60 Commits (3d7d99a3e38ee235c6bbb2ba336074ab4553a41d)

Author	SHA1	Message	Date
Saleem Rashid	b41a51805f	Use hasher_Raw instead of sha256_Raw	7 years ago
Pavol Rusnak	95a522bf1a	fix typo	7 years ago
Jochen Hoenicke	a5653dafe7	Increased length of addresses	7 years ago
Pavol Rusnak	af06a997cb	refactor ecdsa_get_address_segwit_p2sh{,_raw}	7 years ago
Pavol Rusnak	c950342063	refactor hdnode_public_ckd_address_optimized	7 years ago
Pavol Rusnak	a820a5601b	split rfc6979 from ecdsa into separate module	7 years ago
Pavol Rusnak	a8aacac6be	ecdsa: rand -> rnd	7 years ago
Jochen Hoenicke	d3d88591d0	Added co-signing for ed25519.	7 years ago
Jochen Hoenicke	949220ac0b	Protect signing against side-channel attack (#81) ... Signing uses the bn_inverse function that is prone to side-channel attacks. We randomize its argument by multiplying it with a random non-zero number. At the end we multiply again by the same number to cancel it out. Changed get_k_random to take the prime range as a second argument and to return a non-zero number. This function was previously only used for (non-rfc6979) signing and is now used for side-channel protection.	8 years ago
Pavol Rusnak	bb61fb75d8	segwit address sizes	8 years ago
Pavol Rusnak	cf21bb2fbf	refactor ECDH multiplication into ecdh_multiply function	8 years ago
Pavol Rusnak	ed755120af	fix broken test_speed	8 years ago
Pavol Rusnak	8764e26368	ecdsa_address_decode now needs version	8 years ago
Pavol Rusnak	430a5087c8	introduce MAX_ADDR_RAW_SIZE and MAX_WIF_RAW_SIZE macros	8 years ago
Pavol Rusnak	d10ec230c0	add support for multibyte address versions	8 years ago
Jochen Hoenicke	133c068f37	Reworked rfc6979 signing. (#72) ... This adds an is_canonic parameter to all sign functions. This is a callback that determines if a signature corresponds to some coin specific rules. It is used, e. g., by ethereum (where the recovery byte must be 0 or 1, and not 2 or 3) and or steem signatures (which require both r and s to be between 2^248 and 2^255). This also separates the initialization and the step function of the random number generator, making it easy to restart the signature process with the next random number.	8 years ago
Jochen Hoenicke	f4ed55377d	Moved get_ethereum_address from ecdsa to bip32 ... The new name of the function is `hdnode_get_ethereum_address` and it gets a hdnode as input as opposed to a public key. This also avoids first computing the compressed public key and then uncompressing it. Test cases were adapted to work with new function. The test-vectors are the same as for bip32 and independently checked with an adhoc python implementation.	8 years ago
Alex Beregszaszi	1b8e3d557f	Implement ecdsa_get_ethereum_pubkeyhash()	8 years ago
Alex Beregszaszi	7d68a6ee17	Add ecdsa_uncompress_pubkey() ... Code based on @Arachnid's PR, but has more strict checks	8 years ago
Jochen Hoenicke	409783ba64	New function ecdsa_verify_recover ... Moved the code from Trezor firmware to here for recovering the public key when verifying a bitcoin message. Fixed the signing and verification for the unlikely case the r value overflows.	8 years ago
Jochen Hoenicke	698f40f385	BIP-32 without gaps, prepare non-ecdsa curves ... * Split ecdsa_curve into curve_info and ecdsa_curve to support bip32 on curves that don't have a ecdsa_curve. * Don't fail in key derivation but retry with a new hash. * Adapted test case accordingly	8 years ago
Jochen Hoenicke	0bc1b70c4a	Use different seed modifier for different curves	8 years ago
Jochen Hoenicke	f2081d88d8	New jacobian_add that handles doubling. ... Fix bug where jacobian_add is called with two identical points.	9 years ago
Pavol Rusnak	2e09a9ff35	add b to ecdsa_curve structure	9 years ago
Pavol Rusnak	d659fd49a5	return back normalization of signatures	9 years ago
Roman Zeyde	7c58fc11a4	Add support for NIST256P1 elliptic curve ... This enables SSH ECDSA public key authentication.	9 years ago
Dustin Laurence	8ce1f34233	Add prototypes for private functions	10 years ago
Pavol Rusnak	89a7d7797b	replace base58 implementation	10 years ago
Pavol Rusnak	b4cdba8489	export pby from ecdsa_sign functions	10 years ago
Pavol Rusnak	df3606dd5e	introduce ecdsa_get_address_raw	10 years ago
Pavol Rusnak	b9d5896174	make pubkey validation optional, extract options to separate header	10 years ago
Ondrej Mikle	03fee34550	Validating of public key curve point.	10 years ago
Ondrej Mikle	d827b2c862	Account for case when point.y == 0 when doubling.	10 years ago
Ondrej Mikle	da6a09880d	Handling of special cases in EC arithmetic.	10 years ago
Pavol Rusnak	5e9cd15527	use new base58 code for address functions, add function for obtaining wif	10 years ago
Pavol Rusnak	612f5ab050	fix copyright headers	10 years ago
Pavol Rusnak	b5ceb14f8d	extract ecdsa_get_pubkeyhash	11 years ago
Pavol Rusnak	6a856479a8	introduce point_multiply	11 years ago
Pavol Rusnak	fc144587e6	introduce ecdsa_verify_digest	11 years ago
Pavol Rusnak	8aaebe761b	introduce uncompress_coords	11 years ago
Pavol Rusnak	81f462a5c5	add ecdsa_sig_to_der	11 years ago
Pavol Rusnak	73489fbd33	split signing into ecdsa_sign_digest and ecdsa_sign/ecdsa_sign_double	11 years ago
Pavol Rusnak	a40a077613	rework ecdsa_address_to_hash160 into ecdsa_address_decode	11 years ago
Pavol Rusnak	2e4ec7fe0a	introduce ecdsa_address_to_hash160	11 years ago
Pavol Rusnak	ed7e2e5058	implement public child key derivation	11 years ago
Pavol Rusnak	9da3b35962	extract xprv_fill_public method	11 years ago
Pavol Rusnak	0fc4ad0976	move declaration	11 years ago
Pavol Rusnak	f87e706407	add define for RFC6979	11 years ago
Pavol Rusnak	71ff1c5124	replace infinite loops with loops with counters	11 years ago
Pavol Rusnak	f4f246f3d7	optimize computations	11 years ago