3f1c687
add point_cond_sel and scalar_cond_sel; avoid asserting on direct_scalarmul when given garbage by
2015-11-19 14:07:32 -0800
3ba3edc
fix bench /0; some effort to bzero stack variables by
2015-11-19 13:50:30 -0800
e95b7c7
made scalar inverse WARN_UNUSED and made it throw. Small fix to sagetest. Changed some places that assumed that success is true, in case I want to adopt the proposal that success is 0 by
2015-11-19 13:36:22 -0800
bc252f8
whups public_include by
2015-08-23 22:33:52 -0700
0f78ec2
fix bug in tagforget by
2015-07-21 16:53:07 -0700
4bff4f7
add a FIXME; also big perf regr in verify for some reason by
2015-07-20 17:53:26 -0700
d30a160
bench with ++ crypto by
2015-07-20 17:49:58 -0700
b35f966
add serializable class, though i might repent of this because i dont want a vtable by
2015-07-20 16:51:59 -0700
4dd77e0
switch SecureBuffer to vector by
2015-07-19 15:34:02 -0700
2162dbe
add crypto.hxx that doesnt work yet by
2015-07-18 14:10:21 -0700
b849d2c
working on securebuffer problems, might just switch things to vector by
2015-07-18 14:09:54 -0700
1bda5ed
XOPEN_SOURCE defines fixed by
2015-07-14 18:42:01 -0700
cdab495
Cross-curve compilation working! Still a bunch of FIXMEs though by
2015-07-14 18:39:28 -0700
d703b31
fix some PRECIOUS by
2015-07-13 18:01:34 -0700
719fcac
working on multicurve build system by
2015-07-13 17:57:19 -0700
de735c7
knock out a couple TODOs by
2015-07-11 23:54:30 -0700
5af980b
wipe out the multiple layers of rename between decaf_fast and field. still some serious HACKs in the include prio to avoid multiple definition of struct gf by
2015-07-11 23:44:20 -0700
b6c12d7
doh by
2015-07-11 22:55:06 -0700
8a1315e
get rid of unchecked isqrt. will be a tiny slowdown for p448 invert, called only in batch_invert by
2015-07-09 18:59:17 -0700
eab2a41
switch from xy positive to 1/xy positive; this is because it can make laddered direct_scalarmul almost sane. almost. by
2015-07-09 18:45:45 -0700
60b14fb
add FixedBuffer by
2015-07-09 17:33:26 -0700
538fe68
OwnedOrUnowned as base for Precomputed by
2015-07-09 16:21:24 -0700
6bc7a3d
rework build hierarchy to prepare for generated headers by
2015-07-09 15:14:52 -0700
36380f3
one more namespacing change by
2015-07-02 21:22:42 -0700
93edb22
remove inverse from f_field.h by
2015-07-02 18:21:43 -0700
0b59ddc
move config to prime directories by
2015-07-02 18:08:11 -0700
f825fd9
gcc compat changes by
2015-07-02 18:02:57 -0700
e273155
switch to 64-bit shift; still slower than donna? by
2015-07-01 19:01:18 -0700
ba9f201
faster mulw? by
2015-07-01 16:57:34 -0700
8202c43
remove ah = a*19 by
2015-07-01 16:52:27 -0700
42a561d
some accel in for curve25519 by
2015-07-01 16:36:55 -0700
2705bd2
another few TODOs down by
2015-07-01 15:53:25 -0700
f8c32ba
knock out some TODOs by
2015-07-01 15:44:14 -0700
d501753
factor common routines and data decls out into decaf_common.h. Now leaking NONNULL etc by
2015-07-01 15:21:44 -0700
02449ed
encoding is no longer EXPLICIT_CON by
2015-07-01 14:47:57 -0700
db0a12d
working on breaking up include files by
2015-07-01 14:39:36 -0700
629a782
Elligator now passes tests, but there are likely still missing preimages of rotations of the identity point. Also, projscaling elligator probably works, but it needs testing by
2015-06-30 18:06:51 -0700
89dfab3
remove hinting from forward elligator, at least in 25519. leaving test in broken state because, well, it is broken by
2015-06-26 16:06:44 -0700
a53f987
OK, most tests are now passing. Remaining known problems: by
2015-06-23 19:00:59 -0700
5a3fe27
more rigorous tests. elligator still fails. problem: extracting xy is quite technical by
2015-06-23 17:49:54 -0700
202ed7f
change 2torque to torque, which is 4torque in ed25519 case by
2015-06-23 17:35:37 -0700
f68833c
passing everything but elligator with curve25519! though there are probably some lurking bugs... by
2015-06-22 17:35:45 -0700
092bbfd
swap over to Curve25519 from PinkBikeShed. Elligator still doesnt work (closer than with pinkbikeshed tho...). Need to deal with the sign T to make EC tests pass. Somehow the high level crypto all passes .. i guess because everything stays in the subgroup by
2015-06-22 16:31:23 -0700
d974612
restore test which got clobbered somehow by
2015-06-22 16:28:13 -0700
e4cb764
inverting elligator now mostly works, except for identity and overflow issues by
2015-06-22 16:24:26 -0700
cbb8ccee
elligator doesnt work; gonna compare some things to see why by
2015-06-22 16:07:07 -0700
0d913b6
use deisogenize for future merge with curve25519 by
2015-06-22 15:35:58 -0700
4a76f50
minor comment change by
2015-06-22 15:18:40 -0700
d646105
round-trip works by
2015-06-22 15:07:16 -0700
371192b
