aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add field inversion for P-521Jack Lloyd2018-04-181-0/+68
| | | | ECDSA sign about 10% faster, ECDSA verify and ECDH about 5% faster.
* Add optimized inversion for P-256Jack Lloyd2018-04-181-0/+75
| | | | | | Could be slightly more clever here but this is pretty decent. GH #1479
* Add timing for ECC double and addition algorithmsJack Lloyd2018-04-181-0/+33
|
* Merge GH #1545 Optimize P-192 and P-224 reductionsJack Lloyd2018-04-182-154/+299
|\
| * Add cycle counter for NIST reductionJack Lloyd2018-04-181-0/+52
| |
| * Add early exit for P-192 reduceJack Lloyd2018-04-181-0/+5
| |
| * Remove now unused functionJack Lloyd2018-04-181-19/+0
| |
| * Optimize P-224 reductionJack Lloyd2018-04-181-47/+77
| | | | | | | | 5-7% faster ECDSA
| * Further NIST reduction tweaksJack Lloyd2018-04-181-40/+44
| |
| * P-192 optimizationsJack Lloyd2018-04-181-34/+64
| | | | | | | | 5-7% faster for ECDSA and ECDH
| * Micro optimizations in P-256 and P-384 reductionsJack Lloyd2018-04-181-30/+73
|/ | | | Improves ECDSA and ECDH by 1% or so.
* Minor optimizations for P-256 and P-384Jack Lloyd2018-04-171-161/+65
| | | | Improves ECDSA by ~5% on Skylake
* Merge GH #1544 Handle arvm8l hostJack Lloyd2018-04-171-0/+2
|\
| * Recognize armv8l [ci skip]tcely2018-04-171-0/+2
| | | | | | Addresses https://github.com/randombit/botan/issues/1543
* | Add EC_Group::inverse_mod_orderJack Lloyd2018-04-176-6/+21
| | | | | | | | | | | | | | Centralizing this logic allows curve specific implementations such as using a precomputed ladder for exponentiating by p - 2 GH #1479
* | Precompute for multiexponentation when verifying ECC signaturesJack Lloyd2018-04-175-15/+22
|/ | | | | ECDSA already did this. Improves repeated ECGDSA, ECKCDSA, SM2, and GOST signature verification by 10-15%
* Update newsJack Lloyd2018-04-171-0/+6
|
* Merge GH #1542 Optimize RSA keygen and avoid side channelJack Lloyd2018-04-174-43/+179
|\
| * Avoid potential side channel when generating RSA primesJack Lloyd2018-04-174-43/+179
|/ | | | | | | | | | Add a new function dedicated to generating RSA primes. Don't test for p.bits() > bits until the very end - rarely happens, and speeds up prime generation quite noticably. Add Miller-Rabin error probabilities for 1/2**128, which again speeds up RSA keygen and DL param gen quite a bit.
* Remove debug assignment [ci skip]Jack Lloyd2018-04-161-1/+0
|
* Truncate new SKIDs to 192 bitsJack Lloyd2018-04-163-6/+14
| | | | | More than long enough, and saves quite a bit of space especially for SHA-512 certificates.
* Update newsJack Lloyd2018-04-161-0/+13
|
* Add vars to split the two Karatsuba sub-workspacesJack Lloyd2018-04-161-14/+20
|
* Merge GH #1540 Progress towards const-time RSAJack Lloyd2018-04-1610-47/+112
|\
| * Add const time annotationsJack Lloyd2018-04-156-7/+43
| |
| * Simplify Karatsuba codeJack Lloyd2018-04-153-39/+43
| | | | | | | | And set us up for eventually having this be completely const time.
| * Use GCC builtins for clz operationJack Lloyd2018-04-151-1/+26
| |
* | Use bad_record_mac instead of decode_error for short TLS packetsJack Lloyd2018-04-161-1/+8
|/ | | | | Decode error seems more appropriate but it confuses some automated tools including older versions of TLS-Attacker.
* Add an explicit test mode buildJack Lloyd2018-04-144-7/+14
| | | | GH #1537
* Merge GH #1538 Minor ECC optimizationsJack Lloyd2018-04-148-21/+137
|\
| * Various minor ECC optimizationsJack Lloyd2018-04-138-21/+137
| | | | | | | | | | | | | | | | | | Add a way of getting Montgomery representation of one. Reduce use of temporaries in variable point mult. Prefer doubling over addition in precomputing fixed window. Add Brainpool ECDH tests Improves ECDH by 2-3% across the board
* | Merge GH #1531 Improve XMSS test coverageJack Lloyd2018-04-145-12/+14
|\ \
| * | Removes unused overload in XMSS_HashMatthias Gierlings2018-04-122-12/+0
| | | | | | | | | | | | - Removes overload `XMSS_Hash::h_msg_update(secure_vector<uint8_t>&)`
| * | Codecov - cover MT code in XMSS_PrivateKeyMatthias Gierlings2018-04-123-0/+14
| | | | | | | | | | | | | | | | | | Codecov does not reach all parts of the `XMSS_PrivateKey` code because too few cores are detected during the CI run. To cover the missed codepaths always return a large enough core count if botan is compiled with coverage.
* | | Another todoJack Lloyd2018-04-141-0/+2
| |/ |/|
* | Merge GH #1537 Add missing XMSS signature length checkJack Lloyd2018-04-124-23/+183
|\ \
| * | Adds missing XMSS signature length check.Matthias Gierlings2018-04-124-23/+183
| | | | | | | | | | | | | | | | | | | | | | | | - Fixes out of bounds read in `XMSS_Signature` constructor when the raw signature data supplied as arguments is shorter than the signature size defined by the XMSS parameter set encoded in the `XMSS_PublicKey`. - Fixes valid signatures with arbitrary appended data to be verified as correct signature.
* | | In XMSS_Tools::bench_threads only call hardware_concurrency onceJack Lloyd2018-04-121-7/+9
| | | | | | | | | | | | | | | Getting this value will typically require either a system call or a cpuid call, both of which are fairly expensive.
* | | Add missing override [ci skip]Jack Lloyd2018-04-121-1/+1
| | |
* | | Clarify log message [ci skip]Jack Lloyd2018-04-121-2/+2
| | |
* | | Correct name of script [ci skip]Jack Lloyd2018-04-121-1/+1
| | |
* | | Allow year up to 2200 in ASN1 time objectsJack Lloyd2018-04-124-5/+100
| |/ |/| | | | | | | | | Also tighten up checking of days Fixes GH #1536
* | Lint fixesJack Lloyd2018-04-121-3/+8
| |
* | Some makefile simplificationsJack Lloyd2018-04-112-13/+5
| |
* | Merge GH #1535 Don't create solib symlinks on OpenBSDJack Lloyd2018-04-113-1/+4
|\ \
| * | Do not create shared library symlinks on OpenBSD.Alexander Bluhm2018-04-123-1/+4
| |/ | | | | | | | | | | | | | | Symlinks to shared libraries confuse the OpenBSD dynamic linker. We need one file with two numbers. The problem became apparent when the abi_rev and the OpenBSD ports shared libs numbers diverged. Add a new conditional variable symlink_shared_lib to suppress the symlink in the makefile.
* | Update newsJack Lloyd2018-04-111-0/+3
| |
* | Merge GH #1534 Optimize EC doubling for curves with a == 0 and a == -3Jack Lloyd2018-04-114-10/+61
|\ \
| * | Optimize EC point doubling for a == 0 and a == -3Jack Lloyd2018-04-114-10/+61
| |/
* / Fix indentation [ci skip]Jack Lloyd2018-04-111-5/+5
|/
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-26 22:55:37 +0000