2_283B = {
1045 	{ NID_X9_62_characteristic_two_field,20,36,2 },
1046 	{ 0x77,0xE2,0xB0,0x73,0x70,0xEB,0x0F,0x83,0x2A,0x6D,	/* no seed */
1047 	  0xD5,0xB6,0x2D,0xFC,0x88,0xCD,0x06,0xBB,0x84,0xBE,
1048 
1049 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1050 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1051 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1052 	  0x00,0x00,0x00,0x00,0x10,0xA1,
1053 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1054 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1055 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1056 	  0x00,0x00,0x00,0x00,0x00,0x01,
1057 	  0x02,0x7B,0x68,0x0A,0xC8,0xB8,0x59,0x6D,0xA5,0xA4,	/* b */
1058 	  0xAF,0x8A,0x19,0xA0,0x30,0x3F,0xCA,0x97,0xFD,0x76,
1059 	  0x45,0x30,0x9F,0xA2,0xA5,0x81,0x48,0x5A,0xF6,0x26,
1060 	  0x3E,0x31,0x3B,0x79,0xA2,0xF5,
1061 	  0x05,0xF9,0x39,0x25,0x8D,0xB7,0xDD,0x90,0xE1,0x93,	/* x */
1062 	  0x4F,0x8C,0x70,0xB0,0xDF,0xEC,0x2E,0xED,0x25,0xB8,
1063 	  0x55,0x7E,0xAC,0x9C,0x80,0xE2,0xE1,0x98,0xF8,0xCD,
1064 	  0xBE,0xCD,0x86,0xB1,0x20,0x53,
1065 	  0x03,0x67,0x68,0x54,0xFE,0x24,0x14,0x1C,0xB9,0x8F,	/* y */
1066 	  0xE6,0xD4,0xB2,0x0D,0x02,0xB4,0x51,0x6F,0xF7,0x02,
1067 	  0x35,0x0E,0xDD,0xB0,0x82,0x67,0x79,0xC8,0x13,0xF0,
1068 	  0xDF,0x45,0xBE,0x81,0x12,0xF4,
1069 	  0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
1070 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xEF,0x90,
1071 	  0x39,0x96,0x60,0xFC,0x93,0x8A,0x90,0x16,0x5B,0x04,
1072 	  0x2A,0x7C,0xEF,0xAD,0xB3,0x07 }
1073 	};
1074 
1075 static const struct { EC_CURVE_DATA h; unsigned char data[0+52*6]; }
1076 	_EC_NIST_CHAR2_409K = {
1077 	{ NID_X9_62_characteristic_two_field,0,52,4 },
1078 	{							/* no seed */
1079 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1080 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1081 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1082 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1083 	  0x00,0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1084 	  0x00,0x01,
1085 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1086 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1087 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1088 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1089 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1090 	  0x00,0x00,
1091 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
1092 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1093 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1094 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1095 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1096 	  0x00,0x01,
1097 	  0x00,0x60,0xF0,0x5F,0x65,0x8F,0x49,0xC1,0xAD,0x3A,	/* x */
1098 	  0xB1,0x89,0x0F,0x71,0x84,0x21,0x0E,0xFD,0x09,0x87,
1099 	  0xE3,0x07,0xC8,0x4C,0x27,0xAC,0xCF,0xB8,0xF9,0xF6,
1100 	  0x7C,0xC2,0xC4,0x60,0x18,0x9E,0xB5,0xAA,0xAA,0x62,
1101 	  0xEE,0x22,0x2E,0xB1,0xB3,0x55,0x40,0xCF,0xE9,0x02,
1102 	  0x37,0x46,
1103 	  0x01,0xE3,0x69,0x05,0x0B,0x7C,0x4E,0x42,0xAC,0xBA,	/* y */
1104 	  0x1D,0xAC,0xBF,0x04,0x29,0x9C,0x34,0x60,0x78,0x2F,
1105 	  0x91,0x8E,0xA4,0x27,0xE6,0x32,0x51,0x65,0xE9,0xEA,
1106 	  0x10,0xE3,0xDA,0x5F,0x6C,0x42,0xE9,0xC5,0x52,0x15,
1107 	  0xAA,0x9C,0xA2,0x7A,0x58,0x63,0xEC,0x48,0xD8,0xE0,
1108 	  0x28,0x6B,
1109 	  0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
1110 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
1111 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0x5F,0x83,0xB2,
1112 	  0xD4,0xEA,0x20,0x40,0x0E,0xC4,0x55,0x7D,0x5E,0xD3,
1113 	  0xE3,0xE7,0xCA,0x5B,0x4B,0x5C,0x83,0xB8,0xE0,0x1E,
1114 	  0x5F,0xCF }
1115 	};
1116 
1117 static const struct { EC_CURVE_DATA h; unsigned char data[20+52*6]; }
1118 	_EC_NIST_CHAR2_409B = {
1119 	{ NID_X9_62_characteristic_two_field,20,52,2 },
1120 	{ 0x40,0x99,0xB5,0xA4,0x57,0xF9,0xD6,0x9F,0x79,0x21,	/* seed */
1121 	  0x3D,0x09,0x4C,0x4B,0xCD,0x4D,0x42,0x62,0x21,0x0B,
1122 
1123 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1124 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1125 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1126 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1127 	  0x00,0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1128 	  0x00,0x01,
1129 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1130 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1131 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1132 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1133 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1134 	  0x00,0x01,
1135 	  0x00,0x21,0xA5,0xC2,0xC8,0xEE,0x9F,0xEB,0x5C,0x4B,	/* b */
1136 	  0x9A,0x75,0x3B,0x7B,0x47,0x6B,0x7F,0xD6,0x42,0x2E,
1137 	  0xF1,0xF3,0xDD,0x67,0x47,0x61,0xFA,0x99,0xD6,0xAC,
1138 	  0x27,0xC8,0xA9,0xA1,0x97,0xB2,0x72,0x82,0x2F,0x6C,
1139 	  0xD5,0x7A,0x55,0xAA,0x4F,0x50,0xAE,0x31,0x7B,0x13,
1140 	  0x54,0x5F,
1141 	  0x01,0x5D,0x48,0x60,0xD0,0x88,0xDD,0xB3,0x49,0x6B,	/* x */
1142 	  0x0C,0x60,0x64,0x75,0x62,0x60,0x44,0x1C,0xDE,0x4A,
1143 	  0xF1,0x77,0x1D,0x4D,0xB0,0x1F,0xFE,0x5B,0x34,0xE5,
1144 	  0x97,0x03,0xDC,0x25,0x5A,0x86,0x8A,0x11,0x80,0x51,
1145 	  0x56,0x03,0xAE,0xAB,0x60,0x79,0x4E,0x54,0xBB,0x79,
1146 	  0x96,0xA7,
1147 	  0x00,0x61,0xB1,0xCF,0xAB,0x6B,0xE5,0xF3,0x2B,0xBF,	/* y */
1148 	  0xA7,0x83,0x24,0xED,0x10,0x6A,0x76,0x36,0xB9,0xC5,
1149 	  0xA7,0xBD,0x19,0x8D,0x01,0x58,0xAA,0x4F,0x54,0x88,
1150 	  0xD0,0x8F,0x38,0x51,0x4F,0x1F,0xDF,0x4B,0x4F,0x40,
1151 	  0xD2,0x18,0x1B,0x36,0x81,0xC3,0x64,0xBA,0x02,0x73,
1152 	  0xC7,0x06,
1153 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
1154 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1155 	  0x00,0x00,0x00,0x00,0x00,0x00,0x01,0xE2,0xAA,0xD6,
1156 	  0xA6,0x12,0xF3,0x33,0x07,0xBE,0x5F,0xA4,0x7C,0x3C,
1157 	  0x9E,0x05,0x2F,0x83,0x81,0x64,0xCD,0x37,0xD9,0xA2,
1158 	  0x11,0x73 }
1159 	};
1160 
1161 static const struct { EC_CURVE_DATA h; unsigned char data[0+72*6]; }
