567 Commits (440150006064295038d4d7fcb7fe2796bf1672df)

 

All Branches   

Search

Author	SHA1	Message	Date
Andrew Poelstra	4401500060	Add constant-time multiply `secp256k1_ecmult_const` for ECDH ... Designed with clear separation of the wNAF conversion, precomputation and exponentiation (since the precomp at least we will probably want to separate in the API for users who reuse points a lot. Future work: - actually separate precomp in the API - do multiexp rather than single exponentiation	9 years ago
Andrew Poelstra	baa75da59d	tests: add a couple tests ... - Add zero/one sanity check tests for ecmult - Add unit test for secp256k1_scalar_split_lambda_var - Typo fix in `ge_equals_ge`; was comparing b->y to itself, should have been comparing a->y to b->y - Normalize y-coordinate in `random_group_element_test`; this is needed to pass random group elements as the first argument to `ge_equals_ge`, which I will do in a future commit.	9 years ago
Pieter Wuille	ae4f0c6eec	Merge pull request #278 ... 995c548 Introduce callback functions for dealing with errors. (Pieter Wuille)	9 years ago
Pieter Wuille	995c548771	Introduce callback functions for dealing with errors.	9 years ago
Pieter Wuille	c33307495b	Merge pull request #282 ... 18c329c Remove the internal secp256k1_ecdsa_sig_t type (Pieter Wuille) 74a2acd Add a secp256k1_ecdsa_signature_t type (Pieter Wuille) 23cfa91 Introduce secp256k1_pubkey_t type (Pieter Wuille)	9 years ago
Pieter Wuille	18c329c506	Remove the internal secp256k1_ecdsa_sig_t type	9 years ago
Pieter Wuille	74a2acdb8a	Add a secp256k1_ecdsa_signature_t type	9 years ago
Pieter Wuille	23cfa914d2	Introduce secp256k1_pubkey_t type	9 years ago
Pieter Wuille	4c63780710	Merge pull request #269 ... 3e6f1e2 Change rfc6979 implementation to be a generic PRNG (Pieter Wuille)	9 years ago
Pieter Wuille	3e6f1e20dc	Change rfc6979 implementation to be a generic PRNG	9 years ago
Pieter Wuille	1b68366201	Merge pull request #274 ... a83bb48 Make ecmult static precomputation default (Pieter Wuille)	9 years ago
Pieter Wuille	a83bb48068	Make ecmult static precomputation default	9 years ago
Pieter Wuille	166b32f70a	Merge pull request #276 ... c37812f Add gen_context src/ecmult_static_context.h to CLEANFILES to fix distclean. (Gregory Maxwell)	9 years ago
Gregory Maxwell	c37812f54c	Add gen_context src/ecmult_static_context.h to CLEANFILES to fix distclean.	9 years ago
Pieter Wuille	125c15de31	Merge pull request #275 ... 76f6769 Fix build with static ecmult altroot and make dist. (Gregory Maxwell)	9 years ago
Gregory Maxwell	76f67697ec	Fix build with static ecmult altroot and make dist. ... Gen_context was unable to find the required headers without some autotools fixups. Make dist was also broken without the extra sources for the host side table builder utility.	9 years ago
Pieter Wuille	5133f78651	Merge pull request #254 ... 733c1e6 Add travis build to test the static context. (Thomas Daede) fbecc38 Add ability to use a statically generated ecmult context. (Thomas Daede)	9 years ago
Pieter Wuille	b0a60e6d33	Merge pull request #258 ... e2a07c7 Fix compilation with C++ (Vinnie Falco)	9 years ago
Thomas Daede	733c1e695e	Add travis build to test the static context.	9 years ago
Thomas Daede	fbecc38a89	Add ability to use a statically generated ecmult context. ... This vastly shrinks the size of the context required for signing on devices with memory-mapped Flash. Tables are generated by the new gen_context tool into a header.	9 years ago
Pieter Wuille	4fb174df08	Merge pull request #263 ... 99fd963 Add secp256k1_ec_pubkey_compress(), with test similar to the related decompress() function. (Thomas Kerin)	9 years ago
Pieter Wuille	4ab8990c52	Merge pull request #270 ... 36b305a Verify the result of GMP modular inverse using non-GMP code (Pieter Wuille)	9 years ago
Pieter Wuille	bdf0e0c268	Merge pull request #271 ... 55399c2 Further performance improvements to _ecmult_wnaf (Peter Dettman) 145cc6e Improve performance of _ecmult_wnaf (Peter Dettman)	9 years ago
Pieter Wuille	31d0c1fd12	Merge pull request #273 ... eb2c8ff Add missing casts to SECP256K1_FE_CONST_INNER (Andrew Poelstra)	9 years ago
Andrew Poelstra	eb2c8ffedf	Add missing casts to SECP256K1_FE_CONST_INNER	9 years ago
