26 Commits (4fa2c73edf1f9c42c83bb5230b99e6d70a47c1fa)

Author SHA1 Message Date
  Michael Hamburg 4fa2c73edf remove elligator decoding requirement 7 years ago
  Michael Hamburg b9b855f172 passes gang tests. ship it? 7 years ago
  Michael Hamburg 307f933f2d simpler decode if cofactor 4 7 years ago
  Michael Hamburg 8f212cceb9 simpler decode if cofactor 4 7 years ago
  Michael Hamburg 19aa251968 simpler decode if cofactor 4 7 years ago
  Michael Hamburg b1467a60ae reasonable decaf encode; try to tweak a little more 7 years ago
  Michael Hamburg abe22e57d5 iso-ed working for cofactor 8, but maybe not for a=-1 isoed25519 7 years ago
  Michael Hamburg 5f12ca4582 isogenous encode/decode working in spec, looks doable for opt (at least with cofactor 4) 7 years ago
  Michael Hamburg 4a5aad2241 working on ristretto sage files 7 years ago
  Michael Hamburg b55ac5ebd1 Ristretto for Ed448 7 years ago
  Michael Hamburg 03ba02f90d more ristretto 7 years ago
  Michael Hamburg ff1208c269 simpler ristretto 7 years ago
  Michael Hamburg dd193a3ec5 ristretto work 7 years ago
  Michael Hamburg 488e2548bd fix(?! needs testing) a critical bug in SHAKE XOF: the state would never transition to SQUEEZING, resulting in incorrect outputs 7 years ago
  Michael Hamburg b86b9648c3 decaffeination in with test cases 7 years ago
  Michael Hamburg acff03b3c7 eddsa_to_decaf_opt working 7 years ago
  Michael Hamburg 7691fb1380 eddsa_to_decaf_opt working 7 years ago
  Michael Hamburg b423ac359c working on decaffeinating ed25519 7 years ago
  Michael Hamburg 1f57b70289 move p480 and p521 to attic 9 years ago
  Mike Hamburg eab2a41d13 switch from xy positive to 1/xy positive; this is because it can make laddered direct_scalarmul almost sane. almost. 9 years ago
  Michael Hamburg 629a782fff Elligator now passes tests, but there are likely still missing preimages of rotations of the identity point. Also, projscaling elligator probably works, but it needs testing 9 years ago
  Michael Hamburg 4b0bf31fc9 progress checkin. compiles. working on point decode. have switched some of the Ds over. BTW, you can see that this is using PinkBikeShed instead of the real Curve25519; this is temporary 9 years ago
  Michael Hamburg e65e322f94 addition chain for curve25519 9 years ago
  Michael Hamburg 6c81eec339 addition chain for curve25519 9 years ago
  Michael Hamburg 2b5f3beb31 sagelike and clike routines for decaffeinating curve25519 9 years ago
  Michael Hamburg d95a1f229d auxilliary sage scripts, working on decaffeinate_curve25519.sage" 9 years ago