History

Ondřej Vejpustek f4d0dd9807 fix(crypto): initialize local variables to zero in ed25519-dona		2 years ago
..
aes	fix(crypto): fix build on clang/arm64	3 years ago
chacha20poly1305	fix(crypto): add missing license to crypto/chacha20poly1305	2 years ago
ed25519-donna	fix(crypto): initialize local variables to zero in ed25519-dona	2 years ago
fuzzer	fix(crypto): Remove public key from the ed25519 signing API.	2 years ago
gui	build: add bip39_english.o where appropriate	2 years ago
monero	chore(crypto): drop support for Monero range proof	2 years ago
tests	refactor(crypto): Clean up ed25519_publickey_ext() API.	2 years ago
tools	fix(crypto): fix wrong input handling in mktable	2 years ago
.gitignore	toplevel: reorganize .gitignore files	5 years ago
.gitmodules	MONOREPO MERGE trezor-crypto	5 years ago
.gitrepo	git subrepo pull crypto	5 years ago
AUTHORS	MONOREPO MERGE trezor-crypto	5 years ago
CONTRIBUTORS	crypto: add fuzz testing harnesses and documentation	4 years ago
LICENSE	MONOREPO MERGE trezor-crypto	5 years ago
Makefile	build: add bip39_english.o where appropriate	2 years ago
README.md	revert(crypto): remove BCH Schnorr signatures	2 years ago
address.c	fix(crypto): refactor ethereum_address_checksum to prepend "0x" (#2029 )	2 years ago
address.h	feat(core,legacy): add support for Ethereum 64-bit chain_id	3 years ago
base32.c	crypto: explicitly initialize variable length arrays	5 years ago
base32.h	MONOREPO MERGE trezor-crypto	5 years ago
base58.c	crypto: Fix buffer overflow in b58tobin.	4 years ago
base58.h	MONOREPO MERGE trezor-crypto	5 years ago
bignum.c	fix(crypto): revert to bitwise OR operator and silence warning	2 years ago
bignum.h	style(crypto): cleanup unused functions	3 years ago
bip32.c	refactor(crypto): Clean up ed25519_publickey_ext() API.	2 years ago
bip32.h	feat(crypto): API for clearing internal caches	2 years ago
bip39.c	fix(crypto): Fix bip39 out of bounds read.	2 years ago
bip39.h	chore: rename BIP39_WORDS to BIP39_WORD_COUNT	2 years ago
bip39_english.c	chore: rename BIP39_WORDS to BIP39_WORD_COUNT	2 years ago
blake2_common.h	feat(crypto): add big endian support	3 years ago
blake2b.c	crypto: explicitly initialize variables	5 years ago
blake2b.h	MONOREPO MERGE trezor-crypto	5 years ago
blake2s.c	crypto: explicitly initialize variables	5 years ago
blake2s.h	MONOREPO MERGE trezor-crypto	5 years ago
blake256.c	fix(crypto): Fix incorrect handling of empty input in blake256_Update().	3 years ago
blake256.h	all: remove extraneous whitespace	5 years ago
byte_order.h	feat(crypto): add big endian support	3 years ago
cardano.c	feat(crypto/cardano): implement Cardano Ledger derivation	2 years ago
cardano.h	refactor(crypto): extract Cardano derivations to separate file	2 years ago
cash_addr.c	crypto: explicitly initialize variables	5 years ago
cash_addr.h	MONOREPO MERGE trezor-crypto	5 years ago
chacha_drbg.c	feat(core): make chacha_drbg more robust	3 years ago
chacha_drbg.h	feat(core): make chacha_drbg more robust	3 years ago
check_mem.h	MONOREPO MERGE trezor-crypto	5 years ago
curves.c	feat(crypto/cardano): implement Cardano Ledger derivation	2 years ago
curves.h	feat(crypto/cardano): implement Cardano Ledger derivation	2 years ago
ecdsa.c	refactor(crypto,legacy): extend parameters of init_rfc6979 by curve	2 years ago
ecdsa.h	refactor(core,crypto): make public key derivation functions return	3 years ago
groestl.c	feat(crypto): Sanitize undefined behavior.	2 years ago
groestl.h	ci: enable editorconfig checks, fix whitespace issues	4 years ago
groestl_internal.h	fix(crypto): fix build on clang/arm64	3 years ago
hasher.c	feat(crypto): Add TapSigHash to Hasher.	2 years ago
hasher.h	feat(crypto): Add TapSigHash to Hasher.	2 years ago
hmac.c	crypto: explicitly initialize variables	5 years ago
hmac.h	MONOREPO MERGE trezor-crypto	5 years ago
hmac_drbg.c	crypto: explicitly initialize variables	5 years ago
hmac_drbg.h	crypto/hmac_drbg: Fix style.	5 years ago
memzero.c	fix(crypto): update case of windows.h (#1560 )	3 years ago
memzero.h	MONOREPO MERGE trezor-crypto	5 years ago
nem.c	fix(crypto): Remove public key from the ed25519 signing API.	2 years ago
nem.h	MONOREPO MERGE trezor-crypto	5 years ago
nist256p1.c	crypto/bignum: change limb size to 29, add tests	4 years ago
nist256p1.h	MONOREPO MERGE trezor-crypto	5 years ago
nist256p1.table	crypto/bignum: change limb size to 29, add tests	4 years ago
options.h	MONOREPO MERGE trezor-crypto	5 years ago
pbkdf2.c	crypto: explicitly initialize variables	5 years ago
pbkdf2.h	MONOREPO MERGE trezor-crypto	5 years ago
rand.c	crypto: explicitly initialize variables	5 years ago
rand.h	MONOREPO MERGE trezor-crypto	5 years ago
rc4.c	MONOREPO MERGE trezor-crypto	5 years ago
rc4.h	MONOREPO MERGE trezor-crypto	5 years ago
rfc6979.c	fix(crypto): reduce digest in RFC6979 to match specification	2 years ago
rfc6979.h	fix(crypto): reduce digest in RFC6979 to match specification	2 years ago
ripemd160.c	crypto: explicitly initialize variables	5 years ago
ripemd160.h	MONOREPO MERGE trezor-crypto	5 years ago
script.c	crypto: explicitly initialize variables	5 years ago
script.h	MONOREPO MERGE trezor-crypto	5 years ago
secp256k1.c	crypto/bignum: change limb size to 29, add tests	4 years ago
secp256k1.h	MONOREPO MERGE trezor-crypto	5 years ago
secp256k1.table	crypto/bignum: change limb size to 29, add tests	4 years ago
segwit_addr.c	feat(crypto): update segwit_addr to support Bech32m	3 years ago
segwit_addr.h	feat(crypto): update segwit_addr to support Bech32m	3 years ago
setup.py	MONOREPO MERGE trezor-crypto	5 years ago
sha2.c	feat(crypto): Add key tweaking functions to zkp_bip340.c.	2 years ago
sha2.h	feat(crypto): Add key tweaking functions to zkp_bip340.c.	2 years ago
sha3.c	feat(crypto): Sanitize undefined behavior.	2 years ago
sha3.h	MONOREPO MERGE trezor-crypto	5 years ago
shamir.c	crypto: fix undefined behavior in shamir unbitslice (#1219 )	4 years ago
shamir.h	crypto/shamir: Add copyright.	5 years ago
slip39.c	chore(crypto): Rework SLIP-39 word lookup.	3 years ago
slip39.h	fix(crypto): Improve naming and robustness of SLIP39's T9 mask lookup.	3 years ago
slip39_wordlist.h	chore(crypto): Rework SLIP-39 word lookup.	3 years ago
zkp_bip340.c	refactor(crypto): remove code that is duplicated in secp256k1-zkp submodule	2 years ago
zkp_bip340.h	feat(legacy): verify bip340 pubkeys used in p2tr addresses	2 years ago
zkp_context.c	fix(crypto): assign NULL to zkp_context after is is destroyed	2 years ago
zkp_context.h	refactor(crypto): expose zkp_context_is_initialized	2 years ago
zkp_ecdsa.c	refactor(crypto): make secp256k1_context_writable_randomize() return status	2 years ago
zkp_ecdsa.h	refactor(core,crypto): make public key derivation functions return	3 years ago

