jmg
/
ed448goldilocks
1
0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity

Commit Graph

  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • |\
  • * \
  • |\ \
  • | | *
  • | * |
  • | |/
  • * /
  • |/
  • *
  • *
  • *
  • |\
  • | *
  • | *
  • * |
  • | *
  • | *
  • * |
  • * |
  • * |
  • * |
  • | *
  • * |
  • | *
  • | *
  • | *
  • * |
  • * |
  • * |
  • * |
  • |/
  • *
  • *
  • *
  • *
  • *
  • |\
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • * |
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • | *
  • |/
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • 6e623fe (pyupdate) document how to run tests... by John-Mark Gurney 2022-09-11 11:31:28 -0700
  • 1e27007 amd64 is the arch name on FreeBSD.. by John-Mark Gurney 2022-09-11 11:27:10 -0700
  • 9cea5a5 wrap commands with code block, drop make test as missing.. by John-Mark Gurney 2022-09-11 09:48:07 -0700
  • 0520511 add a couple test vectors from the RFC... by John-Mark Gurney 2022-09-11 01:12:36 -0700
  • 347057c old versions of clang can only handle a single argument by John-Mark Gurney 2022-09-11 00:19:50 -0700
  • c3917f2 forgot that FreeBSD's lib format is slightly different, this should work by John-Mark Gurney 2022-09-11 00:12:45 -0700
  • 048bfef update to new build infra, python 3, and add instructions.. by John-Mark Gurney 2022-09-10 23:50:16 -0700
  • da2f2f9 (HEAD -> master) add note to history by Mike Hamburg 2022-07-13 14:44:55 +0200
  • 703bb34 Fix two security bugs. Point::steg_encode was leaving the 24 high bits of the buffer as zero. It also ignored the size parameter. The size parameter has now been removed, the zeros fixed and a test added to make sure that it is fixed. by Mike Hamburg 2022-07-13 14:43:37 +0200
  • 41f349f Fix windows build and tests + shorter intermediate cmake target name by Johan Pascal 2021-06-02 14:33:36 +0200
  • f6aa730 explicitly upcast mask, for clarity by Mike Hamburg 2020-12-06 12:17:42 +0000
  • 0bd56f5 Fix Xcode/cmake 3.19 build + cleaning by Johan Pascal 2020-11-24 21:05:53 +0100
  • 38284bc Restore clang array checks by Johan Pascal 2020-11-23 22:38:06 +0100
  • fc42c67 Expand bit to mask as inline function use the -1 to unsigned integer trick, disable windows C4146 by Johan Pascal 2020-11-23 21:19:41 +0100
  • 7f3aa8a Avoid branching on mask bit extension. by Johan Pascal 2020-11-22 21:16:10 +0100
  • aa9c5c9 Fix windows build and package installation by Johan Pascal 2020-11-19 10:29:47 +0100
  • a5c33de update HISTORY to mention the malleability flaw by Mike Hamburg 2020-10-15 23:36:17 +0100
  • 13fe872 a couple more tests for EdDSA malleability by Mike Hamburg 2020-10-10 12:38:28 +0100
  • 0324a95 fix bug in ristretto elligator: it should be able to take improper field elements as input by Mike Hamburg 2020-10-10 12:14:08 +0100
  • e99b0a5 fix malleability bug from https://eprint.iacr.org/2020/1244.pdf and add test vectors by Mike Hamburg 2020-10-10 12:13:25 +0100
  • ff5d289 optimize s^2 -> s2, thanks Fabio Scotoni by Mike Hamburg 2020-06-16 15:30:23 -0700
  • 27ce4cf dont double generator for Ed448RistrettoPoint by Mike Hamburg 2020-05-07 19:00:15 -0700
  • e8d69e9 update ristretto.sage for python3. Also add Ed448RistrettoPoint for reference by Mike Hamburg 2020-05-04 09:22:14 -0700
  • 326dba2 Add safer version of EdDSA signing API. by Mike Hamburg 2020-05-02 19:52:26 -0700
  • 760a61e fix issues when compiling on GCC 9.1 by Mike Hamburg 2019-06-19 18:11:25 -0700
  • f38c87f also remove X_SER_BYTES while were at it by Michael Hamburg 2019-02-24 22:56:23 -0800
  • 752d260 Thanks Johan Pascal: remove gf_hibit, since it was a relic from p521 days by Michael Hamburg 2019-02-24 22:20:21 -0800
  • 383088f errno.eexist by Michael Hamburg 2019-02-24 22:06:09 -0800
