trezor-firmware/crypto/README.md

trezor-crypto

Heavily optimized cryptography algorithms for embedded devices.

These include:

• AES/Rijndael encryption/decryption
• Big Number (256 bit) Arithmetics
• BIP32 Hierarchical Deterministic Wallets
• BIP39 Mnemonic code
• ECDSA signing/verifying (supports secp256k1 and nist256p1 curves, uses RFC6979 for deterministic signatures)
• ECDSA public key derivation
• BIP340 Schnorr signature signing/verifying
• Base32 (RFC4648 and custom alphabets)
• Base58 address representation
• Ed25519 signing/verifying (also SHA3 and Keccak variants)
• ECDH using secp256k1, nist256p1 and Curve25519
• HMAC-SHA256 and HMAC-SHA512
• PBKDF2
• RIPEMD-160
• SHA1
• SHA2-256/SHA2-512
• SHA3/Keccak
• BLAKE2s/BLAKE2b
• Chacha20-Poly1305
• unit tests (using Check - check.sf.net; in test_check.c)
• tests against OpenSSL (in test_openssl.c)
• integrated Wycheproof tests

Distibuted under MIT License.

Some parts of the library come from external sources:

• AES: https://github.com/BrianGladman/aes
• Base58: https://github.com/luke-jr/libbase58
• BLAKE2s/BLAKE2b: https://github.com/BLAKE2/BLAKE2
• RIPEMD-160: https://github.com/ARMmbed/mbedtls
• SHA1/SHA2: http://www.aarongifford.com/computers/sha.html
• SHA3: https://github.com/rhash/RHash
• Curve25519: https://github.com/agl/curve25519-donna
• Ed25519: https://github.com/floodyberry/ed25519-donna
• Chacha20: https://github.com/wg/c20p1305
• Poly1305: https://github.com/floodyberry/poly1305-donna