actually elligator only almost works because of r=1 being weird. round-trip doesnt work by
2015-06-19 17:01:17 -0700
a14dbaf
decode and elligator work. probably encode still buggy. by
2015-06-19 16:58:45 -0700
2b0c51f
scalar arithmetic passing. on to ec, which surely doesnt work by
2015-06-19 16:22:01 -0700
d81034d
decode works by
2015-06-19 16:15:50 -0700
4b0bf31
progress checkin. compiles. working on point decode. have switched some of the Ds over. BTW, you can see that this is using PinkBikeShed instead of the real Curve25519; this is temporary by
2015-06-19 15:20:48 -0700
cc79f55
remove direct ladder for now by
2015-06-19 14:48:52 -0700
03ecad0
it compiles, but it certainly doesnt work yet by
2015-06-19 14:15:20 -0700
40b1f8b
initial replace 448->255; doesnt compile yet by
2015-06-18 22:48:43 -0700
e65e322
addition chain for curve25519 by
2015-06-18 19:01:53 -0700
6c81eec
addition chain for curve25519 by
2015-06-18 18:53:18 -0700
2b5f3be
sagelike and clike routines for decaffeinating curve25519 by
2015-06-18 18:36:32 -0700
d95a1f2
auxilliary sage scripts, working on decaffeinate_curve25519.sage" by
2015-06-18 17:24:51 -0700
66c41fd
sagetest actually tests something, though not all i want to test by
2015-05-30 13:23:35 -0700
906d7fe
begin testing framework by
2015-05-28 14:57:25 -0700
4fe3b9d
begin groundwork for sage testing by
2015-05-27 17:00:34 -0700
6947f38
comments related to paper by
2015-05-26 14:15:15 -0700
16f5679
remove change which was used to work around test code limitations by
2015-05-26 13:47:10 -0700
0241632
Create functions for inverting Elligator. by
2015-05-19 18:17:18 -0700
424d888
new version of nonuniform map from paper. definitely not as optimized as it could be but who cares? by
2015-05-17 23:57:21 -0700
07530b4
switch base points to reflect draft-irtf-cfrg-curves-01. base point now computed by gen_tables by
2015-05-06 16:23:08 -0700
a1d33e0
change decaf_gen_tables to use FIELD_LITERAL so that `make bat` makes a portable bat by
2015-05-06 13:25:17 -0700
45a271d
fix most of SUPERCOP stuff. However, the results of `make bat` still are not portable because the generated tables use arch specific field element layout by
2015-05-05 18:14:05 -0700
0fc9ab3
repent of that templating wickedness. at least until i can figure out the right way to do it by
2015-05-05 10:14:33 -0700
97e98f5
restore LBITS because NEON code needs it by
2015-05-01 18:39:48 -0700
ea67df7
fix duplicate/missing symbols from C++ wrapper by
2015-05-01 18:26:32 -0700
c80d8d0
work around GCC bug 40315 by
2015-05-01 17:58:43 -0700
1f67347
remove EXPLICIT_CON for serializing a point by
2015-05-01 17:17:20 -0700
fc3be89
trying to templatize by
2015-05-01 16:13:43 -0700
4d07cdf
rename decaf::decaf to decaf::EcGroup to avoid naming conflict; discard top and bottom two benchmarks to avoid descheduling issues which cause calibration to say THz by
2015-05-01 13:20:45 -0700
e6441d0
working on templatization by
2015-04-30 17:44:42 -0700
da7c542
remove set_ui on NEON, which i had missed by
2015-04-23 14:51:36 -0700
9f7b8eb
restore wno-overlength-strings (it was used for NEON) by
2015-04-23 14:50:29 -0700
febe900
makefile rpath settings by
2015-04-23 14:41:41 -0700
b5f7c2e
tidy up by
2015-04-23 14:37:03 -0700
f18cf35
remove files used by goldilocks/master, leaving only decaf by
2015-04-23 13:55:42 -0700
484e05b
shuffling permutation. tested and benched on NEON; slightly faster than goldilocks original except verification which is slightly slower by
2015-04-18 21:24:39 -0700
a52c7cb
Merge branch 'decaf' of ssh://git.code.sf.net/p/ed448goldilocks/code into decaf by
2015-04-18 19:19:18 -0700
469aa48
switch to underlying field de/ser ops for portability by
2015-04-18 19:18:57 -0700
1961240
more strobe modes by
2015-04-01 18:15:03 -0700
c5cf524
note that mqv example may run afoul of patents if used in production by
2015-04-01 17:56:57 -0700
f0581de
clean up some stuff by
2015-04-01 17:53:09 -0700
9bbeb61
protocol examples by
2015-04-01 16:04:12 -0700
6665bb4
begin Strobe instance by
2015-04-01 14:54:28 -0700
a6b94cb
begin work on strobe by
2015-03-31 19:28:35 -0700
3fe31a7
get rid of std::string by
2015-03-31 11:49:01 -0700
2eb8904
using SecureBuffer instead of std::string (todo change documentation; remove ptr+len? by
2015-03-31 01:59:02 -0700
ba92a55
initialize point/scalar from rng; still needs work by
2015-03-30 18:26:09 -0700
172477e
working on shake C++ wrapper by
2015-03-28 17:53:37 -0700
3c2152a
point validation in hxx by
2015-03-28 16:14:52 -0700
cf26bc4
fix a 32-bit cleanness issue in decaf_fast; allow NOINIT constructors in hxx by
2015-03-28 15:55:54 -0700
f62092f
fix *= etc bugs in C++ wrapper by
2015-03-27 19:24:03 -0700