- 0ba2001 Add ML-DSA. by Adam Langley · 7 months ago
- c6c0b65 Add the Revision field to third_party/fiat/README.chromium by David Benjamin · 9 months ago
- d477c0d use AT&T syntax in fiat_p256_adx by Andres Erbsen · 10 months ago
- 2a33fae do not call memcpy directly in curve25519_64_adx.h by Andres Erbsen · 1 year, 5 months ago
- 20c9406 Add table-independent x86+adx asm for P-256 by Andres Erbsen · 1 year, 6 months ago
- fa343af Update googletest and include googlemock by David Benjamin · 1 year, 6 months ago
- 164b86d Explicitly mark saved registers with .cfi_restore by David Benjamin · 1 year, 7 months ago
- 11d943a Fix RBP-based unwind in fiat assembly by David Benjamin · 1 year, 7 months ago
- 1f78613 [ssci] Added Shipped field to READMEs by Anne Redulla · 1 year, 8 months ago
- 9fc1c33 Add Intel Indirect Branch Tracking support. by Bob Beck · 1 year, 9 months ago
- a905bbb Consistently include BTI markers in every assembly file by David Benjamin · 1 year, 9 months ago
- 9c30e53 Credit CryptOpt in third_party/fiat/README.md by Andres Erbsen · 1 year, 9 months ago
- ae88f19 Fix fiat asm .private_extern declaration on Apple platforms by David Benjamin · 1 year, 9 months ago
- 23ed9d3 Add target attributes to curve25519_64_adx.h by David Benjamin · 1 year, 9 months ago
- 3f680b0 Remove a layer of indirection from fiat curve25519 assembly by David Benjamin · 1 year, 9 months ago
- d995d82 Add .type, .hidden, and .size to the new fiat ADX assembly by David Benjamin · 1 year, 9 months ago
- 9d4f833 Use ADX asm for Curve25519 base-point multiplication by Andres Erbsen · 1 year, 10 months ago
- 43f8891 Add saturated X25519 for x86_64+ADX running Linux by Andres Erbsen · 1 year, 10 months ago
- bf80254 Update googletest by David Benjamin · 1 year, 10 months ago
- 4540c3c OpenBSD Support by Bob Beck · 2 years ago
- aa31748 Generate 64-bit Curve25519 and P256 code for MSVC by Andres Erbsen · 2 years, 1 month ago
- 8c8e7a6 Update fiat-crypto. by David Benjamin · 3 years ago
- 4df05c5 Update third_party/googletest. by David Benjamin · 4 years, 2 months ago
- 47b1e39 Tidy up third_party/fiat. by David Benjamin · 5 years ago
- 25ab623 Prefix g_pre_comp in p256.c as well. by David Benjamin · 5 years ago
- 13d09f0 Properly namespace everything in third_party/fiat/p256.c. by David Benjamin · 5 years ago
- baca5b4 Update fiat-crypto. by David Benjamin · 5 years ago
- 1d43e57 Base EC_FELEM conversions on bytes rather than BIGNUMs. by David Benjamin · 5 years ago
- bd1fa86 Clean up various EC inversion functions. by David Benjamin · 5 years ago
- be1d14b Import Wycheproof primality tests. by David Benjamin · 5 years ago
- a165168 Import Wycheproof PKCS#1 decrypt tests. by David Benjamin · 5 years ago
- 355828a Import Wycheproof OAEP tests. by David Benjamin · 5 years ago
- e5905d0 Import Wycheproof PKCS#1 signing tests. by David Benjamin · 5 years ago
- 305a03a Skip JWK keys when converting Wycheproof tests. by David Benjamin · 5 years ago
- 55ed2a6 Import Wycheproof's size-specific RSA PKCS#1 verifying tests. by David Benjamin · 5 years ago
- 906bbef Handle "acceptable" Wycheproof inputs unambiguously. by David Benjamin · 5 years ago
- 62f662d Import Wycheproof XChaCha20-Poly1305 tests. by David Benjamin · 5 years ago
- b19efcc Import Wycheproof HMAC tests. by David Benjamin · 5 years ago
- 8e71fe9 Import Wycheproof HKDF tests. by David Benjamin · 5 years ago
- 15cd8bf Update Wycheproof test vectors. by David Benjamin · 5 years ago
- 7f02881 Drop CECPQ2b code. by Adam Langley · 5 years ago fips-android-20191020
- 20ae5e6 Correct relative path. by Adam Langley · 5 years ago
- 07432f3 Prefix all the SIKE symbols. by Adam Langley · 6 years ago
- 1a3178c Rename SIKE's params.c. by Adam Langley · 6 years ago
- 3c8ae0f Implements SIKE/p434 by Kris Kwiatkowski · 6 years ago
- 92b7c89 Add a value barrier to constant-time selects. by David Benjamin · 6 years ago
- 12d9ed6 Avoid leaking intermediate states in point doubling special case. by David Benjamin · 6 years ago
- 8f574c3 Add AES-KWP by Adam Langley · 6 years ago
- 0ad091a Split EC_METHOD.mul into two operations. by David Benjamin · 6 years ago
