190 Commits (master)

Author SHA1 Message Date
  Michael Hamburg a4c02cc759 better test 7 years ago
  Michael Hamburg 72484a054f test to make sure bug is gone 7 years ago
  Michael Hamburg b423ac359c working on decaffeinating ed25519 7 years ago
  Michael Hamburg aee921fc55 fix a bug in the test scripts, thanks Johan Pascal 7 years ago
  Michael Hamburg ec4ece08f0 add decaf_edXXX_convert_public_key_to_xXXX; thanks Johan Pascal 7 years ago
  Michael Hamburg bb1eef3712 tear out STROBE. Probably will re-introduce later 7 years ago
  Michael Hamburg 4caefd358b oops also in test_ct 7 years ago
  Michael Hamburg af606fb195 x448 generate_key -> derive_public_key to match ed448 nomenclature 7 years ago
  Michael Hamburg 875d2b2251 ED25519_NO_CONTEXT -> DECAF_ED25519_NO_CONTEXT; DECAF_ED25519_NO_CONTEXT -> DECAF_EDDSA_25519_SUPPORTS_CONTEXTLESS_SIGS 8 years ago
  Andrew Bennett 7ec87d8616 Use magic constant ED25519_NO_CONTEXT for non-contextual operations. 8 years ago
  Andrew Bennett ef6e74bdec
Update EdDSA operations to match draft 07 from CFRG. 8 years ago
  Michael Hamburg 205d4e4aac working on the README 8 years ago
  Michael Hamburg a32fd62512 mark more things at toy 8 years ago
  Michael Hamburg a01e875d4a move strobe and crypto to TOY areas 8 years ago
  Michael Hamburg d1e2bbec15 fix Ed448-prehash and test against newly-corrected cfrg vectors 8 years ago
  Andrew Bennett c558c0ecdb x86_64/i386 and illumos/solaris/SunOS compatibility fixes. 8 years ago
  Michael Hamburg e22c967171 change eddsa encoding names to show that they multiply_by_cofactor 8 years ago
  Mike Hamburg a673fbfc63 test_ct broke because of renaming; fix it 8 years ago
  Michael Hamburg c5a9b7757b ed25519 prehashed test vector. ed448 prehashed test vectors look invalid?? 8 years ago
  Michael Hamburg 4adb584654 ed25519 prehashed test vector. ed448 prehashed test vectors look invalid?? 8 years ago
  Michael Hamburg 3b9ffc4cc7 separate Ed25519ph from Ed25519 with awful CRTP hack 8 years ago
  Michael Hamburg f1df5e4714 lowerCamelCase -> snake_case. Put decaf_ in front of all (most?) identifiers, except for SHAKE which is being removed before 1.0 release (for future refactoring) 8 years ago
  Michael Hamburg 595855b434 move eddsa.hxx to its own header. sha512.hxx; rework shake.hxx header; create prehash object. TODO: test prehash 8 years ago
  Michael Hamburg 798b189a77 minor changes; clear a few TODOs 8 years ago
  Michael Hamburg 6225bfd2f4 EdDSA is go! 8 years ago
  Michael Hamburg 1f716044ca eddsa provisional pass 8 years ago
  Michael Hamburg d9a9bb96b5 eddsa-25519 now using sha512. But problem! We are using IsoEd25519 so we actually need an isogeny anyway to get to Ed25519 proper 8 years ago
  Michael Hamburg 0fa687437f sha512 8 years ago
  Michael Hamburg b06db0c78a EdDSA now supports multiple hashes as defined in curve_data.py. We still dont have sha512 though. 8 years ago
  Michael Hamburg 9d0bac672f move context arguments to the end of hash functions. Ed25519 doesnt support contexts. 8 years ago
  Michael Hamburg b1c6de6309 EdDSA 448 seems to be working. Needs more testing, code moved around. EdDSA 255 not working yet; needs SHA512 8 years ago
  Michael Hamburg fffb77ac2d eddsa sign seems to work for ed448. needs more testing of course 8 years ago
  Michael Hamburg d0e74a585a eddsa key generation, at least for goldilocks. needs parameterized hash function; sign/verify; rename; put in right place 8 years ago
  Michael Hamburg 650356c5f5 elligator overflow bits. 9 years ago
  Michael Hamburg 050dcc186f test/bench now uses run_for_all_curves<> 9 years ago
  Michael Hamburg c0310ba553 whoops, actually save the change the removes the todo comment 9 years ago
  Michael Hamburg c9abcef055 add some pathological test cases, clearing a few TODO items. Also scalar_set_unsigned now takes a uint64_t instead of a word_t 9 years ago
  Michael Hamburg 37e0886300 simplify elligator, in a way that shouldnt change its output. I think it uses the opposite convention from the paper for sign(s) though. 9 years ago
  Michael Hamburg c7a3efd496 fix typo in 32-bit code 9 years ago
  Mike Hamburg 5f38747a15 Montgomery ladder now uses non-reduced arith for speed. Also, it is tested to be CT 9 years ago
  Michael Hamburg 2eacff6ad6 rfc7748 implementation, but their names will probably change 9 years ago
  Michael Hamburg 4de70b837c separate out strobe and spongerng from shake. strobe is experimental. spongerng is experimental internally but the interface should be pretty good (except for any camelCase vs snake_case issues). shake should be stable 9 years ago
  Mike Hamburg 24e33a2f86 reasonable suite of ct tests now. also change scalar randomizer to generate +128 bits 9 years ago
  Mike Hamburg 9f1cc0e2af some more ct tests; serializeInto -> serialize_into. still need more ct tests, unification of snake vs camel case 9 years ago
  Mike Hamburg 51ac192b79 ct tests are in; succeed if -DNDEBUG is passed. Should carefully audit assertions. 9 years ago
  Michael Hamburg d81592ba71 make test_ct, except it probably doesnt work; definitely not on a mac with no memcheck.h installed 9 years ago
  Michael Hamburg 81403de10c knock out a couple TODOs 9 years ago
  Michael Hamburg 957ec6cd2c restore shared secret benchmarks 9 years ago
  Michael Hamburg f92d14e08a crypto.hxx is now a thin wrapper around crypto.h 9 years ago
  Michael Hamburg 1c97140893 working on python generation 9 years ago