ed-precompiled_ed25519 1.4.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 3774dbb20a82b2878209ee7089c75b053ddb931f3e3a51361806f41dbd70c1a3
+  data.tar.gz: 1bbaf11b5e0a1444c572733ffcb575984c184be59afdff4b25472816ad2c89bf
+SHA512:
+  metadata.gz: c54b6ae194a96d775c0a8ecf54526421d576f8b7502f2f70eb61299917df2268e8664391c0bddf373481b7abb2725f2f43880d87026469b8abf059aeb09373ac
+  data.tar.gz: 8db9bcb36bffb09b30218755d96b43b5ac9e73fd2ee7da9139fe350004ed2d7461e1eb4a8167e5cabf78ae5708cb1a7efe4f6e84ea852229d64d1b41f234d869

data/CHANGES.md

@@ -0,0 +1,88 @@
+## [1.4.0] (2022-01-16)
+
+[1.4.0]: https://github.com/RubyCrypto/ed25519/compare/v1.3.0...v1.4.0
+
+- Use append_cflags instead of modifying CFLAGS directly ([#45])
+
+[#45]: https://github.com/RubyCrypto/ed25519/pull/45
+
+## [1.3.0] (2022-01-16)
+
+[1.3.0]: https://github.com/RubyCrypto/ed25519/compare/v1.2.4...v1.3.0
+
+- Bump rubocop dependencies. ([#30])
+- Add support for Ruby 3 & JRuby 9.3.0. ([#31])
+
+[#30]: https://github.com/RubyCrypto/ed25519/pull/30
+[#31]: https://github.com/RubyCrypto/ed25519/pull/31
+
+## [1.2.4] (2018-01-04)
+
+[1.2.4]: https://github.com/RubyCrypto/ed25519/compare/v1.2.3...v1.2.4
+
+* Fix JRuby platform name
+* Add license information to gemspec
+
+## [1.2.3] (2017-12-31)
+
+[1.2.3]: https://github.com/RubyCrypto/ed25519/compare/v1.2.2...v1.2.3
+
+* [#18](https://github.com/RubyCrypto/ed25519/pull/18)
+  `ext/ed25519_ref10`: Consolidate fe.c and ge.c
+
+## [1.2.2] (2017-12-31)
+
+[1.2.2]: https://github.com/RubyCrypto/ed25519/compare/v1.2.1...v1.2.2
+
+* [#17](https://github.com/RubyCrypto/ed25519/pull/17)
+  Test against Ruby 2.5.0
+
+* [#16](https://github.com/RubyCrypto/ed25519/pull/16)
+  Move project to the RubyCrypto GitHub organization
+
+## [1.2.1] (2017-12-15)
+
+[1.2.1]: https://github.com/RubyCrypto/ed25519/compare/v1.2.0...v1.2.1
+
+* [#14](https://github.com/RubyCrypto/ed25519/pull/14)
+  Support MRI 2.0+
+
+## [1.2.0] (2017-12-15)
+
+[1.2.0]: https://github.com/RubyCrypto/ed25519/compare/v1.1.0...v1.2.0
+
+* [#13](https://github.com/RubyCrypto/ed25519/pull/13)
+  Add `Ed25519::SigningKey.from_keypair`
+
+* [#12](https://github.com/RubyCrypto/ed25519/pull/12)
+  Add `Ed25519.validate_key_bytes` method
+
+## [1.1.0] (2017-12-13)
+
+[1.1.0]: https://github.com/RubyCrypto/ed25519/compare/v1.0.0...v1.1.0
+
+* [#11](https://github.com/RubyCrypto/ed25519/pull/11)
+  ext/ed25519_java: switch to str4d/ed25519-java implementation (fixes #4)
+
+* [#9](https://github.com/RubyCrypto/ed25519/pull/9)
+  Implement Java backend as a proper JRuby extension
+
+* [#8](https://github.com/RubyCrypto/ed25519/pull/8)
+  Use an attr_accessor for Ed25519.provider
+
+## [1.0.0] (2017-12-12)
+
+[1.0.0]: https://github.com/RubyCrypto/ed25519/compare/v0.1.0...v1.0.0
+
+* [#7](https://github.com/RubyCrypto/ed25519/pull/7)
+  Keypair refactor
+
+* [#6](https://github.com/RubyCrypto/ed25519/pull/6)
+  Switch from "ref" C implementation to SUPERCOP "ref10"
+
+* [#5](https://github.com/RubyCrypto/ed25519/pull/5)
+  Raise Ed25519::VerifyError if signature verification fails
+
+# 0.1.0 (2017-12-11)
+
+* Initial release

data/LICENSE