- 79ab5e8 Fix the last casts in third_party/sike. by David Benjamin · 6 years ago
- b4b41ca Remove no-op casts around tt1. by David Benjamin · 6 years ago
- c93e525 Define p503 with crypto_word_t, not uint64_t. by David Benjamin · 6 years ago
- 7922e5a Add support for SIKE/p503 post-quantum KEM by Kris Kwiatkowski · 6 years ago
- be7006a Update third_party/googletest. by David Benjamin · 6 years ago
- f109f20 Clear out a bunch of -Wextra-semi warnings. by David Benjamin · 6 years ago
- 9847cdd Fix signed left-shifts in curve25519.c. by David Benjamin · 6 years ago
- 899835f Rename Fiat include files to end in .h by Adam Langley · 6 years ago
- 32e59d2 Switch to new fiat pipeline. by David Benjamin · 6 years ago
- 5590c71 Mark some unmarked array sizes in curve25519.c. by David Benjamin · 6 years ago
- 43e636a Remove bundled copy of android-cmake. by David Benjamin · 6 years ago
- 5ecfb10 Modernize OPENSSL_COMPILE_ASSERT, part 2. by David Benjamin · 6 years ago
- 8618f2b Optimize EC_GFp_mont_method's cmp_x_coordinate. by David Benjamin · 6 years ago
- 0b3f497 Optimize EC_GFp_nistp256_method's cmp_x_coordinate. by David Benjamin · 6 years ago
- fa3aadc Push BIGNUM out of EC_METHOD's affine coordinates hook. by David Benjamin · 6 years ago
- 9edbc7f Revert "Revert "Speed up ECDSA verify on x86-64."" by Adam Langley · 6 years ago
- e907ed4 Revert "Speed up ECDSA verify on x86-64." by Adam Langley · 6 years ago
- cfd50c6 Route the tuned add/dbl implementations out of EC_METHOD. by David Benjamin · 6 years ago
- 3d450d2 Speed up ECDSA verify on x86-64. by Nir Drucker · 7 years ago
- 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
- 67e6434 Document that ED25519_sign only fails on allocation failure by Joshua Liebow-Feeser · 7 years ago
- bdc4098 Add new curve/hash ECDSA combinations from Wycheproof. by David Benjamin · 7 years ago
- af37f84 Add RSA-PSS tests from Wycheproof. by David Benjamin · 7 years ago
- f84c0da Use newly-sharded ECDH tests. by David Benjamin · 7 years ago
- a711b53 Update Wycheproof test vectors. by David Benjamin · 7 years ago
- 42ea84b Update Wycheproof test vectors. by David Benjamin · 7 years ago
- 576b637 Move convert_wycheproof.go to util/ by Adam Langley · 7 years ago
- 62abceb Add a driver for Wycheproof CMAC tests. by David Benjamin · 7 years ago
- 044f637 reformat third_party/wycheproof_testvectors/METADATA by Martin Kreichgauer · 7 years ago
- bf33114 Rename third_party/wycheproof to satisfy a bureaucrat. by David Benjamin · 7 years ago
- 179c4e2 Update Wycheproof, add keywrap tests, and fix a bug. by David Benjamin · 7 years ago
- 8e75ae4 Add a Wycheproof driver for AES-CBC. by David Benjamin · 7 years ago
- 302bb39 Small curve25519 cleanups. by David Benjamin · 7 years ago
- 3f94467 Add an ECDH Wycheproof driver. by David Benjamin · 7 years ago
- 7760af4 Print tcId in converted Wycheproof files. by David Benjamin · 7 years ago
- 5505328 Add AEAD Wycheproof drivers. by David Benjamin · 7 years ago
- c596415 Add a DSA Wycheproof driver. by David Benjamin · 7 years ago
- 5707274 Add Ed25519 Wycheproof driver. by David Benjamin · 7 years ago
- 041dd68 Clear mallocs in ec_wNAF_mul. by David Benjamin · 7 years ago
- e14e4a7 Remove ec_compute_wNAF's failure cases. by David Benjamin · 7 years ago
- 40d76f4 Add ECDSA and RSA verify Wycheproof drivers. by David Benjamin · 7 years ago
- 5509bc0 Add a test driver for Wycheproof's x25519_test.json. by David Benjamin · 7 years ago
- 2d10c36 Check in a copy of Project Wycheproof test vectors. by David Benjamin · 7 years ago
- 32e0d10 Add EC_FELEM for EC_POINTs and related temporaries. by David Benjamin · 7 years ago
- 364a51e Abstract scalar inversion in EC_METHOD. by David Benjamin · 7 years ago
- 5fca613 Fix typo in point_add. by David Benjamin · 7 years ago
- 8d4f7e5 Remove redundant assertion in fe_mul_121666_impl. by Daniel Hirche · 7 years ago
- 8041d8c third_party: re-format METATADA files by Martin Kreichgauer · 7 years ago
- 638a408 Add a tuned variable-time P-256 multiplication function. by David Benjamin · 7 years ago
- 472ba2c Require that Ed25519 |s| values be < order. by Adam Langley · 7 years ago
- 884086e Remove x86_64 x25519 assembly. by David Benjamin · 7 years ago
