History

Pavol Rusnak c0510fc91e build(crypto): make valgrind flag compatible with secp256k1-zkp (#2027 ) Co-authored-by: Ondřej Vejpustek <ondrej.vejpustek@satoshilabs.com>		2 years ago
..
aes	fix(crypto): fix build on clang/arm64	3 years ago
chacha20poly1305	feat(core): make chacha_drbg more robust	3 years ago
ed25519-donna	fix(crypto): Clean up stack in ed25519.c.	3 years ago
fuzzer	crypto: new iteration of fuzz testing code, improved dictionary script, minor documentation changes	3 years ago
gui	all: rename TREZOR to Trezor where possible	5 years ago
monero	fix(crypto): clarify incorrect base58.c code comment	2 years ago
tests	build(crypto): make valgrind flag compatible with secp256k1-zkp (#2027 )	2 years ago
tools	fix(crypto): fix wrong input handling in mktable	2 years ago
.gitignore	toplevel: reorganize .gitignore files	5 years ago
.gitmodules	MONOREPO MERGE trezor-crypto	5 years ago
.gitrepo	git subrepo pull crypto	5 years ago
AUTHORS	MONOREPO MERGE trezor-crypto	5 years ago
CONTRIBUTORS	crypto: add fuzz testing harnesses and documentation	4 years ago
LICENSE	MONOREPO MERGE trezor-crypto	5 years ago
Makefile	build(crypto): make valgrind flag compatible with secp256k1-zkp (#2027 )	2 years ago
README.md	Add support for Schnorr crypto (BCH variant)	3 years ago
address.c	feat(core,legacy): add support for Ethereum 64-bit chain_id	3 years ago
address.h	feat(core,legacy): add support for Ethereum 64-bit chain_id	3 years ago
base32.c	crypto: explicitly initialize variable length arrays	5 years ago
base32.h	MONOREPO MERGE trezor-crypto	5 years ago
base58.c	crypto: Fix buffer overflow in b58tobin.	4 years ago
base58.h	MONOREPO MERGE trezor-crypto	5 years ago
bignum.c	fix(crypto): revert to bitwise OR operator and silence warning	2 years ago
bignum.h	style(crypto): cleanup unused functions	3 years ago
bip32.c	feat(crypto/cardano): implement Cardano Ledger derivation	2 years ago
bip32.h	refactor(crypto): extract Cardano derivations to separate file	2 years ago
bip39.c	feat(crypto): support all bip39 lengths in mnemonic_to_bits	2 years ago
bip39.h	Refactor mnemonic_to_entropy to not (misleadingly) return checksum	3 years ago
bip39_english.h	MONOREPO MERGE trezor-crypto	5 years ago
blake2_common.h	feat(crypto): add big endian support	3 years ago
blake2b.c	crypto: explicitly initialize variables	5 years ago
blake2b.h	MONOREPO MERGE trezor-crypto	5 years ago
blake2s.c	crypto: explicitly initialize variables	5 years ago
blake2s.h	MONOREPO MERGE trezor-crypto	5 years ago
blake256.c	fix(crypto): Fix incorrect handling of empty input in blake256_Update().	3 years ago
blake256.h	all: remove extraneous whitespace	5 years ago
byte_order.h	feat(crypto): add big endian support	3 years ago
cardano.c	feat(crypto/cardano): implement Cardano Ledger derivation	2 years ago
cardano.h	refactor(crypto): extract Cardano derivations to separate file	2 years ago
cash_addr.c	crypto: explicitly initialize variables	5 years ago
cash_addr.h	MONOREPO MERGE trezor-crypto	5 years ago
chacha_drbg.c	feat(core): make chacha_drbg more robust	3 years ago
chacha_drbg.h	feat(core): make chacha_drbg more robust	3 years ago
check_mem.h	MONOREPO MERGE trezor-crypto	5 years ago
curves.c	feat(crypto/cardano): implement Cardano Ledger derivation	2 years ago
curves.h	feat(crypto/cardano): implement Cardano Ledger derivation	2 years ago
ecdsa.c	fix(crypto,core,legacy): Check private key validity when deriving public key.	3 years ago
ecdsa.h	refactor(core,crypto): make public key derivation functions return	3 years ago
groestl.c	crypto: explicitly initialize variables	5 years ago
groestl.h	ci: enable editorconfig checks, fix whitespace issues	4 years ago
groestl_internal.h	fix(crypto): fix build on clang/arm64	3 years ago
hasher.c	feat(crypto): Add TapSigHash to Hasher.	2 years ago
hasher.h	feat(crypto): Add TapSigHash to Hasher.	2 years ago
hmac.c	crypto: explicitly initialize variables	5 years ago
hmac.h	MONOREPO MERGE trezor-crypto	5 years ago
hmac_drbg.c	crypto: explicitly initialize variables	5 years ago
hmac_drbg.h	crypto/hmac_drbg: Fix style.	5 years ago
memzero.c	fix(crypto): update case of windows.h (#1560 )	3 years ago
memzero.h	MONOREPO MERGE trezor-crypto	5 years ago
nem.c	crypto: explicitly initialize variables	5 years ago
nem.h	MONOREPO MERGE trezor-crypto	5 years ago
nist256p1.c	crypto/bignum: change limb size to 29, add tests	4 years ago
nist256p1.h	MONOREPO MERGE trezor-crypto	5 years ago
nist256p1.table	crypto/bignum: change limb size to 29, add tests	4 years ago
options.h	MONOREPO MERGE trezor-crypto	5 years ago
pbkdf2.c	crypto: explicitly initialize variables	5 years ago
pbkdf2.h	MONOREPO MERGE trezor-crypto	5 years ago
rand.c	crypto: explicitly initialize variables	5 years ago
rand.h	MONOREPO MERGE trezor-crypto	5 years ago
rc4.c	MONOREPO MERGE trezor-crypto	5 years ago
rc4.h	MONOREPO MERGE trezor-crypto	5 years ago
rfc6979.c	crypto: explicitly initialize variables	5 years ago
rfc6979.h	crypto/rfc6979: Use the new HMAC DRBG implementation in rfc6979.c. Remove code duplication between rfc6979.c and ecdsa.c.	5 years ago
ripemd160.c	crypto: explicitly initialize variables	5 years ago
ripemd160.h	MONOREPO MERGE trezor-crypto	5 years ago
schnorr.c	fix(crypto,core,legacy): Check private key validity when deriving public key.	3 years ago
schnorr.h	Add support for Schnorr crypto (BCH variant)	3 years ago
script.c	crypto: explicitly initialize variables	5 years ago
script.h	MONOREPO MERGE trezor-crypto	5 years ago
secp256k1.c	crypto/bignum: change limb size to 29, add tests	4 years ago
secp256k1.h	MONOREPO MERGE trezor-crypto	5 years ago
secp256k1.table	crypto/bignum: change limb size to 29, add tests	4 years ago
segwit_addr.c	feat(crypto): update segwit_addr to support Bech32m	3 years ago
segwit_addr.h	feat(crypto): update segwit_addr to support Bech32m	3 years ago
setup.py	MONOREPO MERGE trezor-crypto	5 years ago
sha2.c	feat(crypto): Add key tweaking functions to zkp_bip340.c.	2 years ago
sha2.h	feat(crypto): Add key tweaking functions to zkp_bip340.c.	2 years ago
sha3.c	fix(crypto): fix undefined behaviour of IS_ALIGNED_64 macro	3 years ago
sha3.h	MONOREPO MERGE trezor-crypto	5 years ago
shamir.c	crypto: fix undefined behavior in shamir unbitslice (#1219 )	4 years ago
shamir.h	crypto/shamir: Add copyright.	5 years ago
slip39.c	chore(crypto): Rework SLIP-39 word lookup.	3 years ago
slip39.h	fix(crypto): Improve naming and robustness of SLIP39's T9 mask lookup.	3 years ago
slip39_wordlist.h	chore(crypto): Rework SLIP-39 word lookup.	3 years ago
zkp_bip340.c	refactor(crypto): make secp256k1_context_writable_randomize() return status	2 years ago
zkp_bip340.h	feat(crypto): Add key tweaking functions to zkp_bip340.c.	2 years ago
zkp_context.c	fix(crypto): assign NULL to zkp_context after is is destroyed	2 years ago
zkp_context.h	refactor(crypto): expose zkp_context_is_initialized	2 years ago
zkp_ecdsa.c	refactor(crypto): make secp256k1_context_writable_randomize() return status	2 years ago
zkp_ecdsa.h	refactor(core,crypto): make public key derivation functions return	3 years ago

