Frank Denis
|
2916230061
|
Add a guideline
|
2018-12-23 18:49:56 +01:00 |
|
Frank Denis
|
b4617940f3
|
Correct sc25519_reduce() prototype
|
2018-12-23 18:45:28 +01:00 |
|
Frank Denis
|
63573bb98c
|
Add crypto_core_ed25519_scalar_random()
|
2018-12-23 12:32:07 +01:00 |
|
Frank Denis
|
6fa0220302
|
Export crypto_core_ed25519_scalar_reduce, add tests
|
2018-12-23 02:56:11 +01:00 |
|
Frank Denis
|
36f2d99fac
|
Add crypto_core_ed25519_{scalar_invert, ed25519_scalar_reduce)()
These new low-level APIs are especially useful for blinding.
|
2018-12-20 20:05:34 +01:00 |
|
Frank Denis
|
b42082d6d2
|
Add unclamped versions of scalarmult_ed25519*()
|
2018-12-18 22:46:56 +01:00 |
|
Frank Denis
|
536ed00d2c
|
Merge branch 'master' of github.com:jedisct1/libsodium
|
2018-12-10 21:05:47 +01:00 |
|
Frank Denis
|
055e0ae82c
|
Even in non-deterministic EdDSA, the actual secret key is H(sk).
|
2018-12-10 21:05:40 +01:00 |
|
Ilya Maykov
|
c60df7b9ff
|
Made sig parameter of crypto_sign_final_verify() const
|
2018-12-03 21:02:31 +01:00 |
|
Frank Denis
|
a1dff41891
|
LONG_LONG_* -> LLONG_*
|
2018-11-11 00:00:13 +01:00 |
|
Frank Denis
|
52f814e50c
|
Avoid memset(NULL, _, 0)
|
2018-10-18 13:49:12 +02:00 |
|
Frank Denis
|
67b0b476d8
|
Add incomplete nonnull attributes
|
2018-10-18 13:22:37 +02:00 |
|
Frank Denis
|
c4f03ededb
|
Add a dummy return value
|
2018-09-30 23:49:34 +02:00 |
|
Frank Denis
|
82b1739b98
|
Add getrandom(2) support for FreeBSD 12
|
2018-09-30 16:44:27 -05:00 |
|
Frank Denis
|
9771795351
|
Revert "Add getrandom(2) support for FreeBSD 12"
This reverts commit 52fdd7ab39.
Due to TinyC crashing.
|
2018-09-29 22:53:05 +02:00 |
|
Frank Denis
|
9d5fcef52e
|
Revert "TinyC now crashes on Travis when compiling sysrandom"
This reverts commit 44dccfe6d4.
|
2018-09-29 22:52:56 +02:00 |
|
Frank Denis
|
44dccfe6d4
|
TinyC now crashes on Travis when compiling sysrandom
|
2018-09-29 22:48:53 +02:00 |
|
Frank Denis
|
52fdd7ab39
|
Add getrandom(2) support for FreeBSD 12
Fixes #762
|
2018-09-29 22:37:39 +02:00 |
|
David Carlier
|
b3ba348d08
|
Provides explicit_memset supports/NetBSD.
Similar to explicit_bzero function is to defeat
compiler optimisation.
