Nick Mathewson f5cc8da7e0 Use DIGEST512_LEN macro in crypto_hash_sha512.h in ref10 пре 7 година
..
Makefile b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
README.tor f0eb7ae79f More documentation for ed25519 stuff. пре 9 година
api.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
base.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
base.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
base2.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
base2.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
blinding.c 8c6b528b00 Disambiguate: Avoid defining two static functions both called gettweak() пре 8 година
crypto_hash_sha512.h f5cc8da7e0 Use DIGEST512_LEN macro in crypto_hash_sha512.h in ref10 пре 7 година
crypto_int32.h 6b155dc1a6 Stop signed left shifts overflowing in ed25519: Macros пре 9 година
crypto_int64.h 6b155dc1a6 Stop signed left shifts overflowing in ed25519: Macros пре 9 година
crypto_sign.h 006e6d3b6f Another ed25519 tweak: store secret keys in expanded format пре 9 година
crypto_uint32.h 8b36bb9299 Add headers as needed to make ed25519_ref10 compile. пре 9 година
crypto_uint64.h 8b36bb9299 Add headers as needed to make ed25519_ref10 compile. пре 9 година
crypto_verify_32.h 8b36bb9299 Add headers as needed to make ed25519_ref10 compile. пре 9 година
d.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
d.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
d2.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
d2.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ed25519_ref10.h 9190468246 Fix warnings on 32-bit builds. пре 9 година
fe.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_0.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_1.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_add.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_cmov.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_copy.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_frombytes.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values пре 9 година
fe_invert.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_isnegative.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_isnonzero.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_mul.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values пре 9 година
fe_neg.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_pow22523.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_sq.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values пре 9 година
fe_sq2.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values пре 9 година
fe_sub.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
fe_tobytes.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values пре 9 година
ge.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_add.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_add.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_add.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_double_scalarmult.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_frombytes.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_madd.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_madd.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_madd.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_msub.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_msub.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_msub.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p1p1_to_p2.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p1p1_to_p3.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p2_0.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p2_dbl.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p2_dbl.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p2_dbl.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p3_0.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p3_dbl.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p3_to_cached.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p3_to_p2.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_p3_tobytes.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_precomp_0.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_scalarmult_base.c b7eab94a90 Stop ed25519 8-bit signed left shift overflowing пре 9 година
ge_sub.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_sub.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_sub.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
ge_tobytes.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
keyconv.c 4caa6fad4c Add curve25519->ed25519 key conversion per proposal 228 пре 9 година
keypair.c 94bff894f9 Fix a large pile of solaris warnings for bug 19767. пре 7 година
open.c 94bff894f9 Fix a large pile of solaris warnings for bug 19767. пре 7 година
pow22523.h 27bd1ef100 Comment-out dead code in ed25519/ref10 пре 9 година
pow22523.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
pow225521.h 27bd1ef100 Comment-out dead code in ed25519/ref10 пре 9 година
pow225521.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
q2h.sh b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
randombytes.h 2259de0de7 Always hash crypto_strongest_rand() along with some prng пре 8 година
sc.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
sc_muladd.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values пре 9 година
sc_reduce.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values пре 9 година
sign.c 9190468246 Fix warnings on 32-bit builds. пре 9 година
sqrtm1.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година
sqrtm1.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 пре 9 година

README.tor


We've made the following changes to the stock ed25519_ref10 from
supercop-20140622:

* We added the necessary glue to provide integers of fixed bit
sizes, SHA512, and to compile without warnings everywhere we need
to build.

* Secret keys are stored in expanded format. There are functions
to expand them from the 32-byte seed.

* Signatures are made and processed detached from the messages that
they sign. (In other words, we support "make signature" and
"check signature", not "create signed message" and "check and
unpack signed message".)

* There's an implementation of 'convert a curve25519 key to an
ed25519 key' so we can do cross-certification with curve25519 keys.
(keyconv.c)

* There's an implementation of multiplicative key blinding so we
can use it for next-gen hidden srevice descriptors. (blinding.c)