08bbb56
dont go via asm anymore. also reduce the number of templated expressions by
2016-01-29 17:41:07 -0800
d94a147
move everything over to more-tolerable templating by
2016-01-29 16:56:13 -0800
4e57f49
move more generation to python by
2016-01-29 16:05:14 -0800
7ee81cf
move easy scalar computations to python by
2016-01-29 15:39:29 -0800
2e95122
template curve_data by
2016-01-29 15:18:51 -0800
3a5ba3e
no more API_NS2. by
2016-01-29 15:16:27 -0800
f6ec8b2
moving to a much simpler templating system by
2016-01-29 15:08:32 -0800
8b906e1
remove unused PRIXWORD macros by
2016-01-29 13:21:52 -0800
1dc3961
add sign_strobe and verify_strobe to crypto.hxx by
2016-01-29 13:18:51 -0800
86e44e6
fixed the mixed-arch bug, but it comes from a long-standing todo by
2016-01-29 13:12:50 -0800
8d9c810
make position unsigned so that the assertion means something (thx gcc) by
2016-01-29 13:03:33 -0800
790745e
set mulw to <32 bits instead of <64 bits (but actually less than that: 1 limb instead of 2). also there is a bug if you compile ed448 for arch_32 on a 64-bit machine... tracing by
2016-01-29 12:57:27 -0800
a9e2e08
real WNAF by
2016-01-29 11:08:59 -0800
5311dd5
auto-gen more field arithmetic data by
2016-01-27 18:43:24 -0800
6aea096
reduce required curve data by
2016-01-27 17:40:02 -0800
050dcc1
test/bench now uses run_for_all_curves<> by
2016-01-27 17:32:07 -0800
c0310ba
whoops, actually save the change the removes the todo comment by
2016-01-27 16:57:57 -0800
de547aa
fix a gcc Werror by
2016-01-27 16:44:16 -0800
c9abcef
add some pathological test cases, clearing a few TODO items. Also scalar_set_unsigned now takes a uint64_t instead of a word_t by
2016-01-27 16:39:13 -0800
1f57b70
move p480 and p521 to attic by
2016-01-26 17:31:14 -0800
e8561eb
pniels_t is now aligned to sizeof(big_register_t), clearing a MAGIC by
2016-01-26 14:38:32 -0800
af89593
harmonize deisogenize with paper, clearing a TODO by
2016-01-26 14:31:56 -0800
a690028
reverse convention for constant_time_select, resolving a TODO by
2016-01-26 14:02:15 -0800
30436f6
remove vtable in buffer by
2016-01-26 13:56:05 -0800
2ea89d9
remove one variable from elligator by
2016-01-26 13:26:48 -0800
37e0886
simplify elligator, in a way that shouldnt change its output. I think it uses the opposite convention from the paper for sign(s) though. by
2016-01-26 13:24:44 -0800
c7a3efd
fix typo in 32-bit code by
2016-01-26 11:41:47 -0800
9b6fbec
warning that base point might change for release version, to better integrate with x25510/448 or ed by
2016-01-25 19:24:06 -0800
5f38747
Montgomery ladder now uses non-reduced arith for speed. Also, it is tested to be CT by
2016-01-25 18:24:31 -0800
2eacff6
rfc7748 implementation, but their names will probably change by
2016-01-25 17:54:58 -0800
4de70b8
separate out strobe and spongerng from shake. strobe is experimental. spongerng is experimental internally but the interface should be pretty good (except for any camelCase vs snake_case issues). shake should be stable by
2016-01-24 19:16:05 -0800
24e33a2
reasonable suite of ct tests now. also change scalar randomizer to generate +128 bits by
2016-01-24 18:57:42 -0800
9f1cc0e
some more ct tests; serializeInto -> serialize_into. still need more ct tests, unification of snake vs camel case by
2016-01-23 18:08:22 -0800
3d0c6a6
typedef Wrapped is no longer private for scalar and point by
2016-01-23 17:55:44 -0800
51ac192
ct tests are in; succeed if -DNDEBUG is passed. Should carefully audit assertions. by
2016-01-23 17:12:14 -0800
d81592b
make test_ct, except it probably doesnt work; definitely not on a mac with no memcheck.h installed by
2016-01-23 16:50:16 -0800
9af4850
Merge branch 'curve25519-work' of ssh://git.code.sf.net/p/ed448goldilocks/code into curve25519-work by
2016-01-17 15:51:29 -0800
8d6c51e
Separate API word size from arch word size. This enables compiling a 32-bit arch on a 64-bit platform, eg NEON on AARCH64. It's probably more useful for cross-platform testing, though. by
2016-01-17 15:46:56 -0800
9be0173
update HISTORY and TODO by
2016-01-15 18:11:53 -0800
0016b26
arm asm -> __asm__ by
2016-01-15 17:52:56 -0800
64efd98
use SC_LIMB in generated tables. Add a new "TODO" category, UNIFY for code that might be unified with other code by
2016-01-15 16:03:11 -0800
7b7a27e
move (non-hot) add/sub to per_field.c and make them not inline by
2016-01-15 15:22:47 -0800
7587ea9
a couple of LIMBPERM related fixes by
2016-01-15 15:04:00 -0800
94262db
minor by
2016-01-15 14:39:19 -0800
2e23ac7
move (some of the?) per-field code to src/per_field.c by
