Commit Graph

  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • | *
  • * |
  • * |
  • * |
  • * |
  • * |
  • * |
  • * |
  • * |
  • * |
  • * |
  • |/
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • |\
  • | *
  • * |
  • |/
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • *
  • 3f1c687 add point_cond_sel and scalar_cond_sel; avoid asserting on direct_scalarmul when given garbage by Michael Hamburg 2015-11-19 14:07:32 -0800
  • 3ba3edc fix bench /0; some effort to bzero stack variables by Michael Hamburg 2015-11-19 13:50:30 -0800
  • e95b7c7 made scalar inverse WARN_UNUSED and made it throw. Small fix to sagetest. Changed some places that assumed that success is true, in case I want to adopt the proposal that success is 0 by Michael Hamburg 2015-11-19 13:36:22 -0800
  • bc252f8 whups public_include by Michael Hamburg 2015-08-23 22:33:52 -0700
  • 0f78ec2 fix bug in tagforget by Michael Hamburg 2015-07-21 16:53:07 -0700
  • 4bff4f7 add a FIXME; also big perf regr in verify for some reason by Michael Hamburg 2015-07-20 17:53:26 -0700
  • d30a160 bench with ++ crypto by Michael Hamburg 2015-07-20 17:49:58 -0700
  • b35f966 add serializable class, though i might repent of this because i dont want a vtable by Michael Hamburg 2015-07-20 16:51:59 -0700
  • 4dd77e0 switch SecureBuffer to vector by Michael Hamburg 2015-07-19 15:34:02 -0700
  • 2162dbe add crypto.hxx that doesnt work yet by Mike Hamburg 2015-07-18 14:10:21 -0700
  • b849d2c working on securebuffer problems, might just switch things to vector by Mike Hamburg 2015-07-18 14:09:54 -0700
  • 1bda5ed XOPEN_SOURCE defines fixed by Mike Hamburg 2015-07-14 18:42:01 -0700
  • cdab495 Cross-curve compilation working! Still a bunch of FIXMEs though by Michael Hamburg 2015-07-14 18:39:28 -0700
  • d703b31 fix some PRECIOUS by Michael Hamburg 2015-07-13 18:01:34 -0700
  • 719fcac working on multicurve build system by Michael Hamburg 2015-07-13 17:57:19 -0700
  • de735c7 knock out a couple TODOs by Michael Hamburg 2015-07-11 23:54:30 -0700
  • 5af980b wipe out the multiple layers of rename between decaf_fast and field. still some serious HACKs in the include prio to avoid multiple definition of struct gf by Michael Hamburg 2015-07-11 23:44:20 -0700
  • b6c12d7 doh by Michael Hamburg 2015-07-11 22:55:06 -0700
  • 8a1315e get rid of unchecked isqrt. will be a tiny slowdown for p448 invert, called only in batch_invert by Mike Hamburg 2015-07-09 18:59:17 -0700
  • eab2a41 switch from xy positive to 1/xy positive; this is because it can make laddered direct_scalarmul almost sane. almost. by Mike Hamburg 2015-07-09 18:45:45 -0700
  • 60b14fb add FixedBuffer by Mike Hamburg 2015-07-09 17:33:26 -0700
  • 538fe68 OwnedOrUnowned as base for Precomputed by Mike Hamburg 2015-07-09 16:21:24 -0700
  • 6bc7a3d rework build hierarchy to prepare for generated headers by Mike Hamburg 2015-07-09 15:14:52 -0700
  • 36380f3 one more namespacing change by Mike Hamburg 2015-07-02 21:22:42 -0700
  • 93edb22 remove inverse from f_field.h by Mike Hamburg 2015-07-02 18:21:43 -0700
  • 0b59ddc move config to prime directories by Mike Hamburg 2015-07-02 18:08:11 -0700
  • f825fd9 gcc compat changes by Mike Hamburg 2015-07-02 18:02:57 -0700
  • e273155 switch to 64-bit shift; still slower than donna? by Michael Hamburg 2015-07-01 19:01:18 -0700
  • ba9f201 faster mulw? by Michael Hamburg 2015-07-01 16:57:34 -0700
  • 8202c43 remove ah = a*19 by Michael Hamburg 2015-07-01 16:52:27 -0700
  • 42a561d some accel in for curve25519 by Michael Hamburg 2015-07-01 16:36:55 -0700
  • 2705bd2 another few TODOs down by Michael Hamburg 2015-07-01 15:53:25 -0700
  • f8c32ba knock out some TODOs by Michael Hamburg 2015-07-01 15:44:14 -0700
  • d501753 factor common routines and data decls out into decaf_common.h. Now leaking NONNULL etc by Michael Hamburg 2015-07-01 15:21:44 -0700
