33 Commits (356b0e9c77c601323c7d7cfdd11cf66dca281324)

Author	SHA1	Message	Date
Pieter Wuille	a5a66c70b6	Add support for custom EC-Schnorr-SHA256 signatures	9 years ago
Andrew Poelstra	0739bbb6f0	Add ECDH module which works by hashing the output of ecmult_const	9 years ago
Pieter Wuille	995c548771	Introduce callback functions for dealing with errors.	9 years ago
Pieter Wuille	74a2acdb8a	Add a secp256k1_ecdsa_signature_t type	9 years ago
Pieter Wuille	23cfa914d2	Introduce secp256k1_pubkey_t type	9 years ago
Thomas Kerin	99fd963bd5	Add secp256k1_ec_pubkey_compress(), with test similar to the related decompress() function.	9 years ago
Andrew Poelstra	210ffed5cd	Use separate in and out pointers in `secp256k1_ec_pubkey_decompress` ... Right now `secp256k1_ec_pubkey_decompress` takes an in/out pointer to a public key and replaces the input key with its decompressed variant. This forces users who store compressed keys in small (<65 byte) fixed size buffers (for example, the Rust bindings do this) to explicitly and wastefully copy their key to a larger buffer. [API BREAK]	10 years ago
Gregory Maxwell	d2275795ff	Add scalar blinding and a secp256k1_context_randomize() call. ... This computes (n-b)G + bG with random value b, in place of nG in ecmult_gen() for signing. This is intended to reduce exposure to potential power/EMI sidechannels during signing and pubkey generation by blinding the secret value with another value which is hopefully unknown to the attacker. It may not be very helpful if the attacker is able to observe the setup or if even the scalar addition has an unacceptable leak, but it has low overhead in any case and the security should be purely additive on top of the existing defenses against sidechannels.	10 years ago
Andrew Poelstra	d899b5b67c	Expose ability to deep-copy a context	10 years ago
Pieter Wuille	a9b6595ef8	[API BREAK] Introduce explicit contexts	10 years ago
Daniel Cousens	5098f62571	Improve documentation formatting consistency	10 years ago
Pieter Wuille	1573a102c0	Add ability to pass extra entropy to rfc6979 ... Suggested by Greg Maxwell.	10 years ago
Pieter Wuille	8030d7c0e5	Improve signing API documentation & specification	10 years ago
Gregory Maxwell	6cc8425c91	Include a comment on secp256k1_ecdsa_sign explaining low-s. ... This was suggested by DavidEGrayson.	10 years ago
Pieter Wuille	bbd5ba7cfa	Use rfc6979 as default nonce generation function	10 years ago
Pieter Wuille	c6e7f4e8d8	[API BREAK] Use a nonce-generation function instead of a nonce	10 years ago
Pieter Wuille	cf7b2b4647	Fix ECDSA message hashes to 32 bytes	10 years ago
Pieter Wuille	be82e92fc4	Require that r and b are different for field multiplication. ... Suggested by Peter Dettman, this prepares for slightly faster muitiplication which writes results immediately to r before finishing reading b.	10 years ago
Gregory Maxwell	8563713a4f	Add non-null and unused-result warnings for the external API. ... GCC (and clang) supports extensions to annotate functions so that their results must be used and so that their arguments can't be statically provable to be null. If a caller violates these requirements they get a warning, so this helps them write correct code. I deployed this in libopus a couple years ago with good success, and the implementation here is basically copied straight from that. One consideration is that the non-null annotation teaches the optimizer and will actually compile out runtime non-nullness checks as dead-code. Since this is usually not whats wanted, the non-null annotations are disabled when compiling the library itself. The commit also removes some dead inclusions of assert.h and introduces compatibility macros for restrict and inline in preparation for some portability improvements.	10 years ago
Pieter Wuille	c27fdc0b97	Document some preconditions	10 years ago
Pieter Wuille	ae6bc76e32	[API CHANGE] Use secp256k1_ec_ prefix for non-ECDSA key operations	10 years ago
Pieter Wuille	04e34d18c3	Split up signing and verification initialization	10 years ago
HaltingState	315d2560b0	updated documentation	11 years ago
Pieter Wuille	86d3cce2a9	Add support for multiplicative tweaking	12 years ago
Pieter Wuille	194eea065f	Public inclue improvements	12 years ago
Pieter Wuille	da3038c757	Privkey import/export	12 years ago
Pieter Wuille	50eb498ece	Compact signatures/pubkey recovery	12 years ago
Pieter Wuille	42cccdaf55	More public implementations	12 years ago
Pieter Wuille	7823916781	Add signing to public interface	12 years ago
Pieter Wuille	b2966ce852	public interface docs	12 years ago
Pieter Wuille	eb0be8eec6	Final step in converting to C	12 years ago
Pieter Wuille	254327e49a	Begin group C interface + start/stop	12 years ago
Pieter Wuille	2d93809255	Source tree reorganization	12 years ago