2016-01-15 14:13:47 -0800
825751d
one gf_strong_reduce to rule them all by
2016-01-15 13:53:57 -0800
38455f3
one ser/deser to rule them all (TODO test on NEON and other places with LIMBPERM) by
2016-01-15 13:35:04 -0800
a5bed6b
Working on getting cross-arch working again. Several TODOs. by
2016-01-14 23:35:30 -0800
6bc97fb
need an include/arch_*/arch_intrinsics.h for other arches by
2016-01-14 18:11:00 -0800
233f845
further reduce the code in f_impl.h by
2016-01-14 17:28:22 -0800
b4c402c
further reduce the code in f_impl.h by
2016-01-14 17:10:53 -0800
2402788
further reduce the code in f_impl.h by
2016-01-14 16:55:45 -0800
4218223
generate most of f_impl.h. Not tested on most arches yet :-( by
2016-01-14 16:36:30 -0800
294eaba
generate f_field.h by
2016-01-14 16:10:31 -0800
55126ad
separate c wrapper struct for strobe and spongerng by
2016-01-11 18:38:53 -0800
81403de
knock out a couple TODOs by
2016-01-11 18:10:59 -0800
1a14abb
Separate .h files for SHA/SHAKE, STROBE and sponge RNG. TODO: .hxx. Also add a lot of docs by
2016-01-11 17:39:17 -0800
957ec6c
restore shared secret benchmarks by
2016-01-08 16:03:13 -0800
f92d14e
crypto.hxx is now a thin wrapper around crypto.h by
2016-01-08 15:53:12 -0800
ca68bb3
autogenerate decaf/crypto.h by
2016-01-07 17:30:13 -0800
e5491b6
some fixes to "make todo" by
2016-01-07 17:27:43 -0800
838fe2a
fix a makefile interaction on cxx headers? by
2016-01-07 17:20:01 -0800
48aa821
only include public includes now by
2016-01-07 17:17:00 -0800
a9dcd15
auto-generate metaheaders by
2016-01-07 17:11:28 -0800
c1306c7
actually generate some headers by
2016-01-07 17:02:27 -0800
28ab1d5
prevent regenerating all headers every make by
2016-01-07 16:54:39 -0800
98be9a0
now generating some headers for real by
2016-01-07 16:53:41 -0800
47d4b08
generator is almost ready to drop in by
2016-01-07 15:34:05 -0800
1c97140
working on python generation by
2016-01-07 14:35:00 -0800
e167aad
working on python generation by
2016-01-07 14:33:38 -0800
72399d5
working on python generation by
2016-01-07 14:24:52 -0800
a0b4bc5
beginning of header generation technology by
2016-01-07 12:43:07 -0800
55450fa
respace by
2016-01-07 12:15:41 -0800
6e95e69
trying to make C++ headers the same, for future unified generation by
2016-01-07 12:03:26 -0800
a3b094e
trying to make headers the same, for future unified generation by
2016-01-07 11:48:24 -0800
26b5917
remove decaf.c, to be restored later maybe by
2016-01-07 11:30:42 -0800
ee076bc
usage is static void by
2016-01-07 11:25:17 -0800
facad6c
unify decaf_crypto c versions, still need to unify with c++ by
2016-01-07 10:55:13 -0800
21c1fe7
going to branch here by
2015-11-30 10:57:05 -0800
b5a2757
clear a couple fixmes by
2015-11-24 19:00:51 -0800
ff463c8
keyed tracker is added by
2015-11-24 18:29:13 -0800
64adbd1
split c crypto routines for now (a bit of a hack :-/) by
2015-11-24 18:28:10 -0800
27f1b4f
gcc is sad about my control word code by
2015-11-24 18:15:50 -0800
5c4a6d8
sponge is now restrict for strobe_duplex, for all the difference that makes :-/ by
2015-11-24 18:11:40 -0800
565522f
trying to update to the latest version of strobe. lots of stuff in flux though by
2015-11-24 17:42:00 -0800
2d85bbf
dual scalarmul because of TLS discussion port some changes to decaf.c by
2015-11-24 12:00:00 -0800
704b424
dual scalarmul because of TLS discussion by
2015-11-24 12:00:00 -0800
c6d7fde
some alignment and gcc-related fixes. Unfortunately, the python ffi still dies for alignment-related reasons :-( by
2015-11-22 16:50:58 -0800
40cc1d2
recategorize a couple of todos and unbreak arch_ref64 by
2015-11-21 15:41:53 -0800
a1f5348
beginning to separate errors from bools. not there yet though by
2015-11-20 18:03:11 -0800
88a60a2
add Group::FIELD_MODULUS_TYPE for testing purposes by
2015-11-20 17:10:43 -0800
820c83a
sliding window by
2015-11-20 16:23:30 -0800
196e9a8
cleanup word.h by
2015-11-20 14:53:09 -0800
ab90606
remove unused gf_subx_RAW by
2015-11-20 14:39:54 -0800
ce75aee
move various arch things to word.h or their arch files by
2015-11-20 14:30:36 -0800
bdf4375
normalize some of the word and limb size declarations, still not entirely happy on that front by
2015-11-20 13:59:33 -0800
493508f
clear an include ordering fixme by
2015-11-20 11:48:27 -0800
36b54ca
clear an include ordering fixme by
2015-11-20 11:47:03 -0800
23726f4
clear a todo from f_arithmetic.c by
2015-11-19 16:30:28 -0800
4962921
simplify elligator (todo: test more? eg 1/(1-d) on 25519) by
2015-11-19 14:49:17 -0800