1162 	_EC_NIST_CHAR2_571K = {
1163 	{ NID_X9_62_characteristic_two_field,0,72,4 },
1164 	{							/* no seed */
1165 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1166 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1167 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1168 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1169 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1170 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1171 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1172 	  0x04,0x25,
1173 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1174 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1175 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1176 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1177 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1178 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1179 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1180 	  0x00,0x00,
1181 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
1182 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1183 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1184 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1185 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1186 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1187 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1188 	  0x00,0x01,
1189 	  0x02,0x6E,0xB7,0xA8,0x59,0x92,0x3F,0xBC,0x82,0x18,	/* x */
1190 	  0x96,0x31,0xF8,0x10,0x3F,0xE4,0xAC,0x9C,0xA2,0x97,
1191 	  0x00,0x12,0xD5,0xD4,0x60,0x24,0x80,0x48,0x01,0x84,
1192 	  0x1C,0xA4,0x43,0x70,0x95,0x84,0x93,0xB2,0x05,0xE6,
1193 	  0x47,0xDA,0x30,0x4D,0xB4,0xCE,0xB0,0x8C,0xBB,0xD1,
1194 	  0xBA,0x39,0x49,0x47,0x76,0xFB,0x98,0x8B,0x47,0x17,
1195 	  0x4D,0xCA,0x88,0xC7,0xE2,0x94,0x52,0x83,0xA0,0x1C,
1196 	  0x89,0x72,
1197 	  0x03,0x49,0xDC,0x80,0x7F,0x4F,0xBF,0x37,0x4F,0x4A,	/* y */
1198 	  0xEA,0xDE,0x3B,0xCA,0x95,0x31,0x4D,0xD5,0x8C,0xEC,
1199 	  0x9F,0x30,0x7A,0x54,0xFF,0xC6,0x1E,0xFC,0x00,0x6D,
1200 	  0x8A,0x2C,0x9D,0x49,0x79,0xC0,0xAC,0x44,0xAE,0xA7,
1201 	  0x4F,0xBE,0xBB,0xB9,0xF7,0x72,0xAE,0xDC,0xB6,0x20,
1202 	  0xB0,0x1A,0x7B,0xA7,0xAF,0x1B,0x32,0x04,0x30,0xC8,
1203 	  0x59,0x19,0x84,0xF6,0x01,0xCD,0x4C,0x14,0x3E,0xF1,
1204 	  0xC7,0xA3,
1205 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
1206 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1207 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1208 	  0x00,0x00,0x00,0x00,0x00,0x00,0x13,0x18,0x50,0xE1,
1209 	  0xF1,0x9A,0x63,0xE4,0xB3,0x91,0xA8,0xDB,0x91,0x7F,
1210 	  0x41,0x38,0xB6,0x30,0xD8,0x4B,0xE5,0xD6,0x39,0x38,
1211 	  0x1E,0x91,0xDE,0xB4,0x5C,0xFE,0x77,0x8F,0x63,0x7C,
1212 	  0x10,0x01 }
1213 	};
1214 
1215 static const struct { EC_CURVE_DATA h; unsigned char data[20+72*6]; }
1216 	_EC_NIST_CHAR2_571B = {
1217 	{ NID_X9_62_characteristic_two_field,20,72,2 },
1218 	{ 0x2A,0xA0,0x58,0xF7,0x3A,0x0E,0x33,0xAB,0x48,0x6B,	/* seed */
1219 	  0x0F,0x61,0x04,0x10,0xC5,0x3A,0x7F,0x13,0x23,0x10,
1220 
1221 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1222 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1223 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1224 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1225 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1226 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1227 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1228 	  0x04,0x25,
1229 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1230 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1231 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1232 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1233 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1234 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1235 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1236 	  0x00,0x01,
1237 	  0x02,0xF4,0x0E,0x7E,0x22,0x21,0xF2,0x95,0xDE,0x29,	/* b */
1238 	  0x71,0x17,0xB7,0xF3,0xD6,0x2F,0x5C,0x6A,0x97,0xFF,
1239 	  0xCB,0x8C,0xEF,0xF1,0xCD,0x6B,0xA8,0xCE,0x4A,0x9A,
1240 	  0x18,0xAD,0x84,0xFF,0xAB,0xBD,0x8E,0xFA,0x59,0x33,
1241 	  0x2B,0xE7,0xAD,0x67,0x56,0xA6,0x6E,0x29,0x4A,0xFD,
1242 	  0x18,0x5A,0x78,0xFF,0x12,0xAA,0x52,0x0E,0x4D,0xE7,
1243 	  0x39,0xBA,0xCA,0x0C,0x7F,0xFE,0xFF,0x7F,0x29,0x55,
1244 	  0x72,0x7A,
1245 	  0x03,0x03,0x00,0x1D,0x34,0xB8,0x56,0x29,0x6C,0x16,	/* x */
1246 	  0xC0,0xD4,0x0D,0x3C,0xD7,0x75,0x0A,0x93,0xD1,0xD2,
1247 	  0x95,0x5F,0xA8,0x0A,0xA5,0xF4,0x0F,0xC8,0xDB,0x7B,
1248 	  0x2A,0xBD,0xBD,0xE5,0x39,0x50,0xF4,0xC0,0xD2,0x93,
1249 	  0xCD,0xD7,0x11,0xA3,0x5B,0x67,0xFB,0x14,0x99,0xAE,
1250 	  0x60,0x03,0x86,0x14,0xF1,0x39,0x4A,0xBF,0xA3,0xB4,
1251 	  0xC8,0x50,0xD9,0x27,0xE1,0xE7,0x76,0x9C,0x8E,0xEC,
1252 	  0x2D,0x19,
1253 	  0x03,0x7B,0xF2,0x73,0x42,0xDA,0x63,0x9B,0x6D,0xCC,	/* y */
1254 	  0xFF,0xFE,0xB7,0x3D,0x69,0xD7,0x8C,0x6C,0x27,0xA6,
1255 	  0x00,0x9C,0xBB,0xCA,0x19,0x80,0xF8,0x53,0x39,0x21,
1256 	  0xE8,0xA6,0x84,0x42,0x3E,0x43,0xBA,0xB0,0x8A,0x57,
1257 	  0x62,0x91,0xAF,0x8F,0x46,0x1B,0xB2,0xA8,0xB3,0x53,
1258 	  0x1D,0x2F,0x04,0x85,0xC1,0x9B,0x16,0xE2,0xF1,0x51,
1259 	  0x6E,0x23,0xDD,0x3C,0x1A,0x48,0x27,0xAF,0x1B,0x8A,
1260 	  0xC1,0x5B,
1261 	  0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
1262 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
1263 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,
1264 	  0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xE6,0x61,0xCE,0x18,
1265 	  0xFF,0x55,0x98,0x73,0x08,0x05,0x9B,0x18,0x68,0x23,
1266 	  0x85,0x1E,0xC7,0xDD,0x9C,0xA1,0x16,0x1D,0xE9,0x3D,
1267 	  0x51,0x74,0xD6,0x6E,0x83,0x82,0xE9,0xBB,0x2F,0xE8,
1268 	  0x4E,0x47 }
1269 	};
1270 
1271 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; }
1272 	_EC_X9_62_CHAR2_163V1 = {
1273 	{ NID_X9_62_characteristic_two_field,20,21,2 },
1274 	{ 0xD2,0xC0,0xFB,0x15,0x76,0x08,0x60,0xDE,0xF1,0xEE,
1275 	  0xF4,0xD6,0x96,0xE6,0x76,0x87,0x56,0x15,0x17,0x54,	/* seed */
