aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* Merge GH #1560 Add OpenPGP specific (Ed|X)25519 OIDsJack Lloyd2018-05-022-1/+9
|\
| * Add OpenPGP-specific curve OIDsMarcus Brinkmann2018-05-022-1/+9
* | Correct file name to regenerate [ci skip]Jack Lloyd2018-05-021-1/+1
|/
* Inline this operator+ [ci skip]Jack Lloyd2018-04-262-6/+1
* Add a comment on side channels hereJack Lloyd2018-04-261-4/+5
* Correct handling of gcd(p - 1, e) in RSA keygenJack Lloyd2018-04-261-7/+25
* Remove unused includeJack Lloyd2018-04-261-1/+0
* Add a couple more GCD testsJack Lloyd2018-04-261-0/+8
* Rewrite GCD in less branchy way, and use Montgomery in M-R testJack Lloyd2018-04-261-16/+30
* Add BigInt functions for adding, subtracting and comparing with wordsJack Lloyd2018-04-264-51/+142
* Add final annotations [ci skip]Jack Lloyd2018-04-241-3/+3
* Add BigInt::mod_subJack Lloyd2018-04-234-93/+128
* Use EC_Group::inverse_mod_order where appropriateJack Lloyd2018-04-203-7/+4
* Merge GH #1547 Add optimized P-384 field inversionJack Lloyd2018-04-201-0/+72
|\
| * Add Fermat based inversion of P-384 field elementsJack Lloyd2018-04-191-0/+72
* | Reorder Travis builds [ci skip]Jack Lloyd2018-04-191-1/+1
|/
* Add field inversion for P-521Jack Lloyd2018-04-181-0/+68
* Add optimized inversion for P-256Jack Lloyd2018-04-181-0/+75
* Add timing for ECC double and addition algorithmsJack Lloyd2018-04-181-0/+33
* Add cycle counter for NIST reductionJack Lloyd2018-04-181-0/+52
* Add early exit for P-192 reduceJack Lloyd2018-04-181-0/+5
* Remove now unused functionJack Lloyd2018-04-181-19/+0
* Optimize P-224 reductionJack Lloyd2018-04-181-47/+77
* Further NIST reduction tweaksJack Lloyd2018-04-181-40/+44
* P-192 optimizationsJack Lloyd2018-04-181-34/+64
* Micro optimizations in P-256 and P-384 reductionsJack Lloyd2018-04-181-30/+73
* Minor optimizations for P-256 and P-384Jack Lloyd2018-04-171-161/+65
* Merge GH #1544 Handle arvm8l hostJack Lloyd2018-04-171-0/+2
|\
| * Recognize armv8l [ci skip]tcely2018-04-171-0/+2
* | Add EC_Group::inverse_mod_orderJack Lloyd2018-04-176-6/+21
* | Precompute for multiexponentation when verifying ECC signaturesJack Lloyd2018-04-174-15/+19
|/
* Avoid potential side channel when generating RSA primesJack Lloyd2018-04-174-43/+179
* Remove debug assignment [ci skip]Jack Lloyd2018-04-161-1/+0
* Truncate new SKIDs to 192 bitsJack Lloyd2018-04-162-6/+9
* Add vars to split the two Karatsuba sub-workspacesJack Lloyd2018-04-161-14/+20
* Merge GH #1540 Progress towards const-time RSAJack Lloyd2018-04-1610-47/+112
|\
| * Add const time annotationsJack Lloyd2018-04-156-7/+43
| * Simplify Karatsuba codeJack Lloyd2018-04-153-39/+43
| * Use GCC builtins for clz operationJack Lloyd2018-04-151-1/+26
* | Use bad_record_mac instead of decode_error for short TLS packetsJack Lloyd2018-04-161-1/+8
|/
* Add an explicit test mode buildJack Lloyd2018-04-143-5/+5
* Merge GH #1538 Minor ECC optimizationsJack Lloyd2018-04-148-21/+137
|\
| * Various minor ECC optimizationsJack Lloyd2018-04-138-21/+137
* | Merge GH #1531 Improve XMSS test coverageJack Lloyd2018-04-144-12/+12
|\ \ | |/ |/|
| * Removes unused overload in XMSS_HashMatthias Gierlings2018-04-122-12/+0
| * Codecov - cover MT code in XMSS_PrivateKeyMatthias Gierlings2018-04-122-0/+12
* | Merge GH #1537 Add missing XMSS signature length checkJack Lloyd2018-04-124-23/+183
|\ \
| * | Adds missing XMSS signature length check.Matthias Gierlings2018-04-124-23/+183
* | | In XMSS_Tools::bench_threads only call hardware_concurrency onceJack Lloyd2018-04-121-7/+9
* | | Add missing override [ci skip]Jack Lloyd2018-04-121-1/+1