@@ -0,0 +1,22 @@
+Copyright (c) 2012-2025 Tony Arcieri
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,181 @@
+# ed25519.rb [![Latest Version][gem-shield]][gem-link] [![Yard Docs][docs-image]][docs-link] [![License: MIT][license-image]][license-link] [![CI Status][ci-image]][ci-link] 
+
+[gem-shield]: https://img.shields.io/gem/v/ed25519?logo=ruby
+[gem-link]: https://rubygems.org/gems/ed25519
+[ci-image]: https://github.com/RubyCrypto/ed25519/workflows/CI/badge.svg
+[ci-link]: https://github.com/RubyCrypto/ed25519/actions?query=workflow%3ACI+branch%3Amaster
+[docs-image]: https://img.shields.io/badge/yard-docs-blue.svg
+[docs-link]: http://www.rubydoc.info/gems/ed25519/1.4.0
+[license-image]: https://img.shields.io/badge/license-MIT-blue.svg
+[license-link]: https://github.com/RubyCrypto/ed25519/blob/master/LICENSE
+
+A Ruby binding to the Ed25519 elliptic curve public-key signature system
+described in [RFC 8032].
+
+Two implementations are provided: a MRI C extension which uses the "ref10"
+implementation from the SUPERCOP benchmark suite, and a pure Java version
+based on [str4d/ed25519-java].
+
+Ed25519 is one of two notable algorithms implemented atop the Curve25519
+elliptic curve. The [x25519 gem] is a related project of this one,
+and implements the X25519 Diffie-Hellman key exchange algorithm on the
+Montgomery form of Curve25519.
+
+[RFC 8032]: https://tools.ietf.org/html/rfc8032
+[str4d/ed25519-java]: https://github.com/str4d/ed25519-java
+[x25519 gem]: https://github.com/RubyCrypto/x25519
+
+## What is Ed25519?
+
+Ed25519 is a modern implementation of a [Schnorr signature] system using
+elliptic curve groups.
+
+Ed25519 provides a 128-bit security level, that is to say, all known attacks
+take at least 2^128 operations, providing the same security level as AES-128,
+NIST P-256, and RSA-3072.
+
+![Ed25519 Diagram](https://raw.githubusercontent.com/RubyCrypto/ed25519/master/ed25519.png)
+
+Ed25519 has a number of unique properties that make it one of the best-in-class
+digital signature algorithms:
+
+* ***Small keys***: Ed25519 keys are only 256-bits (32 bytes), making them
+  small enough to easily copy around. Ed25519 also allows the public key
+  to be derived from the private key, meaning that it doesn't need to be
+  included in a serialized private key in cases you want both.
+* ***Small signatures***: Ed25519 signatures are only 512-bits (64 bytes),
+  one of the smallest signature sizes available.
+* ***Deterministic***: Unlike (EC)DSA, Ed25519 does not rely on an entropy
+  source when signing messages. This can be a potential attack vector if
+  the entropy source is not generating good random numbers. Ed25519 avoids
+  this problem entirely and will always generate the same signature for the
+  same data.
+* ***Collision Resistant***: Hash-function collisions do not break this
+  system. This adds a layer of defense against the possibility of weakness
+  in the selected hash function.
+
+You can read more on [Dan Bernstein's Ed25519 site](http://ed25519.cr.yp.to/).
+
+[Schnorr signature]: https://en.wikipedia.org/wiki/Schnorr_signature
+
+### Is it any good?
