Commit Graph
1884 Commits
Author SHA1 Message Date
Frank Denis 290197ba3e Add comments on wrong alignment 2020-07-01 23:32:43 +02:00
P.I.E. Security Team 4744636721 Language Improvements (#972)
* Language Improvements

https://github.com/paragonie/sodium_compat/pull/121

* Update ed25519_ref10.c
2020-06-18 19:40:04 +02:00
Frank Denis 6497abb4bc Faster Jacobi symbol computation
From 261sq/11m down to 253sq/11m.

Also rename confusing was_square.
2020-06-15 09:25:22 +02:00
Frank Denis 6499766fb6 Merge branch 'master' of github.com:jedisct1/libsodium
* 'master' of github.com:jedisct1/libsodium:
  Don't even include signal.h on WASI
  Use unsigned long long for opslimit
2020-06-04 16:00:29 +02:00
Frank Denis 4e9e110031 No need to save %rdi 2020-06-04 16:00:16 +02:00
Frank Denis a8fa837aac Don't even include signal.h on WASI
Since version 11, wasi-sysroot doesn't ignore it but spits out
an error instead.
2020-06-04 10:54:53 +02:00
Frank Denis 0cb4db084f Use unsigned long long for opslimit
Fixes #966
2020-06-03 17:36:07 +02:00
Frank Denis 3c49e89c19 Add memory clobber
Fixes #965
2020-05-30 23:21:17 +02:00
Frank Denis d854d39b51 Shorten 2020-05-26 14:03:49 +02:00
Frank Denis f9ef57db0b Faster sc25519 inversion, with one less squaring 2020-05-26 13:15:19 +02:00
Frank Denis b0369e7391 Update prototypes 2020-05-26 00:15:42 +02:00
Frank Denis 214076fc09 Replace the multiplication by the group order with an addition chain.
Rename ge25519_{add,sub,madd,msub} for clarity.
2020-05-25 23:54:43 +02:00
Frank Denis 1127c43278 Add extra box_seal() tests 2020-05-21 18:38:55 +02:00
Frank Denis 23bba4a2b2 crypto_box_seal(): copy the key after encryption to support in-place encryption
Fixes #961
2020-05-21 18:22:37 +02:00
Frank Denis da3fc4dd91 Add explicit casts and make things a bit more consistent 2020-05-19 17:40:18 +02:00
Frank Denis c3ca08913c Add AEGIS-128L for no good reasons 2020-05-19 15:36:22 +02:00
Frank Denis 8706f2e8d7 Indent 2020-05-19 15:00:51 +02:00
Frank Denis 4cc7d9027c Constify 2020-05-18 20:46:09 +02:00
Frank Denis a85afdc5ba Remove unused code 2020-05-14 18:45:56 +02:00
Frank Denis 62c6dbcf36 Comment 2020-05-14 12:21:09 +02:00
Frank Denis 056a1aeef5 Avoid & and && mix without brackets 2020-05-13 23:08:19 +02:00
Frank Denis c2efce113d Add crypto_core_{ed25519,ristretto255}_scalar_is_canonical() 2020-05-13 22:59:08 +02:00
Frank Denis d39dd88301 Remove unreferenced variables, fix Windows build 2020-05-13 22:38:59 +02:00
Frank Denis cc2bcbc217 aes256gcm: handle 8 blocks at a time instead of 4
Keep using 4 blocks at time for AD, as AD is usually short.

