Nick Mathewson accf239fa3 Rectify include paths (automated) 6 years ago
..
Makefile b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
README.tor f0eb7ae79f More documentation for ed25519 stuff. 10 years ago
api.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
base.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
base.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
base2.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
base2.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
blinding.c accf239fa3 Rectify include paths (automated) 6 years ago
crypto_hash_sha512.h accf239fa3 Rectify include paths (automated) 6 years ago
crypto_int32.h fa5fda5bbf Rectify include paths (automated) 6 years ago
crypto_int64.h fa5fda5bbf Rectify include paths (automated) 6 years ago
crypto_sign.h 006e6d3b6f Another ed25519 tweak: store secret keys in expanded format 10 years ago
crypto_uint32.h fa5fda5bbf Rectify include paths (automated) 6 years ago
crypto_uint64.h fa5fda5bbf Rectify include paths (automated) 6 years ago
crypto_verify_32.h 727db7aeb9 Rectify include paths (automated) 6 years ago
d.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
d.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
d2.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
d2.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ed25519_ref10.h fa5fda5bbf Rectify include paths (automated) 6 years ago
fe.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_0.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_1.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_add.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_cmov.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_copy.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_frombytes.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values 10 years ago
fe_invert.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_isnegative.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_isnonzero.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_mul.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values 10 years ago
fe_neg.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_pow22523.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_sq.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values 10 years ago
fe_sq2.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values 10 years ago
fe_sub.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
fe_tobytes.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values 10 years ago
ge.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_add.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_add.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_add.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_double_scalarmult.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_frombytes.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_madd.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_madd.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_madd.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_msub.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_msub.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_msub.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p1p1_to_p2.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p1p1_to_p3.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p2_0.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p2_dbl.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p2_dbl.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p2_dbl.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p3_0.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p3_dbl.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p3_to_cached.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p3_to_p2.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_p3_tobytes.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_precomp_0.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_scalarmult_base.c b7eab94a90 Stop ed25519 8-bit signed left shift overflowing 10 years ago
ge_sub.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_sub.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_sub.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
ge_tobytes.c b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
keyconv.c 4caa6fad4c Add curve25519->ed25519 key conversion per proposal 228 10 years ago
keypair.c accf239fa3 Rectify include paths (automated) 6 years ago
open.c 94bff894f9 Fix a large pile of solaris warnings for bug 19767. 8 years ago
pow22523.h 27bd1ef100 Comment-out dead code in ed25519/ref10 10 years ago
pow22523.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
pow225521.h 27bd1ef100 Comment-out dead code in ed25519/ref10 10 years ago
pow225521.q b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
q2h.sh b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
randombytes.h accf239fa3 Rectify include paths (automated) 6 years ago
sc.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
sc_muladd.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values 10 years ago
sc_reduce.c 6129ff320e Use SHL{8,32,64} in ed25519/ref10 to avoid left-shifting negative values 10 years ago
sign.c 9190468246 Fix warnings on 32-bit builds. 10 years ago
sqrtm1.h b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago
sqrtm1.py b40ac6808f Add the ed25519 ref10 code verbatim from supercop-20140622 10 years ago

README.tor


We've made the following changes to the stock ed25519_ref10 from
supercop-20140622:

* We added the necessary glue to provide integers of fixed bit
sizes, SHA512, and to compile without warnings everywhere we need
to build.

* Secret keys are stored in expanded format. There are functions
to expand them from the 32-byte seed.

* Signatures are made and processed detached from the messages that
they sign. (In other words, we support "make signature" and
"check signature", not "create signed message" and "check and
unpack signed message".)

* There's an implementation of 'convert a curve25519 key to an
ed25519 key' so we can do cross-certification with curve25519 keys.
(keyconv.c)

* There's an implementation of multiplicative key blinding so we
can use it for next-gen hidden srevice descriptors. (blinding.c)