Commit Graph
1679 Commits
Author SHA1 Message Date
Frank Denis fec4c92d81 Even in non-deterministic EdDSA, the actual secret key is H(sk). 2018-12-10 21:03:52 +01:00
Frank Denis 1dae690ad7 Avoid memset(NULL, _, 0) 2018-10-18 13:49:42 +02:00
Frank Denis 574a45afc3 Add a dummy return value 2018-09-30 23:49:57 +02:00
Frank Denis 675a899d11 No need to provison for the tag if we are below SIZE_MAX 2018-09-12 15:26:38 +02:00
Frank Denis 90112d3eb0 Substract the number of blocks, and make similar code more uniform 2018-09-12 15:26:33 +02:00
Frank Denis f9c1947fce Do not count the overhead in xchacha20poly1305_MESSAGEBYTES_MAX 2018-09-12 08:44:06 +02:00
Frank Denis 2fe2893616 Indent 2018-08-27 12:30:06 +02:00
Jakob Rieck d7df251cd0 Fixes padding for blocksizes > 256 2018-08-27 12:22:07 +02:00
Frank Denis 2052cc7847 strnlen() may not be available everywhere 2018-07-22 21:55:01 +02:00
Frank Denis d2728ad93e Merge branch 'stable' of github.com:jedisct1/libsodium into stable
* 'stable' of github.com:jedisct1/libsodium:
  Nits
2018-07-22 21:40:51 +02:00
Frank Denis e8fea07f19 memchr() can process its input in any order
Fixes #737
2018-07-22 21:27:56 +02:00
Frank Denis dcd9b13e31 Nits 2018-07-19 14:44:42 +02:00
Anton Maklakov c398a51e21 Fix warnings that appeared in GCC7+ (related to -Wimplicit-fallthrough) 2018-07-04 21:19:04 +02:00
Frank Denis 8b346c86b8 Visual Studio documentation states that eax/ecx/edx don't need to be
preserved in inline assembly code. But that doesn't seem to always
hold true on Visual Studio 2010.
2018-05-12 09:11:01 +02:00
Tom Auger 7432c4394b Use _MESSAGEBYTES_MAX in crypto_aead_xchacha20poly1305 2018-04-29 17:48:03 +02:00
Frank Denis 06ee95c3f1 Regen autoconf scripts 2018-03-14 12:03:49 -07:00
Frank Denis b862bf0267 Include limits.h for ancient Android NDKs. Sigh. 2018-01-19 16:46:46 +01:00
Frank Denis 729d80a1ac Include <stdint.h> for SIZE_MAX, and <stddef.h> as a dependency 2018-01-19 15:25:39 +01:00
Frank Denis 59f8556bfa Check if we can use inline asm code, not only on x86_64 2017-12-31 01:24:26 +01:00
Frank Denis 8c2e89d109 Use (""::"r"(pnt):"memory") instead of (""::"p"(pnt)) for the barrier 2017-12-31 01:10:48 +01:00
Ryan Lester 0ceb245eea Closure fix 2017-12-27 08:54:20 +01:00
Frank Denis b92e7b40ed Brace yourself 2017-12-22 17:06:38 +01:00
Frank Denis bee480cfd3 Extra braces 2017-12-21 16:57:04 +01:00
Frank Denis fb53590047 Remove unused LOAD128() and STORE128() macros 2017-12-21 16:48:52 +01:00
Frank Denis bf1444f976 Do not assume that __clang__ being defined implied __GNUC__ defined as well 2017-12-19 21:41:56 +01:00
Frank Denis 8fed6e5b46 We really don't need an intermediate variable here 2017-12-16 13:29:44 +01:00
Frank Denis 5bc564cac1 1.0.16
* master: (221 commits)
  Comment
  Comments
  msys2 build scripts: just use -Ofast
  Always prefer vararrays to alloca()
  Don't redefine alloca
  Return -1 if the scalar is 0 in crypto_scalarmult_ed25519()
  Remove trailing space
  Import the regen-msvc script
  Update ChangeLog
  Do not wipe the workspace after argon2 completes
  Remove tests for deprecated functions
  Give the compiler a change to inline index_alpha()
  Immediately allocate all required memory in argon2/scrypt
  Check reduced-round salsa variants in non-minimal mode
  Coverage exclusion -- this is just an extra, redundant check
  Remove incorrect and useless cast
  -fomit-frame-pointer makes a different on mips
  WebAssembly benefits from the 128-bit types, too
  Remove extra spaces
  Undef devel
  ...
2017-12-13 16:21:20 +01:00
Frank Denis 675149b9b8 Comment 2017-12-13 10:24:13 +01:00
Frank Denis a1d438c8ba Comments 2017-12-13 00:03:01 +01:00
Frank Denis 95a7dc5e46 Always prefer vararrays to alloca() 2017-12-12 22:27:21 +01:00
Frank Denis 2f56443631 Don't redefine alloca 2017-12-12 22:23:37 +01:00
Frank Denis ac8dffbecb Return -1 if the scalar is 0 in crypto_scalarmult_ed25519()
For consistency with _base()
2017-12-12 14:35:08 +01:00
Frank Denis ec67b0890f Do not wipe the workspace after argon2 completes
The overhead can be really prohibitive on servers.
2017-12-11 23:38:20 +01:00
Frank Denis 534250a833 Give the compiler a change to inline index_alpha() 2017-12-11 23:22:34 +01:00
Frank Denis 5aa2b913f4 Immediately allocate all required memory in argon2/scrypt 2017-12-11 23:15:15 +01:00
Frank Denis bd9e859e52 Coverage exclusion -- this is just an extra, redundant check 2017-12-11 20:08:56 +01:00
Frank Denis 11f217fec8 Undef devel 2017-12-09 11:14:28 +01:00
Frank Denis e985fe204c Spacing 2017-12-06 15:34:06 +00:00
Frank Denis a916fff400 Reorder 2017-12-06 15:19:15 +00:00
Frank Denis 715cb6ba33 Faster scalarmult_ed25519() 2017-12-06 15:13:18 +00:00
Frank Denis 3e588a48e3 scalarmult_ed25519_base(): return -1 if the scalar (not the result) is all zero 2017-12-03 20:53:54 +01:00
Frank Denis 3d6cd63b2a Add an empty line for consistency 2017-12-01 17:41:45 +01:00
Frank Denis ccdad9d68d Coverage exclusion 2017-12-01 17:34:03 +01:00
Frank Denis 307503df96 Coverage exclusion 2017-12-01 17:31:45 +01:00
Frank Denis cc92e26a6b Coverage exclusion 2017-12-01 17:23:16 +01:00
Frank Denis 07c5764d5e Correct argument names in internal prototype 2017-12-01 15:23:01 +01:00
Frank Denis 5ecaeb33aa Correct argument names in internal prototype 2017-12-01 15:22:33 +01:00
Frank Denis 4098a12635 Improve clarity 2017-11-26 13:05:47 +01:00
Frank Denis f5a4064646 CompCert seems to be fine with S_* macros now 2017-11-26 12:31:31 +01:00
Frank Denis 06a523423a Oh, the joy of compilers pretending to support C99, but that actually don't 2017-11-26 00:11:56 +01:00