  • cd48749 Revert "Add includes to build interface of decaf libs" by Michael Hamburg 2019-02-24 22:04:11 -0800
  • b057a23 Merge /u/mariusvolkhart/ed448goldilocks/ branch mv/messaging into master by Mike Hamburg 2019-02-25 05:45:59 +0000
  • 53f794b Merge /u/mariusvolkhart/ed448goldilocks/ branch mv/cmakeIncludes into master by Mike Hamburg 2019-02-25 05:45:17 +0000
  • c95bd00 Tweak generated code message by Marius Volkhart 2019-02-06 18:18:50 +0900
  • 540d9b8 Add includes to build interface of decaf libs by Marius Volkhart 2019-02-06 18:12:05 +0900
  • 28ffdb8 Fix flaky Python generator by Marius Volkhart 2019-02-06 16:30:41 +0900
  • 03977eb Minor changes. Bump version number in CMakeLists.txt, thanks Johan Pascal. Change test scripts to avoid GCC warnings, thanks Sofi Celi. Add full RFC 8032 test vectors, thanks Sofi Celi. by Michael Hamburg 2018-07-13 13:56:11 -0700
  • 8816973 v1.0 by Michael Hamburg 2018-07-12 14:28:36 -0700
  • 9de0d1a Merge with master from the original depot git://git.code.sf.net/p/ed448goldilocks/code by Johan Pascal 2018-05-07 21:01:57 +0700
  • 15c3f7b CC= -> CC?= in Makefile, thanks Timo Gurr by Michael Hamburg 2018-05-03 10:51:56 -0700
  • ffb134a minor fixes: fix unreachable code, fix an integer used in boolean context, thanks to Sofi Celi by Michael Hamburg 2018-04-10 10:56:07 -0400
  • 69308cb windows_compatibility by mrolinek 2018-02-12 18:01:20 +0100
  • bf60943 fix sagetest; thanks sofi by Michael Hamburg 2018-02-05 16:06:07 -0800
  • 3acbdaf fix python2/3 ord issue by Michael Hamburg 2018-02-04 18:46:13 -0800
  • e8193b1 cmake architecture detection improved by mrolinek 2018-01-25 08:34:05 +0700
  • 792fe29 Renamed aux to _aux for Windows compatibility by mrolinek 2018-01-18 13:37:10 +0100
  • 36c2c01 Remove useless call to basename when building include guards by Johan Pascal 2018-01-23 21:10:05 +0700
  • 6b804c6 Add make doc by Johan Pascal 2018-01-23 12:56:26 +0700
  • ea6c8cd add tests for identity and torquing by Michael Hamburg 2018-01-21 16:12:44 -0800
  • d18af7c build scripts manage the decaf_tables.c generation - decaf_tables.c are back in the source tree to help cross-compilation by Johan Pascal 2018-01-18 21:23:08 +0700
  • b0af873 double and encode in ristretto.sage for decaf ed25519. kinda sloppy, but good enough for a poc since im not going to implement in c yet anyway by Michael Hamburg 2018-01-16 00:09:51 -0800
  • 1b7b509 double and encode in ristretto.sage for decaf ed448, not ed25519 by Michael Hamburg 2018-01-15 17:52:43 -0800
  • 6a5e828 doubleAndEncode for ristretto in sage doc by Michael Hamburg 2018-01-14 14:16:05 -0800
  • e39cc5d Do not archive generated code by Johan Pascal 2017-12-21 22:07:28 +0700
  • 26a7b2a include python code generation in cmake scripts by Johan Pascal 2017-12-18 23:12:44 +0700
  • fd45d88 Fix compile on arm_32 by Johan Pascal 2017-11-21 21:32:25 +0700
  • a59d104 cmake script by Johan Pascal 2017-11-21 07:40:40 +0000
  • c811f78 Add missing FIELD_LITERAL for RISTRETTO_FACTOR by Olivier Chéron 2017-11-10 21:34:09 +0100
  • fa5ac6c avoid no-prototype warning in ristretto.cxx by Mike Hamburg 2017-11-06 19:58:09 -0800
  • 7a3c1ee readme by Michael Hamburg 2017-10-16 16:52:59 -0700
  • c227424 make doc now mostly works by Michael Hamburg 2017-10-16 16:34:30 -0700
  • 7527e91 Breaking changes! by Michael Hamburg 2017-10-15 16:58:18 -0700
  • 45eb0e1 change the misleading mul_by_cofactor functions to mul_by_ratio, and create ENCODE_RATIO and DECODE_ratio constants to represent this by Michael Hamburg 2017-10-15 16:54:30 -0700
  • 637bd72 change HISTORY.txt by Michael Hamburg 2017-10-13 17:42:51 -0700
  • 0c60af5 clear a couple todos. still have to rename the clear cofactor fns by Michael Hamburg 2017-10-13 17:26:26 -0700
  • 98bfcb0 IsoE25519 is now better known as Ristretto by Michael Hamburg 2017-10-13 17:22:08 -0700
