aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* Unroll const_time_lookup by 2Jack Lloyd2018-12-141-6/+10
* Simplify the const time lookup in ECC scalar mulJack Lloyd2018-12-141-12/+9
* Use a 3-bit comb for ECC base point multiplyJack Lloyd2018-12-132-19/+36
* Some cleanups in x25519Jack Lloyd2018-12-101-53/+43
* Fix more MSVC warningsJack Lloyd2018-12-104-8/+9
* Merge GH #1769 Support TLS signature padding strings in PKCS11 mappingJack Lloyd2018-12-101-0/+10
|\
| * Remove EMSA1 encodings from p11 sign mechanisms mapHannes Rantzsch2018-12-101-5/+0
| * Extend the SignMechanisms map for Signature_Scheme padding stringsHannes Rantzsch2018-12-041-0/+15
* | Fix some MSVC warningsJack Lloyd2018-12-1012-26/+35
* | Work around a problem when built with OpenSSLJack Lloyd2018-12-103-7/+10
* | Support recovering ECDSA public key from message/signature pairJack Lloyd2018-12-106-2/+232
* | Fix pylint3 warning [ci skip]Jack Lloyd2018-12-101-1/+1
* | Make ASan happyJack Lloyd2018-12-091-1/+1
* | Add base58 encoding/decodingJack Lloyd2018-12-096-0/+454
* | Merge GH #1782 Add an i386 build/test to CIJack Lloyd2018-12-093-4/+14
|\ \
| * | Add an i386 CI target to check on 32-bit asmJack Lloyd2018-12-093-4/+14
* | | Remove Chi-square test on random_integerJack Lloyd2018-12-091-46/+0
|/ /
* | Merge GH #1780 Use constant time algorithm for monty_inverseJack Lloyd2018-12-092-39/+23
|\ \
| * | Use a const time algorithm for monty_inverseJack Lloyd2018-12-092-39/+23
* | | Fix typoJack Lloyd2018-12-091-1/+1
* | | Avoid doing a variable time division during Montgomery setupJack Lloyd2018-12-095-14/+25
|/ /
* | Move Miller-Rabin t param inside the blockJack Lloyd2018-12-091-2/+2
* | Few features added for BSD.David Carlier2018-12-093-1/+6
* | Avoid repeated size checks when setting words in NIST reductionJack Lloyd2018-12-081-25/+33
* | Merge GH #1776 Clean ups in MDx_HashFunctionJack Lloyd2018-12-082-33/+49
|\ \
| * | Require MDx_HashFunction block size to be a power of 2Jack Lloyd2018-12-082-14/+25
| * | Cleanups in MDx_HashFunctionJack Lloyd2018-12-082-32/+37
* | | Merge GH #1775 Clean up Streebog and fix unaligned loadsJack Lloyd2018-12-082-94/+114
|\ \ \
| * | | Clean up Streebog and fix use of unaligned loadsJack Lloyd2018-12-082-94/+114
| |/ /
* / / In speed, track number of invalid generated signatures and print onceJack Lloyd2018-12-081-1/+6
|/ /
* | Merge GH #1774 Const time BigInt shiftsJack Lloyd2018-12-086-98/+83
|\ \
| * | Avoid early exitJack Lloyd2018-12-071-4/+3
| * | Fix bug and avoid allocations in left shiftJack Lloyd2018-12-075-22/+36
| * | Const time the behavior of shifts [WIP]Jack Lloyd2018-12-063-87/+59
* | | In calc_sig_words save the size of m_reg before the loopJack Lloyd2018-12-081-3/+4
* | | Merge GH #1773 Add BigInt::ct_reduce_belowJack Lloyd2018-12-073-3/+39
|\ \ \
| * | | Add BigInt::ct_reduce_belowJack Lloyd2018-12-063-3/+39
* | | | Merge GH #1772 ECDSA now caches RFC 6979 nonce generator objectJack Lloyd2018-12-061-3/+3
|\ \ \ \ | |_|/ / |/| | |
| * | | In ECDSA cache the RFC6979 objectJack Lloyd2018-12-061-3/+3
| |/ /
* | | Remove hamming_weight functionJack Lloyd2018-12-062-22/+4
* | | Better logic in BigInt::bits wrt valgrind const time checksJack Lloyd2018-12-061-2/+3
|/ /
* | Merge GH #1771 Add GCC 4.8 build to TravisJack Lloyd2018-12-053-0/+10
|\ \
| * | Add GCC 4.8 travis buildJack Lloyd2018-12-053-0/+10
* | | Do swaps in PointGFp instead of copiesJack Lloyd2018-12-052-14/+13
* | | Avoid needless is_zero check in set_signJack Lloyd2018-12-051-4/+4
* | | Fix Doxygen errors [ci skip]Jack Lloyd2018-12-052-1/+1
|/ /
* | Make BigInt::cond_flip_sign constant timeJack Lloyd2018-12-051-3/+9
* | Use BigInt::cond_flip_signJack Lloyd2018-12-053-7/+4
* | Don't leak if x is zero eitherJack Lloyd2018-12-051-39/+37
* | Remove some conditional branches from divisionJack Lloyd2018-12-054-22/+2995