Frank Denis
fec4c92d81
Even in non-deterministic EdDSA, the actual secret key is H(sk).
2018-12-10 21:03:52 +01:00
Frank Denis
1dae690ad7
Avoid memset(NULL, _, 0)
2018-10-18 13:49:42 +02:00
Frank Denis
574a45afc3
Add a dummy return value
2018-09-30 23:49:57 +02:00
Frank Denis
675a899d11
No need to provison for the tag if we are below SIZE_MAX
2018-09-12 15:26:38 +02:00
Frank Denis
90112d3eb0
Substract the number of blocks, and make similar code more uniform
2018-09-12 15:26:33 +02:00
Frank Denis
f9c1947fce
Do not count the overhead in xchacha20poly1305_MESSAGEBYTES_MAX
2018-09-12 08:44:06 +02:00
Frank Denis
2fe2893616
Indent
2018-08-27 12:30:06 +02:00
Jakob Rieck
d7df251cd0
Fixes padding for blocksizes > 256
2018-08-27 12:22:07 +02:00
Frank Denis
2052cc7847
strnlen() may not be available everywhere
2018-07-22 21:55:01 +02:00
Frank Denis
d2728ad93e
Merge branch 'stable' of github.com:jedisct1/libsodium into stable
...
* 'stable' of github.com:jedisct1/libsodium:
Nits
2018-07-22 21:40:51 +02:00
Frank Denis
e8fea07f19
memchr() can process its input in any order
...
Fixes #737
2018-07-22 21:27:56 +02:00
Frank Denis
dcd9b13e31
Nits
2018-07-19 14:44:42 +02:00
Anton Maklakov
c398a51e21
Fix warnings that appeared in GCC7+ (related to -Wimplicit-fallthrough)
2018-07-04 21:19:04 +02:00
Frank Denis
8b346c86b8
Visual Studio documentation states that eax/ecx/edx don't need to be
...
preserved in inline assembly code. But that doesn't seem to always
hold true on Visual Studio 2010.
2018-05-12 09:11:01 +02:00
Tom Auger
7432c4394b
Use _MESSAGEBYTES_MAX in crypto_aead_xchacha20poly1305
2018-04-29 17:48:03 +02:00
Frank Denis
06ee95c3f1
Regen autoconf scripts
2018-03-14 12:03:49 -07:00
Frank Denis
b862bf0267
Include limits.h for ancient Android NDKs. Sigh.
2018-01-19 16:46:46 +01:00
Frank Denis
729d80a1ac
Include <stdint.h> for SIZE_MAX, and <stddef.h> as a dependency
2018-01-19 15:25:39 +01:00
Frank Denis
59f8556bfa
Check if we can use inline asm code, not only on x86_64
2017-12-31 01:24:26 +01:00
Frank Denis
8c2e89d109
Use (""::"r"(pnt):"memory") instead of (""::"p"(pnt)) for the barrier
2017-12-31 01:10:48 +01:00
Ryan Lester
0ceb245eea
Closure fix
2017-12-27 08:54:20 +01:00
Frank Denis
b92e7b40ed
Brace yourself
2017-12-22 17:06:38 +01:00
Frank Denis
bee480cfd3
Extra braces
2017-12-21 16:57:04 +01:00
Frank Denis
fb53590047
Remove unused LOAD128() and STORE128() macros
2017-12-21 16:48:52 +01:00
Frank Denis
bf1444f976
Do not assume that __clang__ being defined implied __GNUC__ defined as well
2017-12-19 21:41:56 +01:00
Frank Denis
8fed6e5b46
We really don't need an intermediate variable here
2017-12-16 13:29:44 +01:00
Frank Denis
5bc564cac1
1.0.16
...
* master: (221 commits)
Comment
Comments
msys2 build scripts: just use -Ofast
Always prefer vararrays to alloca()
Don't redefine alloca
Return -1 if the scalar is 0 in crypto_scalarmult_ed25519()
Remove trailing space
Import the regen-msvc script
Update ChangeLog
Do not wipe the workspace after argon2 completes
Remove tests for deprecated functions
Give the compiler a change to inline index_alpha()
Immediately allocate all required memory in argon2/scrypt
Check reduced-round salsa variants in non-minimal mode
Coverage exclusion -- this is just an extra, redundant check
Remove incorrect and useless cast
-fomit-frame-pointer makes a different on mips
WebAssembly benefits from the 128-bit types, too
Remove extra spaces
Undef devel
...
2017-12-13 16:21:20 +01:00
Frank Denis
675149b9b8
Comment
2017-12-13 10:24:13 +01:00
Frank Denis
a1d438c8ba
Comments
2017-12-13 00:03:01 +01:00
Frank Denis
95a7dc5e46
Always prefer vararrays to alloca()
2017-12-12 22:27:21 +01:00
Frank Denis
2f56443631
Don't redefine alloca
2017-12-12 22:23:37 +01:00
Frank Denis
ac8dffbecb
Return -1 if the scalar is 0 in crypto_scalarmult_ed25519()
...
For consistency with _base()
2017-12-12 14:35:08 +01:00
Frank Denis
ec67b0890f
Do not wipe the workspace after argon2 completes
...
The overhead can be really prohibitive on servers.
2017-12-11 23:38:20 +01:00
Frank Denis
534250a833
Give the compiler a change to inline index_alpha()
2017-12-11 23:22:34 +01:00
Frank Denis
5aa2b913f4
Immediately allocate all required memory in argon2/scrypt
2017-12-11 23:15:15 +01:00
Frank Denis
bd9e859e52
Coverage exclusion -- this is just an extra, redundant check
2017-12-11 20:08:56 +01:00
Frank Denis
11f217fec8
Undef devel
2017-12-09 11:14:28 +01:00
Frank Denis
e985fe204c
Spacing
2017-12-06 15:34:06 +00:00
Frank Denis
a916fff400
Reorder
2017-12-06 15:19:15 +00:00
Frank Denis
715cb6ba33
Faster scalarmult_ed25519()
2017-12-06 15:13:18 +00:00
Frank Denis
3e588a48e3
scalarmult_ed25519_base(): return -1 if the scalar (not the result) is all zero
2017-12-03 20:53:54 +01:00
Frank Denis
3d6cd63b2a
Add an empty line for consistency
2017-12-01 17:41:45 +01:00
Frank Denis
ccdad9d68d
Coverage exclusion
2017-12-01 17:34:03 +01:00
Frank Denis
307503df96
Coverage exclusion
2017-12-01 17:31:45 +01:00
Frank Denis
cc92e26a6b
Coverage exclusion
2017-12-01 17:23:16 +01:00
Frank Denis
07c5764d5e
Correct argument names in internal prototype
2017-12-01 15:23:01 +01:00
Frank Denis
5ecaeb33aa
Correct argument names in internal prototype
2017-12-01 15:22:33 +01:00
Frank Denis
4098a12635
Improve clarity
2017-11-26 13:05:47 +01:00
Frank Denis
f5a4064646
CompCert seems to be fine with S_* macros now
2017-11-26 12:31:31 +01:00
Frank Denis
06a523423a
Oh, the joy of compilers pretending to support C99, but that actually don't
2017-11-26 00:11:56 +01:00