Commit graph

  • 7b92cf66c7
    Merge pull request #132 Pieter Wuille 2014-12-03 21:20:54 +01:00
  • 0bf70a5d6c
    Merge pull request #133 Pieter Wuille 2014-12-03 21:20:03 +01:00
  • 29ae1310ce Make scalar_add_bit test's overflow detection exact Pieter Wuille 2014-12-03 18:30:17 +01:00
  • 9048def7c7 Avoid undefined shift behaviour Pieter Wuille 2014-12-03 18:10:52 +01:00
  • efb7d4b299 Use constant-time conditional moves instead of byte slicing Pieter Wuille 2014-12-02 20:20:13 +01:00
  • d220062ac2
    Merge pull request #131 Pieter Wuille 2014-12-02 18:36:36 +01:00
  • 82f9254cc0 Fix typo Pieter Wuille 2014-12-02 18:35:33 +01:00
  • 601ca04f9a
    Merge pull request #129 Pieter Wuille 2014-12-02 17:52:22 +01:00
  • 35399e08c4 Bugfix: b is restricted, not r Pieter Wuille 2014-12-02 17:43:42 +01:00
  • c35ff1ea44 Convert lambda splitter to pure scalar code. Pieter Wuille 2014-12-01 18:22:04 +01:00
  • cc604e9842 Avoid division when decomposing scalars Peter Dettman 2014-11-15 23:04:02 +07:00
  • ff8746d457 Add secp256k1_scalar_mul_shift_var Pieter Wuille 2014-12-01 17:11:59 +01:00
  • bd313f7d6e
    Merge pull request #119 Pieter Wuille 2014-12-02 16:40:09 +01:00
  • 276f987d70
    Merge pull request #124 Pieter Wuille 2014-12-02 16:39:07 +01:00
  • 25d125ec26
    Merge pull request #126 Pieter Wuille 2014-12-01 22:40:05 +01:00
  • 24b3c65e0d Add a test case for ECDSA recomputing infinity Pieter Wuille 2014-12-01 14:45:05 +01:00
  • 32600e5086 Add a test for r >= order signature handling Pieter Wuille 2014-12-01 14:23:07 +01:00
  • 4d4eeea4ac Make secp256k1_fe_mul_inner use the r != property Pieter Wuille 2014-11-30 19:38:07 +01:00
  • be82e92fc4 Require that r and b are different for field multiplication. Pieter Wuille 2014-11-30 19:27:24 +01:00
  • 597128d389 Make num optional Pieter Wuille 2014-11-28 01:23:55 +01:00
  • 659b554d7b Make constant initializers independent from num Pieter Wuille 2014-11-27 19:12:13 +01:00
  • 0af5b47133
    Merge pull request #120 Pieter Wuille 2014-12-01 12:36:58 +01:00
  • e2e8a362ad
    Merge pull request #117 Pieter Wuille 2014-12-01 12:29:58 +01:00
  • c76be9efa0 Remove unused num functions Pieter Wuille 2014-11-27 00:27:08 +01:00
  • 4285a98722 Move lambda-splitting code to scalar. Pieter Wuille 2014-11-27 00:08:52 +01:00
  • f24041d6aa Switch all EC/ECDSA logic from num to scalar Pieter Wuille 2014-11-26 17:26:39 +01:00
  • 6794be6080 Add scalar splitting functions Pieter Wuille 2014-11-26 16:22:02 +01:00
  • d1502eb459 Add secp256k1_scalar_inverse_var which delegates to GMP Pieter Wuille 2014-11-26 16:04:24 +01:00
  • b5c9ee756f Make test_point_times_order test meaningful again Pieter Wuille 2014-11-26 15:35:06 +01:00
  • 0b73059709 Switch wnaf splitting from num-based to scalar-based Pieter Wuille 2014-11-26 14:47:23 +01:00
  • 1e6c77c321 Generalize secp256k1_scalar_get_bits Pieter Wuille 2014-11-25 15:55:21 +01:00
  • 5213207856 Add secp256k1_scalar_add_bit Pieter Wuille 2014-11-25 15:20:44 +01:00
  • 3c0ae43d66
    Merge pull request #122 Pieter Wuille 2014-11-30 19:50:31 +01:00
  • 6e0528785d Do signature recovery/verification with 4 possible recid case Pieter Wuille 2014-11-28 23:43:00 +01:00
