aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib
Commit message (Expand)AuthorAgeFilesLines
* Add OpenPGP-specific curve OIDsMarcus Brinkmann2018-05-021-1/+5
* Inline this operator+ [ci skip]Jack Lloyd2018-04-262-6/+1
* Add a comment on side channels hereJack Lloyd2018-04-261-4/+5
* Correct handling of gcd(p - 1, e) in RSA keygenJack Lloyd2018-04-261-7/+25
* Remove unused includeJack Lloyd2018-04-261-1/+0
* Rewrite GCD in less branchy way, and use Montgomery in M-R testJack Lloyd2018-04-261-16/+30
* Add BigInt functions for adding, subtracting and comparing with wordsJack Lloyd2018-04-264-51/+142
* Add final annotations [ci skip]Jack Lloyd2018-04-241-3/+3
* Add BigInt::mod_subJack Lloyd2018-04-234-93/+128
* Use EC_Group::inverse_mod_order where appropriateJack Lloyd2018-04-202-6/+3
* Add Fermat based inversion of P-384 field elementsJack Lloyd2018-04-191-0/+72
* Add field inversion for P-521Jack Lloyd2018-04-181-0/+68
* Add optimized inversion for P-256Jack Lloyd2018-04-181-0/+75
* Add early exit for P-192 reduceJack Lloyd2018-04-181-0/+5
* Remove now unused functionJack Lloyd2018-04-181-19/+0
* Optimize P-224 reductionJack Lloyd2018-04-181-47/+77
* Further NIST reduction tweaksJack Lloyd2018-04-181-40/+44
* P-192 optimizationsJack Lloyd2018-04-181-34/+64
* Micro optimizations in P-256 and P-384 reductionsJack Lloyd2018-04-181-30/+73
* Minor optimizations for P-256 and P-384Jack Lloyd2018-04-171-161/+65
* Add EC_Group::inverse_mod_orderJack Lloyd2018-04-176-6/+21
* Precompute for multiexponentation when verifying ECC signaturesJack Lloyd2018-04-174-15/+19
* Avoid potential side channel when generating RSA primesJack Lloyd2018-04-174-43/+179
* Remove debug assignment [ci skip]Jack Lloyd2018-04-161-1/+0
* Truncate new SKIDs to 192 bitsJack Lloyd2018-04-162-6/+9
* Add vars to split the two Karatsuba sub-workspacesJack Lloyd2018-04-161-14/+20
* Merge GH #1540 Progress towards const-time RSAJack Lloyd2018-04-1610-47/+112
|\
| * Add const time annotationsJack Lloyd2018-04-156-7/+43
| * Simplify Karatsuba codeJack Lloyd2018-04-153-39/+43
| * Use GCC builtins for clz operationJack Lloyd2018-04-151-1/+26
* | Use bad_record_mac instead of decode_error for short TLS packetsJack Lloyd2018-04-161-1/+8
|/
* Add an explicit test mode buildJack Lloyd2018-04-141-2/+2
* Merge GH #1538 Minor ECC optimizationsJack Lloyd2018-04-147-21/+105
|\
| * Various minor ECC optimizationsJack Lloyd2018-04-137-21/+105
* | Merge GH #1531 Improve XMSS test coverageJack Lloyd2018-04-143-12/+8
|\ \ | |/ |/|
| * Removes unused overload in XMSS_HashMatthias Gierlings2018-04-122-12/+0
| * Codecov - cover MT code in XMSS_PrivateKeyMatthias Gierlings2018-04-121-0/+8
* | Merge GH #1537 Add missing XMSS signature length checkJack Lloyd2018-04-122-22/+21
|\ \
| * | Adds missing XMSS signature length check.Matthias Gierlings2018-04-122-22/+21
* | | In XMSS_Tools::bench_threads only call hardware_concurrency onceJack Lloyd2018-04-121-7/+9
* | | Allow year up to 2200 in ASN1 time objectsJack Lloyd2018-04-122-4/+19
| |/ |/|
* | Optimize EC point doubling for a == 0 and a == -3Jack Lloyd2018-04-113-9/+61
|/
* Add EC_Group::a_is_zeroJack Lloyd2018-04-112-1/+14
* Add missing errno.h include to entropy/dev_randomfwsGonzo2018-04-111-0/+1
* Add DL_Group::exponent_bitsJack Lloyd2018-04-094-7/+25
* Add a Montgomery exponentiation that takes variable timeJack Lloyd2018-04-093-7/+52
* Fix bug that broke session decryption (and thus resumption)Jack Lloyd2018-04-091-1/+1
* Fix off by one when decoding TLS-CBC ciphertextsJack Lloyd2018-04-093-27/+30
* Fix interop bug in TLS serverJack Lloyd2018-04-083-0/+33
* Square is always positiveJack Lloyd2018-04-081-0/+1