1276 
1277 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1278 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
1279 	  0x07,
1280 	  0x07,0x25,0x46,0xB5,0x43,0x52,0x34,0xA4,0x22,0xE0,	/* a */
1281 	  0x78,0x96,0x75,0xF4,0x32,0xC8,0x94,0x35,0xDE,0x52,
1282 	  0x42,
1283 	  0x00,0xC9,0x51,0x7D,0x06,0xD5,0x24,0x0D,0x3C,0xFF,	/* b */
1284 	  0x38,0xC7,0x4B,0x20,0xB6,0xCD,0x4D,0x6F,0x9D,0xD4,
1285 	  0xD9,
1286 	  0x07,0xAF,0x69,0x98,0x95,0x46,0x10,0x3D,0x79,0x32,	/* x */
1287 	  0x9F,0xCC,0x3D,0x74,0x88,0x0F,0x33,0xBB,0xE8,0x03,
1288 	  0xCB,
1289 	  0x01,0xEC,0x23,0x21,0x1B,0x59,0x66,0xAD,0xEA,0x1D,	/* y */
1290 	  0x3F,0x87,0xF7,0xEA,0x58,0x48,0xAE,0xF0,0xB7,0xCA,
1291 	  0x9F,
1292 	  0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
1293 	  0x01,0xE6,0x0F,0xC8,0x82,0x1C,0xC7,0x4D,0xAE,0xAF,
1294 	  0xC1 }
1295 	};
1296 
1297 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; }
1298 	_EC_X9_62_CHAR2_163V2 = {
1299 	{ NID_X9_62_characteristic_two_field,20,21,2 },
1300 	{ 0x53,0x81,0x4C,0x05,0x0D,0x44,0xD6,0x96,0xE6,0x76,	/* seed */
1301 	  0x87,0x56,0x15,0x17,0x58,0x0C,0xA4,0xE2,0x9F,0xFD,
1302 
1303  	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1304 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
1305 	  0x07,
1306 	  0x01,0x08,0xB3,0x9E,0x77,0xC4,0xB1,0x08,0xBE,0xD9,	/* a */
1307 	  0x81,0xED,0x0E,0x89,0x0E,0x11,0x7C,0x51,0x1C,0xF0,
1308 	  0x72,
1309 	  0x06,0x67,0xAC,0xEB,0x38,0xAF,0x4E,0x48,0x8C,0x40,	/* b */
1310 	  0x74,0x33,0xFF,0xAE,0x4F,0x1C,0x81,0x16,0x38,0xDF,
1311 	  0x20,
1312 	  0x00,0x24,0x26,0x6E,0x4E,0xB5,0x10,0x6D,0x0A,0x96,	/* x */
1313 	  0x4D,0x92,0xC4,0x86,0x0E,0x26,0x71,0xDB,0x9B,0x6C,
1314 	  0xC5,
1315 	  0x07,0x9F,0x68,0x4D,0xDF,0x66,0x84,0xC5,0xCD,0x25,	/* y */
1316 	  0x8B,0x38,0x90,0x02,0x1B,0x23,0x86,0xDF,0xD1,0x9F,
1317 	  0xC5,
1318 	  0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
1319 	  0xFD,0xF6,0x4D,0xE1,0x15,0x1A,0xDB,0xB7,0x8F,0x10,
1320 	  0xA7 }
1321 	};
1322 
1323 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; }
1324 	_EC_X9_62_CHAR2_163V3 = {
1325 	{ NID_X9_62_characteristic_two_field,20,21,2 },
1326 	{ 0x50,0xCB,0xF1,0xD9,0x5C,0xA9,0x4D,0x69,0x6E,0x67,	/* seed */
1327 	  0x68,0x75,0x61,0x51,0x75,0xF1,0x6A,0x36,0xA3,0xB8,
1328 
1329 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1330 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
1331 	  0x07,
1332 	  0x07,0xA5,0x26,0xC6,0x3D,0x3E,0x25,0xA2,0x56,0xA0,	/* a */
1333 	  0x07,0x69,0x9F,0x54,0x47,0xE3,0x2A,0xE4,0x56,0xB5,
1334 	  0x0E,
1335 	  0x03,0xF7,0x06,0x17,0x98,0xEB,0x99,0xE2,0x38,0xFD,	/* b */
1336 	  0x6F,0x1B,0xF9,0x5B,0x48,0xFE,0xEB,0x48,0x54,0x25,
1337 	  0x2B,
1338 	  0x02,0xF9,0xF8,0x7B,0x7C,0x57,0x4D,0x0B,0xDE,0xCF,	/* x */
1339 	  0x8A,0x22,0xE6,0x52,0x47,0x75,0xF9,0x8C,0xDE,0xBD,
1340 	  0xCB,
1341 	  0x05,0xB9,0x35,0x59,0x0C,0x15,0x5E,0x17,0xEA,0x48,	/* y */
1342 	  0xEB,0x3F,0xF3,0x71,0x8B,0x89,0x3D,0xF5,0x9A,0x05,
1343 	  0xD0,
1344 	  0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
1345 	  0xFE,0x1A,0xEE,0x14,0x0F,0x11,0x0A,0xFF,0x96,0x13,
1346 	  0x09 }
1347 	};
1348 
1349 static const struct { EC_CURVE_DATA h; unsigned char data[0+23*6]; }
1350 	_EC_X9_62_CHAR2_176V1 = {
1351 	{ NID_X9_62_characteristic_two_field,0,23,0xFF6E },
1352 	{							/* no seed */
1353 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1354 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x08,0x00,0x00,
1355 	  0x00,0x00,0x07,
1356 	  0x00,0xE4,0xE6,0xDB,0x29,0x95,0x06,0x5C,0x40,0x7D,	/* a */
1357 	  0x9D,0x39,0xB8,0xD0,0x96,0x7B,0x96,0x70,0x4B,0xA8,
1358 	  0xE9,0xC9,0x0B,
1359 	  0x00,0x5D,0xDA,0x47,0x0A,0xBE,0x64,0x14,0xDE,0x8E,	/* b */
1360 	  0xC1,0x33,0xAE,0x28,0xE9,0xBB,0xD7,0xFC,0xEC,0x0A,
1361 	  0xE0,0xFF,0xF2,
1362 	  0x00,0x8D,0x16,0xC2,0x86,0x67,0x98,0xB6,0x00,0xF9,	/* x */
1363 	  0xF0,0x8B,0xB4,0xA8,0xE8,0x60,0xF3,0x29,0x8C,0xE0,
1364 	  0x4A,0x57,0x98,
1365 	  0x00,0x6F,0xA4,0x53,0x9C,0x2D,0xAD,0xDD,0xD6,0xBA,	/* y */
1366 	  0xB5,0x16,0x7D,0x61,0xB4,0x36,0xE1,0xD9,0x2B,0xB1,
1367 	  0x6A,0x56,0x2C,
1368 	  0x00,0x00,0x01,0x00,0x92,0x53,0x73,0x97,0xEC,0xA4,	/* order */
1369 	  0xF6,0x14,0x57,0x99,0xD6,0x2B,0x0A,0x19,0xCE,0x06,
1370 	  0xFE,0x26,0xAD }
1371 	};
1372 
1373 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; }
1374 	_EC_X9_62_CHAR2_191V1 = {
1375 	{ NID_X9_62_characteristic_two_field,20,24,2 },
1376 	{ 0x4E,0x13,0xCA,0x54,0x27,0x44,0xD6,0x96,0xE6,0x76,	/* seed */
1377 	  0x87,0x56,0x15,0x17,0x55,0x2F,0x27,0x9A,0x8C,0x84,
1378 
1379 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1380 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1381 	  0x00,0x00,0x02,0x01,
1382 	  0x28,0x66,0x53,0x7B,0x67,0x67,0x52,0x63,0x6A,0x68,	/* a */
1383 	  0xF5,0x65,0x54,0xE1,0x26,0x40,0x27,0x6B,0x64,0x9E,
1384 	  0xF7,0x52,0x62,0x67,
1385 	  0x2E,0x45,0xEF,0x57,0x1F,0x00,0x78,0x6F,0x67,0xB0,	/* b */
1386 	  0x08,0x1B,0x94,0x95,0xA3,0xD9,0x54,0x62,0xF5,0xDE,
1387 	  0x0A,0xA1,0x85,0xEC,
1388 	  0x36,0xB3,0xDA,0xF8,0xA2,0x32,0x06,0xF9,0xC4,0xF2,	/* x */
1389 	  0x99,0xD7,0xB2,0x1A,0x9C,0x36,0x91,0x37,0xF2,0xC8,
1390 	  0x4A,0xE1,0xAA,0x0D,
1391 	  0x76,0x5B,0xE7,0x34,0x33,0xB3,0xF9,0x5E,0x33,0x29,	/* y */
1392 	  0x32,0xE7,0x0E,0xA2,0x45,0xCA,0x24,0x18,0xEA,0x0E,
1393 	  0xF9,0x80,0x18,0xFB,
1394 	  0x40,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
1395 	  0x00,0x00,0x04,0xA2,0x0E,0x90,0xC3,0x90,0x67,0xC8,
1396 	  0x93,0xBB,0xB9,0xA5 }
1397 	};
1398 
1399 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; }
1400 	_EC_X9_62_CHAR2_191V2 = {
1401 	{ NID_X9_62_characteristic_two_field,20,24,4 },
1402 	{ 0x08,0x71,0xEF,0x2F,0xEF,0x24,0xD6,0x96,0xE6,0x76,	/* seed */
1403 	  0x87,0x56,0x15,0x17,0x58,0xBE,0xE0,0xD9,0x5C,0x15,
1404 
1405 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1406 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1407 	  0x00,0x00,0x02,0x01,
1408 	  0x40,0x10,0x28,0x77,0x4D,0x77,0x77,0xC7,0xB7,0x66,	/* a */
