Michael Hamburg
|
17347b04a7
|
test harness to invert elligator by brute force
|
7 years ago |
Michael Hamburg
|
2d04fa7b43
|
working out sign bugs; then on to invert elligator ristretto
|
7 years ago |
Michael Hamburg
|
2cc6ebfb67
|
ed25519 ristretto inverse works except at the identity point
|
7 years ago |
Michael Hamburg
|
5fc32bf1e9
|
elligator apparently(?) working for ed448
|
7 years ago |
Michael Hamburg
|
52ca544962
|
update ristretto.sage to not crash on div0 for elligator (d-a)/d/u; check that these work
|
7 years ago |
Michael Hamburg
|
263d454903
|
ristretto patched in, except elligator. still need to test against vectors though
|
7 years ago |
Michael Hamburg
|
992183a8bf
|
ristretto work: test that s -> 1/s negates the point iff cofactor == 4 (if cofactor == 8, then invalid)
|
7 years ago |
Michael Hamburg
|
30544252e6
|
fix comments in generated code too
|
7 years ago |
Michael Hamburg
|
aa75f28a8a
|
still need to iron out some sign differences
|
7 years ago |
Michael Hamburg
|
4fa2c73edf
|
remove elligator decoding requirement
|
7 years ago |
Michael Hamburg
|
b9b855f172
|
passes gang tests. ship it?
|
7 years ago |
Michael Hamburg
|
307f933f2d
|
simpler decode if cofactor 4
|
7 years ago |
Michael Hamburg
|
8f212cceb9
|
simpler decode if cofactor 4
|
7 years ago |
Michael Hamburg
|
19aa251968
|
simpler decode if cofactor 4
|
7 years ago |
Michael Hamburg
|
b1467a60ae
|
reasonable decaf encode; try to tweak a little more
|
7 years ago |
Michael Hamburg
|
abe22e57d5
|
iso-ed working for cofactor 8, but maybe not for a=-1 isoed25519
|
7 years ago |
Michael Hamburg
|
5f12ca4582
|
isogenous encode/decode working in spec, looks doable for opt (at least with cofactor 4)
|
7 years ago |
Michael Hamburg
|
4a5aad2241
|
working on ristretto sage files
|
7 years ago |
Michael Hamburg
|
b55ac5ebd1
|
Ristretto for Ed448
|
7 years ago |
Michael Hamburg
|
03ba02f90d
|
more ristretto
|
7 years ago |
Michael Hamburg
|
ff1208c269
|
simpler ristretto
|
7 years ago |
Michael Hamburg
|
dd193a3ec5
|
ristretto work
|
7 years ago |
Michael Hamburg
|
488e2548bd
|
fix(?! needs testing) a critical bug in SHAKE XOF: the state would never transition to SQUEEZING, resulting in incorrect outputs
|
7 years ago |
Michael Hamburg
|
b86b9648c3
|
decaffeination in with test cases
|
7 years ago |
Michael Hamburg
|
acff03b3c7
|
eddsa_to_decaf_opt working
|
7 years ago |
Michael Hamburg
|
7691fb1380
|
eddsa_to_decaf_opt working
|
7 years ago |
Michael Hamburg
|
b423ac359c
|
working on decaffeinating ed25519
|
7 years ago |
Michael Hamburg
|
1f57b70289
|
move p480 and p521 to attic
|
9 years ago |
Mike Hamburg
|
eab2a41d13
|
switch from xy positive to 1/xy positive; this is because it can make laddered direct_scalarmul almost sane. almost.
|
9 years ago |
Michael Hamburg
|
629a782fff
|
Elligator now passes tests, but there are likely still missing preimages of rotations of the identity point. Also, projscaling elligator probably works, but it needs testing
|
9 years ago |
Michael Hamburg
|
4b0bf31fc9
|
progress checkin. compiles. working on point decode. have switched some of the Ds over. BTW, you can see that this is using PinkBikeShed instead of the real Curve25519; this is temporary
|
9 years ago |
Michael Hamburg
|
e65e322f94
|
addition chain for curve25519
|
9 years ago |
Michael Hamburg
|
6c81eec339
|
addition chain for curve25519
|
9 years ago |
Michael Hamburg
|
2b5f3beb31
|
sagelike and clike routines for decaffeinating curve25519
|
9 years ago |
Michael Hamburg
|
d95a1f229d
|
auxilliary sage scripts, working on decaffeinate_curve25519.sage"
|
9 years ago |