History

Andrew Kozlik 1e53a84cfc chore(crypto): Zero-initialize stack variables in AES code.		4 weeks ago
..
aes	chore(crypto): Zero-initialize stack variables in AES code.	4 weeks ago
chacha20poly1305	fix(crypto): add missing license to crypto/chacha20poly1305	2 years ago
ed25519-donna	fix(crypto): add missing header for size_t	3 months ago
fuzzer	refactor: Unify secp256k1_zkp usage.	10 months ago
gui	build: add bip39_english.o where appropriate	2 years ago
monero	fix(xmr): fix tx sending to an integrated address	2 years ago
tests	test(crypto): Add AES-GCM tests.	4 weeks ago
tools	…
.gitignore	…
.gitmodules	…
.gitrepo	…
AUTHORS	…
CONTRIBUTORS	…
LICENSE	…
Makefile	test(crypto): Add AES-GCM tests.	4 weeks ago
README.md	revert(crypto): remove BCH Schnorr signatures	2 years ago
address.c	feat(crypto): add thousands separator to bn_format	2 years ago
address.h	…
base32.c	…
base32.h	…
base58.c	chore(crypto): remove graphene base58 functions as they are not used anywhere	2 years ago
base58.h	chore(crypto): remove graphene base58 functions as they are not used anywhere	2 years ago
bignum.c	fix(crypto): fix assertion	7 months ago
bignum.h	feat(crypto): introduce bn_read_be_512	7 months ago
bip32.c	refactor(crypto): Clean up ed25519_publickey_ext() API.	2 years ago
bip32.h	feat(crypto): API for clearing internal caches	2 years ago
bip39.c	fix(crypto): Fix bip39 out of bounds read.	2 years ago
bip39.h	chore: rename BIP39_WORDS to BIP39_WORD_COUNT	2 years ago
bip39_english.c	chore: rename BIP39_WORDS to BIP39_WORD_COUNT	2 years ago
blake2_common.h	…
blake2b.c	…
blake2b.h	…
blake2s.c	…
blake2s.h	…
blake256.c	…
blake256.h	…
buffer.c	feat(core/prodtest): Verify device certificate chain in CERTDEV WRITE.	5 months ago
buffer.h	feat(core/prodtest): Verify device certificate chain in CERTDEV WRITE.	5 months ago
byte_order.h	…
cardano.c	…
cardano.h	…
cash_addr.c	…
cash_addr.h	…
chacha_drbg.c	…
chacha_drbg.h	…
check_mem.h	…
curves.c	…
curves.h	…
der.c	feat(crypto): Use entire DER encoding in DER_ITEM.	5 months ago
der.h	feat(core/prodtest): Check device certificate chain integrity using authority key identifier.	5 months ago
ecdsa.c	feat(crypto): Use strict DER-decoding in ecdsa_sig_from_der().	5 months ago
ecdsa.h	…
ecdsa_internal.h	refactor: Unify secp256k1_zkp usage.	10 months ago
groestl.c	feat(crypto): Sanitize undefined behavior.	2 years ago
groestl.h	…
groestl_internal.h	…
hash_to_curve.c	feat(crypto): implement hashing to curve	7 months ago
hash_to_curve.h	feat(crypto): implement hashing to curve	7 months ago
hasher.c	…
hasher.h	…
hmac.c	…
hmac.h	…
hmac_drbg.c	…
hmac_drbg.h	…
memzero.c	…
memzero.h	…
nem.c	feat(crypto): add thousands separator to bn_format	2 years ago
nem.h	…
nist256p1.c	…
nist256p1.h	…
nist256p1.table	…
options.h	feat(crypto): Add basic DER decoding functions.	5 months ago
pbkdf2.c	…
pbkdf2.h	…
rand.c	feat(core): Integrate Optiga into PIN verification.	7 months ago
rand.h	feat(core): Integrate Optiga into PIN verification.	7 months ago
rc4.c	…
rc4.h	…
rfc6979.c	fix(crypto): reduce digest in RFC6979 to match specification	2 years ago
rfc6979.h	fix(crypto): reduce digest in RFC6979 to match specification	2 years ago
ripemd160.c	…
ripemd160.h	…
script.c	…
script.h	…
secp256k1.c	…
secp256k1.h	…
secp256k1.table	…
segwit_addr.c	chore(core): Use C implementation of Bech32 decode.	2 years ago
segwit_addr.h	chore(core): Use C implementation of Bech32 decode.	2 years ago
setup.py	…
sha2.c	feat(crypto): Implement sha384_Raw().	8 months ago
sha2.h	feat(crypto): Implement sha384_Raw().	8 months ago
sha3.c	feat(crypto): Sanitize undefined behavior.	2 years ago
sha3.h	…
shamir.c	…
shamir.h	…
slip39.c	chore(crypto): refactor slip39 same way as bip39	12 months ago
slip39.h	chore(crypto): refactor slip39 same way as bip39	12 months ago
slip39_english.c	chore(crypto): refactor slip39 same way as bip39	12 months ago
slip39_wordlist.h	chore(crypto): refactor slip39 same way as bip39	12 months ago
tls_prf.c	feat(crypto): Implement TLS PRF with SHA-256.	8 months ago
tls_prf.h	feat(crypto): Implement TLS PRF with SHA-256.	8 months ago
zkp_bip340.c	refactor(crypto): remove code that is duplicated in secp256k1-zkp submodule	2 years ago
zkp_bip340.h	feat(legacy): verify bip340 pubkeys used in p2tr addresses	2 years ago
zkp_context.c	feat(crypto): remove -Wstrict-prototypes issues in zkp_context.c	2 years ago
zkp_context.h	…
zkp_ecdsa.c	feat(crypto): Support is_canonical parameter in zkp_ecdsa_sign_digest().	10 months ago
zkp_ecdsa.h	…

README.md

trezor-crypto

Heavily optimized cryptography algorithms for embedded devices.

These include:

AES/Rijndael encryption/decryption
Big Number (256 bit) Arithmetics
BIP32 Hierarchical Deterministic Wallets
BIP39 Mnemonic code
ECDSA signing/verifying (supports secp256k1 and nist256p1 curves, uses RFC6979 for deterministic signatures)
ECDSA public key derivation
BIP340 Schnorr signature signing/verifying
Base32 (RFC4648 and custom alphabets)
Base58 address representation
Ed25519 signing/verifying (also SHA3 and Keccak variants)
ECDH using secp256k1, nist256p1 and Curve25519
HMAC-SHA256 and HMAC-SHA512
PBKDF2
RIPEMD-160
SHA1
SHA2-256/SHA2-512
SHA3/Keccak
BLAKE2s/BLAKE2b
Chacha20-Poly1305
unit tests (using Check - check.sf.net; in test_check.c)
tests against OpenSSL (in test_openssl.c)
integrated Wycheproof tests

Distibuted under MIT License.

Some parts of the library come from external sources:

AES: https://github.com/BrianGladman/aes
Base58: https://github.com/luke-jr/libbase58
BLAKE2s/BLAKE2b: https://github.com/BLAKE2/BLAKE2
RIPEMD-160: https://github.com/ARMmbed/mbedtls
SHA1/SHA2: http://www.aarongifford.com/computers/sha.html
SHA3: https://github.com/rhash/RHash
Curve25519: https://github.com/agl/curve25519-donna
Ed25519: https://github.com/floodyberry/ed25519-donna
Chacha20: https://github.com/wg/c20p1305
Poly1305: https://github.com/floodyberry/poly1305-donna