aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Silence MSVC warningsJack Lloyd2018-12-0410-114/+116
| | | | static_casts for the compiler god
* Merge GH #1768 Use AppVeyor installed jomJack Lloyd2018-12-041-2/+1
|\
| * Use AppVeyor installed jomJack Lloyd2018-12-041-2/+1
| |
* | Move valgrind CI build before the cross buildsJack Lloyd2018-12-041-1/+1
| | | | | | | | | | Takes longer than the cross builds so usually ends up being the last build running.
* | Fix some misc MSVC warningsJack Lloyd2018-12-042-4/+4
| |
* | Fix some MSVC warnings in CT::MaskJack Lloyd2018-12-041-2/+2
| |
* | Reporting for fuzz test timingJack Lloyd2018-12-041-4/+9
|/ | | | Also use 2x core count as this spends a lot of time on IO
* Update newsJack Lloyd2018-12-041-0/+4
|
* Remove testing branchJack Lloyd2018-12-041-1/+0
|
* Merge GH #1767 Switch Travis builds to XenialJack Lloyd2018-12-0413-107/+90
|\
| * Pylint fixesJack Lloyd2018-12-035-7/+6
| |
| * Update Travis build to use XenialJack Lloyd2018-12-033-84/+56
| | | | | | | | | | | | | | | | | | Drops Mingw i686 build as it runs into a problem I could not debug, when unit_tls.cpp is compiled with -O2 it crashes with a useless backtrace. If compiled with -g or with lower optimizations it is ok. Replaced with Mingw x86-64. Add mips64 build.
| * Do multiple jobs for pylint analysisJack Lloyd2018-12-031-2/+2
| |
| * Fix a few small problems in configureJack Lloyd2018-12-031-8/+8
| | | | | | | | Lint warnings, etc
| * Fix a FFI test when threads are disabledJack Lloyd2018-12-031-1/+9
| |
| * Avoid parallel build with Sphinx before 1.4Jack Lloyd2018-12-031-1/+1
| | | | | | | | As Ubuntu 16.04 has v1.3 and it crashes when you use -j
| * Fix a memory leak in OpenSSL ECDHJack Lloyd2018-12-031-3/+5
| |
| * Add PVR identifer for POWER9Jack Lloyd2018-12-031-1/+3
| | | | | | | | According to qemu-ppc64le -cpu help output
* | Merge GH #1765 Avoid some conditional branches in binary extended Euclidean ↵Jack Lloyd2018-12-033-12/+62
|\ \ | |/ |/| | | algorithm
| * Make binary extended Euclidean algorithm less branchyJack Lloyd2018-12-033-12/+62
| | | | | | | | This is still leaky, but much less than before.
* | Fix Sphinx errorsJack Lloyd2018-12-032-1/+2
| |
* | Fix bug in TLS CBC unpaddingJack Lloyd2018-12-032-1/+7
|/ | | | | | Regression introduced in 007314c5 Found by OSS-Fuzz (bug id 11693)
* Merge GH #1762 Use const time divide/moduloJack Lloyd2018-12-039-26/+110
|\
| * Extend ct_modulo to handle negative inputsJack Lloyd2018-12-031-8/+17
| | | | | | | | Unfortunately Barrett reductions API allows negative inputs
| * Use const time reductions in Barrett and LCM computationsJack Lloyd2018-12-033-4/+23
| |
| * Use ct_modulo in format preserving encryptionJack Lloyd2018-12-031-2/+2
| |
| * Use ct_modulo during RSA key generationJack Lloyd2018-12-031-6/+7
| |
| * Fix shift operatorJack Lloyd2018-12-031-1/+1
| | | | | | | | This would continually reallocate to larger sizes which is bad news.
| * Add ct_modulo and BigInt::ct_cond_swapJack Lloyd2018-12-034-7/+62
| |
* | Print the version and revision at the very start of configure.py outputJack Lloyd2018-12-031-0/+3
|/ | | | Makes it easier to debug things like #1763
* Merge GH #1759 Add constant time divide by uint8_tJack Lloyd2018-12-037-12/+146
|\
| * Add a constant time divide variant for dividing by uint8_tJack Lloyd2018-12-027-12/+146
| | | | | | | | | | | | | | | | | | Originally wrote it for div-by-word but that ends up requiring a dword type which we don't always have. And uint8_t covers the most important cases of n = 10 and n = 58 (whenever I get around to writing base58). We could portably support up to div-by-uint32, but I don't think we need it. Nicely for n = 10, this is actually faster than the variable time division.
* | Merge GH #1758 Remove some conditional branches from variable time divisionJack Lloyd2018-12-031-53/+46
|\ \ | |/ |/|
| * Make variable time division less branchyJack Lloyd2018-12-021-53/+46
| | | | | | | | This is still leaky, but better than nothing.
* | Update newsJack Lloyd2018-12-021-0/+2
| |
* | Merge GH #1757 Add a constant time division algorithmJack Lloyd2018-12-029-16/+145
|\|
| * Add a const-time division algorithmJack Lloyd2018-12-029-16/+145
| | | | | | | | | | | | | | | | It is stupid and slow (~50-100x slower than variable time version) but still useful for protecting critical algorithms. Not currently used, waiting for OSS-Fuzz to test it for a while before we commit to it.
* | Document #1756Jack Lloyd2018-12-021-0/+5
| |
* | Merge GH #1756 Support getting passphrase from the consoleJack Lloyd2018-12-0211-48/+186
|\ \ | |/ |/|
| * Avoid macro conflict when including termios in amalgamationJack Lloyd2018-12-021-0/+1
| |
| * Support getting a passphrase from most of the cli toolsJack Lloyd2018-12-019-23/+46
| |
| * Add Win32 support for echo suppressionJack Lloyd2018-12-011-3/+47
| | | | | | | | Tested with MinGW cross compiler and Wine.
| * Promote echo suppression of terminal to Botan::OSJack Lloyd2018-12-013-26/+96
| |
* | Fix a bug in bigint_sub_absJack Lloyd2018-12-022-0/+10
| | | | | | | | | | | | | | If one of the values had leading zero words, this could end up calling bigint_sub with x_size < y_size. OSS-Fuzz 11664 and 11656
* | One variable per lineJack Lloyd2018-12-021-1/+2
| |
* | Better debugging output when a test failsJack Lloyd2018-12-021-7/+15
|/ | | | Printing the output key makes it easier to find the offending test.
* Update newsJack Lloyd2018-12-012-0/+26
|
* Merge GH #1755 Various BigInt improvementsJack Lloyd2018-12-0113-108/+178
|\
| * Correct a bug in BigInt::operator%(word)Jack Lloyd2018-12-014-23/+43
| | | | | | | | | | | | If reducing a negative number modulo a power of 2, an incorrect result would be returned. This only affected the versions taking a single word as the modulo.
| * No need to check x when checking if a point is at infinityJack Lloyd2018-12-011-2/+1
| | | | | | | | I'm not sure why this was here.