+
+[Yes.](http://news.ycombinator.com/item?id=3067434)
+
+## Help and Discussion
+
+Have questions? Want to suggest a feature or change? Join a discussion group:
+
+* [Crypto.rb Gitter]: web-based chat about Ruby crypto projects including **ed25519**.
+* [Crypto.rb Google Group]: join via web or email ([crypto-rb+subscribe@googlegroups.com])
+
+[Crypto.rb Gitter]: https://gitter.im/crypto-rb/Lobby
+[Crypto.rb Google Group]: https://groups.google.com/forum/#!forum/crypto-rb
+[crypto-rb+subscribe@googlegroups.com]: mailto:crypto-rb+subscribe@googlegroups.com?subject=subscribe
+
+## Requirements
+
+**ed25519.rb** is supported on and tested against the following platforms:
+
+- MRI 3.0, 3.1, 3.2, 3.3, 3.4
+- JRuby 9.4.12, 10.0.0
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+    gem 'ed25519'
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install ed25519
+
+# Usage
+
+Require **ed25519.rb** in your Ruby program:
+
+```ruby
+require "ed25519"
+```
+
+Generate a new random signing key:
+
+```ruby
+signing_key = Ed25519::SigningKey.generate
+```
+
+Sign a message with the signing key:
+
+```ruby
+signature = signing_key.sign(message)
+```
+
+Obtain the verify key for a given signing key:
+
+```ruby
+verify_key = signing_key.verify_key
+```
+
+Check the validity of a signature:
+
+```ruby
+verify_key.verify(signature, message)
+```
+
+The verify method will return `true` if the signature verifies, or raise
+`Ed25519::VerifyError` if verification fails.
+
+### Serializing Keys
+
+Keys can be serialized as 32-byte binary strings as follows:
+
+```ruby
+signature_key_bytes = signing_key.to_bytes
+verify_key_bytes = verify_key.to_bytes
+```
+
+The binary serialization can be passed directly into the constructor for a given key type:
+
+```ruby
+signing_key = Ed25519::SigningKey.new(signature_key_bytes)
+verify_key  = Ed25519::VerifyKey.new(verify_key_bytes)
+```
+
+## Security Notes
+
+The Ed25519 "ref10" implementation from SUPERCOP was lovingly crafted by expert
+security boffins with great care taken to prevent timing attacks. The same
+cannot be said for the C code used in the **ed25519.rb** C extension or in the
+entirety of the provided Java implementation.
+
+Care should be taken to avoid leaking to the attacker how long it takes to
+generate keys or sign messages (at least until **ed25519.rb** itself can be audited
+by experts who can fix any potential timing vulnerabilities)
+
+**ed25519.rb** relies on a strong `SecureRandom` for key generation.
+Weaknesses in the random number source can potentially result in insecure keys.
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/RubyCrypto/ed25519.
+This project is intended to be a safe, welcoming space for collaboration,
+and contributors areexpected to adhere to the [Contributor Covenant](http://contributor-covenant.org)
+code of conduct.
+
+## License
+
+Copyright (c) 2012-2025 Tony Arcieri. Distributed under the MIT License. See
+[LICENSE] for further details.
+
+[LICENSE]: https://github.com/RubyCrypto/ed25519/blob/master/LICENSE
+
+## Code of Conduct
+
+Everyone interacting in the **ed25519.rb** project’s codebases, issue trackers, chat
+rooms and mailing lists is expected to follow the [code of conduct].
+
+[code of conduct]: https://github.com/RubyCrypto/ed25519/blob/master/CODE_OF_CONDUCT.md

data/ext/ed25519_jruby/LICENSE.txt

@@ -0,0 +1,123 @@
+Creative Commons Legal Code
+
+CC0 1.0 Universal
+
+    CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE
+    LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN
+    ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS
+    INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES
+    REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS
+    PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM
+    THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED
+    HEREUNDER.
