Olivier Chéron
|
c811f7809a
|
Add missing FIELD_LITERAL for RISTRETTO_FACTOR
|
7 years ago |
Michael Hamburg
|
c227424384
|
make doc now mostly works
|
7 years ago |
Michael Hamburg
|
45eb0e14d3
|
change the misleading mul_by_cofactor functions to mul_by_ratio, and create ENCODE_RATIO and DECODE_ratio constants to represent this
|
7 years ago |
Michael Hamburg
|
0c60af55fe
|
clear a couple todos. still have to rename the clear cofactor fns
|
7 years ago |
Michael Hamburg
|
98bfcb0196
|
IsoE25519 is now better known as Ristretto
|
7 years ago |
Michael Hamburg
|
4de924c786
|
Incorporate test vectors from Dalek
|
7 years ago |
Michael Hamburg
|
70303957e2
|
toggle elligator sign back to match Dalek
|
7 years ago |
Michael Hamburg
|
2bcccebd8d
|
expose mul_by_cofactor_and_encode_like_x, but need to adjust clearing ratios
|
7 years ago |
Michael Hamburg
|
164342ebfd
|
inverse elligator works, but at what cost?!?!!?
|
7 years ago |
Michael Hamburg
|
1a38c25d9d
|
CFRG crypto back to working, just need to do elligator inversion for identity on x25519
|
7 years ago |
Michael Hamburg
|
2d04fa7b43
|
working out sign bugs; then on to invert elligator ristretto
|
7 years ago |
Michael Hamburg
|
2cc6ebfb67
|
ed25519 ristretto inverse works except at the identity point
|
7 years ago |
Michael Hamburg
|
5fc32bf1e9
|
elligator apparently(?) working for ed448
|
7 years ago |
Michael Hamburg
|
c82e7ae7a7
|
add ristretto widget. elligator is correct, but inverse is not yet
|
7 years ago |
Michael Hamburg
|
263d454903
|
ristretto patched in, except elligator. still need to test against vectors though
|
7 years ago |
Michael Hamburg
|
b29565fdfd
|
fix assertion on x25519/x448(0), thanks Olivier Cheron
|
7 years ago |
Michael Hamburg
|
1c8b8cb77d
|
fix warning due to MACRO?4:3 in elligator.c
|
7 years ago |
Michael Hamburg
|
3d5962c330
|
fix two warnings pointed out by Sofia Celi
|
7 years ago |
Mike Hamburg
|
513e646081
|
restore declaration of deisogenize which was causing build failure in gcc
|
7 years ago |
Michael Hamburg
|
b423ac359c
|
working on decaffeinating ed25519
|
7 years ago |
Michael Hamburg
|
dd9bcf2355
|
remove dynamic throw lists, since theyre deprecated
|
7 years ago |
Michael Hamburg
|
5717005809
|
dont look for immintrin on GCC pre-4.4. Also dont build with -maes; need to autoconfig other flags
|
7 years ago |
Michael Hamburg
|
51e3296fd5
|
aligned(32) -> VECTOR_ALIGNED internally; still need (32) in interfaces, at least for now, because the library might have been compiled with eg avx2 but the caller might be compiled without
|
7 years ago |
Michael Hamburg
|
e69e00269f
|
rename publicly-visible macros to DECAF_ namespace
|
7 years ago |
Michael Hamburg
|
ec4ece08f0
|
add decaf_edXXX_convert_public_key_to_xXXX; thanks Johan Pascal
|
7 years ago |
Michael Hamburg
|
6e2ce5201f
|
internal VECTOR_ALIGNED instead of __attribute((aligned(32))), thanks Olivier
|
7 years ago |
Michael Hamburg
|
beba37006a
|
deprecated macros, thanks Olivier Chéron and Tomi Ollila
|
7 years ago |
Michael Hamburg
|
bd2a516210
|
generator should now be python3 clean
|
7 years ago |
Michael Hamburg
|
4a13ad4b8b
|
unroll loops in arch_32/f_impl.c except on -Os
|
7 years ago |
Michael Hamburg
|
bb1eef3712
|
tear out STROBE. Probably will re-introduce later
|
7 years ago |
Michael Hamburg
|
af606fb195
|
x448 generate_key -> derive_public_key to match ed448 nomenclature
|
7 years ago |
Michael Hamburg
|
875d2b2251
|
ED25519_NO_CONTEXT -> DECAF_ED25519_NO_CONTEXT; DECAF_ED25519_NO_CONTEXT -> DECAF_EDDSA_25519_SUPPORTS_CONTEXTLESS_SIGS
|
8 years ago |
Michael Hamburg
|
638f5560f8
|
make ED*_NO_CONTEXT actually a pointer
|
8 years ago |
Andrew Bennett
|
7ec87d8616
|
Use magic constant ED25519_NO_CONTEXT for non-contextual operations.
|
8 years ago |
Andrew Bennett
|
ef6e74bdec
|
Update EdDSA operations to match draft 07 from CFRG.
|
8 years ago |
Hamburg
|
3cb0f2c9a1
|
error: shifting a negative
signed value is undefined
|
8 years ago |
Michael Hamburg
|
bc80c744bf
|
decaf/decaf_[field].h[xx] -> decaf/point_[field].h[xx]
|
9 years ago |
Michael Hamburg
|
a01e875d4a
|
move strobe and crypto to TOY areas
|
9 years ago |
Michael Hamburg
|
2c605ea46e
|
add EdDSA C prehash routines
|
9 years ago |
Michael Hamburg
|
d1e2bbec15
|
fix Ed448-prehash and test against newly-corrected cfrg vectors
|
9 years ago |
Michael Hamburg
|
e22c967171
|
change eddsa encoding names to show that they multiply_by_cofactor
|
9 years ago |
Michael Hamburg
|
83cfd6cae1
|
change x### function names again, this time to decaf_x###, decaf_x###_generate_key
|
9 years ago |
Michael Hamburg
|
714a5db7a0
|
decaf_###_x_direct_scalarmul -> decaf_x###_direct_scalarmul
|
9 years ago |
Michael Hamburg
|
149130fd94
|
working through the TODOs. Correct the sign of the to/from EdDSA conversions (but is it correct for future curves?). SHA-3 now throws exceptions on over-long output
|
9 years ago |
Mike Hamburg
|
1e796b2e0e
|
fix some warns from gcc
|
9 years ago |
Michael Hamburg
|
a3a2906f81
|
move prehashed enum to common; downside is that including one eddsa.hxx now pulls in all of them
|
9 years ago |
Michael Hamburg
|
4adb584654
|
ed25519 prehashed test vector. ed448 prehashed test vectors look invalid??
|
9 years ago |
Michael Hamburg
|
3b9ffc4cc7
|
separate Ed25519ph from Ed25519 with awful CRTP hack
|
9 years ago |
Michael Hamburg
|
f1df5e4714
|
lowerCamelCase -> snake_case. Put decaf_ in front of all (most?) identifiers, except for SHAKE which is being removed before 1.0 release (for future refactoring)
|
9 years ago |
Michael Hamburg
|
85fafd2d52
|
another couple notes
|
9 years ago |