  • 4de924c Incorporate test vectors from Dalek by Michael Hamburg 2017-10-13 17:14:38 -0700
  • 7030395 toggle elligator sign back to match Dalek by Michael Hamburg 2017-10-13 12:06:53 -0700
  • 2bccceb expose mul_by_cofactor_and_encode_like_x, but need to adjust clearing ratios by Michael Hamburg 2017-10-07 19:14:20 -0700
  • 164342e inverse elligator works, but at what cost?!?!!? by Michael Hamburg 2017-10-07 19:03:51 -0700
  • 17347b0 test harness to invert elligator by brute force by Michael Hamburg 2017-10-07 00:57:28 -0700
  • 1a38c25 CFRG crypto back to working, just need to do elligator inversion for identity on x25519 by Michael Hamburg 2017-10-06 11:27:28 -0700
  • 2d04fa7 working out sign bugs; then on to invert elligator ristretto by Michael Hamburg 2017-10-05 23:52:23 -0700
  • 2cc6ebf ed25519 ristretto inverse works except at the identity point by Michael Hamburg 2017-10-05 20:37:30 -0700
  • 5fc32bf elligator apparently(?) working for ed448 by Michael Hamburg 2017-10-05 19:11:31 -0700
  • 52ca544 update ristretto.sage to not crash on div0 for elligator (d-a)/d/u; check that these work by Michael Hamburg 2017-10-04 15:42:44 -0700
  • 733e67e whoops, bad hex decoder by Michael Hamburg 2017-10-04 15:29:02 -0700
  • c82e7ae add ristretto widget. elligator is correct, but inverse is not yet by Michael Hamburg 2017-10-04 15:00:38 -0700
  • 263d454 ristretto patched in, except elligator. still need to test against vectors though by Michael Hamburg 2017-10-04 12:18:57 -0700
  • 9f8b492 links in the readme by Michael Hamburg 2017-10-03 14:19:15 -0700
  • 992183a ristretto work: test that s -> 1/s negates the point iff cofactor == 4 (if cofactor == 8, then invalid) by Michael Hamburg 2017-10-02 17:01:31 -0700
  • 807a7e6 fix comments add/subtract by Michael Hamburg 2017-09-04 21:04:51 -0700
  • 3054425 fix comments in generated code too by Michael Hamburg 2017-09-04 21:02:23 -0700
  • 4a133be fix comments add/subtract by Michael Hamburg 2017-09-04 21:01:37 -0700
  • aa75f28 still need to iron out some sign differences by Michael Hamburg 2017-08-25 17:54:36 -0700
  • 4fa2c73 remove elligator decoding requirement by Michael Hamburg 2017-08-22 10:39:56 -0700
  • b9b855f passes gang tests. ship it? by Michael Hamburg 2017-08-22 10:11:22 -0700
  • 307f933 simpler decode if cofactor 4 by Michael Hamburg 2017-08-17 15:02:30 -0700
  • 8f212cc simpler decode if cofactor 4 by Michael Hamburg 2017-08-17 14:32:25 -0700
  • 19aa251 simpler decode if cofactor 4 by Michael Hamburg 2017-08-17 14:31:33 -0700
  • b1467a6 reasonable decaf encode; try to tweak a little more by Michael Hamburg 2017-08-17 13:45:01 -0700
  • abe22e5 iso-ed working for cofactor 8, but maybe not for a=-1 isoed25519 by Michael Hamburg 2017-08-16 21:03:55 -0700
  • 5f12ca4 isogenous encode/decode working in spec, looks doable for opt (at least with cofactor 4) by Michael Hamburg 2017-08-16 19:57:07 -0700
  • 4a5aad2 working on ristretto sage files by Michael Hamburg 2017-08-16 18:25:29 -0700
  • dc3deb8 Don't use vector arithmetic in generic arch_32 by Michael Hamburg 2017-08-15 12:37:58 -0700
  • b55ac5e Ristretto for Ed448 by Michael Hamburg 2017-07-05 21:44:22 -0700
  • 03ba02f more ristretto by Michael Hamburg 2017-07-05 20:37:31 -0700
  • b295ef7 rename decaf_sponge_* apis to decaf_sha3_*. Also reverse order on decaf_sponge_hash to make it the same as decaf_shake*_hash and decaf_sha3*_hash by Michael Hamburg 2017-06-30 12:27:32 -0700
  • ff1208c simpler ristretto by Michael Hamburg 2017-06-23 16:00:12 -0700
  • dd193a3 ristretto work by Michael Hamburg 2017-06-23 14:28:54 -0700
  • b29565f fix assertion on x25519/x448(0), thanks Olivier Cheron by Michael Hamburg 2017-06-14 13:19:52 -0700
  • 1c8b8cb fix warning due to MACRO?4:3 in elligator.c by Michael Hamburg 2017-06-06 13:40:23 -0700