aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib
Commit message (Expand)AuthorAgeFilesLines
* Remove outdated comment [ci skip]Jack Lloyd2018-06-211-2/+0
* Avoid needless alloc and copyJack Lloyd2018-06-212-7/+11
* Fix a header comment and inline PointGFp::add/add_affineJack Lloyd2018-06-212-26/+23
* Attempt to verify decoded ECC groups are using prime fieldsJack Lloyd2018-06-202-5/+57
* Avoid an unncecessary mallocJack Lloyd2018-06-201-1/+1
* Use masked table lookups for variable point scalar multJack Lloyd2018-06-201-10/+30
* Changes to allow masked lookups for variable point multJack Lloyd2018-06-208-146/+174
* Remove build time toggle for ECC coordinate maskingJack Lloyd2018-06-202-16/+16
* Perform ECC mult starting from top bit of the exponentJack Lloyd2018-06-201-17/+16
* Avoid a small timing channel in Barrett reductionJack Lloyd2018-06-201-8/+12
* Ensure that trying to add points from different groups fails.Jack Lloyd2018-06-192-13/+19
* Use masked table lookup in ECC base point multiplicationJack Lloyd2018-06-192-9/+42
* Avoid a special case in Barrett reduction for x < modJack Lloyd2018-06-181-8/+3
* Avoid unnecessary realloc in BigInt::mod_subJack Lloyd2018-06-171-2/+7
* Add some todo comments wrt side channels in ECC scalar multJack Lloyd2018-06-171-0/+5
* Avoid leaking size of exponentJack Lloyd2018-06-1711-51/+119
* Merge GH #1609 Avoid small side channel in ECC field mulJack Lloyd2018-06-151-22/+15
|\
| * In ECC avoid using significant words to dispatch the mult algoJack Lloyd2018-06-151-22/+15
* | TLS would try to negotiate x25519 even if disabledJack Lloyd2018-06-151-2/+6
|/
* Add combined conditional add-or-subtractJack Lloyd2018-06-143-5/+41
* Remove CT annotations from Montgomery reductionJack Lloyd2018-06-141-8/+0
* In Montgomery mul, avoid branching based on sig words of integersJack Lloyd2018-06-141-13/+21
* Make Karatsuba multiply completely const timeJack Lloyd2018-06-144-24/+52
* Avoid overallocation of memory for EC base point multiplesJack Lloyd2018-06-141-1/+1
* Add 192-bit Suite B policyJack Lloyd2018-06-141-0/+36
* Address DSA/ECDSA side channelJack Lloyd2018-06-134-17/+80
* Unroll bigint_monty_redc for various sizesJack Lloyd2018-06-114-24/+2691
* Add missing statementJack Lloyd2018-06-081-0/+1
* Attempt at MSVC 2013 workaroundJack Lloyd2018-06-081-2/+4
* Expose BER_Decoder constructor taking BER_Object&&Jack Lloyd2018-06-082-4/+10
* Reduce copying/allocations when BER decodingJack Lloyd2018-06-082-81/+194
* Allow passing a writer function callback to DER_EncoderJack Lloyd2018-06-082-10/+18
* Declare copy and move constructors on BER_ObjectJack Lloyd2018-06-081-0/+8
* Constify some local variablesJack Lloyd2018-06-081-2/+2
* Improve error reporting on unexpected EOF when decoding ASNJack Lloyd2018-06-081-4/+17
* Fix a bug in Barrett reductionJack Lloyd2018-06-052-26/+33
* Correct exception message [ci skip]Jack Lloyd2018-06-041-1/+1
* Merge GH #1594 Add ECDSA Wycheproof testsJack Lloyd2018-05-314-16/+52
|\
| * Handle EC_R_BAD_SIGNATURE from OpenSSLJack Lloyd2018-05-312-0/+14
| * Prevent signature malleability in DER/BER encoded sigsJack Lloyd2018-05-311-14/+35
| * Correct error in P-224 computationJack Lloyd2018-05-311-2/+3
* | Move codec_base.h to internal header in utilsJack Lloyd2018-05-315-5/+4
* | Refactoring Base32 to use the templated algorithmWambou2018-05-312-182/+146
* | Define templated base encoding/decodingWambou2018-05-312-0/+167
* | Implement Base32Wambou2018-05-313-0/+417
|/
* Add back support for Windows Phone RNG, undeprecate UWPJack Lloyd2018-05-282-0/+49
* Tiny optimization in MDx_HashFunction::final_resultJack Lloyd2018-05-281-2/+1
* Merge GH #1584 Add BMI2 optimization for SHA-256Jack Lloyd2018-05-277-4/+192
|\
| * Add BMI2-specific SHA-256Jack Lloyd2018-05-277-4/+192
* | Improves "Avoid repeated allocations in XMSS chain function"Matthias Gierlings2018-05-271-1/+2