github.com/jedisct1/libsodium commits | Ecosyste.ms: OpenCollective

Move 25.5 bit field arithmetic to ref10/fe_25_5

bd82e0833716cd4fc93e65b25c2fe826ff2f5fb2 authored over 7 years ago

Add pwhash functions to non-sumo wasm builds

Server relief is important.

5cde320a08a10ba091a1fbcbdc492abe832b2dd8 authored over 7 years ago

Ed25519 synthetic nonces: pad to 128 bytes boundaries, not 16.

Spotted by Trevor Perrin. Good catch, thanks!

9f71f5aadeb46b4cee7313db9aafe7f381d0169a authored over 7 years ago

Detect ctgrind

e52ab673220318f59a9f339b24f3d6c10682f4bb authored over 7 years ago

Tolerate sodium_crit_leave() to be called on an unlocked mutex

b45d52a8cf430bc7d14dd160555d87a7161038df authored over 7 years ago

Move d2 definition close to the d definition

8e364d29db16a3912a159c38fa3d427b28a53439 authored over 7 years ago

Use the correct type for the cmov mask

f57fcb9c268e1b1e5d191b94770530a233758f86 authored over 7 years ago

Leave and immediately reenter the critical section in sodium_misuse()

Keep running everything in the critical section from there.

8d5b6b1fc9701dcdc06bbdba2d541df7f7f1846e authored over 7 years ago

Regen precomputation tables

802830e4e6c1f3fb3d00c79e8e2c99b029d3efa6 authored over 7 years ago

Tidy up curve25519_ref10, remove comments that are not relevant any more

a366ea0839384f7563cd13dc6dc0b9bfdccc3cfb authored over 7 years ago

Remove ge_scalarmult_vartime() which is not used any more

a3f96045d4340a3d6038d7f25b63288014232aa8 authored over 7 years ago

edwards25519sha512batch_open(): check order before decoding instead of after

0b734963db125474f5b14561548da4bbebaf51b9 authored over 7 years ago

Accept non-canonical PKs if ED25519_COMPAT is defined

1cd063318647bc073467acfdb91af4f3e36e324c authored over 7 years ago

ed25519_open(): reject all small order public keys and non-canonical representations

5808b830924b137d6332314edb2f654da7702f2b authored over 7 years ago

edwards25519sha512batch: reuse ge_scalarmult()

Check public key and R order by the way.

ce56bb596fa328ea88d143a2f13a94b7ef85e561 authored over 7 years ago

Add constant-time edx recovery; use it in ed25519_scalarmult()

52fce922f4fdb0d96d8065f3b132df47393e7ba1 authored over 7 years ago

Don't hardcode the number of rounds

5468c39d7da762d547400b63a927f3885a4cb79b authored over 7 years ago

CMake find module fixes for static linking: (#621)

Enclose option() declaration in a defined check to allow simple caller
set() use case. Provide ...

5dcf78a14c75b0feec59344a7a2e0afd861752b6 authored over 7 years ago

blake2: use the same code on little & big endian for finalization

68d8e33a55183e0ac52e33ade322d427f88f78ff authored over 7 years ago

Use uint instead of uint64_t for SHA* padding

Workaround for a clang bug

5935cf7a7e393fc57964c432a1c380e262ce8de2 authored over 7 years ago

Use the output buffer as a temporary buffer to store clamped private scalars

This might help avoid leaving a copy of the scalar on the stack.

Also use the same parameters n...

58fa4172a570dcfe1cb21439432a093c8d178a3e authored over 7 years ago

Return -1 is the scalar was zero

This realistically only happen on misuse or with a completely broken PRG.

Calling misuse() woul...

e254a654dc777fd0af6bfa5d06728d4175791e31 authored over 7 years ago

Clear the high bit the same way everywhere

c150ceb6771fa381fa528d6ed1a28bfb1ce2ef89 authored over 7 years ago

Remove unused var

7e75ad4ca9edd3b75bece471d4cec47190ea28c2 authored over 7 years ago

Add a comment on scalarmult usage

134eb2c29dcf9a0940a8c1911b322974fa9a00b2 authored over 7 years ago

Regen emscripten symbols

8996c7d53ddad25bb5ba1cf1f2b2ee8d3843eab2 authored over 7 years ago

Do not include scalarmult_ed25519 in minimal builds

f5076db5f8ef2799bd049677b4b4020286efe397 authored over 7 years ago

Add scalarmult_ed25519_base, correct is_canonical() test, add clamping helper,

check that the result of scalarmult_ed25519() is not the point at infinity

b5797ec61f94d6c5ad1482e0310194b54f4f0ff9 authored over 7 years ago

Update prototype (fe_isnonzero() -> fe_iszero())

d3cce09f4ee129ab8f5c4f39fcdd054fae58c3ec authored over 7 years ago

Rename crypto_sign_ed25519_scalarmult() to crypto_scalarmult_ed25519()

f1e9acef5c35a760021c1091cbdda36daa6f58e5 authored over 7 years ago

*_is_less_than_*() -> *_is_canonical()

and reject non-canonical public keys in ed25519_scalarmult()