1409 	  0x6D,0x13,0x66,0xEA,0x43,0x20,0x71,0x27,0x4F,0x89,
1410 	  0xFF,0x01,0xE7,0x18,
1411 	  0x06,0x20,0x04,0x8D,0x28,0xBC,0xBD,0x03,0xB6,0x24,	/* b */
1412 	  0x9C,0x99,0x18,0x2B,0x7C,0x8C,0xD1,0x97,0x00,0xC3,
1413 	  0x62,0xC4,0x6A,0x01,
1414 	  0x38,0x09,0xB2,0xB7,0xCC,0x1B,0x28,0xCC,0x5A,0x87,	/* x */
1415 	  0x92,0x6A,0xAD,0x83,0xFD,0x28,0x78,0x9E,0x81,0xE2,
1416 	  0xC9,0xE3,0xBF,0x10,
1417 	  0x17,0x43,0x43,0x86,0x62,0x6D,0x14,0xF3,0xDB,0xF0,	/* y */
1418 	  0x17,0x60,0xD9,0x21,0x3A,0x3E,0x1C,0xF3,0x7A,0xEC,
1419 	  0x43,0x7D,0x66,0x8A,
1420 	  0x20,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
1421 	  0x00,0x00,0x50,0x50,0x8C,0xB8,0x9F,0x65,0x28,0x24,
1422 	  0xE0,0x6B,0x81,0x73 }
1423 	};
1424 
1425 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; }
1426 	_EC_X9_62_CHAR2_191V3 = {
1427 	{ NID_X9_62_characteristic_two_field,20,24,6 },
1428 	{ 0xE0,0x53,0x51,0x2D,0xC6,0x84,0xD6,0x96,0xE6,0x76,	/* seed */
1429 	  0x87,0x56,0x15,0x17,0x50,0x67,0xAE,0x78,0x6D,0x1F,
1430 
1431 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1432 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1433 	  0x00,0x00,0x02,0x01,
1434 	  0x6C,0x01,0x07,0x47,0x56,0x09,0x91,0x22,0x22,0x10,	/* a */
1435 	  0x56,0x91,0x1C,0x77,0xD7,0x7E,0x77,0xA7,0x77,0xE7,
1436 	  0xE7,0xE7,0x7F,0xCB,
1437 	  0x71,0xFE,0x1A,0xF9,0x26,0xCF,0x84,0x79,0x89,0xEF,	/* b */
1438 	  0xEF,0x8D,0xB4,0x59,0xF6,0x63,0x94,0xD9,0x0F,0x32,
1439 	  0xAD,0x3F,0x15,0xE8,
1440 	  0x37,0x5D,0x4C,0xE2,0x4F,0xDE,0x43,0x44,0x89,0xDE,	/* x */
1441 	  0x87,0x46,0xE7,0x17,0x86,0x01,0x50,0x09,0xE6,0x6E,
1442 	  0x38,0xA9,0x26,0xDD,
1443 	  0x54,0x5A,0x39,0x17,0x61,0x96,0x57,0x5D,0x98,0x59,	/* y */
1444 	  0x99,0x36,0x6E,0x6A,0xD3,0x4C,0xE0,0xA7,0x7C,0xD7,
1445 	  0x12,0x7B,0x06,0xBE,
1446 	  0x15,0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55,	/* order */
1447 	  0x55,0x55,0x61,0x0C,0x0B,0x19,0x68,0x12,0xBF,0xB6,
1448 	  0x28,0x8A,0x3E,0xA3 }
1449 	};
1450 
1451 static const struct { EC_CURVE_DATA h; unsigned char data[0+27*6]; }
1452 	_EC_X9_62_CHAR2_208W1 = {
1453 	{ NID_X9_62_characteristic_two_field,0,27,0xFE48 },
1454 	{							/* no seed */
1455 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1456 	  0x00,0x00,0x00,0x00,0x00,0x00,0x08,0x00,0x00,0x00,
1457 	  0x00,0x00,0x00,0x00,0x00,0x00,0x07,
1458 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1459 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1460 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1461 	  0x00,0xC8,0x61,0x9E,0xD4,0x5A,0x62,0xE6,0x21,0x2E,	/* b */
1462 	  0x11,0x60,0x34,0x9E,0x2B,0xFA,0x84,0x44,0x39,0xFA,
1463 	  0xFC,0x2A,0x3F,0xD1,0x63,0x8F,0x9E,
1464 	  0x00,0x89,0xFD,0xFB,0xE4,0xAB,0xE1,0x93,0xDF,0x95,	/* x */
1465 	  0x59,0xEC,0xF0,0x7A,0xC0,0xCE,0x78,0x55,0x4E,0x27,
1466 	  0x84,0xEB,0x8C,0x1E,0xD1,0xA5,0x7A,
1467 	  0x00,0x0F,0x55,0xB5,0x1A,0x06,0xE7,0x8E,0x9A,0xC3,	/* y */
1468 	  0x8A,0x03,0x5F,0xF5,0x20,0xD8,0xB0,0x17,0x81,0xBE,
1469 	  0xB1,0xA6,0xBB,0x08,0x61,0x7D,0xE3,
1470 	  0x00,0x00,0x01,0x01,0xBA,0xF9,0x5C,0x97,0x23,0xC5,	/* order */
1471 	  0x7B,0x6C,0x21,0xDA,0x2E,0xFF,0x2D,0x5E,0xD5,0x88,
1472 	  0xBD,0xD5,0x71,0x7E,0x21,0x2F,0x9D }
1473 	};
1474 
1475 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; }
1476 	_EC_X9_62_CHAR2_239V1 = {
1477 	{ NID_X9_62_characteristic_two_field,20,30,4 },
1478 	{ 0xD3,0x4B,0x9A,0x4D,0x69,0x6E,0x67,0x68,0x75,0x61,	/* seed */
1479 	  0x51,0x75,0xCA,0x71,0xB9,0x20,0xBF,0xEF,0xB0,0x5D,
1480 
1481 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1482 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1483 	  0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00,0x01,
1484 
1485 	  0x32,0x01,0x08,0x57,0x07,0x7C,0x54,0x31,0x12,0x3A,	/* a */
1486 	  0x46,0xB8,0x08,0x90,0x67,0x56,0xF5,0x43,0x42,0x3E,
1487 	  0x8D,0x27,0x87,0x75,0x78,0x12,0x57,0x78,0xAC,0x76,
1488 
1489 	  0x79,0x04,0x08,0xF2,0xEE,0xDA,0xF3,0x92,0xB0,0x12,	/* b */
1490 	  0xED,0xEF,0xB3,0x39,0x2F,0x30,0xF4,0x32,0x7C,0x0C,
1491 	  0xA3,0xF3,0x1F,0xC3,0x83,0xC4,0x22,0xAA,0x8C,0x16,
1492 
1493 	  0x57,0x92,0x70,0x98,0xFA,0x93,0x2E,0x7C,0x0A,0x96,	/* x */
1494 	  0xD3,0xFD,0x5B,0x70,0x6E,0xF7,0xE5,0xF5,0xC1,0x56,
1495 	  0xE1,0x6B,0x7E,0x7C,0x86,0x03,0x85,0x52,0xE9,0x1D,
1496 
1497 	  0x61,0xD8,0xEE,0x50,0x77,0xC3,0x3F,0xEC,0xF6,0xF1,	/* y */
1498 	  0xA1,0x6B,0x26,0x8D,0xE4,0x69,0xC3,0xC7,0x74,0x4E,
1499 	  0xA9,0xA9,0x71,0x64,0x9F,0xC7,0xA9,0x61,0x63,0x05,
1500 
1501 	  0x20,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* order */
1502 	  0x00,0x00,0x00,0x00,0x00,0x0F,0x4D,0x42,0xFF,0xE1,
1503 	  0x49,0x2A,0x49,0x93,0xF1,0xCA,0xD6,0x66,0xE4,0x47 }
1504 	};
1505 
1506 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; }
1507 	_EC_X9_62_CHAR2_239V2 = {
1508 	{ NID_X9_62_characteristic_two_field,20,30,6 },
1509 	{ 0x2A,0xA6,0x98,0x2F,0xDF,0xA4,0xD6,0x96,0xE6,0x76,	/* seed */
1510 	  0x87,0x56,0x15,0x17,0x5D,0x26,0x67,0x27,0x27,0x7D,
1511 
1512 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1513 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1514 	  0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00,0x01,
1515 
1516 	  0x42,0x30,0x01,0x77,0x57,0xA7,0x67,0xFA,0xE4,0x23,	/* a */
1517 	  0x98,0x56,0x9B,0x74,0x63,0x25,0xD4,0x53,0x13,0xAF,
1518 	  0x07,0x66,0x26,0x64,0x79,0xB7,0x56,0x54,0xE6,0x5F,
1519 
1520 	  0x50,0x37,0xEA,0x65,0x41,0x96,0xCF,0xF0,0xCD,0x82,	/* b */
1521 	  0xB2,0xC1,0x4A,0x2F,0xCF,0x2E,0x3F,0xF8,0x77,0x52,
1522 	  0x85,0xB5,0x45,0x72,0x2F,0x03,0xEA,0xCD,0xB7,0x4B,
1523 
1524 	  0x28,0xF9,0xD0,0x4E,0x90,0x00,0x69,0xC8,0xDC,0x47,	/* x */
1525 	  0xA0,0x85,0x34,0xFE,0x76,0xD2,0xB9,0x00,0xB7,0xD7,
1526 	  0xEF,0x31,0xF5,0x70,0x9F,0x20,0x0C,0x4C,0xA2,0x05,
1527 
1528 	  0x56,0x67,0x33,0x4C,0x45,0xAF,0xF3,0xB5,0xA0,0x3B,	/* y */
1529 	  0xAD,0x9D,0xD7,0x5E,0x2C,0x71,0xA9,0x93,0x62,0x56,
1530 	  0x7D,0x54,0x53,0xF7,0xFA,0x6E,0x22,0x7E,0xC8,0x33,
1531 
