History

Andrew Kozlik 13de099bc1 refactor(core): Improve parameter naming in ed25519_sign_ext(). [no changelog]		2 months ago
..
aes	…
chacha20poly1305	…
ed25519-donna	refactor(core): Improve parameter naming in ed25519_sign_ext().	2 months ago
fuzzer	…
gui	…
monero	…
tests	…
tools	fix(crypto): fix wrong input handling in mktable	3 years ago
.gitignore	…
.gitmodules	…
.gitrepo	…
AUTHORS	MONOREPO MERGE trezor-crypto	6 years ago
CONTRIBUTORS	…
LICENSE	…
Makefile	…
README.md	revert(crypto): remove BCH Schnorr signatures	3 years ago
address.c	…
address.h	feat(core,legacy): add support for Ethereum 64-bit chain_id	3 years ago
base32.c	…
base32.h	MONOREPO MERGE trezor-crypto	6 years ago
base58.c	chore(crypto): remove graphene base58 functions as they are not used anywhere	2 years ago
base58.h	…
bignum.c	fix(crypto): fix assertion	12 months ago
bignum.h	…
bip32.c	refactor(crypto): Clean up ed25519_publickey_ext() API.	2 years ago
bip32.h	…
bip39.c	…
bip39.h	…
bip39_english.c	chore: rename BIP39_WORDS to BIP39_WORD_COUNT	2 years ago
blake2_common.h	feat(crypto): add big endian support	3 years ago
blake2b.c	…
blake2b.h	…
blake2s.c	crypto: explicitly initialize variables	5 years ago
blake2s.h	MONOREPO MERGE trezor-crypto	6 years ago
blake256.c	fix(crypto): Fix incorrect handling of empty input in blake256_Update().	3 years ago
blake256.h	all: remove extraneous whitespace	5 years ago
buffer.c	feat(core/prodtest): Verify device certificate chain in CERTDEV WRITE.	10 months ago
buffer.h	feat(core/prodtest): Verify device certificate chain in CERTDEV WRITE.	10 months ago
byte_order.h	feat(crypto): add big endian support	3 years ago
cardano.c	feat(crypto/cardano): implement Cardano Ledger derivation	3 years ago
cardano.h	refactor(crypto): extract Cardano derivations to separate file	3 years ago
cash_addr.c	…
cash_addr.h	…
chacha_drbg.c	…
chacha_drbg.h	…
check_mem.h	MONOREPO MERGE trezor-crypto	6 years ago
curves.c	feat(crypto/cardano): implement Cardano Ledger derivation	3 years ago
curves.h	feat(crypto/cardano): implement Cardano Ledger derivation	3 years ago
der.c	…
der.h	…
ecdsa.c	…
ecdsa.h	…
ecdsa_internal.h	refactor: Unify secp256k1_zkp usage.	1 year ago
elligator2.c	feat(crypto): implement elligator2	4 months ago
elligator2.h	feat(crypto): implement elligator2	4 months ago
groestl.c	…
groestl.h	…
groestl_internal.h	…
hash_to_curve.c	…
hash_to_curve.h	…
hasher.c	feat(crypto): Add TapSigHash to Hasher.	3 years ago
hasher.h	feat(crypto): Add TapSigHash to Hasher.	3 years ago
hmac.c	…
hmac.h	MONOREPO MERGE trezor-crypto	6 years ago
hmac_drbg.c	…
hmac_drbg.h	…
memzero.c	fix(crypto): update case of windows.h (#1560 )	4 years ago
memzero.h	MONOREPO MERGE trezor-crypto	6 years ago
nem.c	feat(crypto): add thousands separator to bn_format	2 years ago
nem.h	MONOREPO MERGE trezor-crypto	6 years ago
nist256p1.c	…
nist256p1.h	…
nist256p1.table	…
options.h	…
pbkdf2.c	…
pbkdf2.h	MONOREPO MERGE trezor-crypto	6 years ago
rand.c	feat(core): Integrate Optiga into PIN verification.	12 months ago
rand.h	…
rc4.c	MONOREPO MERGE trezor-crypto	6 years ago
rc4.h	…
rfc6979.c	…
rfc6979.h	…
ripemd160.c	…
ripemd160.h	MONOREPO MERGE trezor-crypto	6 years ago
script.c	crypto: explicitly initialize variables	5 years ago
script.h	…
secp256k1.c	crypto/bignum: change limb size to 29, add tests	4 years ago
secp256k1.h	MONOREPO MERGE trezor-crypto	6 years ago
secp256k1.table	…
segwit_addr.c	chore(core): Use C implementation of Bech32 decode.	2 years ago
segwit_addr.h	…
setup.py	MONOREPO MERGE trezor-crypto	6 years ago
sha2.c	…
sha2.h	feat(crypto): Implement sha384_Raw().	1 year ago
sha3.c	feat(crypto): Sanitize undefined behavior.	3 years ago
sha3.h	MONOREPO MERGE trezor-crypto	6 years ago
shamir.c	…
shamir.h	…
slip39.c	chore(crypto): refactor slip39 same way as bip39	1 year ago
slip39.h	…
slip39_english.c	chore(crypto): refactor slip39 same way as bip39	1 year ago
slip39_wordlist.h	…
tls_prf.c	feat(crypto): Implement TLS PRF with SHA-256.	1 year ago
tls_prf.h	…
zkp_bip340.c	fix(crypto): imporve handling of return value	5 months ago
zkp_bip340.h	…
zkp_context.c	…
zkp_context.h	refactor(crypto): expose zkp_context_is_initialized	3 years ago
zkp_ecdsa.c	…
zkp_ecdsa.h	…

README.md

trezor-crypto

Heavily optimized cryptography algorithms for embedded devices.

These include:

AES/Rijndael encryption/decryption
Big Number (256 bit) Arithmetics
BIP32 Hierarchical Deterministic Wallets
BIP39 Mnemonic code
ECDSA signing/verifying (supports secp256k1 and nist256p1 curves, uses RFC6979 for deterministic signatures)
ECDSA public key derivation
BIP340 Schnorr signature signing/verifying
Base32 (RFC4648 and custom alphabets)
Base58 address representation
Ed25519 signing/verifying (also SHA3 and Keccak variants)
ECDH using secp256k1, nist256p1 and Curve25519
HMAC-SHA256 and HMAC-SHA512
PBKDF2
RIPEMD-160
SHA1
SHA2-256/SHA2-512
SHA3/Keccak
BLAKE2s/BLAKE2b
Chacha20-Poly1305
unit tests (using Check - check.sf.net; in test_check.c)
tests against OpenSSL (in test_openssl.c)
integrated Wycheproof tests

Distibuted under MIT License.

Some parts of the library come from external sources:

AES: https://github.com/BrianGladman/aes
Base58: https://github.com/luke-jr/libbase58
BLAKE2s/BLAKE2b: https://github.com/BLAKE2/BLAKE2
RIPEMD-160: https://github.com/ARMmbed/mbedtls
SHA1/SHA2: http://www.aarongifford.com/computers/sha.html
SHA3: https://github.com/rhash/RHash
Curve25519: https://github.com/agl/curve25519-donna
Ed25519: https://github.com/floodyberry/ed25519-donna
Chacha20: https://github.com/wg/c20p1305
Poly1305: https://github.com/floodyberry/poly1305-donna