|
2018-09-29 19:19:23 +01:00 |
|
Frank Denis
|
b7abc4542e
|
No need to provison for the tag if we are below SIZE_MAX
|
2018-09-12 15:22:30 +02:00 |
|
Frank Denis
|
f0e5c3940d
|
Substract the number of blocks, and make similar code more uniform
|
2018-09-12 15:19:56 +02:00 |
|
Frank Denis
|
3574ab879e
|
Do not even use untested code in non-production environments
|
2018-09-12 14:53:16 +02:00 |
|
Frank Denis
|
5a7290ce6a
|
Make this warning more difficult to ignore
|
2018-09-12 14:51:03 +02:00 |
|
Frank Denis
|
43909c1ffb
|
Allow ic + mlen to overflow a size_t in chacha20_ietf_xor_ic()
|
2018-09-12 08:40:22 +02:00 |
|
Frank Denis
|
bea8839c6b
|
Do not count the overhead in xchacha20poly1305_MESSAGEBYTES_MAX
|
2018-09-12 08:19:12 +02:00 |
|
Frank Denis
|
04a7ab95f2
|
Don't mix lengths and block sizes
|
2018-09-10 19:57:06 +02:00 |
|
Frank Denis
|
3e9d341d06
|
Add crypto_stream_chacha20_ietf_ext, use _ext suffix everywhere for consistency
|
2018-09-08 14:54:12 +02:00 |
|
Frank Denis
|
cf217e3dfc
|
Call misuse() if we ask too much data from the IETF variant of ChaCha20
Fix #753
|
2018-09-08 02:12:23 +02:00 |
|
Frank Denis
|
ab4ab23d57
|
x25519_ref: ignore the high bit in the small order PK check
|
2018-08-29 16:04:40 +02:00 |
|
Frank Denis
|
1ec6edc1a8
|
Indent
|
2018-08-27 12:29:49 +02:00 |
|
Jakob Rieck
|
543b5ad068
|
Fixes padding for blocksizes > 256
|
2018-08-27 11:42:49 +02:00 |
|
Frank Denis
|
7cdf3f0e84
|
strnlen() may not be available everywhere
|
2018-07-22 21:54:38 +02:00 |
|
Frank Denis
|
922e4dcd9e
|
Merge branch 'master' of github.com:jedisct1/libsodium
* 'master' of github.com:jedisct1/libsodium:
Invert (1-y) just before the multiplication by (1+y) for readability
Nits
|
2018-07-22 21:40:39 +02:00 |
|
Frank Denis
|
74ba82210e
|
memchr() can process its input in any order
Fixes #737
|
2018-07-22 21:26:31 +02:00 |
|
Frank Denis
|
d25d6ce7fb
|
Invert (1-y) just before the multiplication by (1+y) for readability
|
2018-07-21 00:43:39 +02:00 |
|
Frank Denis
|
91d9051bce
|
Nits
|
2018-07-19 14:44:17 +02:00 |
|
Anton Maklakov
|
f16896146a
|
Fix warnings that appeared in GCC7+ (related to -Wimplicit-fallthrough)
|
2018-07-04 23:29:33 +07:00 |
|
Frank Denis
|
cfb0f94704
|
Visual Studio documentation states that eax/ecx/edx don't need to be
preserved in inline assembly code. But that doesn't seem to always
hold true on Visual Studio 2010.
|
2018-05-12 09:12:36 +02:00 |
|
Tom Auger
|
462a8ab775
|
Use _MESSAGEBYTES_MAX in crypto_aead_xchacha20poly1305
|
2018-04-29 15:12:39 +01:00 |
|
Frank Denis
|
10207d5aa6
|
This reverts commit 38b19412e8.
|
2018-04-01 23:25:06 +02:00 |
|
Frank Denis
|
38b19412e8
|
Introduce pwhash_ntlm() for low-sodium, salt-free password hashing
. #passthesalt
|
2018-03-31 21:46:37 +02:00 |
|
Frank Denis
|
19f5c4f620
|
Include limits.h for ancient Android NDKs. Sigh.
|
2018-01-19 16:48:06 +01:00 |
|
Frank Denis
|
57ca449c7e
|
Include <stdint.h> for SIZE_MAX, and <stddef.h> as a dependency
|
2018-01-19 15:25:01 +01:00 |
|
Frank Denis
|
13513e886b
|
Keep things simple; directly initialize the example RNG from the system one
|
2018-01-17 15:11:18 +01:00 |
|
Frank Denis
|
e2581d9105
|
Swap #ifdef branches for clarity
|
2018-01-16 01:06:03 +01:00 |
|
Frank Denis
|
958060e2ec
|
Signatures: do not reject weak public keys if ED25519_COMPAT is defined
|
2018-01-16 01:02:29 +01:00 |
|
Frank Denis
|
0468e778d2
|
Revert "Solaris Studio apparently supports __attribute__()"
This reverts commit 74a4496cc5.
|
2018-01-15 13:34:31 +01:00 |
|
Frank Denis
|
74a4496cc5
|
Solaris Studio apparently supports __attribute__()
Fixes #660
|
2018-01-14 23:09:46 +01:00 |
|
Frank Denis
|
764656443f
|
Check if we can use inline asm code, not only on x86_64
|
2017-12-31 01:23:58 +01:00 |
|
Frank Denis
|
a18e21b49d
|
Use (""::"r"(pnt):"memory") instead of (""::"p"(pnt)) for the barrier
|
2017-12-31 01:11:45 +01:00 |
|