piros/tor: Code added to Tor to support PIR-based onion service descriptor lookups @ 47fab50cbaf3a41e8af9c63f645ad6075b43e565

teor b7eab94a90 Stop ed25519 8-bit signed left shift overflowing		11 jaren geleden
..
Makefile	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
README.tor	f0eb7ae79f More documentation for ed25519 stuff.	11 jaren geleden
api.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
base.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
base.py	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
base2.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
base2.py	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
blinding.c	46cda485bc Comments and tweaks based on review by asn	11 jaren geleden
crypto_hash_sha512.h	46cda485bc Comments and tweaks based on review by asn	11 jaren geleden
crypto_int32.h	6b155dc1a6 Stop signed left shifts overflowing in ed25519: Macros	11 jaren geleden
crypto_int64.h	6b155dc1a6 Stop signed left shifts overflowing in ed25519: Macros	11 jaren geleden
crypto_sign.h	006e6d3b6f Another ed25519 tweak: store secret keys in expanded format	11 jaren geleden
crypto_uint32.h	8b36bb9299 Add headers as needed to make ed25519_ref10 compile.	11 jaren geleden
crypto_uint64.h	8b36bb9299 Add headers as needed to make ed25519_ref10 compile.	11 jaren geleden
crypto_verify_32.h	8b36bb9299 Add headers as needed to make ed25519_ref10 compile.	11 jaren geleden
d.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
d.py	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
d2.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
d2.py	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ed25519_ref10.h	9190468246 Fix warnings on 32-bit builds.	11 jaren geleden
fe.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_0.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_1.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_add.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_cmov.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_copy.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_frombytes.c	6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values	11 jaren geleden
fe_invert.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_isnegative.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_isnonzero.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_mul.c	6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values	11 jaren geleden
fe_neg.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_pow22523.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_sq.c	6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values	11 jaren geleden
fe_sq2.c	6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values	11 jaren geleden
fe_sub.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
fe_tobytes.c	6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values	11 jaren geleden
ge.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_add.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_add.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_add.q	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_double_scalarmult.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_frombytes.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_madd.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_madd.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_madd.q	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_msub.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_msub.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_msub.q	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p1p1_to_p2.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p1p1_to_p3.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p2_0.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p2_dbl.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p2_dbl.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p2_dbl.q	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p3_0.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p3_dbl.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p3_to_cached.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p3_to_p2.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_p3_tobytes.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_precomp_0.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_scalarmult_base.c	b7eab94a90 Stop ed25519 8-bit signed left shift overflowing	11 jaren geleden
ge_sub.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_sub.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_sub.q	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
ge_tobytes.c	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
keyconv.c	4caa6fad4c Add curve25519->ed25519 key conversion per proposal 228	11 jaren geleden
keypair.c	46cda485bc Comments and tweaks based on review by asn	11 jaren geleden
open.c	9190468246 Fix warnings on 32-bit builds.	11 jaren geleden
pow22523.h	27bd1ef100 Comment-out dead code in ed25519/ref10	11 jaren geleden
pow22523.q	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
pow225521.h	27bd1ef100 Comment-out dead code in ed25519/ref10	11 jaren geleden
pow225521.q	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
q2h.sh	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
randombytes.h	8b36bb9299 Add headers as needed to make ed25519_ref10 compile.	11 jaren geleden
sc.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
sc_muladd.c	6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values	11 jaren geleden
sc_reduce.c	6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values	11 jaren geleden
sign.c	9190468246 Fix warnings on 32-bit builds.	11 jaren geleden
sqrtm1.h	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden
sqrtm1.py	b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622	11 jaren geleden

		
				README.tor
			
We've made the following changes to the stock ed25519_ref10 from
supercop-20140622:

   * We added the necessary glue to provide integers of fixed bit
     sizes, SHA512, and to compile without warnings everywhere we need
     to build.

   * Secret keys are stored in expanded format.  There are functions
     to expand them from the 32-byte seed.

   * Signatures are made and processed detached from the messages that
     they sign.  (In other words, we support "make signature" and
     "check signature", not "create signed message" and "check and
     unpack signed message".)

   * There's an implementation of 'convert a curve25519 key to an
     ed25519 key' so we can do cross-certification with curve25519 keys.
     (keyconv.c)

   * There's an implementation of multiplicative key blinding so we
     can use it for next-gen hidden srevice descriptors. (blinding.c)