497 Commits (17347b04a75ef531081c438478fa20646d2f9b1f)
 

Author SHA1 Message Date
  Michael Hamburg 17347b04a7 test harness to invert elligator by brute force 7 years ago
  Michael Hamburg 1a38c25d9d CFRG crypto back to working, just need to do elligator inversion for identity on x25519 7 years ago
  Michael Hamburg 2d04fa7b43 working out sign bugs; then on to invert elligator ristretto 7 years ago
  Michael Hamburg 2cc6ebfb67 ed25519 ristretto inverse works except at the identity point 7 years ago
  Michael Hamburg 5fc32bf1e9 elligator apparently(?) working for ed448 7 years ago
  Michael Hamburg 52ca544962 update ristretto.sage to not crash on div0 for elligator (d-a)/d/u; check that these work 7 years ago
  Michael Hamburg 733e67e80d whoops, bad hex decoder 7 years ago
  Michael Hamburg c82e7ae7a7 add ristretto widget. elligator is correct, but inverse is not yet 7 years ago
  Michael Hamburg 263d454903 ristretto patched in, except elligator. still need to test against vectors though 7 years ago
  Michael Hamburg 9f8b492e5f links in the readme 7 years ago
  Michael Hamburg 992183a8bf ristretto work: test that s -> 1/s negates the point iff cofactor == 4 (if cofactor == 8, then invalid) 7 years ago
  Michael Hamburg 30544252e6 fix comments in generated code too 7 years ago
  Michael Hamburg 4a133be2e0 fix comments add/subtract 7 years ago
  Michael Hamburg aa75f28a8a still need to iron out some sign differences 7 years ago
  Michael Hamburg 4fa2c73edf remove elligator decoding requirement 7 years ago
  Michael Hamburg b9b855f172 passes gang tests. ship it? 7 years ago
  Michael Hamburg 307f933f2d simpler decode if cofactor 4 7 years ago
  Michael Hamburg 8f212cceb9 simpler decode if cofactor 4 7 years ago
  Michael Hamburg 19aa251968 simpler decode if cofactor 4 7 years ago
  Michael Hamburg b1467a60ae reasonable decaf encode; try to tweak a little more 7 years ago
  Michael Hamburg abe22e57d5 iso-ed working for cofactor 8, but maybe not for a=-1 isoed25519 7 years ago
  Michael Hamburg 5f12ca4582 isogenous encode/decode working in spec, looks doable for opt (at least with cofactor 4) 7 years ago
  Michael Hamburg 4a5aad2241 working on ristretto sage files 7 years ago
  Michael Hamburg dc3deb8c81 Don't use vector arithmetic in generic arch_32 7 years ago
  Michael Hamburg b55ac5ebd1 Ristretto for Ed448 7 years ago
  Michael Hamburg 03ba02f90d more ristretto 7 years ago
  Michael Hamburg b295ef7669 rename decaf_sponge_* apis to decaf_sha3_*. Also reverse order on decaf_sponge_hash to make it the same as decaf_shake*_hash and decaf_sha3*_hash 7 years ago
  Michael Hamburg ff1208c269 simpler ristretto 7 years ago
  Michael Hamburg dd193a3ec5 ristretto work 7 years ago
  Michael Hamburg b29565fdfd fix assertion on x25519/x448(0), thanks Olivier Cheron 7 years ago
  Michael Hamburg 1c8b8cb77d fix warning due to MACRO?4:3 in elligator.c 7 years ago
  Michael Hamburg 0a6e968275 Revise LICENSE.txt to reflect current state of source. Still MIT licensed, but I think there is no longer any Stanford code. 7 years ago
  Michael Hamburg 3d5962c330 fix two warnings pointed out by Sofia Celi 7 years ago
  Michael Hamburg 4e809c79cf ok so the cpuid problem was an fPIC issue. Hopefully this fixes it... 7 years ago
  Michael Hamburg cdb0ce047d avoid warning for uninitialized entropy; change asm cpuid to look more like cpuid.h in the vain hope that this will compile better 7 years ago
  Michael Hamburg 17a77a5820 replace default -mavx2 -mbmi2 with -march=native 7 years ago
  Mike Hamburg 513e646081 restore declaration of deisogenize which was causing build failure in gcc 7 years ago
  Michael Hamburg c6a1cd8db6 better test 7 years ago
  Michael Hamburg a4c02cc759 better test 7 years ago
  Michael Hamburg 72484a054f test to make sure bug is gone 7 years ago
  Michael Hamburg 488e2548bd fix(?! needs testing) a critical bug in SHAKE XOF: the state would never transition to SQUEEZING, resulting in incorrect outputs 7 years ago
  Michael Hamburg b86b9648c3 decaffeination in with test cases 7 years ago
  Michael Hamburg acff03b3c7 eddsa_to_decaf_opt working 7 years ago
  Michael Hamburg 7691fb1380 eddsa_to_decaf_opt working 7 years ago
  Michael Hamburg b423ac359c working on decaffeinating ed25519 7 years ago
  Michael Hamburg 92b2cb464a sha3 functions can now return an error (likely to be ignored) if output length is to large. Also add shake###_output 7 years ago
  Michael Hamburg aee921fc55 fix a bug in the test scripts, thanks Johan Pascal 7 years ago
  Michael Hamburg dd9bcf2355 remove dynamic throw lists, since theyre deprecated 7 years ago
  Michael Hamburg 5717005809 dont look for immintrin on GCC pre-4.4. Also dont build with -maes; need to autoconfig other flags 7 years ago
  Michael Hamburg 51e3296fd5 aligned(32) -> VECTOR_ALIGNED internally; still need (32) in interfaces, at least for now, because the library might have been compiled with eg avx2 but the caller might be compiled without 7 years ago