1532 	  0x15,0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55,	/* order */
1533 	  0x55,0x55,0x55,0x55,0x55,0x3C,0x6F,0x28,0x85,0x25,
1534 	  0x9C,0x31,0xE3,0xFC,0xDF,0x15,0x46,0x24,0x52,0x2D }
1535 	};
1536 
1537 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; }
1538 	_EC_X9_62_CHAR2_239V3 = {
1539 	{ NID_X9_62_characteristic_two_field,20,30,0xA },
1540 	{ 0x9E,0x07,0x6F,0x4D,0x69,0x6E,0x67,0x68,0x75,0x61,	/* seed */
1541 	  0x51,0x75,0xE1,0x1E,0x9F,0xDD,0x77,0xF9,0x20,0x41,
1542 
1543 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1544 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1545 	  0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00,0x01,
1546 
1547 	  0x01,0x23,0x87,0x74,0x66,0x6A,0x67,0x76,0x6D,0x66,	/* a */
1548 	  0x76,0xF7,0x78,0xE6,0x76,0xB6,0x69,0x99,0x17,0x66,
1549 	  0x66,0xE6,0x87,0x66,0x6D,0x87,0x66,0xC6,0x6A,0x9F,
1550 
1551 	  0x6A,0x94,0x19,0x77,0xBA,0x9F,0x6A,0x43,0x51,0x99,	/* b */
1552 	  0xAC,0xFC,0x51,0x06,0x7E,0xD5,0x87,0xF5,0x19,0xC5,
1553 	  0xEC,0xB5,0x41,0xB8,0xE4,0x41,0x11,0xDE,0x1D,0x40,
1554 
1555 	  0x70,0xF6,0xE9,0xD0,0x4D,0x28,0x9C,0x4E,0x89,0x91,	/* x */
1556 	  0x3C,0xE3,0x53,0x0B,0xFD,0xE9,0x03,0x97,0x7D,0x42,
1557 	  0xB1,0x46,0xD5,0x39,0xBF,0x1B,0xDE,0x4E,0x9C,0x92,
1558 
1559 	  0x2E,0x5A,0x0E,0xAF,0x6E,0x5E,0x13,0x05,0xB9,0x00,	/* y */
1560 	  0x4D,0xCE,0x5C,0x0E,0xD7,0xFE,0x59,0xA3,0x56,0x08,
1561 	  0xF3,0x38,0x37,0xC8,0x16,0xD8,0x0B,0x79,0xF4,0x61,
1562 
1563 	  0x0C,0xCC,0xCC,0xCC,0xCC,0xCC,0xCC,0xCC,0xCC,0xCC,	/* order */
1564 	  0xCC,0xCC,0xCC,0xCC,0xCC,0xAC,0x49,0x12,0xD2,0xD9,
1565 	  0xDF,0x90,0x3E,0xF9,0x88,0x8B,0x8A,0x0E,0x4C,0xFF }
1566 	};
1567 
1568 static const struct { EC_CURVE_DATA h; unsigned char data[0+35*6]; }
1569 	_EC_X9_62_CHAR2_272W1 = {
1570 	{ NID_X9_62_characteristic_two_field,0,35,0xFF06 },
1571 	{							/* no seed */
1572 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1573 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1574 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x00,
1575 	  0x00,0x00,0x00,0x00,0x0B,
1576 	  0x00,0x91,0xA0,0x91,0xF0,0x3B,0x5F,0xBA,0x4A,0xB2,	/* a */
1577 	  0xCC,0xF4,0x9C,0x4E,0xDD,0x22,0x0F,0xB0,0x28,0x71,
1578 	  0x2D,0x42,0xBE,0x75,0x2B,0x2C,0x40,0x09,0x4D,0xBA,
1579 	  0xCD,0xB5,0x86,0xFB,0x20,
1580 	  0x00,0x71,0x67,0xEF,0xC9,0x2B,0xB2,0xE3,0xCE,0x7C,	/* b */
1581 	  0x8A,0xAA,0xFF,0x34,0xE1,0x2A,0x9C,0x55,0x70,0x03,
1582 	  0xD7,0xC7,0x3A,0x6F,0xAF,0x00,0x3F,0x99,0xF6,0xCC,
1583 	  0x84,0x82,0xE5,0x40,0xF7,
1584 	  0x00,0x61,0x08,0xBA,0xBB,0x2C,0xEE,0xBC,0xF7,0x87,	/* x */
1585 	  0x05,0x8A,0x05,0x6C,0xBE,0x0C,0xFE,0x62,0x2D,0x77,
1586 	  0x23,0xA2,0x89,0xE0,0x8A,0x07,0xAE,0x13,0xEF,0x0D,
1587 	  0x10,0xD1,0x71,0xDD,0x8D,
1588 	  0x00,0x10,0xC7,0x69,0x57,0x16,0x85,0x1E,0xEF,0x6B,	/* y */
1589 	  0xA7,0xF6,0x87,0x2E,0x61,0x42,0xFB,0xD2,0x41,0xB8,
1590 	  0x30,0xFF,0x5E,0xFC,0xAC,0xEC,0xCA,0xB0,0x5E,0x02,
1591 	  0x00,0x5D,0xDE,0x9D,0x23,
1592 	  0x00,0x00,0x01,0x00,0xFA,0xF5,0x13,0x54,0xE0,0xE3,	/* order */
1593 	  0x9E,0x48,0x92,0xDF,0x6E,0x31,0x9C,0x72,0xC8,0x16,
1594 	  0x16,0x03,0xFA,0x45,0xAA,0x7B,0x99,0x8A,0x16,0x7B,
1595 	  0x8F,0x1E,0x62,0x95,0x21 }
1596 	};
1597 
1598 static const struct { EC_CURVE_DATA h; unsigned char data[0+39*6]; }
1599 	_EC_X9_62_CHAR2_304W1 = {
1600 	{ NID_X9_62_characteristic_two_field,0,39,0xFE2E },
1601 	{							/* no seed */
1602 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1603 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1604 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1605 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x08,0x07,
1606 	  0x00,0xFD,0x0D,0x69,0x31,0x49,0xA1,0x18,0xF6,0x51,	/* a */
1607 	  0xE6,0xDC,0xE6,0x80,0x20,0x85,0x37,0x7E,0x5F,0x88,
1608 	  0x2D,0x1B,0x51,0x0B,0x44,0x16,0x00,0x74,0xC1,0x28,
1609 	  0x80,0x78,0x36,0x5A,0x03,0x96,0xC8,0xE6,0x81,
1610 	  0x00,0xBD,0xDB,0x97,0xE5,0x55,0xA5,0x0A,0x90,0x8E,	/* b */
1611 	  0x43,0xB0,0x1C,0x79,0x8E,0xA5,0xDA,0xA6,0x78,0x8F,
1612 	  0x1E,0xA2,0x79,0x4E,0xFC,0xF5,0x71,0x66,0xB8,0xC1,
1613 	  0x40,0x39,0x60,0x1E,0x55,0x82,0x73,0x40,0xBE,
1614 	  0x00,0x19,0x7B,0x07,0x84,0x5E,0x9B,0xE2,0xD9,0x6A,	/* x */
1615 	  0xDB,0x0F,0x5F,0x3C,0x7F,0x2C,0xFF,0xBD,0x7A,0x3E,
1616 	  0xB8,0xB6,0xFE,0xC3,0x5C,0x7F,0xD6,0x7F,0x26,0xDD,
1617 	  0xF6,0x28,0x5A,0x64,0x4F,0x74,0x0A,0x26,0x14,
1618 	  0x00,0xE1,0x9F,0xBE,0xB7,0x6E,0x0D,0xA1,0x71,0x51,	/* y */
1619 	  0x7E,0xCF,0x40,0x1B,0x50,0x28,0x9B,0xF0,0x14,0x10,
1620 	  0x32,0x88,0x52,0x7A,0x9B,0x41,0x6A,0x10,0x5E,0x80,
1621 	  0x26,0x0B,0x54,0x9F,0xDC,0x1B,0x92,0xC0,0x3B,
1622 	  0x00,0x00,0x01,0x01,0xD5,0x56,0x57,0x2A,0xAB,0xAC,	/* order */
1623 	  0x80,0x01,0x01,0xD5,0x56,0x57,0x2A,0xAB,0xAC,0x80,
1624 	  0x01,0x02,0x2D,0x5C,0x91,0xDD,0x17,0x3F,0x8F,0xB5,
1625 	  0x61,0xDA,0x68,0x99,0x16,0x44,0x43,0x05,0x1D }
1626 	};
1627 
1628 static const struct { EC_CURVE_DATA h; unsigned char data[20+45*6]; }
1629 	_EC_X9_62_CHAR2_359V1 = {
1630 	{ NID_X9_62_characteristic_two_field,20,45,0x4C },
1631 	{ 0x2B,0x35,0x49,0x20,0xB7,0x24,0xD6,0x96,0xE6,0x76,	/* seed */
1632 	  0x87,0x56,0x15,0x17,0x58,0x5B,0xA1,0x33,0x2D,0xC6,
1633 
1634 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1635 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1636 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1637 	  0x00,0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00,
1638 	  0x00,0x00,0x00,0x00,0x01,
1639 	  0x56,0x67,0x67,0x6A,0x65,0x4B,0x20,0x75,0x4F,0x35,	/* a */
1640 	  0x6E,0xA9,0x20,0x17,0xD9,0x46,0x56,0x7C,0x46,0x67,
1641 	  0x55,0x56,0xF1,0x95,0x56,0xA0,0x46,0x16,0xB5,0x67,
1642 	  0xD2,0x23,0xA5,0xE0,0x56,0x56,0xFB,0x54,0x90,0x16,
1643 	  0xA9,0x66,0x56,0xA5,0x57,
1644 	  0x24,0x72,0xE2,0xD0,0x19,0x7C,0x49,0x36,0x3F,0x1F,	/* b */
1645 	  0xE7,0xF5,0xB6,0xDB,0x07,0x5D,0x52,0xB6,0x94,0x7D,
1646 	  0x13,0x5D,0x8C,0xA4,0x45,0x80,0x5D,0x39,0xBC,0x34,
1647 	  0x56,0x26,0x08,0x96,0x87,0x74,0x2B,0x63,0x29,0xE7,
