52 Commits (40b1f8b85e474063292d1c3c2a8540c890c6f908)

Author SHA1 Message Date
  Mike Hamburg f7324fa927 fix bug in decaf_fast double scalar mul. progressing in tests and documentation 9 years ago
  Mike Hamburg faeb1fb092 decaf tests coming online 9 years ago
  Mike Hamburg 5c5726850f working on precomputed in hxx 9 years ago
  Mike Hamburg d675971fee demagication header and general cleanup 9 years ago
  Mike Hamburg 5f919a45f2 start on c++ wrapper 9 years ago
  Mike Hamburg 05ec4fcdd8 minor cleanup 9 years ago
  Mike Hamburg 2dacf20e3e add scalar invert; unopt and opt; tests. It might be faster with dedicated montsqr and/or blinded egcd, but this is good enough for now 9 years ago
  Mike Hamburg b2dc216b40 finish porting precomputed verify to decaf_fast. Remove tables as dependency of decaf slow 9 years ago
  Mike Hamburg 023ef46b1d make dsmul for verify always take base point to simplify api 9 years ago
  Mike Hamburg af2502d113 code size and gcc cleanliness related changes 9 years ago
  Mike Hamburg eaaebf807a eliminate constant_time.h, though still using big_register_t :-/ 9 years ago
  Mike Hamburg edb25d093c perf improvement in keygen, sign; fix perf regression for decaf versions of these 9 years ago
  Michael Hamburg c8bf0382c5 code size related improvements 10 years ago
  Michael Hamburg 59ed8f566c change gf to a struct so that its alignment works on earlier clang 10 years ago
  Mike Hamburg 746b050584 optimizing and cleanup; there is still a perf regression in decaf_fast but it is now smaller, and there isnt as big a space regression due to more careful noinline 10 years ago
  Mike Hamburg 93491671fa gcc cleanliness 10 years ago
  Mike Hamburg 3051dc4d03 precompute/precomputed sm works. needs demagication. slight perf regression in this build for some reason? 10 years ago
  Mike Hamburg dace435cbc precomputed scalarmul almost ported, but doesnt work yet 10 years ago
  Mike Hamburg f5b9826959 precomputed scalarmul almost ported, but doesnt work yet 10 years ago
  Mike Hamburg 7c8a2a72c5 Faster scalarmul is ported from Goldilocks, modulo a bit of magic. Of course, it's the one that doesn't matter as much because we have the monty ladder. Next up, port wNAF and recomputation? 10 years ago
  Mike Hamburg d36b1b0d1b begin porting faster scalarmul algos (currently broken tho) 10 years ago
  Mike Hamburg 284bc0bd17 yep, selection-based is slightly faster. using constant_time.h for now... 10 years ago
  Michael Hamburg d7fef55d55 test alternative selection-based ladder 10 years ago
  Mike Hamburg 62d7f131d3 some more simplification... 10 years ago
  Mike Hamburg 2422a265a5 getting simpler 10 years ago
  Mike Hamburg a5834af9fc test is in and passing; slightly simplified so far but nothing major 10 years ago
  Mike Hamburg 7681070015 more factoring and bug fixes. Need to put direct_scalarmul in pathological test cases and then simplify it 10 years ago
  Mike Hamburg edd2883e59 condswap is the main remaining bottleneck on monty ladder. comment in a pragma but dont actually use it yet... 10 years ago
  Michael Hamburg 43241c6a66 OK decaf mont ladder works but should simplify 10 years ago
  Michael Hamburg 543df14916 decaf direct scalarmul montgomery version coded but WRONG 10 years ago
  Michael Hamburg e84fd3f1fd define experimental direct_scalarmul, which can be implemented as monty ladder (at least for comparison purposes at the beginning) 10 years ago
  Michael Hamburg aab80b7b51 faster code can now use non-reduced field ops 10 years ago
  Michael Hamburg e154bb7667 faster code can now use non-reduced field ops 10 years ago
  Michael Hamburg a36a82d7e1 faster code can now use non-reduced field ops 10 years ago
  Michael Hamburg 90cb3b238a dedicated double 10 years ago
  Michael Hamburg ae24f96e09 copying existing decaf impl to "fast" version. not that fast yet, but uses native field mul code. Also rework precomputed tables to be agnostic of underlying impl 10 years ago
  Michael Hamburg 608eb2e065 Begin work on decaf_crypto. Have an ECDH analog now. Add decaf_bzero. Remove a bunch of testing from bench.c. 10 years ago
  Mike Hamburg b274e35d9a Add "precomputed" API to decaf. It doesnt actually precompute in the mini decaf impl, but it passes tests. 10 years ago
  Mike Hamburg 994812cf14 differentiate curve 10 years ago
  Mike Hamburg c50e8e8bf1 decaf is now 32-bit clean 10 years ago
  Michael Hamburg 26cff2228d fix decaf decode identity 10 years ago
  Michael Hamburg dfdb35510d check me: remove special case on decode 10 years ago
  Michael Hamburg 201a8a277a moving toward field/arch independence 10 years ago
  Michael Hamburg c08c4f4879 scalar_copy 10 years ago
  Mike Hamburg 5622eb9741 dont unroll when optimizing for size unless -DDECAF_FORCE_UNROLL 10 years ago
  Mike Hamburg bcf7c88da8 fix another couple undeclared / misnamed function bugs 10 years ago
  Michael Hamburg 06be9ef253 decaf double and double-scalarmul, but needs to be tested 10 years ago
  Michael Hamburg d4f4d0ed60 ready for prime time? 10 years ago
  Michael Hamburg 83c59a645a decaf scalars work 10 years ago
  Michael Hamburg 8967a9dff2 some scalar code which is probably wrong 10 years ago