aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Avoid const-time modulo in DSA verificationJack Lloyd2018-12-291-1/+11
* Simplifications in BigIntJack Lloyd2018-12-291-7/+1
* Make bigint_sub_abs const timeJack Lloyd2018-12-272-6/+26
* Add a test of highly imbalanced RSA keyJack Lloyd2018-12-271-0/+15
* Update newsJack Lloyd2018-12-261-1/+1
* Merge GH #1797 Fix Barrett reduction upper boundJack Lloyd2018-12-264-17/+28
|\
| * Fix Barrett reduction input boundJack Lloyd2018-12-264-17/+28
|/
* Update newsJack Lloyd2018-12-241-1/+1
* Merge GH #1796 More const-time improvementsJack Lloyd2018-12-247-52/+79
|\
| * Avoid size-based bypass of the comparison in Barrett reduction.Jack Lloyd2018-12-241-1/+1
| * Avoid conditional branch in Barrett for negative inputsJack Lloyd2018-12-241-4/+27
| * Update side channel docJack Lloyd2018-12-241-30/+34
| * Always use const-time modulo during DSA signingJack Lloyd2018-12-241-1/+2
| * Address a side channel in RSA and SM2Jack Lloyd2018-12-242-8/+4
| * In NIST P-xxx reductions unpoison S before using itJack Lloyd2018-12-241-8/+10
| * Unpoison result of high_bits_freeJack Lloyd2018-12-241-0/+1
|/
* Correct read in test fuzzersJack Lloyd2018-12-231-1/+1
* Add a multi-file input mode for test fuzzersJack Lloyd2018-12-233-24/+105
* Move coverage before fuzzers in Travis buildJack Lloyd2018-12-231-1/+1
* In Travis, run OS X firstJack Lloyd2018-12-231-1/+1
* By default just run 20 of the AEAD test vectors through CLIJack Lloyd2018-12-231-6/+11
* Increase Travis ccache sizeJack Lloyd2018-12-231-1/+1
* Increase Travis git pull depthJack Lloyd2018-12-231-1/+1
* Another try at silencing Coverity on thisJack Lloyd2018-12-231-1/+1
* Initialize System_Error::m_error_codeJack Lloyd2018-12-231-1/+2
* Avoid double return of unique_ptrJack Lloyd2018-12-231-1/+3
* Add --no-store-vc-rev option for use in CI buildsJack Lloyd2018-12-232-1/+6
* Update newsJack Lloyd2018-12-231-1/+1
* Increase Travis ccache to 750MJack Lloyd2018-12-231-1/+1
* Rename OS::get_processor_timestamp to OS::get_cpu_cycle_counterJack Lloyd2018-12-235-14/+15
* Now Timer does not need to include an internal headerJack Lloyd2018-12-231-1/+0
* De-inline more of TimerJack Lloyd2018-12-232-41/+37
* Make significant_words const time alsoJack Lloyd2018-12-234-40/+75
* In Timer, grab CPU clock firstJack Lloyd2018-12-231-9/+9
* Increase Travis ccache againJack Lloyd2018-12-231-1/+1
* Merge GH #1795 Make high_bit and ctz const timeJack Lloyd2018-12-234-58/+67
|\
| * Remove now incorrect commentJack Lloyd2018-12-221-5/+0
| * Make high_bit and ctz actually const timeJack Lloyd2018-12-221-3/+3
| * Promote ct_is_zero and expand_top_bit to bit_ops.hJack Lloyd2018-12-222-10/+21
| * Make ctz and high_bit faster and const-time-ishJack Lloyd2018-12-223-48/+51
|/
* Increase Travis cache size [ci skip]Jack Lloyd2018-12-221-2/+2
* Fix build with PGI [ci skip]Jack Lloyd2018-12-221-5/+7
* Update newsJack Lloyd2018-12-211-2/+2
* Merge GH #1794 Improve const time logic in PKCS1v15 and OAEP decodingJack Lloyd2018-12-219-92/+171
|\
| * Use consistent logic for OAEP and PKCS1v15 decodingJack Lloyd2018-12-219-92/+171
* | Merge GH #1793 Cleanup use of rotate.h headerJack Lloyd2018-12-2128-2/+30
|\ \
| * | Avoid including rotate.h in bswap.hJack Lloyd2018-12-2128-2/+30
|/ /
* / Stop compressing Travis ccacheJack Lloyd2018-12-211-3/+1
|/
* Address a couple of Coverity false positivesJack Lloyd2018-12-194-7/+62
* Correct affected version range for CVE-2018-20187Jack Lloyd2018-12-191-1/+1