1648 	  0x06,0x80,0x23,0x19,0x88,
1649 	  0x3C,0x25,0x8E,0xF3,0x04,0x77,0x67,0xE7,0xED,0xE0,	/* x */
1650 	  0xF1,0xFD,0xAA,0x79,0xDA,0xEE,0x38,0x41,0x36,0x6A,
1651 	  0x13,0x2E,0x16,0x3A,0xCE,0xD4,0xED,0x24,0x01,0xDF,
1652 	  0x9C,0x6B,0xDC,0xDE,0x98,0xE8,0xE7,0x07,0xC0,0x7A,
1653 	  0x22,0x39,0xB1,0xB0,0x97,
1654 	  0x53,0xD7,0xE0,0x85,0x29,0x54,0x70,0x48,0x12,0x1E,	/* y */
1655 	  0x9C,0x95,0xF3,0x79,0x1D,0xD8,0x04,0x96,0x39,0x48,
1656 	  0xF3,0x4F,0xAE,0x7B,0xF4,0x4E,0xA8,0x23,0x65,0xDC,
1657 	  0x78,0x68,0xFE,0x57,0xE4,0xAE,0x2D,0xE2,0x11,0x30,
1658 	  0x5A,0x40,0x71,0x04,0xBD,
1659 	  0x01,0xAF,0x28,0x6B,0xCA,0x1A,0xF2,0x86,0xBC,0xA1,	/* order */
1660 	  0xAF,0x28,0x6B,0xCA,0x1A,0xF2,0x86,0xBC,0xA1,0xAF,
1661 	  0x28,0x6B,0xC9,0xFB,0x8F,0x6B,0x85,0xC5,0x56,0x89,
1662 	  0x2C,0x20,0xA7,0xEB,0x96,0x4F,0xE7,0x71,0x9E,0x74,
1663 	  0xF4,0x90,0x75,0x8D,0x3B }
1664 	};
1665 
1666 static const struct { EC_CURVE_DATA h; unsigned char data[0+47*6]; }
1667 	_EC_X9_62_CHAR2_368W1 = {
1668 	{ NID_X9_62_characteristic_two_field,0,47,0xFF70 },
1669 	{							/* no seed */
1670 	  0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1671 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1672 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1673 	  0x00,0x00,0x00,0x00,0x00,0x00,0x20,0x00,0x00,0x00,
1674 	  0x00,0x00,0x00,0x00,0x00,0x00,0x07,
1675 	  0x00,0xE0,0xD2,0xEE,0x25,0x09,0x52,0x06,0xF5,0xE2,	/* a */
1676 	  0xA4,0xF9,0xED,0x22,0x9F,0x1F,0x25,0x6E,0x79,0xA0,
1677 	  0xE2,0xB4,0x55,0x97,0x0D,0x8D,0x0D,0x86,0x5B,0xD9,
1678 	  0x47,0x78,0xC5,0x76,0xD6,0x2F,0x0A,0xB7,0x51,0x9C,
1679 	  0xCD,0x2A,0x1A,0x90,0x6A,0xE3,0x0D,
1680 	  0x00,0xFC,0x12,0x17,0xD4,0x32,0x0A,0x90,0x45,0x2C,	/* b */
1681 	  0x76,0x0A,0x58,0xED,0xCD,0x30,0xC8,0xDD,0x06,0x9B,
1682 	  0x3C,0x34,0x45,0x38,0x37,0xA3,0x4E,0xD5,0x0C,0xB5,
1683 	  0x49,0x17,0xE1,0xC2,0x11,0x2D,0x84,0xD1,0x64,0xF4,
1684 	  0x44,0xF8,0xF7,0x47,0x86,0x04,0x6A,
1685 	  0x00,0x10,0x85,0xE2,0x75,0x53,0x81,0xDC,0xCC,0xE3,	/* x */
1686 	  0xC1,0x55,0x7A,0xFA,0x10,0xC2,0xF0,0xC0,0xC2,0x82,
1687 	  0x56,0x46,0xC5,0xB3,0x4A,0x39,0x4C,0xBC,0xFA,0x8B,
1688 	  0xC1,0x6B,0x22,0xE7,0xE7,0x89,0xE9,0x27,0xBE,0x21,
1689 	  0x6F,0x02,0xE1,0xFB,0x13,0x6A,0x5F,
1690 	  0x00,0x7B,0x3E,0xB1,0xBD,0xDC,0xBA,0x62,0xD5,0xD8,	/* y */
1691 	  0xB2,0x05,0x9B,0x52,0x57,0x97,0xFC,0x73,0x82,0x2C,
1692 	  0x59,0x05,0x9C,0x62,0x3A,0x45,0xFF,0x38,0x43,0xCE,
1693 	  0xE8,0xF8,0x7C,0xD1,0x85,0x5A,0xDA,0xA8,0x1E,0x2A,
1694 	  0x07,0x50,0xB8,0x0F,0xDA,0x23,0x10,
1695 	  0x00,0x00,0x01,0x00,0x90,0x51,0x2D,0xA9,0xAF,0x72,	/* order */
1696 	  0xB0,0x83,0x49,0xD9,0x8A,0x5D,0xD4,0xC7,0xB0,0x53,
1697 	  0x2E,0xCA,0x51,0xCE,0x03,0xE2,0xD1,0x0F,0x3B,0x7A,
1698 	  0xC5,0x79,0xBD,0x87,0xE9,0x09,0xAE,0x40,0xA6,0xF1,
1699 	  0x31,0xE9,0xCF,0xCE,0x5B,0xD9,0x67 }
1700 	};
1701 
1702 static const struct { EC_CURVE_DATA h; unsigned char data[0+54*6]; }
1703 	_EC_X9_62_CHAR2_431R1 = {
1704 	{ NID_X9_62_characteristic_two_field,0,54,0x2760 },
1705 	{							/* no seed */
1706 	  0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1707 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1708 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1709 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,
1710 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1711 	  0x00,0x00,0x00,0x01,
1712 	  0x1A,0x82,0x7E,0xF0,0x0D,0xD6,0xFC,0x0E,0x23,0x4C,	/* a */
1713 	  0xAF,0x04,0x6C,0x6A,0x5D,0x8A,0x85,0x39,0x5B,0x23,
1714 	  0x6C,0xC4,0xAD,0x2C,0xF3,0x2A,0x0C,0xAD,0xBD,0xC9,
1715 	  0xDD,0xF6,0x20,0xB0,0xEB,0x99,0x06,0xD0,0x95,0x7F,
1716 	  0x6C,0x6F,0xEA,0xCD,0x61,0x54,0x68,0xDF,0x10,0x4D,
1717 	  0xE2,0x96,0xCD,0x8F,
1718 	  0x10,0xD9,0xB4,0xA3,0xD9,0x04,0x7D,0x8B,0x15,0x43,	/* b */
1719 	  0x59,0xAB,0xFB,0x1B,0x7F,0x54,0x85,0xB0,0x4C,0xEB,
1720 	  0x86,0x82,0x37,0xDD,0xC9,0xDE,0xDA,0x98,0x2A,0x67,
1721 	  0x9A,0x5A,0x91,0x9B,0x62,0x6D,0x4E,0x50,0xA8,0xDD,
1722 	  0x73,0x1B,0x10,0x7A,0x99,0x62,0x38,0x1F,0xB5,0xD8,
1723 	  0x07,0xBF,0x26,0x18,
1724 	  0x12,0x0F,0xC0,0x5D,0x3C,0x67,0xA9,0x9D,0xE1,0x61,	/* x */
1725 	  0xD2,0xF4,0x09,0x26,0x22,0xFE,0xCA,0x70,0x1B,0xE4,
1726 	  0xF5,0x0F,0x47,0x58,0x71,0x4E,0x8A,0x87,0xBB,0xF2,
1727 	  0xA6,0x58,0xEF,0x8C,0x21,0xE7,0xC5,0xEF,0xE9,0x65,
1728 	  0x36,0x1F,0x6C,0x29,0x99,0xC0,0xC2,0x47,0xB0,0xDB,
1729 	  0xD7,0x0C,0xE6,0xB7,
1730 	  0x20,0xD0,0xAF,0x89,0x03,0xA9,0x6F,0x8D,0x5F,0xA2,	/* y */
1731 	  0xC2,0x55,0x74,0x5D,0x3C,0x45,0x1B,0x30,0x2C,0x93,
1732 	  0x46,0xD9,0xB7,0xE4,0x85,0xE7,0xBC,0xE4,0x1F,0x6B,
1733 	  0x59,0x1F,0x3E,0x8F,0x6A,0xDD,0xCB,0xB0,0xBC,0x4C,
1734 	  0x2F,0x94,0x7A,0x7D,0xE1,0xA8,0x9B,0x62,0x5D,0x6A,
1735 	  0x59,0x8B,0x37,0x60,
1736 	  0x00,0x03,0x40,0x34,0x03,0x40,0x34,0x03,0x40,0x34,	/* order */
1737 	  0x03,0x40,0x34,0x03,0x40,0x34,0x03,0x40,0x34,0x03,
1738 	  0x40,0x34,0x03,0x40,0x34,0x03,0x40,0x34,0x03,0x23,
1739 	  0xC3,0x13,0xFA,0xB5,0x05,0x89,0x70,0x3B,0x5E,0xC6,
1740 	  0x8D,0x35,0x87,0xFE,0xC6,0x0D,0x16,0x1C,0xC1,0x49,
1741 	  0xC1,0xAD,0x4A,0x91 }
1742 	};
1743 
1744 static const struct { EC_CURVE_DATA h; unsigned char data[0+15*6]; }
1745 	_EC_WTLS_1 = {
1746 	{ NID_X9_62_characteristic_two_field,0,15,2 },
1747 	{							/* no seed */
1748 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1749 	  0x00,0x00,0x00,0x02,0x01,
1750 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1751 	  0x00,0x00,0x00,0x00,0x01,
1752 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
1753 	  0x00,0x00,0x00,0x00,0x01,
1754 	  0x01,0x66,0x79,0x79,0xA4,0x0B,0xA4,0x97,0xE5,0xD5,	/* x */
1755 	  0xC2,0x70,0x78,0x06,0x17,
1756 	  0x00,0xF4,0x4B,0x4A,0xF1,0xEC,0xC2,0x63,0x0E,0x08,	/* y */
1757 	  0x78,0x5C,0xEB,0xCC,0x15,
1758 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFD,0xBF,	/* order */
1759 	  0x91,0xAF,0x6D,0xEA,0x73 }
1760 	};
1761 
1762 /* IPSec curves */
1763 /* NOTE: The of curves over a extension field of non prime degree
1764  * is not recommended (Weil-descent).