README.md

trezor-crypto

Heavily optimized cryptography algorithms for embedded devices.

These include:

AES/Rijndael encryption/decryption
Big Number (256 bit) Arithmetics
BIP32 Hierarchical Deterministic Wallets
BIP39 Mnemonic code
ECDSA signing/verifying (supports secp256k1 and nist256p1 curves, uses RFC6979 for deterministic signatures)
ECDSA public key derivation
Schnorr (BCH variant) signing/verifying
Base32 (RFC4648 and custom alphabets)
Base58 address representation
Ed25519 signing/verifying (also SHA3 and Keccak variants)
ECDH using secp256k1, nist256p1 and Curve25519
HMAC-SHA256 and HMAC-SHA512
PBKDF2
RIPEMD-160
SHA1
SHA2-256/SHA2-512
SHA3/Keccak
BLAKE2s/BLAKE2b
Chacha20-Poly1305
unit tests (using Check - check.sf.net; in test_check.c)
tests against OpenSSL (in test_openssl.c)
integrated Wycheproof tests

Distibuted under MIT License.

Some parts of the library come from external sources:

AES: https://github.com/BrianGladman/aes
Base58: https://github.com/luke-jr/libbase58
BLAKE2s/BLAKE2b: https://github.com/BLAKE2/BLAKE2
RIPEMD-160: https://github.com/ARMmbed/mbedtls
SHA1/SHA2: http://www.aarongifford.com/computers/sha.html
SHA3: https://github.com/rhash/RHash
Curve25519: https://github.com/agl/curve25519-donna
Ed25519: https://github.com/floodyberry/ed25519-donna
Chacha20: https://github.com/wg/c20p1305
Poly1305: https://github.com/floodyberry/poly1305-donna