Frank Denis
a615d0ed74
base64: reject signed chars
2026-03-29 09:21:42 +02:00
Frank Denis
7d15af325d
No need to include the hkdf headers twice
2026-03-26 23:54:27 +08:00
Frank Denis
38aeb9d930
Avoid an MSVC warning in sodium_base64_ENCODED_LEN macro
...
Reported by @valveri , thanks!
Fixes #1526
Fixes #1527
2026-03-24 23:00:43 +08:00
Frank Denis
f3b5cbfddd
Restrict evex512 to clang 18-21 only
2026-03-16 20:52:14 +01:00
Frank Denis
178763f174
Add some coverage exclusions
2026-03-15 13:32:12 +01:00
Frank Denis
fc98842884
Relax crypto_auth_hmacsha{256,512}_init to accept NULL pointers
2026-03-15 13:06:59 +01:00
Frank Denis
3052baa7eb
Add LCOV markers
2026-03-15 12:41:11 +01:00
Frank Denis
eabccb959f
Add some ending CRLF
2026-03-14 19:38:20 +01:00
Frank Denis
da1424fa9a
Add inlilne hints for aegis hot paths
2026-03-14 19:20:15 +01:00
Frank Denis
7035cb0e27
Remove useless sodium_memzero, add one that makes sense
2026-03-08 15:27:35 +01:00
Frank Denis
c948d3d2c6
Add some sodium_memzero
2026-03-08 15:07:37 +01:00
Frank Denis
35dad2e7b5
Add a couple sodium_memzero
2026-03-08 14:49:53 +01:00
Frank Denis
af0dd1b4ac
Indent
2026-02-20 23:27:12 +01:00
Frank Denis
38a82863f1
crypto_core_*_from_string: drop the _ro suffix
2026-02-20 23:23:12 +01:00
Frank Denis
8bb79ae24d
Rename crypto_core_*_from_string to crypto_core_*_from_string_nu
...
RO should be the default
2026-02-20 23:19:12 +01:00
Frank Denis
44cf631d04
Add argon2_fill_segment_neon to the quirks
2026-02-20 23:12:12 +01:00
Frank Denis
530252d9a3
Add crypto_core_ed25519_scalar_from_string
2026-02-20 23:06:12 +01:00
Frank Denis
babd0c3e59
Remove crypto_core_ristretto255_from_string
2026-02-20 12:05:55 +01:00
Frank Denis
ed661cd1fc
More fixes for MSVC/aarch64
2026-02-10 23:05:40 +01:00
Frank Denis
e4575f45e2
Add casts for aarch64+gcc
2026-02-10 23:00:40 +01:00
Frank Denis
f6e26ce153
Try to enable aes256-gcm even on non-clang compilers
2026-02-10 08:56:52 +01:00
Frank Denis
e8492b1859
Zero the state afetr AES decryption
2026-02-05 21:42:03 +01:00
Frank Denis
69435b04fe
SHAKE: in case update is called right after squeezing, permute
...
Calling update after squeezing is undocumented and non standard,
but if an application still decides to do it, permute the state
before absorbing so that it's still safe to do so.
We can easily do it since we keep track of the state.
Still return an error as this is not the expected usage of SHAKE,
and zeroing the state is another thing we could do.
2026-02-05 23:08:48 +01:00
Frank Denis
012bab9616
Zeroize a few things after use
2026-02-05 23:01:48 +01:00
Frank Denis
3e4de8a134
Change crypto_core_ed25519_from_string to take a binary string
2026-01-23 23:07:00 +01:00
Frank Denis
54cd5d0ae9
Add hardware acceleration for SHA256 on aarch64
2026-01-23 23:01:00 +01:00
Frank Denis
9561aea8e5
Add NEON optimizations for Argon2
2026-01-22 12:00:49 +01:00
Frank Denis
b36e407fe5
Add WASM SIMD implementations of Argon2
2026-01-22 12:00:49 +01:00
Frank Denis
15e6dad043
Just use sodium_memcmp
2026-01-15 23:30:59 +01:00
Frank Denis
557dc9e51d
Add a high-level crypto_kem API mapping to xwing
2026-01-15 23:29:59 +01:00
Frank Denis
bd6a8af323
Add X-Wing
2026-01-15 23:26:59 +01:00
Frank Denis
44443f9bcb
Add back symbols for Intel implementations
2026-01-15 19:26:15 +01:00
Frank Denis
bc43c46a43
Cleanup symbols
2026-01-15 23:18:59 +01:00
Frank Denis
02e707a963
Remove SHA3 wrapper
2026-01-15 23:17:59 +01:00
Frank Denis
49d1b7e0ea
ml-kem: remove internal SHA3 implememtation
...
Now that there's a public SHA3 API.
2026-01-15 23:10:59 +01:00
Frank Denis
036e268e17
Add new symbols
2026-01-15 23:10:59 +01:00
Frank Denis
a6038f815c
Add support for SHA3
2026-01-15 23:03:59 +01:00
Frank Denis
e7c1796015
JavaScript: faster randomness generation
...
Fill entire buffers directly.
2026-01-13 23:00:03 +01:00
Frank Denis
4a7692a723
Compatibility with gcc 4.x
...
Reported by @pedro0311
Fixes #1507
2026-01-13 20:00:17 +01:00
Frank Denis
60b528c3dd
Export missing crypto_ipcrypt_nd_keygen() helper function
2026-01-07 23:00:39 +01:00
Frank Denis
6702f69bef
Fix compilation with GCC on aarch64
...
Use unsigned NEON intrinsics everywhere
Fixes #1502
2026-01-07 10:57:10 +01:00
Frank Denis
52975b38ce
Add ARM acceleration for SHA3
2026-01-06 23:18:21 +01:00
Frank Denis
c89ee84172
Add fences
2026-01-06 23:09:21 +01:00
Frank Denis
04199cec53
Relax alignment of SHAKE states
2026-01-06 23:04:21 +01:00
Frank Denis
8a7378460f
Add crypto_core_keccak1600_state, remove keccak1600_STATEBYTES
2026-01-06 23:00:21 +01:00
Frank Denis
4a1ff8bf03
Add defensive NULL guard in escrypt_r
2026-01-05 23:52:01 +01:00
Frank Denis
5aff9f2d89
Rename parameters to improve clarity
2026-01-05 23:12:32 +01:00
Frank Denis
5766a9acd3
Change sodium_ip2bin to take the ip length
2026-01-05 23:09:32 +01:00
Frank Denis
cb14819555
Remove unnecessary checks
2026-01-03 19:29:05 +01:00
Frank Denis
cd87a345f6
Remove unused variable
2026-01-03 19:01:21 +01:00
Frank Denis