1765  * As the group order is not a prime this curve is not suitable
1766  * for ECDSA.
1767  */
1768 static const struct { EC_CURVE_DATA h; unsigned char data[0+20*6]; }
1769 	_EC_IPSEC_155_ID3 = {
1770 	{ NID_X9_62_characteristic_two_field,0,20,3 },
1771 	{							/* no seed */
1772 	  0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1773 	  0x00,0x00,0x40,0x00,0x00,0x00,0x00,0x00,0x00,0x01,
1774 
1775 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1776 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1777 
1778 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
1779 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x07,0x33,0x8f,
1780 
1781 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* x */
1782 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x7b,
1783 
1784 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* y */
1785 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0xc8,
1786 
1787 	  0x02,0xAA,0xAA,0xAA,0xAA,0xAA,0xAA,0xAA,0xAA,0xAA,	/* order */
1788 	  0xC7,0xF3,0xC7,0x88,0x1B,0xD0,0x86,0x8F,0xA8,0x6C }
1789 	};
1790 
1791 /* NOTE: The of curves over a extension field of non prime degree
1792  * is not recommended (Weil-descent).
1793  * As the group order is not a prime this curve is not suitable
1794  * for ECDSA.
1795  */
1796 static const struct { EC_CURVE_DATA h; unsigned char data[0+24*6]; }
1797 	_EC_IPSEC_185_ID4 = {
1798 	{ NID_X9_62_characteristic_two_field,0,24,2 },
1799 	{							/* no seed */
1800 	  0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* p */
1801 	  0x00,0x00,0x00,0x00,0x00,0x20,0x00,0x00,0x00,0x00,
1802 	  0x00,0x00,0x00,0x01,
1803 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* a */
1804 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1805 	  0x00,0x00,0x00,0x00,
1806 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* b */
1807 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1808 	  0x00,0x00,0x1e,0xe9,
1809 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* x */
1810 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1811 	  0x00,0x00,0x00,0x18,
1812 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,	/* y */
1813 	  0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1814 	  0x00,0x00,0x00,0x0d,
1815 	  0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,	/* order */
1816 	  0xFF,0xFF,0xED,0xF9,0x7C,0x44,0xDB,0x9F,0x24,0x20,
1817 	  0xBA,0xFC,0xA7,0x5E }
1818 	};
1819 
1820 typedef struct _ec_list_element_st {
1821 	int	nid;
1822 	const EC_CURVE_DATA *data;
1823 	const char *comment;
1824 	} ec_list_element;
1825 
1826 static const ec_list_element curve_list[] = {
1827 	/* prime field curves */
1828 	/* secg curves */
1829 	{ NID_secp112r1, &_EC_SECG_PRIME_112R1.h, "SECG/WTLS curve over a 112 bit prime field"},
1830 	{ NID_secp112r2, &_EC_SECG_PRIME_112R2.h, "SECG curve over a 112 bit prime field"},
1831 	{ NID_secp128r1, &_EC_SECG_PRIME_128R1.h, "SECG curve over a 128 bit prime field"},
1832 	{ NID_secp128r2, &_EC_SECG_PRIME_128R2.h, "SECG curve over a 128 bit prime field"},
1833 	{ NID_secp160k1, &_EC_SECG_PRIME_160K1.h, "SECG curve over a 160 bit prime field"},
1834 	{ NID_secp160r1, &_EC_SECG_PRIME_160R1.h, "SECG curve over a 160 bit prime field"},
1835 	{ NID_secp160r2, &_EC_SECG_PRIME_160R2.h, "SECG/WTLS curve over a 160 bit prime field"},
1836 	/* SECG secp192r1 is the same as X9.62 prime192v1 and hence omitted */
1837 	{ NID_secp192k1, &_EC_SECG_PRIME_192K1.h, "SECG curve over a 192 bit prime field"},
1838 	{ NID_secp224k1, &_EC_SECG_PRIME_224K1.h, "SECG curve over a 224 bit prime field"},
1839 	{ NID_secp224r1, &_EC_NIST_PRIME_224.h,   "NIST/SECG curve over a 224 bit prime field"},
1840 	{ NID_secp256k1, &_EC_SECG_PRIME_256K1.h, "SECG curve over a 256 bit prime field"},
1841 	/* SECG secp256r1 is the same as X9.62 prime256v1 and hence omitted */
1842 	{ NID_secp384r1, &_EC_NIST_PRIME_384.h, "NIST/SECG curve over a 384 bit prime field"},
1843 	{ NID_secp521r1, &_EC_NIST_PRIME_521.h, "NIST/SECG curve over a 521 bit prime field"},
1844 	/* X9.62 curves */
1845 	{ NID_X9_62_prime192v1, &_EC_NIST_PRIME_192.h, "NIST/X9.62/SECG curve over a 192 bit prime field"},
1846 	{ NID_X9_62_prime192v2, &_EC_X9_62_PRIME_192V2.h, "X9.62 curve over a 192 bit prime field"},
1847 	{ NID_X9_62_prime192v3, &_EC_X9_62_PRIME_192V3.h, "X9.62 curve over a 192 bit prime field"},
1848 	{ NID_X9_62_prime239v1, &_EC_X9_62_PRIME_239V1.h, "X9.62 curve over a 239 bit prime field"},
1849 	{ NID_X9_62_prime239v2, &_EC_X9_62_PRIME_239V2.h, "X9.62 curve over a 239 bit prime field"},
1850 	{ NID_X9_62_prime239v3, &_EC_X9_62_PRIME_239V3.h, "X9.62 curve over a 239 bit prime field"},
1851 	{ NID_X9_62_prime256v1, &_EC_X9_62_PRIME_256V1.h, "X9.62/SECG curve over a 256 bit prime field"},
1852 	/* characteristic two field curves */
1853 	/* NIST/SECG curves */
1854 	{ NID_sect113r1, &_EC_SECG_CHAR2_113R1.h, "SECG curve over a 113 bit binary field"},
1855 	{ NID_sect113r2, &_EC_SECG_CHAR2_113R2.h, "SECG curve over a 113 bit binary field"},
1856 	{ NID_sect131r1, &_EC_SECG_CHAR2_131R1.h, "SECG/WTLS curve over a 131 bit binary field"},
1857 	{ NID_sect131r2, &_EC_SECG_CHAR2_131R2.h, "SECG curve over a 131 bit binary field"},
1858 	{ NID_sect163k1, &_EC_NIST_CHAR2_163K.h,  "NIST/SECG/WTLS curve over a 163 bit binary field" },
1859 	{ NID_sect163r1, &_EC_SECG_CHAR2_163R1.h, "SECG curve over a 163 bit binary field"},
1860 	{ NID_sect163r2, &_EC_NIST_CHAR2_163B.h,  "NIST/SECG curve over a 163 bit binary field" },
1861 	{ NID_sect193r1, &_EC_SECG_CHAR2_193R1.h, "SECG curve over a 193 bit binary field"},
1862 	{ NID_sect193r2, &_EC_SECG_CHAR2_193R2.h, "SECG curve over a 193 bit binary field"},
1863 	{ NID_sect233k1, &_EC_NIST_CHAR2_233K.h,  "NIST/SECG/WTLS curve over a 233 bit binary field" },
1864 	{ NID_sect233r1, &_EC_NIST_CHAR2_233B.h,  "NIST/SECG/WTLS curve over a 233 bit binary field" },
1865 	{ NID_sect239k1, &_EC_SECG_CHAR2_239K1.h, "SECG curve over a 239 bit binary field"},
1866 	{ NID_sect283k1, &_EC_NIST_CHAR2_283K.h,  "NIST/SECG curve over a 283 bit binary field" },
1867 	{ NID_sect283r1, &_EC_NIST_CHAR2_283B.h,  "NIST/SECG curve over a 283 bit binary field" },
1868 	{ NID_sect409k1, &_EC_NIST_CHAR2_409K.h,  "NIST/SECG curve over a 409 bit binary field" },
1869 	{ NID_sect409r1, &_EC_NIST_CHAR2_409B.h,  "NIST/SECG curve over a 409 bit binary field" },
1870 	{ NID_sect571k1, &_EC_NIST_CHAR2_571K.h,  "NIST/SECG curve over a 571 bit binary field" },
1871 	{ NID_sect571r1, &_EC_NIST_CHAR2_571B.h,  "NIST/SECG curve over a 571 bit binary field" },
1872 	/* X9.62 curves */
1873 	{ NID_X9_62_c2pnb163v1, &_EC_X9_62_CHAR2_163V1.h, "X9.62 curve over a 163 bit binary field"},
1874 	{ NID_X9_62_c2pnb163v2, &_EC_X9_62_CHAR2_163V2.h, "X9.62 curve over a 163 bit binary field"},
1875 	{ NID_X9_62_c2pnb163v3, &_EC_X9_62_CHAR2_163V3.h, "X9.62 curve over a 163 bit binary field"},
1876 	{ NID_X9_62_c2pnb176v1, &_EC_X9_62_CHAR2_176V1.h, "X9.62 curve over a 176 bit binary field"},
