762 Commits (12de86387f302140ab87d73c555ff1b3ffae1c20)

 

All Branches   

Search

Author	SHA1	Message	Date
Gregory Maxwell	12de86387f	Make the libcrypto detection fail the newer API. ... OpenSSL 1.1 makes ECDSA_SIG opaque and our tests need access inside this object. The comparison tests against OpenSSL aren't important for most users, but the build failing is...	8 years ago
Pieter Wuille	2928420c1b	Merge #427: Remove Schnorr from travis as well ... 8eecc4a Remove Schnorr from travis as well (Pieter Wuille)	8 years ago
Pieter Wuille	8eecc4a302	Remove Schnorr from travis as well	8 years ago
Pieter Wuille	a8abae7e5f	Merge #310: Add exhaustive test for group functions on a low-order subgroup ... b4ceedf Add exhaustive test for verification (Andrew Poelstra) 83836a9 Add exhaustive tests for group arithmetic, signing, and ecmult on a small group (Andrew Poelstra) 20b8877 Add exhaustive test for group functions on a low-order subgroup (Andrew Poelstra)	8 years ago
Andrew Poelstra	b4ceedf14f	Add exhaustive test for verification	8 years ago
Andrew Poelstra	83836a9547	Add exhaustive tests for group arithmetic, signing, and ecmult on a small group ... If you compile without ./configure --enable-exhaustive-tests=no, this will create a binary ./exhaustive_tests which will execute every function possible on a group of small order obtained by moving to a twist of our curve and locating a generator of small order. Currently defaults to order 13, though by changing some #ifdefs you can get a couple other ones. (Currently 199, which will take forever to run, and 14, which won't work because it's composite.) TODO exhaustive tests for the various modules	8 years ago
Andrew Poelstra	20b8877be1	Add exhaustive test for group functions on a low-order subgroup ... We observe that when changing the b-value in the elliptic curve formula `y^2 = x^3 + ax + b`, the group law is unchanged. Therefore our functions for secp256k1 will be correct if and only if they are correct when applied to the curve defined by `y^2 = x^3 + 4` defined over the same field. This curve has a point P of order 199. This commit adds a test which computes the subgroup generated by P and exhaustively checks that addition of every pair of points gives the correct result. Unfortunately we cannot test const-time scalar multiplication by the same mechanism. The reason is that these ecmult functions both compute a wNAF representation of the scalar, and this representation is tied to the order of the group. Testing with the incomplete version of gej_add_ge (found in 5de4c5dff^) shows that this detects the incompleteness when adding P - 106P, which is exactly what we expected since 106 is a cube root of 1 mod 199.	8 years ago
Pieter Wuille	80773a6b74	Merge #425: Remove Schnorr experiment ... e06e878 Remove Schnorr experiment (Pieter Wuille)	8 years ago
Pieter Wuille	e06e878fd7	Remove Schnorr experiment	8 years ago
Pieter Wuille	04c8ef36ad	Merge #407: Modify parameter order of internal functions to match API parameter order ... 353c1bf Fix secp256k1_ge_set_table_gej_var parameter order (llamasoft) 541b783 Fix secp256k1_ge_set_all_gej_var parameter order (llamasoft) 7d893f4 Fix secp256k1_fe_inv_all_var parameter order (llamasoft)	8 years ago
Pieter Wuille	6e066962b7	Merge #411: Remove guarantees about memcmp-ability ... 91219a1 Remove guarantees about memcmp-ability (Andrew Poelstra)	8 years ago
Pieter Wuille	40c8d7e8bf	Merge #421: Update scalar_4x64_impl.h ... 9d67afa Update scalar_4x64_impl.h (Alex-GR)	8 years ago
Pieter Wuille	a922365f20	Merge #422: Restructure nonce clearing ... 3769783 Restructure nonce clearing (bgorlick) 0f9e69d Restructure nonce clearing (bgorlick)	8 years ago
bgorlick	37697832d6	Restructure nonce clearing ... Make sure we clear the nonce data even if the nonce function fails (it may have written partial data), and call memset only once in the case we iterate to produce a valid signature.	8 years ago
bgorlick	0f9e69db55	Restructure nonce clearing ... Make sure we clear the nonce data even if the nonce function fails (it may have written partial data), and call memset only once in the case we iterate to produce a valid signature.	8 years ago
Alex-GR	9d67afad96	Update scalar_4x64_impl.h ... XOR reg,reg instead of MOV 0 to reg. It should be at least equal in all architectures and faster in some else.	8 years ago
Pieter Wuille	7d15cd7859	Merge #413: fix auto-enabled static precompuatation ... 00c5d2e fix auto-enabled static precompuatation (Cory Fields)	8 years ago
Cory Fields	00c5d2e142	fix auto-enabled static precompuatation ... This was broken in aa0b1fd149	8 years ago
Andrew Poelstra	91219a1cc0	Remove guarantees about memcmp-ability	8 years ago
Pieter Wuille	7a49cacd39	Merge #410: Add string.h include to ecmult_impl ... 0bbd5d4 Add string.h include to ecmult_impl (Wladimir J. van der Laan)	8 years ago
