Commit Graph

  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • |\
  • * |
  • | *
  • |/
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • 08bbb56 dont go via asm anymore. also reduce the number of templated expressions by Michael Hamburg 2016-01-29 17:41:07 -0800
  • d94a147 move everything over to more-tolerable templating by Michael Hamburg 2016-01-29 16:56:13 -0800
  • 4e57f49 move more generation to python by Michael Hamburg 2016-01-29 16:05:14 -0800
  • 7ee81cf move easy scalar computations to python by Michael Hamburg 2016-01-29 15:39:29 -0800
  • 2e95122 template curve_data by Michael Hamburg 2016-01-29 15:18:51 -0800
  • 3a5ba3e no more API_NS2. by Michael Hamburg 2016-01-29 15:16:27 -0800
  • f6ec8b2 moving to a much simpler templating system by Michael Hamburg 2016-01-29 15:08:32 -0800
  • 8b906e1 remove unused PRIXWORD macros by Michael Hamburg 2016-01-29 13:21:52 -0800
  • 1dc3961 add sign_strobe and verify_strobe to crypto.hxx by Michael Hamburg 2016-01-29 13:18:51 -0800
  • 86e44e6 fixed the mixed-arch bug, but it comes from a long-standing todo by Michael Hamburg 2016-01-29 13:12:50 -0800
  • 8d9c810 make position unsigned so that the assertion means something (thx gcc) by Mike Hamburg 2016-01-29 13:03:33 -0800
  • 790745e set mulw to <32 bits instead of <64 bits (but actually less than that: 1 limb instead of 2). also there is a bug if you compile ed448 for arch_32 on a 64-bit machine... tracing by Michael Hamburg 2016-01-29 12:57:27 -0800
  • a9e2e08 real WNAF by Michael Hamburg 2016-01-29 11:08:59 -0800
  • 5311dd5 auto-gen more field arithmetic data by Michael Hamburg 2016-01-27 18:43:24 -0800
  • 6aea096 reduce required curve data by Michael Hamburg 2016-01-27 17:40:02 -0800
  • 050dcc1 test/bench now uses run_for_all_curves<> by Michael Hamburg 2016-01-27 17:32:07 -0800
  • c0310ba whoops, actually save the change the removes the todo comment by Michael Hamburg 2016-01-27 16:57:57 -0800
  • de547aa fix a gcc Werror by Mike Hamburg 2016-01-27 16:44:16 -0800
  • c9abcef add some pathological test cases, clearing a few TODO items. Also scalar_set_unsigned now takes a uint64_t instead of a word_t by Michael Hamburg 2016-01-27 16:39:13 -0800
  • 1f57b70 move p480 and p521 to attic by Michael Hamburg 2016-01-26 17:31:14 -0800
  • e8561eb pniels_t is now aligned to sizeof(big_register_t), clearing a MAGIC by Michael Hamburg 2016-01-26 14:38:32 -0800
  • af89593 harmonize deisogenize with paper, clearing a TODO by Michael Hamburg 2016-01-26 14:31:56 -0800
  • a690028 reverse convention for constant_time_select, resolving a TODO by Michael Hamburg 2016-01-26 14:02:15 -0800
  • 30436f6 remove vtable in buffer by Michael Hamburg 2016-01-26 13:56:05 -0800
  • 2ea89d9 remove one variable from elligator by Michael Hamburg 2016-01-26 13:26:48 -0800
  • 37e0886 simplify elligator, in a way that shouldnt change its output. I think it uses the opposite convention from the paper for sign(s) though. by Michael Hamburg 2016-01-26 13:24:44 -0800
  • c7a3efd fix typo in 32-bit code by Michael Hamburg 2016-01-26 11:41:47 -0800
  • 9b6fbec warning that base point might change for release version, to better integrate with x25510/448 or ed by Michael Hamburg 2016-01-25 19:24:06 -0800
  • 5f38747 Montgomery ladder now uses non-reduced arith for speed. Also, it is tested to be CT by Mike Hamburg 2016-01-25 18:24:31 -0800
  • 2eacff6 rfc7748 implementation, but their names will probably change by Michael Hamburg 2016-01-25 17:54:58 -0800
  • 4de70b8 separate out strobe and spongerng from shake. strobe is experimental. spongerng is experimental internally but the interface should be pretty good (except for any camelCase vs snake_case issues). shake should be stable by Michael Hamburg 2016-01-24 19:16:05 -0800