README.md

trezor-crypto

Heavily optimized cryptography algorithms for embedded devices.

These include:

AES/Rijndael encryption/decryption
Big Number (256 bit) Arithmetics
BIP32 Hierarchical Deterministic Wallets
BIP39 Mnemonic code
ECDSA signing/verifying (supports secp256k1 and nist256p1 curves, uses RFC6979 for deterministic signatures)
ECDSA public key derivation
BIP340 Schnorr signature signing/verifying
Base32 (RFC4648 and custom alphabets)
Base58 address representation
Ed25519 signing/verifying (also SHA3 and Keccak variants)
ECDH using secp256k1, nist256p1 and Curve25519
HMAC-SHA256 and HMAC-SHA512
PBKDF2
RIPEMD-160
SHA1
SHA2-256/SHA2-512
SHA3/Keccak
BLAKE2s/BLAKE2b
Chacha20-Poly1305
unit tests (using Check - check.sf.net; in test_check.c)
tests against OpenSSL (in test_openssl.c)
integrated Wycheproof tests

Distibuted under MIT License.

Some parts of the library come from external sources:

AES: https://github.com/BrianGladman/aes
Base58: https://github.com/luke-jr/libbase58
BLAKE2s/BLAKE2b: https://github.com/BLAKE2/BLAKE2
RIPEMD-160: https://github.com/ARMmbed/mbedtls
SHA1/SHA2: http://www.aarongifford.com/computers/sha.html
SHA3: https://github.com/rhash/RHash
Curve25519: https://github.com/agl/curve25519-donna
Ed25519: https://github.com/floodyberry/ed25519-donna
Chacha20: https://github.com/wg/c20p1305
Poly1305: https://github.com/floodyberry/poly1305-donna