389 Commits (54cc18c4935a1566fd0407e74deaf4dc542a33df)

 

All Branches   

Search

Author	SHA1	Message	Date
Jochen Hoenicke	ec057a5102	"More" constant time point multiplication ... About the same speed, about the same precomputation table requirements. Simpler code.	10 years ago
Jochen Hoenicke	eb6e74f361	Improve speed of scalar_multiply. ... We also allow for substracting values to be able to do 3 bits at a time.	10 years ago
Jochen Hoenicke	d4788bddfd	Added modulus to bn_subtractmod	10 years ago
Jochen Hoenicke	62b95ee414	Optimized conversion functions. ... Also added a few more comments	10 years ago
Jochen Hoenicke	7d4cf5cedd	Optimized the bn_inverse method. ... The new method needs about 30 % less time for prime256k1 and is about twice as fast for other moduli. The base algorithm is the same. The code is also a bit smaller and doesn't need the 8 kb precomputed table. Important canges: 1. even/odd distinction so that we need to test only one of the numbers for being even. This also leads to less duplicated code. 2. Allow for shifting by 32 bits at a time in the even test. 3. Pack u,s and v,r into the same array, which saves a bit of stack memory. 4. Don't divide by two after subtraction; this simplifies code. 5. Abort as soon as u,v are equal, instead of subtracting them. 6. Use s instead of r after the loop; no negation needed. 7. New code that divides by 2^k fast without any precomputed values.	10 years ago
Pavol Rusnak	e37ba822e6	bn_substract -> bn_subtractmod, bn_substract_noprime -> bn_subtract ... remove dead code	10 years ago
Pavol Rusnak	cb9ccc5cf4	remove all references to USE_PUBKEY_VALIDATE	10 years ago
Pavol Rusnak	dc31cc50d2	Merge pull request #25 from jhoenicke/comments ... Added comments to the tricky algorithms.	10 years ago
Pavol Rusnak	38cfebdbfe	Merge pull request #24 from jhoenicke/master ... Always check for validity in ecdsa_read_pubkey.	10 years ago
Pavol Rusnak	98c4c788ce	Merge pull request #18 from mackler/remove-sha384-initial-H ... Remove unused static variable `sha384_initial_hash_value`.	10 years ago
Jochen Hoenicke	7e98c02afd	Added comments to the tricky algorithms. ... Added invariants for bn_multiply and bn_inverse. Explain that bn_multiply and bn_fast_mod doesn't work for an arbitrary modulus. The modulus must be close to 2^256.	10 years ago
Jochen Hoenicke	e2dd0b8e8d	Always check for validity in ecdsa_read_pubkey. ... An invalid point may crash the implementation or, worse, reveal information about the private key if used in a ECDH context (e.g. cryptoMessageEn/Decrypt). Therefore, check all user supplied points even if USE_PUBKEY_VALIDATE is not set. To improve speed, we don't check if the point lies in the main group, since the secp256k1 curve does not have any other subgroup.	10 years ago
Pavol Rusnak	92ab7504b2	add one more bip32_cache test	10 years ago
Pavol Rusnak	d814f58a3b	Merge pull request #22 from jhoenicke/master ... Make word list const	10 years ago
Jochen Hoenicke	7e7b40b434	Make word list const ... This makes the pointers to the words constant. It moves 8kb from ram to flash. It changes the return type of mnemonic_wordlist() to reflect this change. Everyone calling it should also change the type to `const char * const *`.	10 years ago
Pavol Rusnak	f4fe7c9aa5	Merge pull request #21 from jhoenicke/master ... Fix RFC6979 generation of k.	10 years ago
Jochen Hoenicke	ed9d8c1ebb	Fix RFC6979 generation of k. ... The standard says: step h: Set T to the empty sequence. while tlen < qlen V = HMAC_K(V) T = T || V k = bits2int(T) in this case (HMAC-SHA256, qlen=256bit) this simplifies to V = HMAC_K(V) T = V k = bits2int(T) and T can be omitted. The old code (wrong) did: T = HMAC_K(V) k = bits2int(T) Note that V will only be used again if the first k is out of range. Thus, the old code produced the right result with a very high probability.	10 years ago
Pavol Rusnak	54aa5a4482	Merge pull request #20 from mackler/stddef-rand ... Add `stdlib.h` to header. Needed for `size_t`.	10 years ago
Adam Mackler	82ea549661	Add `stdlib.h` to header. Needed for `size_t`.	10 years ago
Adam Mackler	cb6f976b0d	Remove unused static variable sha384_initial_hash_value.	10 years ago
Pavol Rusnak	aa1833ba3f	add stdlib to header	10 years ago
Pavol Rusnak	f4e6010e18	implement BIP32 cache	10 years ago
Pavol Rusnak	40b023b1f4	Merge pull request #17 from dllaurence/embedded_header ... Remove now-redundant embedded header	10 years ago
Dustin Laurence	1c672dca2b	Remove now-redundant embedded header	10 years ago
Pavol Rusnak	5ce27a1e1a	Merge pull request #16 from dllaurence/prototypes ... Prototypes	10 years ago
Dustin Laurence	a16992a893	Add stdbool.h	10 years ago
Dustin Laurence	8ce1f34233	Add prototypes for private functions	10 years ago
Pavol Rusnak	d57d030362	Merge pull request #15 from dllaurence/finalize_rand ... Finalize all open file descriptors	10 years ago
Dustin Laurence	ce67a85d39	Add finalize_rand() to prove we have no leaks	10 years ago
Dustin Laurence	661751ab4b	Add finalize_rand()	10 years ago
Pavol Rusnak	fb747384a0	prepare cython-TrezorCrypto for pip release	10 years ago
Pavol Rusnak	5cd4531312	make constructor of cython HDNode struct more explicit	10 years ago
Pavol Rusnak	0331a1c454	first try of cythonizing the library	10 years ago
Pavol Rusnak	8c23d62c5e	don't verify pubkey in xpubaddrgen	10 years ago
Pavol Rusnak	2880a2e3db	add break condition to xpubaddrgen	10 years ago
Pavol Rusnak	9fea8f8ab3	more fixes to readme	10 years ago
Pavol Rusnak	27a496a370	README -> README.md	10 years ago
Pavol Rusnak	280310c8a0	add xpubaddrgen utility	10 years ago
Pavol Rusnak	795579cbac	invert pby when normalizing S during signing	10 years ago
Pavol Rusnak	89a7d7797b	replace base58 implementation	10 years ago
Pavol Rusnak	c6ca89a850	simplify check in hdnode_from_xpub	10 years ago
Pavol Rusnak	10a92c3c62	use const in hdnode_from_* methods	10 years ago
Pavol Rusnak	b4cdba8489	export pby from ecdsa_sign functions	10 years ago
Pavol Rusnak	9469a64a0a	use bn_is_zero and bn_is_equal where possible	10 years ago
Pavol Rusnak	df3606dd5e	introduce ecdsa_get_address_raw	10 years ago
Pavol Rusnak	c5d9b2ea2f	remove forgotten declaration	10 years ago
Pavol Rusnak	f6560c7d13	split pbkdf2 into pbkdf2_hmac_sha256 and pbkdf2_hmac_sha512	10 years ago
Pavol Rusnak	ad8e618ed2	use $(CC) instead of gcc in Makefile	10 years ago
Pavol Rusnak	8820ae9873	add more checks for improbable cases; rework gui testing app	10 years ago
Pavol Rusnak	b9ed9a9cd4	don't include aescpp.h	10 years ago