Miguel Oliveira
9e32bf67f5
Add SHA256
2022-03-06 21:27:27 -03:00
Miguel Oliveira
671087dd0e
Move internal module notice into long description
2022-03-05 13:43:19 -03:00
Miguel Oliveira
fc5a35c404
Tag internal modules as internal
2022-03-05 13:20:25 -03:00
Miguel Oliveira
264b111d82
Document BLAKE3, ChaCha20 and AEAD
2022-03-05 13:01:30 -03:00
Miguel Oliveira
238058e46f
Add Poly1305 tag verification
2022-03-05 12:24:33 -03:00
Miguel Oliveira
474d62d082
Update docs
2022-03-05 12:23:51 -03:00
Miguel Oliveira
54b821c091
Give up on masking for now
...
X25519c can be attacked by replying several times with invalid data.
This is hard to defend against in the API level without denying service
and using some hard-to-understand semantics.
Masked primitives are gone for now, some countermeasures have been moved
into their respective "regular" impls. I don't think that it's worth it
to care that much about side channels in CC. I haven't seen or managed
to mount any practical attacks myself. The further move away from Cobalt
will probably make them even harder to mount.
2022-03-05 12:03:08 -03:00
Miguel Oliveira
ed8f66070f
Add masking docs
2022-03-04 13:30:46 -03:00
Miguel Oliveira
206f8474ff
Separate masked Fq multiply from unwrap
2022-03-04 13:19:51 -03:00
Miguel Oliveira
1019623aec
Fix wrong filename in random.lua
2022-03-04 12:47:35 -03:00
Miguel Oliveira
4c52aa8774
Improve Ed25519c masking
2022-03-04 12:31:51 -03:00
Miguel Oliveira
3c2a5ad4ee
Add masked Ed25519
2022-03-04 12:20:36 -03:00
Miguel Oliveira
d3f04036c7
Split Fq masking internals
2022-03-04 12:20:10 -03:00
Miguel Oliveira
8335ddc81c
Split Ed25519 internals
2022-03-04 11:46:26 -03:00
Miguel Oliveira
8926bda1bb
Remove Fq inversion
2022-03-03 16:17:29 -03:00
Miguel Oliveira
292663b4a5
Update docs
2022-03-03 16:15:57 -03:00
Miguel Oliveira
f6fd56cb9a
Remove unused imports
2022-03-03 15:26:19 -03:00
Miguel Oliveira
c996452b07
Update docs
2022-03-02 19:46:20 -03:00
Miguel Oliveira
993ddb63a0
Update docs
2022-03-02 17:36:59 -03:00
Miguel Oliveira
c246b53d7b
Implement Ed25519 exports
2022-03-02 17:29:50 -03:00
Miguel Oliveira
e0fd019b97
Switch to older Fp code
2022-03-02 17:29:26 -03:00
Miguel Oliveira
59647d1a96
Move clamped Fq decoding into fq.lua
2022-03-02 15:18:28 -03:00
Miguel Oliveira
d06c4309cf
Rename X25519c secret key arguments
2022-03-02 15:02:15 -03:00
Miguel Oliveira
f605de3f0d
Rework ladders for X25519 and X25519c
2022-03-02 14:59:50 -03:00
Miguel Oliveira
501e81a36a
Add masked X25519
2022-03-02 13:51:51 -03:00
Miguel Oliveira
eae7c91453
Reformat
...
Fair enough.
2022-03-01 20:51:18 -03:00
Miguel Oliveira
dba5fcc1ab
Split X25519 internals
2022-03-01 20:46:44 -03:00
Miguel Oliveira
ccb0d8cea6
Move internal modules into another directory
2022-03-01 20:43:53 -03:00
Miguel Oliveira
981cd0dec9
Stop bringing Fp functions into scope
...
Performance overhead is probably negligible (except for minified size).
Might change this later.
2022-03-01 20:36:55 -03:00
Miguel Oliveira
7fa854c06b
Remove Ed25519 exports for now
...
Old exports used masking which isn't supported anymore.
2022-03-01 20:34:04 -03:00
Miguel Oliveira
03f8835eb2
Clean up Fq exports
2022-03-01 20:32:24 -03:00
Miguel Oliveira
a6c7ac2dad
Move rebaseLE to its own module
2022-03-01 20:29:30 -03:00
Miguel Oliveira
43a58ebd5e
Add Ed25519
2022-03-01 20:27:38 -03:00
Miguel Oliveira
03c2db100f
Fix module imports
2022-03-01 20:27:22 -03:00
Miguel Oliveira
3ea90b786b
Initial commit
2022-03-01 20:08:55 -03:00