  • 02449ed encoding is no longer EXPLICIT_CON by Michael Hamburg 2015-07-01 14:47:57 -0700
  • db0a12d working on breaking up include files by Michael Hamburg 2015-07-01 14:39:36 -0700
  • 629a782 Elligator now passes tests, but there are likely still missing preimages of rotations of the identity point. Also, projscaling elligator probably works, but it needs testing by Michael Hamburg 2015-06-30 18:06:51 -0700
  • 89dfab3 remove hinting from forward elligator, at least in 25519. leaving test in broken state because, well, it is broken by Michael Hamburg 2015-06-26 16:06:44 -0700
  • a53f987 OK, most tests are now passing. Remaining known problems: by Michael Hamburg 2015-06-23 19:00:59 -0700
  • 5a3fe27 more rigorous tests. elligator still fails. problem: extracting xy is quite technical by Michael Hamburg 2015-06-23 17:49:54 -0700
  • 202ed7f change 2torque to torque, which is 4torque in ed25519 case by Michael Hamburg 2015-06-23 17:35:37 -0700
  • f68833c passing everything but elligator with curve25519! though there are probably some lurking bugs... by Michael Hamburg 2015-06-22 17:35:45 -0700
  • 092bbfd swap over to Curve25519 from PinkBikeShed. Elligator still doesnt work (closer than with pinkbikeshed tho...). Need to deal with the sign T to make EC tests pass. Somehow the high level crypto all passes .. i guess because everything stays in the subgroup by Michael Hamburg 2015-06-22 16:31:23 -0700
  • d974612 restore test which got clobbered somehow by Michael Hamburg 2015-06-22 16:28:13 -0700
  • e4cb764 inverting elligator now mostly works, except for identity and overflow issues by Michael Hamburg 2015-06-22 16:24:26 -0700
  • cbb8ccee elligator doesnt work; gonna compare some things to see why by Michael Hamburg 2015-06-22 16:07:07 -0700
  • 0d913b6 use deisogenize for future merge with curve25519 by Michael Hamburg 2015-06-22 15:35:58 -0700
  • 4a76f50 minor comment change by Michael Hamburg 2015-06-22 15:18:40 -0700
  • d646105 round-trip works by Michael Hamburg 2015-06-22 15:07:16 -0700
  • 371192b actually elligator only almost works because of r=1 being weird. round-trip doesnt work by Michael Hamburg 2015-06-19 17:01:17 -0700
  • a14dbaf decode and elligator work. probably encode still buggy. by Michael Hamburg 2015-06-19 16:58:45 -0700
  • 2b0c51f scalar arithmetic passing. on to ec, which surely doesnt work by Michael Hamburg 2015-06-19 16:22:01 -0700
  • d81034d decode works by Michael Hamburg 2015-06-19 16:15:50 -0700
  • 4b0bf31 progress checkin. compiles. working on point decode. have switched some of the Ds over. BTW, you can see that this is using PinkBikeShed instead of the real Curve25519; this is temporary by Michael Hamburg 2015-06-19 15:20:48 -0700
  • cc79f55 remove direct ladder for now by Michael Hamburg 2015-06-19 14:48:52 -0700
  • 03ecad0 it compiles, but it certainly doesnt work yet by Michael Hamburg 2015-06-19 14:15:20 -0700
  • 40b1f8b initial replace 448->255; doesnt compile yet by Mike Hamburg 2015-06-18 22:48:43 -0700
  • e65e322 addition chain for curve25519 by Michael Hamburg 2015-06-18 19:01:53 -0700
  • 6c81eec addition chain for curve25519 by Michael Hamburg 2015-06-18 18:53:18 -0700
  • 2b5f3be sagelike and clike routines for decaffeinating curve25519 by Michael Hamburg 2015-06-18 18:36:32 -0700
  • d95a1f2 auxilliary sage scripts, working on decaffeinate_curve25519.sage" by Michael Hamburg 2015-06-18 17:24:51 -0700
  • 66c41fd sagetest actually tests something, though not all i want to test by Michael Hamburg 2015-05-30 13:23:35 -0700
  • 906d7fe begin testing framework by Michael Hamburg 2015-05-28 14:57:25 -0700
  • 4fe3b9d begin groundwork for sage testing by Michael Hamburg 2015-05-27 17:00:34 -0700
  • 6947f38 comments related to paper by Michael Hamburg 2015-05-26 14:15:15 -0700