89bc2d69762d841463133f62dbfa5d58cba17f12 authored over 7 years ago

+ ge_is_less_than_p()

15649c5849fa15674550a8250c2937c4304dc9bb authored over 7 years ago

Comment

9acbc82a6d4ce9dddb802d98ebd62ac40a294cbf authored over 7 years ago

Order

7ae346a54aff56efc56ecc3bdaedf2f88a953925 authored over 7 years ago

Remove neg parameter; always check with both signs; adjust blacklist

afabd7e7386e11949064719b0c9f468c6172388a authored over 7 years ago

Merge branch 'master' of github.com:jedisct1/libsodium

* 'master' of github.com:jedisct1/libsodium:
disable ssp/pie for emscripten

d0e009e59d6cbd8207a7b64efa16608f4161d333 authored over 7 years ago

+ ge_is_on_curve()

0b835b44792766d30f7bdaac97418348ee9177e3 authored over 7 years ago

disable ssp/pie for emscripten

a84d222d07ff97e400f4db495e0ee6be125faa6b authored over 7 years ago

Move a couple functions from crypto_sign to crypto_core/curve25519

This improves clarity and makes it easier to reuse these in a
different context.

Also change fe...

88417977e363b9a40afa85934fb35bff5b0e7a53 authored over 7 years ago

Remove unused blake2b code

9fc0ece3d99c952f8588c9376283ec0614a45ae9 authored over 7 years ago

Define uint128_t only once in private/common.h

3d374fe8a9037e3091e61c040f38d90767624c82 authored over 7 years ago

Add crypto_sign_ed25519_scalarmult to emscripten symbols

58fc2dcf5b1caa9ea2bfeef12babed4d72f9eda7 authored over 7 years ago

Add an argument to ed25519_small_order to optionally invert the sign

5a6deebd39497f9d0adea60d0fff5c0804178b94 authored over 7 years ago

memcpy() -> memmove() in case the seed and secret key overlap

30ad01bdba7654a908401331a3c7c5746d8152e0 authored over 7 years ago

Implement crypto_sign_ed25519_scalarmult()

bab680f35b16bcc5e93621358c85863ed8bc4f93 authored over 7 years ago

Remove extraneous "return"

fe5d65853b95092d4da7afe079b699132b99ac1a authored over 7 years ago

Move precomputed table where it's actually used

2e8d65602946b9d03bca0f21c40cd6ed8501b70d authored over 7 years ago

Define a generic ge_select() in additino to ge_select_base()

8a1e08cc5273a3925ff5eb0ca7f0404ed6c37b0b authored over 7 years ago

cmov() -> ge_cmov() ; ge_select() -> ge_select_base()

fc3a62a493d41f7b83df291ebb75f47e5f800fea authored over 7 years ago

slide() -> slide_vartime() and move comments to the right place

a944db7a7655898a436269578d33504c58d053c8 authored over 7 years ago

Add js & wasm to the list

9f3a2e775b631c043754a19a02dd928570835e37 authored over 7 years ago

emscripten: actually print the installation prefix

08387eea8b7d7b155b24afd98c1d20c95b6d9820 authored over 7 years ago

Update AUTHORS

002fb0e82b4bdc985e4b7f8bd49da9f4b9a4e95c authored over 7 years ago

Just use constants instead of macros

In this context, they are actually less confusing.

f78355277392d6c09923f77f6b6c1ff2ce53952b authored over 7 years ago

Repair crypto_sign_ed25519_seed_keypair()

b1bf4780866955b7820ee199dbb0e415b95365e3 authored over 7 years ago

sk is actually skpk, so use the right size in the prototype

18ab67942907dcf06d151a7f7752f156793ce599 authored over 7 years ago

sign_keygen(): don't hash the secret scalar in non-deterministic mode

f54c6db9815bb7d6882ad4998cf2953b6905ebe1 authored over 7 years ago

nonce -> Z for clarity

68feb75f1db36566e187f89d8f1ba820510b9a83 authored over 7 years ago

Improve clarity

No need to clamp the key prior to computing a synthetic nonce

ebb614cb0e97ce1d291204b6ddea608c1bba2000 authored over 7 years ago

Move computation of synthetic nonces to a dedicated function

for clarity

90f5b55a0afe8c0fda185aa2bc701bbc279aacd3 authored over 7 years ago

inline

067cd6749dc9df4464b4a6668298b6f853d0b76b authored over 7 years ago

crypto_sign(): memzero the nonce after use

d56007a6fabccf9ae57bb86b9fb645ce242894b3 authored over 7 years ago

Use the generalized eddsa algorithm for non-deterministic r

291859874b67bad6d0c448433d023444d6d012b4 authored over 7 years ago

Back to dev mode

9f98f2329c8e24d66e5d36d1de0e8e5d7e729f0a authored over 7 years ago

Add a compile-time switch to create non-deterministic signatures

0dd8338b83eeba82c148f3e1a6ab8a7d73fb0ae4 authored over 7 years ago

libsodium.js totalMemory minor fix (#610)