Wladimir J. van der Laan	0bbd5d4025	Add string.h include to ecmult_impl ... `memcpy` and `memset` are used, so include the appropriate header for the declaration.	8 years ago
llamasoft	353c1bf0d7	Fix secp256k1_ge_set_table_gej_var parameter order ... Rearranged secp256k1_ge_set_table_gej_var parameters so length comes last (it modifies both *a and *zr).	8 years ago
llamasoft	541b783920	Fix secp256k1_ge_set_all_gej_var parameter order ... Rearranged secp256k1_ge_set_all_gej_var parameters so length comes after *a.	8 years ago
llamasoft	7d893f4980	Fix secp256k1_fe_inv_all_var parameter order ... Rearranged secp256k1_fe_inv_all_var parameters so length is after array. Text editor removed some trailing whitespaces.	8 years ago
Pieter Wuille	c5b32e16c4	Merge #405: Make secp256k1_fe_sqrt constant time ... 926836a Make secp256k1_fe_sqrt constant time (Pieter Wuille)	8 years ago
Pieter Wuille	926836ad36	Make secp256k1_fe_sqrt constant time	8 years ago
Pieter Wuille	e2a8e92125	Merge #404: Replace 3M + 4S doubling formula with 2M + 5S one ... 8ec49d8 Add note about 2M + 5S doubling formula (Andrew Poelstra)	8 years ago
Andrew Poelstra	8ec49d8a5a	Add note about 2M + 5S doubling formula	8 years ago
Pieter Wuille	5a91bd768f	Merge #400: A couple minor cleanups ... ac01378 build: add -DSECP256K1_BUILD to benchmark_internal build flags (Andrew Poelstra) a6c6f99 Remove a bunch of unused stdlib #includes (Andrew Poelstra)	8 years ago
Andrew Poelstra	ac01378c87	build: add -DSECP256K1_BUILD to benchmark_internal build flags ... gcc 6 will warn about our non-null checks when SECP256K1_BUILD our NONNULL marker is nontrivial. This occurs unless SECP256K1_BUILD is set, which we had forgotten to do for the internal benchmarks, which compile directly against the library instead of linking.	8 years ago
Andrew Poelstra	a6c6f994b5	Remove a bunch of unused stdlib #includes	8 years ago
Pieter Wuille	65285a63ee	Merge #403: configure: add flag to disable OpenSSL tests ... a9b2a5d configure: add flag to disable OpenSSL tests (Andrew Poelstra)	8 years ago
Andrew Poelstra	a9b2a5d850	configure: add flag to disable OpenSSL tests ... OpenSSL messes up valgrind.	8 years ago
Pieter Wuille	b3401237be	Merge #402: Add support for testing quadratic residues ... e6e9805 Add function for testing quadratic residue field/group elements. (Pieter Wuille) efd953a Add Jacobi symbol test via GMP (Peter Dettman)	8 years ago
Pieter Wuille	e6e9805fc4	Add function for testing quadratic residue field/group elements.	8 years ago
Peter Dettman	efd953a7a7	Add Jacobi symbol test via GMP ... Also add native Jacobi symbol test (Andrew) Rebased-by: Andrew Poelstra Rebased-by: Pieter Wuille	8 years ago
Pieter Wuille	fa36a0ddb8	Merge #401: ecmult_const: unify endomorphism and non-endomorphism skew cases ... c6191fd ecmult_const: unify endomorphism and non-endomorphism skew cases (Andrew Poelstra)	9 years ago
Andrew Poelstra	c6191fded8	ecmult_const: unify endomorphism and non-endomorphism skew cases ... We now do a skew correction even without the endomorphism optimization, which costs one additional group addition but unifies a lot of code.	9 years ago
Pieter Wuille	0b3e618a1c	Merge #378: .gitignore build-aux cleanup ... 70141a8 Update .gitignore (upgradeadvice)	9 years ago
Pieter Wuille	6042217d5d	Merge #384: JNI: align shared files copyright/comments to bitcoinj's ... 6ceea2c align shared files copyright/comments to bitcoinj's (GreenAddress)	9 years ago
Pieter Wuille	24ad20f75b	Merge #399: build: verify that the native compiler works for static precomp ... aa0b1fd build: verify that the native compiler works for static precomp (Cory Fields)	9 years ago
Pieter Wuille	b3be8521e6	Merge #398: Test whether ECDH and Schnorr are enabled for JNI ... eee808d Test whether ECDH and Schnorr are enabled for JNI (Pieter Wuille)	9 years ago
Cory Fields	aa0b1fd149	build: verify that the native compiler works for static precomp	9 years ago
Pieter Wuille	eee808d809	Test whether ECDH and Schnorr are enabled for JNI	9 years ago
Pieter Wuille	7b0fb18b75	Merge #366: ARM assembly implementation of field_10x26 inner (rebase of #173) ... 001f176 ARM assembly implementation of field_10x26 inner (Wladimir J. van der Laan)	9 years ago
Wladimir J. van der Laan	001f1763c7	ARM assembly implementation of field_10x26 inner ... Rebased-by: Pieter Wuille <pieter.wuille@gmail.com>	9 years ago
Pieter Wuille	0172be92e5	Merge #397: Small fixes for sha256 ... 3f8b78e Fix undefs in hash_impl.h (Kirill Fomichev) 2ab4695 Fix state size in sha256 struct (Kirill Fomichev)	9 years ago
Kirill Fomichev	3f8b78e5e9	Fix undefs in hash_impl.h	9 years ago
Kirill Fomichev	2ab46954cb	Fix state size in sha256 struct	9 years ago
Pieter Wuille	6875b013e6	Merge #386: Add some missing `VERIFY_CHECK(ctx != NULL)` ... bcc4881 Add some missing `VERIFY_CHECK(ctx != NULL)` for functions that use `ARG_CHECK` (Andrew Poelstra)	9 years ago