  • 24e33a2 reasonable suite of ct tests now. also change scalar randomizer to generate +128 bits by Mike Hamburg 2016-01-24 18:57:42 -0800
  • 9f1cc0e some more ct tests; serializeInto -> serialize_into. still need more ct tests, unification of snake vs camel case by Mike Hamburg 2016-01-23 18:08:22 -0800
  • 3d0c6a6 typedef Wrapped is no longer private for scalar and point by Mike Hamburg 2016-01-23 17:55:44 -0800
  • 51ac192 ct tests are in; succeed if -DNDEBUG is passed. Should carefully audit assertions. by Mike Hamburg 2016-01-23 17:12:14 -0800
  • d81592b make test_ct, except it probably doesnt work; definitely not on a mac with no memcheck.h installed by Michael Hamburg 2016-01-23 16:50:16 -0800
  • 9af4850 Merge branch 'curve25519-work' of ssh://git.code.sf.net/p/ed448goldilocks/code into curve25519-work by Mike Hamburg 2016-01-17 15:51:29 -0800
  • 8d6c51e Separate API word size from arch word size. This enables compiling a 32-bit arch on a 64-bit platform, eg NEON on AARCH64. It's probably more useful for cross-platform testing, though. by Mike Hamburg 2016-01-17 15:46:56 -0800
  • 9be0173 update HISTORY and TODO by Michael Hamburg 2016-01-15 18:11:53 -0800
  • 0016b26 arm asm -> __asm__ by Mike Hamburg 2016-01-15 17:52:56 -0800
  • 64efd98 use SC_LIMB in generated tables. Add a new "TODO" category, UNIFY for code that might be unified with other code by Michael Hamburg 2016-01-15 16:03:11 -0800
  • 7b7a27e move (non-hot) add/sub to per_field.c and make them not inline by Mike Hamburg 2016-01-15 15:22:47 -0800
  • 7587ea9 a couple of LIMBPERM related fixes by Michael Hamburg 2016-01-15 15:04:00 -0800
  • 94262db minor by Michael Hamburg 2016-01-15 14:39:19 -0800
  • 2e23ac7 move (some of the?) per-field code to src/per_field.c by Michael Hamburg 2016-01-15 14:13:47 -0800
  • 825751d one gf_strong_reduce to rule them all by Michael Hamburg 2016-01-15 13:53:57 -0800
  • 38455f3 one ser/deser to rule them all (TODO test on NEON and other places with LIMBPERM) by Michael Hamburg 2016-01-15 13:35:04 -0800
  • a5bed6b Working on getting cross-arch working again. Several TODOs. by Mike Hamburg 2016-01-14 23:35:30 -0800
  • 6bc97fb need an include/arch_*/arch_intrinsics.h for other arches by Michael Hamburg 2016-01-14 18:11:00 -0800
  • 233f845 further reduce the code in f_impl.h by Michael Hamburg 2016-01-14 17:28:22 -0800
  • b4c402c further reduce the code in f_impl.h by Michael Hamburg 2016-01-14 17:10:53 -0800
  • 2402788 further reduce the code in f_impl.h by Michael Hamburg 2016-01-14 16:55:45 -0800
  • 4218223 generate most of f_impl.h. Not tested on most arches yet :-( by Michael Hamburg 2016-01-14 16:36:30 -0800
  • 294eaba generate f_field.h by Michael Hamburg 2016-01-14 16:10:31 -0800
  • 55126ad separate c wrapper struct for strobe and spongerng by Michael Hamburg 2016-01-11 18:38:53 -0800
  • 81403de knock out a couple TODOs by Michael Hamburg 2016-01-11 18:10:59 -0800
  • 1a14abb Separate .h files for SHA/SHAKE, STROBE and sponge RNG. TODO: .hxx. Also add a lot of docs by Michael Hamburg 2016-01-11 17:39:17 -0800
  • 957ec6c restore shared secret benchmarks by Michael Hamburg 2016-01-08 16:03:13 -0800
  • f92d14e crypto.hxx is now a thin wrapper around crypto.h by Michael Hamburg 2016-01-08 15:53:12 -0800
  • ca68bb3 autogenerate decaf/crypto.h by Michael Hamburg 2016-01-07 17:30:13 -0800
  • e5491b6 some fixes to "make todo" by Michael Hamburg 2016-01-07 17:27:43 -0800
  • 838fe2a fix a makefile interaction on cxx headers? by Michael Hamburg 2016-01-07 17:20:01 -0800
  • 48aa821 only include public includes now by Michael Hamburg 2016-01-07 17:17:00 -0800