381080bf026313ba09d3170f7f5735c589295ee7 authored over 7 years ago

Use -O in debug mode

09ecb47a533eccb9f8459230a9dfc7985931b617 authored over 7 years ago

FORTIFY_SOURCE -> _FORTIFY_SOURCE

c19946296c1d46e72baa8499fe67a0ab0eadee8a authored over 7 years ago

Re-enable all warnings with --enable-debug

022f783cfcbab39ea700e22b931fe127a7cd1246 authored over 7 years ago

Include prototypes before declarations

affaecabcdbb4090e12f0c145a0c0e0f7c1af695 authored over 7 years ago

Enable some extra compiler warnings

b3ccb20078f496110ef5125c3f4f531b6908ae20 authored over 7 years ago

"this" doesn't seem to ever be defined in a module

isNan is undefined

c431a42658a516a974ebd02ecb6e530081ec9bed authored over 7 years ago

`this` may not be defined

af5ce360b472ee6199bb7e05f79512f7e2ce261b authored over 7 years ago

Add actual performance API emulation for old browsers

2a367074fe412f5d697155ddb961921d088d3874 authored over 7 years ago

Move declaration closer to usage

1393681662f84211ce9060786bb6f23c88e7dbe0 authored over 7 years ago

allow setting total memory from JS (#608)

ec4432a3883d2becf0468f014e3d3ed05c2f48e8 authored over 7 years ago

Add no-ops for very old browsers without the performance API

e784a3fb405c2ab2f18ee2b64fda1d0c1b43c99b authored over 7 years ago

Round duration

37d9f09f5b58e2d3c40f316d8d1359bf98212912 authored over 7 years ago

emscripten template: make the module global

752c1fff2dc3595b7cc9d4951e5feefe07f9231f authored over 7 years ago

Fix emscripten template

cc8cd391c956c027dafe2a1b8ffa9f8319e8f4a4 authored over 7 years ago

Wasm: add basic benchmark

Not really fair yet since the script isn't preloaded

93e39760b995cc23947529e3970555e73c7eca45 authored over 7 years ago

Remove index-wasm.html.tpl

f0daa92f506bef44d07a763ebfb3e93258f97f0b authored over 7 years ago

asmjs requires TOTAL_MEMORY to be a multiple of 16MB

60366ac4479e66bc50b7f124a04d7ea54367f4f5 authored over 7 years ago

Reserve more memory for wasm sumo builds

6db1adbf4e25efef179dad34cd21563ab0ece469 authored over 7 years ago

Use less memory for the pwhash tests

6a0e14489962febaf35881ad0b8704ec4909e111 authored over 7 years ago

Ignore test/default/*.asm.js

ce3254dff405e46a90cce260cd25c6f5caef8839 authored over 7 years ago

Update dotnet example version

c5e43f4c1cf62b4669b1f33516fc33ef2d005187 authored over 7 years ago

Undefine FORTIFY_SOURCE in debug mode

aa67295dae50fa038977dcbb73bcb2fa3b67b532 authored over 7 years ago

Bump major for generate-emscripten-symbols.sh 18 -> 23

770e7945c3a23b15a034ea78edfcebdac51a5b0d authored over 7 years ago

ChangeLog

b8e066dc0ca27fa8d0bdc0c08cf0d7fb964a020d authored over 7 years ago

crypto_pwhash_ALG_DEFAULT is now Argon2id

d3e20869afb7051cedd7abbd08156ac4e844ff96 authored over 7 years ago

Rename the test/pwhash.c -> test/pwhash_argon2i.c

2f51ed3397b75bb9687a59cf0a10e9104cff3eae authored over 7 years ago

pwhash: don't enforce the same limits for argon2i and argon2id

Fixes #606

Also, keep enforcing a minimum number of iterations to create argon2i
hashes, but re...

d49d7e8d4f4dd8df593beb9e715e7bc87bc74108 authored over 7 years ago

Bump library version

a8ebd37b7b9ea967c1dd06628d600d9b35efb3a5 authored over 7 years ago

secretstream: set the initial counter to 1

Avoids using the first block for two different purposes, and will be more
consistent with the AE...

2542367c2db367283af164aa10f4d4f80e7e386d authored over 7 years ago

Avoid losing the reference to Module in the promise.

by @buu700

3659d342af0b3aee953b11fbbd48986c39f60cab authored over 7 years ago

Emscripten: just use Module.onRuntimeInitialized = resolve;

24ff2a70495e92fb3e9b6f87c41f6d909d1a928c authored over 7 years ago

Save libsodium.js (#605)

* revert wasm/asmjs split build changes

* combined wasm + asm.js build

* minor cleanup

170661671d63d92d7112181c073b7800884f535e authored over 7 years ago

Merge branch 'master' of github.com:jedisct1/libsodium

* 'master' of github.com:jedisct1/libsodium:
Remove aes128ctr from emscripten
Regen MSVC fil...

2c73b8e3b5158c17b04720c31245e1ee0c4509c4 authored over 7 years ago

Add -s SINGLE_FILE=1 when compiling to Emscripten

5233df125f1ccdf97cfa1665233a278236d6edc9 authored over 7 years ago