  • 16f5679 remove change which was used to work around test code limitations by Michael Hamburg 2015-05-26 13:47:10 -0700
  • 0241632 Create functions for inverting Elligator. by Michael Hamburg 2015-05-19 18:17:18 -0700
  • 424d888 new version of nonuniform map from paper. definitely not as optimized as it could be but who cares? by Michael Hamburg 2015-05-17 23:57:21 -0700
  • 07530b4 switch base points to reflect draft-irtf-cfrg-curves-01. base point now computed by gen_tables by Michael Hamburg 2015-05-06 16:23:08 -0700
  • a1d33e0 change decaf_gen_tables to use FIELD_LITERAL so that `make bat` makes a portable bat by Mike Hamburg 2015-05-06 13:25:17 -0700
  • 45a271d fix most of SUPERCOP stuff. However, the results of `make bat` still are not portable because the generated tables use arch specific field element layout by Mike Hamburg 2015-05-05 18:14:05 -0700
  • 0fc9ab3 repent of that templating wickedness. at least until i can figure out the right way to do it by Michael Hamburg 2015-05-05 10:14:33 -0700
  • 97e98f5 restore LBITS because NEON code needs it by Mike Hamburg 2015-05-01 18:39:48 -0700
  • ea67df7 fix duplicate/missing symbols from C++ wrapper by Michael Hamburg 2015-05-01 18:26:32 -0700
  • c80d8d0 work around GCC bug 40315 by Michael Hamburg 2015-05-01 17:58:43 -0700
  • 1f67347 remove EXPLICIT_CON for serializing a point by Mike Hamburg 2015-05-01 17:17:20 -0700
  • fc3be89 trying to templatize by Michael Hamburg 2015-05-01 16:13:43 -0700
  • 4d07cdf rename decaf::decaf to decaf::EcGroup to avoid naming conflict; discard top and bottom two benchmarks to avoid descheduling issues which cause calibration to say THz by Michael Hamburg 2015-05-01 13:20:45 -0700
  • e6441d0 working on templatization by Michael Hamburg 2015-04-30 17:44:42 -0700
  • da7c542 remove set_ui on NEON, which i had missed by Mike Hamburg 2015-04-23 14:51:36 -0700
  • 9f7b8eb restore wno-overlength-strings (it was used for NEON) by Mike Hamburg 2015-04-23 14:50:29 -0700
  • febe900 makefile rpath settings by Mike Hamburg 2015-04-23 14:41:41 -0700
  • b5f7c2e tidy up by Michael Hamburg 2015-04-23 14:37:03 -0700
  • f18cf35 remove files used by goldilocks/master, leaving only decaf by Michael Hamburg 2015-04-23 13:55:42 -0700
  • 484e05b shuffling permutation. tested and benched on NEON; slightly faster than goldilocks original except verification which is slightly slower by Mike Hamburg 2015-04-18 21:24:39 -0700
  • a52c7cb Merge branch 'decaf' of ssh://git.code.sf.net/p/ed448goldilocks/code into decaf by Mike Hamburg 2015-04-18 19:19:18 -0700
  • 469aa48 switch to underlying field de/ser ops for portability by Michael Hamburg 2015-04-18 19:18:57 -0700
  • 1961240 more strobe modes by Mike Hamburg 2015-04-01 18:15:03 -0700
  • c5cf524 note that mqv example may run afoul of patents if used in production by Mike Hamburg 2015-04-01 17:56:57 -0700
  • f0581de clean up some stuff by Mike Hamburg 2015-04-01 17:53:09 -0700
  • 9bbeb61 protocol examples by Mike Hamburg 2015-04-01 16:04:12 -0700
  • 6665bb4 begin Strobe instance by Mike Hamburg 2015-04-01 14:54:28 -0700
  • a6b94cb begin work on strobe by Mike Hamburg 2015-03-31 19:28:35 -0700
  • 3fe31a7 get rid of std::string by Mike Hamburg 2015-03-31 11:49:01 -0700
  • 2eb8904 using SecureBuffer instead of std::string (todo change documentation; remove ptr+len? by Mike Hamburg 2015-03-31 01:59:02 -0700
  • ba92a55 initialize point/scalar from rng; still needs work by Mike Hamburg 2015-03-30 18:26:09 -0700
  • 172477e working on shake C++ wrapper by Mike Hamburg 2015-03-28 17:53:37 -0700
  • 3c2152a point validation in hxx by Mike Hamburg 2015-03-28 16:14:52 -0700
  • cf26bc4 fix a 32-bit cleanness issue in decaf_fast; allow NOINIT constructors in hxx by Mike Hamburg 2015-03-28 15:55:54 -0700
  • f62092f fix *= etc bugs in C++ wrapper by Mike Hamburg 2015-03-27 19:24:03 -0700