  • a9dcd15 auto-generate metaheaders by Michael Hamburg 2016-01-07 17:11:28 -0800
  • c1306c7 actually generate some headers by Michael Hamburg 2016-01-07 17:02:27 -0800
  • 28ab1d5 prevent regenerating all headers every make by Michael Hamburg 2016-01-07 16:54:39 -0800
  • 98be9a0 now generating some headers for real by Michael Hamburg 2016-01-07 16:53:41 -0800
  • 47d4b08 generator is almost ready to drop in by Michael Hamburg 2016-01-07 15:34:05 -0800
  • 1c97140 working on python generation by Michael Hamburg 2016-01-07 14:35:00 -0800
  • e167aad working on python generation by Michael Hamburg 2016-01-07 14:33:38 -0800
  • 72399d5 working on python generation by Michael Hamburg 2016-01-07 14:24:52 -0800
  • a0b4bc5 beginning of header generation technology by Michael Hamburg 2016-01-07 12:43:07 -0800
  • 55450fa respace by Michael Hamburg 2016-01-07 12:15:41 -0800
  • 6e95e69 trying to make C++ headers the same, for future unified generation by Michael Hamburg 2016-01-07 12:03:26 -0800
  • a3b094e trying to make headers the same, for future unified generation by Michael Hamburg 2016-01-07 11:48:24 -0800
  • 26b5917 remove decaf.c, to be restored later maybe by Michael Hamburg 2016-01-07 11:30:42 -0800
  • ee076bc usage is static void by Michael Hamburg 2016-01-07 11:25:17 -0800
  • facad6c unify decaf_crypto c versions, still need to unify with c++ by Michael Hamburg 2016-01-07 10:55:13 -0800
  • 21c1fe7 going to branch here by Michael Hamburg 2015-11-30 10:57:05 -0800
  • b5a2757 clear a couple fixmes by Michael Hamburg 2015-11-24 19:00:51 -0800
  • ff463c8 keyed tracker is added by Michael Hamburg 2015-11-24 18:29:13 -0800
  • 64adbd1 split c crypto routines for now (a bit of a hack :-/) by Michael Hamburg 2015-11-24 18:28:10 -0800
  • 27f1b4f gcc is sad about my control word code by Mike Hamburg 2015-11-24 18:15:50 -0800
  • 5c4a6d8 sponge is now restrict for strobe_duplex, for all the difference that makes :-/ by Mike Hamburg 2015-11-24 18:11:40 -0800
  • 565522f trying to update to the latest version of strobe. lots of stuff in flux though by Michael Hamburg 2015-11-24 17:42:00 -0800
  • 2d85bbf dual scalarmul because of TLS discussion port some changes to decaf.c by Mike Hamburg 2015-11-24 12:00:00 -0800
  • 704b424 dual scalarmul because of TLS discussion by Mike Hamburg 2015-11-24 12:00:00 -0800
  • c6d7fde some alignment and gcc-related fixes. Unfortunately, the python ffi still dies for alignment-related reasons :-( by Mike Hamburg 2015-11-22 16:50:58 -0800
  • 40cc1d2 recategorize a couple of todos and unbreak arch_ref64 by Michael Hamburg 2015-11-21 15:41:53 -0800
  • a1f5348 beginning to separate errors from bools. not there yet though by Michael Hamburg 2015-11-20 18:03:11 -0800
  • 88a60a2 add Group::FIELD_MODULUS_TYPE for testing purposes by Michael Hamburg 2015-11-20 17:10:43 -0800
  • 820c83a sliding window by Michael Hamburg 2015-11-20 16:23:30 -0800
  • 196e9a8 cleanup word.h by Michael Hamburg 2015-11-20 14:53:09 -0800
  • ab90606 remove unused gf_subx_RAW by Michael Hamburg 2015-11-20 14:39:54 -0800
  • ce75aee move various arch things to word.h or their arch files by Michael Hamburg 2015-11-20 14:30:36 -0800
  • bdf4375 normalize some of the word and limb size declarations, still not entirely happy on that front by Michael Hamburg 2015-11-20 13:59:33 -0800
  • 493508f clear an include ordering fixme by Michael Hamburg 2015-11-20 11:48:27 -0800
  • 36b54ca clear an include ordering fixme by Michael Hamburg 2015-11-20 11:47:03 -0800
  • 23726f4 clear a todo from f_arithmetic.c by Michael Hamburg 2015-11-19 16:30:28 -0800
  • 4962921 simplify elligator (todo: test more? eg 1/(1-d) on 25519) by Michael Hamburg 2015-11-19 14:49:17 -0800