  • e3d692ff75 Explain why no y=0 check is necessary for doubling Pieter Wuille 2014-11-28 22:07:32 +01:00
  • f7dc1c6513 Optimize doubling: secp256k1 has no y=0 point Pieter Wuille 2014-11-28 15:29:37 +01:00
  • 666d3b5132
    Merge pull request #121 Pieter Wuille 2014-11-28 21:21:52 +01:00
  • 2a54f9bcee Correct typo in comment Pieter Wuille 2014-11-28 16:39:23 +01:00
  • 3ce74b1266 Tweak precomputed table size for G Pieter Wuille 2014-11-26 23:45:34 +01:00
  • 9d64145781
    Merge pull request #114 Pieter Wuille 2014-11-26 15:22:45 +01:00
  • 99f0728f23 Fix secp256k1_num_set_bin handling of 0 Pieter Wuille 2014-11-24 21:29:25 +01:00
  • d907ebc0e3 Add bounds checking to field element setters Pieter Wuille 2014-11-24 12:38:05 +01:00
  • bb2cd94e09
    Merge pull request #116 Pieter Wuille 2014-11-26 15:19:06 +01:00
  • 665775b2b9 Don't split the g factor when not using endomorphism Pieter Wuille 2014-11-25 14:29:02 +01:00
  • 9431d6b112
    Merge pull request #115 Pieter Wuille 2014-11-25 13:46:38 +01:00
  • e2274c58e6 build: osx: attempt to work with homebrew keg-only packages Cory Fields 2014-11-24 11:13:16 -05:00
  • ad2028f989
    Merge pull request #110 Pieter Wuille 2014-11-18 17:54:44 +01:00
  • 3bf029d676 Add test that recovering infinity fails Pieter Wuille 2014-11-18 13:13:17 +01:00
  • 4861f83686 Test whether recovered public keys are not infinity Pieter Wuille 2014-11-18 12:36:20 +01:00
  • bbe67d8b29 Make secp256k1_eckey_pubkey_serialize fail for infinity Pieter Wuille 2014-11-18 12:32:53 +01:00
  • 11a78460f4
    Merge pull request #107 Pieter Wuille 2014-11-18 11:38:17 +01:00
  • f49b2ef840 Add DETERMINISTIC to avoid line number/source dependent binaries Pieter Wuille 2014-11-17 13:16:47 +01:00
  • a5f7483d3e
    Merge pull request #108 Pieter Wuille 2014-11-18 09:55:30 +01:00
  • 6c7f0c621c Update README.md Pieter Wuille 2014-11-17 14:04:45 +01:00
  • c48cdc4cb3
    Merge pull request #105 Pieter Wuille 2014-11-17 13:25:58 +01:00
  • e5b9357b60
    Merge pull request #106 Pieter Wuille 2014-11-16 14:52:15 +01:00
  • 8ca6a9c06f Correct .gitignore to correctly account for build-aux. Phillip Mienk 2014-11-15 19:47:03 -08:00
  • 71712b27e5 Switch to C89 comments in prep for making the whole codebase C89 compatible. Gregory Maxwell 2014-11-15 15:28:10 +00:00
  • 21288f2d05
    Merge pull request #103 Pieter Wuille 2014-11-15 01:26:15 +01:00
  • f8cce95650 Add overflow analysis to field_10x26_impl.h Pieter Wuille 2014-11-14 17:52:39 +01:00
  • a51859871a Add overflow analysis to field_5x52_int128_impl.h Pieter Wuille 2014-11-13 07:47:40 -08:00
  • fa0d620668 Add equalities relating input and output variables Pieter Wuille 2014-11-13 07:00:44 -08:00
  • 5dd421bab5 Rewrite mul/sqr for 32bit/64bit Peter Dettman 2014-10-27 22:10:26 +07:00
  • 027eb9c610
    Merge pull request #102 Pieter Wuille 2014-11-13 04:39:51 -08:00
  • a099073a7e Enable warnings. Gregory Maxwell 2014-11-12 16:07:48 -08:00
  • 861f9a59cc field_gmp's negate doesn't need to use the magnitude argument. Gregory Maxwell 2014-11-12 15:59:26 -08:00
  • f0709ac57e Avoid forward static decl of undefined functions, also fix a paren warning in the tests. Gregory Maxwell 2014-11-12 15:41:47 -08:00
