aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Minor optimization for Montgomery exponentiationJack Lloyd2018-06-233-17/+26
* Fix typo [ci skip]Jack Lloyd2018-06-221-1/+1
* Some fiddling with RSA private operationJack Lloyd2018-06-221-18/+29
* Improve documentation of the AES T-table situation [ci skip]Jack Lloyd2018-06-221-8/+26
* Document what we do in GCM a bit better [ci skip]Jack Lloyd2018-06-211-2/+5
* Remove outdated comment [ci skip]Jack Lloyd2018-06-211-2/+0
* Avoid needless alloc and copyJack Lloyd2018-06-212-7/+11
* Fix a header comment and inline PointGFp::add/add_affineJack Lloyd2018-06-212-26/+23
* Attempt to verify decoded ECC groups are using prime fieldsJack Lloyd2018-06-202-5/+57
* Add todoJack Lloyd2018-06-201-0/+1
* Avoid an unncecessary mallocJack Lloyd2018-06-201-1/+1
* Use masked table lookups for variable point scalar multJack Lloyd2018-06-202-16/+36
* Changes to allow masked lookups for variable point multJack Lloyd2018-06-208-146/+174
* Fix SM2 encryption testsJack Lloyd2018-06-201-3/+4
* Update side channel docJack Lloyd2018-06-201-9/+25
* Remove build time toggle for ECC coordinate maskingJack Lloyd2018-06-203-23/+16
* Perform ECC mult starting from top bit of the exponentJack Lloyd2018-06-201-17/+16
* Avoid a small timing channel in Barrett reductionJack Lloyd2018-06-202-25/+31
* More cli testsJack Lloyd2018-06-191-0/+27
* Ensure that trying to add points from different groups fails.Jack Lloyd2018-06-193-13/+35
* Use masked table lookup in ECC base point multiplicationJack Lloyd2018-06-192-9/+42
* Avoid a special case in Barrett reduction for x < modJack Lloyd2018-06-181-8/+3
* Avoid unnecessary realloc in BigInt::mod_subJack Lloyd2018-06-171-2/+7
* Add some todo comments wrt side channels in ECC scalar multJack Lloyd2018-06-171-0/+5
* Merge GH #1610 Make exponentiation loop independent of exponent sizeJack Lloyd2018-06-1711-51/+119
|\
| * Avoid leaking size of exponentJack Lloyd2018-06-1711-51/+119
|/
* Merge GH #1609 Avoid small side channel in ECC field mulJack Lloyd2018-06-151-22/+15
|\
| * In ECC avoid using significant words to dispatch the mult algoJack Lloyd2018-06-151-22/+15
* | Merge GH #1608 Fix TLS when x25519 is disabledJack Lloyd2018-06-156-8/+18
|\ \
| * | TLS would try to negotiate x25519 even if disabledJack Lloyd2018-06-156-8/+18
| |/
* / Use Botan specific CVE for ECDSA side channel [ci skip]Jack Lloyd2018-06-152-4/+3
|/
* Update newsJack Lloyd2018-06-151-0/+2
* Merge GH #1606 Make Montgomery exponentation const timeJack Lloyd2018-06-157-60/+124
|\
| * Document leak of exponent sizeJack Lloyd2018-06-141-2/+4
| * Add combined conditional add-or-subtractJack Lloyd2018-06-143-5/+41
| * Remove CT annotations from Montgomery reductionJack Lloyd2018-06-141-8/+0
| * In Montgomery mul, avoid branching based on sig words of integersJack Lloyd2018-06-141-13/+21
| * Make Karatsuba multiply completely const timeJack Lloyd2018-06-145-36/+62
|/
* Fix CLI testJack Lloyd2018-06-141-0/+1
* Avoid overallocation of memory for EC base point multiplesJack Lloyd2018-06-141-1/+1
* Merge GH #1605 Add 192-bit Suite B TLS policyJack Lloyd2018-06-147-8/+74
|\
| * Add 192-bit Suite B policyJack Lloyd2018-06-147-8/+74
* | Output order with ec_group_infoJack Lloyd2018-06-141-0/+1
* | Update news [ci skip]Jack Lloyd2018-06-141-0/+4
|/
* Merge GH #1604 Resolve ECDSA/DSA side channelJack Lloyd2018-06-135-17/+88
|\
| * Address DSA/ECDSA side channelJack Lloyd2018-06-135-17/+88
|/
* Merge GH #1603 Unroll Montgomery reduction for specific sizesJack Lloyd2018-06-117-26/+2784
|\
| * Unroll bigint_monty_redc for various sizesJack Lloyd2018-06-117-26/+2784
* | Merge GH #1602 Support GCC --sysroot option for embedded cross compilesJack Lloyd2018-06-115-1/+20
|\ \ | |/ |/|
| * Corrected error messageHegedüs Márton Csaba2018-06-111-1/+1
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-28 20:36:47 +0000