35 Commits (17347b04a75ef531081c438478fa20646d2f9b1f)

Author SHA1 Message Date
  Michael Hamburg 17347b04a7 test harness to invert elligator by brute force 7 years ago
  Michael Hamburg 2d04fa7b43 working out sign bugs; then on to invert elligator ristretto 7 years ago
  Michael Hamburg 2cc6ebfb67 ed25519 ristretto inverse works except at the identity point 7 years ago
  Michael Hamburg 5fc32bf1e9 elligator apparently(?) working for ed448 7 years ago
  Michael Hamburg 52ca544962 update ristretto.sage to not crash on div0 for elligator (d-a)/d/u; check that these work 7 years ago
  Michael Hamburg 263d454903 ristretto patched in, except elligator. still need to test against vectors though 7 years ago
  Michael Hamburg 992183a8bf ristretto work: test that s -> 1/s negates the point iff cofactor == 4 (if cofactor == 8, then invalid) 7 years ago
  Michael Hamburg 30544252e6 fix comments in generated code too 7 years ago
  Michael Hamburg aa75f28a8a still need to iron out some sign differences 7 years ago
  Michael Hamburg 4fa2c73edf remove elligator decoding requirement 7 years ago
  Michael Hamburg b9b855f172 passes gang tests. ship it? 7 years ago
  Michael Hamburg 307f933f2d simpler decode if cofactor 4 7 years ago
  Michael Hamburg 8f212cceb9 simpler decode if cofactor 4 7 years ago
  Michael Hamburg 19aa251968 simpler decode if cofactor 4 7 years ago
  Michael Hamburg b1467a60ae reasonable decaf encode; try to tweak a little more 7 years ago
  Michael Hamburg abe22e57d5 iso-ed working for cofactor 8, but maybe not for a=-1 isoed25519 7 years ago
  Michael Hamburg 5f12ca4582 isogenous encode/decode working in spec, looks doable for opt (at least with cofactor 4) 7 years ago
  Michael Hamburg 4a5aad2241 working on ristretto sage files 7 years ago
  Michael Hamburg b55ac5ebd1 Ristretto for Ed448 7 years ago
  Michael Hamburg 03ba02f90d more ristretto 7 years ago
  Michael Hamburg ff1208c269 simpler ristretto 7 years ago
  Michael Hamburg dd193a3ec5 ristretto work 7 years ago
  Michael Hamburg 488e2548bd fix(?! needs testing) a critical bug in SHAKE XOF: the state would never transition to SQUEEZING, resulting in incorrect outputs 7 years ago
  Michael Hamburg b86b9648c3 decaffeination in with test cases 7 years ago
  Michael Hamburg acff03b3c7 eddsa_to_decaf_opt working 7 years ago
  Michael Hamburg 7691fb1380 eddsa_to_decaf_opt working 7 years ago
  Michael Hamburg b423ac359c working on decaffeinating ed25519 7 years ago
  Michael Hamburg 1f57b70289 move p480 and p521 to attic 9 years ago
  Mike Hamburg eab2a41d13 switch from xy positive to 1/xy positive; this is because it can make laddered direct_scalarmul almost sane. almost. 9 years ago
  Michael Hamburg 629a782fff Elligator now passes tests, but there are likely still missing preimages of rotations of the identity point. Also, projscaling elligator probably works, but it needs testing 9 years ago
  Michael Hamburg 4b0bf31fc9 progress checkin. compiles. working on point decode. have switched some of the Ds over. BTW, you can see that this is using PinkBikeShed instead of the real Curve25519; this is temporary 9 years ago
  Michael Hamburg e65e322f94 addition chain for curve25519 9 years ago
  Michael Hamburg 6c81eec339 addition chain for curve25519 9 years ago
  Michael Hamburg 2b5f3beb31 sagelike and clike routines for decaffeinating curve25519 9 years ago
  Michael Hamburg d95a1f229d auxilliary sage scripts, working on decaffeinate_curve25519.sage" 9 years ago