Peter Dettman	55399c23f7	Further performance improvements to _ecmult_wnaf ... - Initialize 'wnaf' to zeroes using memset - Add new 'len' arg to speed up smaller scalars (mostly for endo=yes)	9 years ago
Thomas Kerin	99fd963bd5	Add secp256k1_ec_pubkey_compress(), with test similar to the related decompress() function.	9 years ago
Peter Dettman	145cc6ea8f	Improve performance of _ecmult_wnaf ... - Track carry explicitly instead of adding to scalar - Branch-free code for carry calculations	9 years ago
Pieter Wuille	36b305a82b	Verify the result of GMP modular inverse using non-GMP code	9 years ago
Pieter Wuille	0cbc8600f3	Merge pull request #266 ... 3f3964e Add specific VERIFY tests for _fe_cmov (Peter Dettman) a0601cd Fix VERIFY calculations in _fe_cmov methods (Peter Dettman)	9 years ago
Pieter Wuille	06ff7fe5b0	Merge pull request #267 ... 5a43124 Save 1 _fe_negate since s1 == -s2 (Peter Dettman) a5d796e Update code comments (Peter Dettman) 7d054cd Refactor to save a _fe_negate (Peter Dettman) b28d02a Refactor to remove a local var (Peter Dettman) 55e7fc3 Perf. improvement in _gej_add_ge (Peter Dettman)	9 years ago
Peter Dettman	5a43124c69	Save 1 _fe_negate since s1 == -s2	9 years ago
Peter Dettman	a5d796e0b1	Update code comments	9 years ago
Peter Dettman	3f3964e49c	Add specific VERIFY tests for _fe_cmov	10 years ago
Peter Dettman	7d054cd030	Refactor to save a _fe_negate	10 years ago
Peter Dettman	b28d02a5d5	Refactor to remove a local var	10 years ago
Peter Dettman	55e7fc32cb	Perf. improvement in _gej_add_ge ... - Avoid one weak normalization - Change one full normalization to weak - Avoid unnecessary fe assignment - Update magnitude annotations	10 years ago
Peter Dettman	a0601cd79c	Fix VERIFY calculations in _fe_cmov methods	10 years ago
Pieter Wuille	17f7148606	Merge pull request #261 ... 7657420 Add tests for adding P+Q with P.x!=Q.x and P.y=-Q.y (Pieter Wuille) 8c5d5f7 tests: Add failing unit test for #257 (bad addition formula) (Andrew Poelstra) 5de4c5d gej_add_ge: fix degenerate case when computing P + (-lambda)P (Andrew Poelstra) bcf2fcf gej_add_ge: rearrange algebra (Andrew Poelstra)	10 years ago
Pieter Wuille	765742021a	Add tests for adding P+Q with P.x!=Q.x and P.y=-Q.y	10 years ago
Andrew Poelstra	8c5d5f7b5b	tests: Add failing unit test for #257 (bad addition formula)	10 years ago
Andrew Poelstra	5de4c5dffd	gej_add_ge: fix degenerate case when computing P + (-lambda)P ... If two points (x1, y1) and (x2, y2) are given to gej_add_ge with x1 != x2 but y1 = -y2, the function gives a wrong answer since this causes it to compute "lambda = 0/0" during an intermediate step. (Here lambda refers to an auxiallary variable in the point addition formula, not the cube-root of 1 used by the endomorphism optimization.) This commit catches the 0/0 and replaces it with an alternate expression for lambda, cmov'ing it in place if necessary.	10 years ago
Andrew Poelstra	bcf2fcfd3a	gej_add_ge: rearrange algebra ... There is zero functionality or opcount changes here; I need to do this to make sure both R and M are computed before they are used, since a future patch will replace either none or both of them. Also compute r->y directly in terms of r->x, which again will be used in a future patch.	10 years ago
Vinnie Falco	e2a07c78a1	Fix compilation with C++	10 years ago
Pieter Wuille	873a453d26	Merge pull request #250 ... 210ffed Use separate in and out pointers in `secp256k1_ec_pubkey_decompress` (Andrew Poelstra)	10 years ago
Pieter Wuille	91eb0da155	Merge pull request #247 ... a1d5ae1 Tiny optimization (Pieter Wuille)	10 years ago
Andrew Poelstra	210ffed5cd	Use separate in and out pointers in `secp256k1_ec_pubkey_decompress` ... Right now `secp256k1_ec_pubkey_decompress` takes an in/out pointer to a public key and replaces the input key with its decompressed variant. This forces users who store compressed keys in small (<65 byte) fixed size buffers (for example, the Rust bindings do this) to explicitly and wastefully copy their key to a larger buffer. [API BREAK]	10 years ago
Pieter Wuille	a1d5ae1527	Tiny optimization	10 years ago
Pieter Wuille	729badff14	Merge pull request #210 ... 2d5a186 Apply effective-affine trick to precomp (Peter Dettman) 4f9791a Effective affine addition in EC multiplication (Peter Dettman)	10 years ago
Peter Dettman	2d5a186cee	Apply effective-affine trick to precomp	10 years ago