1877 	{ NID_X9_62_c2tnb191v1, &_EC_X9_62_CHAR2_191V1.h, "X9.62 curve over a 191 bit binary field"},
1878 	{ NID_X9_62_c2tnb191v2, &_EC_X9_62_CHAR2_191V2.h, "X9.62 curve over a 191 bit binary field"},
1879 	{ NID_X9_62_c2tnb191v3, &_EC_X9_62_CHAR2_191V3.h, "X9.62 curve over a 191 bit binary field"},
1880 	{ NID_X9_62_c2pnb208w1, &_EC_X9_62_CHAR2_208W1.h, "X9.62 curve over a 208 bit binary field"},
1881 	{ NID_X9_62_c2tnb239v1, &_EC_X9_62_CHAR2_239V1.h, "X9.62 curve over a 239 bit binary field"},
1882 	{ NID_X9_62_c2tnb239v2, &_EC_X9_62_CHAR2_239V2.h, "X9.62 curve over a 239 bit binary field"},
1883 	{ NID_X9_62_c2tnb239v3, &_EC_X9_62_CHAR2_239V3.h, "X9.62 curve over a 239 bit binary field"},
1884 	{ NID_X9_62_c2pnb272w1, &_EC_X9_62_CHAR2_272W1.h, "X9.62 curve over a 272 bit binary field"},
1885 	{ NID_X9_62_c2pnb304w1, &_EC_X9_62_CHAR2_304W1.h, "X9.62 curve over a 304 bit binary field"},
1886 	{ NID_X9_62_c2tnb359v1, &_EC_X9_62_CHAR2_359V1.h, "X9.62 curve over a 359 bit binary field"},
1887 	{ NID_X9_62_c2pnb368w1, &_EC_X9_62_CHAR2_368W1.h, "X9.62 curve over a 368 bit binary field"},
1888 	{ NID_X9_62_c2tnb431r1, &_EC_X9_62_CHAR2_431R1.h, "X9.62 curve over a 431 bit binary field"},
1889 	/* the WAP/WTLS curves
1890 	 * [unlike SECG, spec has its own OIDs for curves from X9.62] */
1891 	{ NID_wap_wsg_idm_ecid_wtls1, &_EC_WTLS_1.h, "WTLS curve over a 113 bit binary field"},
1892 	{ NID_wap_wsg_idm_ecid_wtls3, &_EC_NIST_CHAR2_163K.h,   "NIST/SECG/WTLS curve over a 163 bit binary field"},
1893 	{ NID_wap_wsg_idm_ecid_wtls4, &_EC_SECG_CHAR2_113R1.h,  "SECG curve over a 113 bit binary field"},
1894 	{ NID_wap_wsg_idm_ecid_wtls5, &_EC_X9_62_CHAR2_163V1.h, "X9.62 curve over a 163 bit binary field"},
1895 	{ NID_wap_wsg_idm_ecid_wtls6, &_EC_SECG_PRIME_112R1.h,  "SECG/WTLS curve over a 112 bit prime field"},
1896 	{ NID_wap_wsg_idm_ecid_wtls7, &_EC_SECG_PRIME_160R2.h,  "SECG/WTLS curve over a 160 bit prime field"},
1897 	{ NID_wap_wsg_idm_ecid_wtls8, &_EC_WTLS_8.h, "WTLS curve over a 112 bit prime field"},
1898 	{ NID_wap_wsg_idm_ecid_wtls9, &_EC_WTLS_9.h, "WTLS curve over a 160 bit prime field" },
1899 	{ NID_wap_wsg_idm_ecid_wtls10, &_EC_NIST_CHAR2_233K.h, "NIST/SECG/WTLS curve over a 233 bit binary field"},
1900 	{ NID_wap_wsg_idm_ecid_wtls11, &_EC_NIST_CHAR2_233B.h, "NIST/SECG/WTLS curve over a 233 bit binary field"},
1901 	{ NID_wap_wsg_idm_ecid_wtls12, &_EC_WTLS_12.h, "WTLS curvs over a 224 bit prime field"},
1902 	/* IPSec curves */
1903 	{ NID_ipsec3, &_EC_IPSEC_155_ID3.h, "\n\tIPSec/IKE/Oakley curve #3 over a 155 bit binary field.\n""\tNot suitable for ECDSA.\n\tQuestionable extension field!"},
1904 	{ NID_ipsec4, &_EC_IPSEC_185_ID4.h, "\n\tIPSec/IKE/Oakley curve #4 over a 185 bit binary field.\n""\tNot suitable for ECDSA.\n\tQuestionable extension field!"},
1905 };
1906 
1907 #define curve_list_length (sizeof(curve_list)/sizeof(ec_list_element))
1908 
1909 static EC_GROUP *ec_group_new_from_data(const EC_CURVE_DATA *data)
1910 	{
1911 	EC_GROUP *group=NULL;
1912 	EC_POINT *P=NULL;
1913 	BN_CTX	 *ctx=NULL;
1914 	BIGNUM 	 *p=NULL, *a=NULL, *b=NULL, *x=NULL, *y=NULL, *order=NULL;
1915 	int	 ok=0;
1916 	int	 seed_len,param_len;
1917 	const unsigned char *params;
1918 
1919 	if ((ctx = BN_CTX_new()) == NULL)
1920 		{
1921 		ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_MALLOC_FAILURE);
1922 		goto err;
1923 		}
1924 
1925 	seed_len  = data->seed_len;
1926 	param_len = data->param_len;
1927 	params    = (const unsigned char *)(data+1);	/* skip header */
1928 	params   += seed_len;				/* skip seed   */
1929 
1930 	if (!(p = BN_bin2bn(params+0*param_len, param_len, NULL))
1931 		|| !(a = BN_bin2bn(params+1*param_len, param_len, NULL))
1932 		|| !(b = BN_bin2bn(params+2*param_len, param_len, NULL)))
1933 		{
1934 		ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB);
1935 		goto err;
1936 		}
1937 
1938 	if (data->field_type == NID_X9_62_prime_field)
1939 		{
1940 		if ((group = EC_GROUP_new_curve_GFp(p, a, b, ctx)) == NULL)
1941 			{
1942 			ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
1943 			goto err;
1944 			}
1945 		}
1946 	else	/* field_type == NID_X9_62_characteristic_two_field */
1947 		{
1948 		if ((group = EC_GROUP_new_curve_GF2m(p, a, b, ctx)) == NULL)
1949 			{
1950 			ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
1951 			goto err;
1952 			}
1953 		}
1954 
1955 	if ((P = EC_POINT_new(group)) == NULL)
1956 		{
1957 		ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
1958 		goto err;
1959 		}
1960 
1961 	if (!(x = BN_bin2bn(params+3*param_len, param_len, NULL))
1962 		|| !(y = BN_bin2bn(params+4*param_len, param_len, NULL)))
1963 		{
1964 		ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB);
1965 		goto err;
1966 		}
1967 	if (!EC_POINT_set_affine_coordinates_GF2m(group, P, x, y, ctx))
1968 		{
1969 		ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
1970 		goto err;
1971 		}
1972 	if (!(order = BN_bin2bn(params+5*param_len, param_len, NULL))
1973 		|| !BN_set_word(x, (BN_ULONG)data->cofactor))
1974 		{
1975 		ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB);
1976 		goto err;
1977 		}
1978 	if (!EC_GROUP_set_generator(group, P, order, x))
1979 		{
1980 		ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
1981 		goto err;
1982 		}
1983 	if (seed_len)
1984 		{
1985 		if (!EC_GROUP_set_seed(group, params-seed_len, seed_len))
1986 			{
1987 			ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
1988 			goto err;
1989 			}
1990 		}
1991 	ok=1;
1992 err:
1993 	if (!ok)
1994 		{
1995 		EC_GROUP_free(group);
1996 		group = NULL;
1997 		}
1998 	if (P)
1999 		EC_POINT_free(P);
2000 	if (ctx)
2001 		BN_CTX_free(ctx);
2002 	if (p)
2003 		BN_free(p);
2004 	if (a)
2005 		BN_free(a);
2006 	if (b)
2007 		BN_free(b);
2008 	if (order)
2009 		BN_free(order);
2010 	if (x)
2011 		BN_free(x);
2012 	if (y)
2013 		BN_free(y);
2014 	return group;
2015 	}
2016 
2017 EC_GROUP *EC_GROUP_new_by_curve_name(int nid)
2018 	{
2019 	size_t i;
2020 	EC_GROUP *ret = NULL;
2021 
2022 	if (nid <= 0)
2023 		return NULL;
2024 
2025 	for (i=0; i<curve_list_length; i++)
2026 		if (curve_list[i].nid == nid)
2027 			{
2028 			ret = ec_group_new_from_data(curve_list[i].data);
2029 			break;
2030 			}
2031 
2032 	if (ret == NULL)
2033 		{
2034 		ECerr(EC_F_EC_GROUP_NEW_BY_CURVE_NAME, EC_R_UNKNOWN_GROUP);
2035 		return NULL;
2036 		}
2037 
2038 	EC_GROUP_set_curve_name(ret, nid);
2039 
2040 	return ret;
2041 	}
2042 
2043 size_t EC_get_builtin_curves(EC_builtin_curve *r, size_t nitems)
2044 	{
2045 	size_t	i, min;
2046 
2047 	if (r == NULL || nitems == 0)
2048 		return curve_list_length;
2049 
2050 	min = nitems < curve_list_length ? nitems : curve_list_length;
2051 
2052 	for (i = 0; i < min; i++)
2053 		{
2054 		r[i].nid = curve_list[i].nid;
2055 		r[i].comment = curve_list[i].comment;
2056 		}
2057 
2058 	return curve_list_length;
2059 	}
2060