  • 3276e7d4e2 Signed/unsigned comparisons in tests. Gregory Maxwell 2014-11-12 15:24:49 -08:00
  • 850562e3f1 Avoid unsigned comparison in scalar arith. Gregory Maxwell 2014-11-12 13:48:46 -08:00
  • 65a14abb48 Fix varrious signed/unsigned comparisons. Gregory Maxwell 2014-11-12 13:45:09 -08:00
  • e9e0e21a6f Avoid a shadowed variable. Gregory Maxwell 2014-11-12 13:32:15 -08:00
  • e28a8b86c7 Remove a VERIFY_CHECK for >=0ness on an unsigned type. Gregory Maxwell 2014-11-12 13:26:26 -08:00
  • 2cad067a36 Correct function prototypes and avoid unused parameter warnings. Gregory Maxwell 2014-11-12 13:24:12 -08:00
  • f79d80a724
    Merge pull request #101 Pieter Wuille 2014-11-12 14:02:59 -08:00
  • a4a43d7543 Reorder static to comply with C99 and switch to the inline macro. Gregory Maxwell 2014-11-12 12:57:35 -08:00
  • 8563713a4f Add non-null and unused-result warnings for the external API. Gregory Maxwell 2014-11-12 12:05:42 -08:00
  • 8ed7c33cd6
    Merge pull request #96 Pieter Wuille 2014-11-12 11:34:56 -08:00
  • 28515b8848
    Merge pull request #99 Pieter Wuille 2014-11-12 11:22:31 -08:00
  • c27fdc0b97 Document some preconditions Pieter Wuille 2014-11-11 15:21:47 -08:00
  • 7ff4770e15
    Merge pull request #98 Pieter Wuille 2014-11-12 02:34:33 -08:00
  • fb1bb0b445 Rearrange _gej_add_ge to save an _fe_negate Peter Dettman 2014-11-12 11:56:13 +07:00
  • 9338dbf791 Branch-free point addition Pieter Wuille 2014-11-11 10:32:50 -08:00
  • 6fac238f03 Use same build template as bitcoin. Add bitcoin_secp.m4. kiwigb 2014-11-07 01:55:27 +13:00
  • f9aac5b034 Remove INCLUDES. Obsolete, appears unused anyway. kiwigb 2014-11-06 22:35:41 +13:00
  • db72c181bb Add autoreconf warnings. Replace obsolete AC_TRY_COMPILE. Remove redundant checks (already done by LT_INIT). kiwigb 2014-11-06 22:20:05 +13:00
  • ef6f677679
    Merge pull request #95 Pieter Wuille 2014-11-04 23:27:57 -08:00
  • 985fd63a73
    Merge pull request #77 Pieter Wuille 2014-11-04 23:26:16 -08:00
  • 79ad6d44ea Remove some dead variables in the tests. Gregory Maxwell 2014-11-04 13:47:23 -08:00
  • 9974d8693e Misc. Warning and cosmetic error cleanups. Gregory Maxwell 2014-11-04 13:14:47 -08:00
  • 1d52a8b155 Implementations for scalar without data-dependent branches. Pieter Wuille 2014-10-29 00:35:49 -07:00
  • 0ce80ef47e
    Merge pull request #94 Pieter Wuille 2014-11-04 03:00:34 -08:00
  • da55986fdf Label variable-time functions correctly and don't use those in sign Pieter Wuille 2014-11-04 02:34:11 -08:00
  • 784e62f3b2
    Fix typo Pieter Wuille 2014-11-04 02:28:15 -08:00
  • aee112a24e
    Merge pull request #92 Pieter Wuille 2014-11-04 02:27:09 -08:00
  • 137e77afb4 Address 'constant-time' TODOs in field impls Peter Dettman 2014-11-04 12:41:42 +07:00
  • 112510dfab
    Merge pull request #93 Pieter Wuille 2014-11-03 23:35:17 -08:00
  • 53628757f3 warnings: enable quiet builds Cory Fields 2014-06-19 22:36:24 -04:00
  • cc20075ef7
    Merge pull request #85 Pieter Wuille 2014-11-03 01:44:07 -08:00
  • 47ebd6b7fa
    Merge pull request #89 Pieter Wuille 2014-11-03 01:40:12 -08:00
  • 501d58f098 Get rid of {num,scalar,ecdsa_sig}_{init,free} Pieter Wuille 2014-11-03 01:31:04 -08:00