Decrypt-and-verify instead of verify-then-decrypt.
2020-05-13 17:36:01 +02:00
Frank Denis c4b08fb208 Merge branch 'master' of github.com:jedisct1/libsodium
* 'master' of github.com:jedisct1/libsodium: (55 commits)
  H2C: change sign computation for Ell2 to match BHKL13
  Deprecate non-easy secretbox
  Remove memory shielding
  Deprecate low-level non-easy crypto boxes as well
  Deprecate the non-easy crypto_box API
  Nits
  Remove unneeded casts
  Indent
  Use inline asm if supported
  Nits
  Inline
  space
  Simplify scalarmult{2,5} tests
  Add a scalarmult test to show that the high bit is ignored
  Fix wasi-sdk path
  One more test vector cannot hurt
  ristretto255_is_canonical(): sync with wasm-crypto
  Rename a few things
  Merge mont->ed conversion
  Revert "Add the BlaBla2000 stream cipher - will eventually become the default"
  ...
2020-05-13 14:10:14 +02:00
Frank Denis 06e219e165 Format 2020-05-13 14:10:04 +02:00
Frank Denis f23c932d74 H2C: change sign computation for Ell2 to match BHKL13
https://github.com/cfrg/draft-irtf-cfrg-hash-to-curve/pull/250
2020-05-12 16:33:13 +02:00
Frank Denis 3f1586623c Deprecate non-easy secretbox 2020-05-10 22:29:25 +02:00
Frank Denis 67a9e79655 Remove memory shielding
That was a great idea to protect against information leak through
speculative loads.

Realistically, nobody is going to use this.
2020-05-10 21:05:24 +02:00
Frank Denis bf2238bbc4 Deprecate low-level non-easy crypto boxes as well 2020-05-10 20:32:42 +02:00
Frank Denis 5bb0cdc616 Merge branch 'master' of github.com:jedisct1/libsodium
* 'master' of github.com:jedisct1/libsodium:
  Nits
  Remove unneeded casts
  Indent
2020-05-10 20:28:39 +02:00
Frank Denis 507409d59e Deprecate the non-easy crypto_box API
It is really too complicated to use.
2020-05-10 20:27:50 +02:00
Frank Denis ce19bc7a69 Remove unneeded casts
Fixes #954
2020-05-05 01:25:42 +02:00
Frank Denis c68b071e52 Indent 2020-05-05 01:09:22 +02:00
Frank Denis 4967aa8f23 Use inline asm if supported 2020-05-04 18:23:09 +02:00
Frank Denis 88c568a035 Nits 2020-05-02 17:54:02 +02:00
Frank Denis 809a9f9d7e Inline 2020-05-02 17:42:25 +02:00
Frank Denis 300f12c6a3 space 2020-05-02 17:13:41 +02:00
Frank Denis 8b6f5ef505 ristretto255_is_canonical(): sync with wasm-crypto
Reject string with the top bit set.
2020-04-25 12:15:30 +02:00
Frank Denis e768eae76d Rename a few things 2020-04-23 11:10:19 +02:00
Frank Denis 599cb10246 Merge mont->ed conversion 2020-04-21 16:13:05 +02:00
Frank Denis 29f098d237 Revert "Add the BlaBla2000 stream cipher - will eventually become the default"
This reverts commit a31fe2a966.
2020-04-21 13:35:29 +02:00
Frank Denis 72ec06c189 Comment 2020-04-21 13:35:29 +02:00
Frank Denis f582db039f Handle identity; fix comment 2020-04-21 13:35:26 +02:00
Frank Denis 6f1c987d2e Add an assertion 2020-04-18 23:37:12 +02:00
Frank Denis d01c49df02 H2C: convert DST encoding to suffix free
https://github.com/cfrg/draft-irtf-cfrg-hash-to-curve/pull/241
2020-04-10 09:48:26 +02:00
Frank Denis a31fe2a966 Add the BlaBla2000 stream cipher - will eventually become the default
2000 rounds variant of the BlaBla20 cipher
for Very Post Quantum (VPQ) security.
2020-03-31 21:42:54 +02:00
Frank Denis 7d0aea6d5e Remove unused code 2020-03-31 17:37:06 +02:00
Frank Denis d9844396e3 Fix and add HKDF tests 2020-03-31 17:14:04 +02:00
Frank Denis 5f39c3ce09 Don't force include the suite ID in tags 2020-03-31 14:33:40 +02:00