+
+Statement of Purpose
+
+The laws of most jurisdictions throughout the world automatically confer
+exclusive Copyright and Related Rights (defined below) upon the creator
+and subsequent owner(s) (each and all, an "owner") of an original work of
+authorship and/or a database (each, a "Work").
+
+Certain owners wish to permanently relinquish those rights to a Work for
+the purpose of contributing to a commons of creative, cultural and
+scientific works ("Commons") that the public can reliably and without fear
+of later claims of infringement build upon, modify, incorporate in other
+works, reuse and redistribute as freely as possible in any form whatsoever
+and for any purposes, including without limitation commercial purposes.
+These owners may contribute to the Commons to promote the ideal of a free
+culture and the further production of creative, cultural and scientific
+works, or to gain reputation or greater distribution for their Work in
+part through the use and efforts of others.
+
+For these and/or other purposes and motivations, and without any
+expectation of additional consideration or compensation, the person
+associating CC0 with a Work (the "Affirmer"), to the extent that he or she
+is an owner of Copyright and Related Rights in the Work, voluntarily
+elects to apply CC0 to the Work and publicly distribute the Work under its
+terms, with knowledge of his or her Copyright and Related Rights in the
+Work and the meaning and intended legal effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be
+protected by copyright and related or neighboring rights ("Copyright and
+Related Rights"). Copyright and Related Rights include, but are not
+limited to, the following:
+
+  i. the right to reproduce, adapt, distribute, perform, display,
+     communicate, and translate a Work;
+ ii. moral rights retained by the original author(s) and/or performer(s);
+iii. publicity and privacy rights pertaining to a person's image or
+     likeness depicted in a Work;
+ iv. rights protecting against unfair competition in regards to a Work,
+     subject to the limitations in paragraph 4(a), below;
+  v. rights protecting the extraction, dissemination, use and reuse of data
+     in a Work;
+ vi. database rights (such as those arising under Directive 96/9/EC of the
+     European Parliament and of the Council of 11 March 1996 on the legal
+     protection of databases, and under any national implementation
+     thereof, including any amended or successor version of such
+     directive); and
+vii. other similar, equivalent or corresponding rights throughout the
+     world based on applicable law or treaty, and any national
+     implementations thereof.
+
+2. Waiver. To the greatest extent permitted by, but not in contravention
+of, applicable law, Affirmer hereby overtly, fully, permanently,
+irrevocably and unconditionally waives, abandons, and surrenders all of
+Affirmer's Copyright and Related Rights and associated claims and causes
+of action, whether now known or unknown (including existing as well as
+future claims and causes of action), in the Work (i) in all territories
+worldwide, (ii) for the maximum duration provided by applicable law or
+treaty (including future time extensions), (iii) in any current or future
+medium and for any number of copies, and (iv) for any purpose whatsoever,
+including without limitation commercial, advertising or promotional
+purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each
+member of the public at large and to the detriment of Affirmer's heirs and
+successors, fully intending that such Waiver shall not be subject to
+revocation, rescission, cancellation, termination, or any other legal or
+equitable action to disrupt the quiet enjoyment of the Work by the public
+as contemplated by Affirmer's express Statement of Purpose.
+
+3. Public License Fallback. Should any part of the Waiver for any reason
+be judged legally invalid or ineffective under applicable law, then the
+Waiver shall be preserved to the maximum extent permitted taking into
+account Affirmer's express Statement of Purpose. In addition, to the
+extent the Waiver is so judged Affirmer hereby grants to each affected
+person a royalty-free, non transferable, non sublicensable, non exclusive,
+irrevocable and unconditional license to exercise Affirmer's Copyright and
+Related Rights in the Work (i) in all territories worldwide, (ii) for the
+maximum duration provided by applicable law or treaty (including future
+time extensions), (iii) in any current or future medium and for any number
+of copies, and (iv) for any purpose whatsoever, including without
+limitation commercial, advertising or promotional purposes (the
+"License"). The License shall be deemed effective as of the date CC0 was
+applied by Affirmer to the Work. Should any part of the License for any
+reason be judged legally invalid or ineffective under applicable law, such
+partial invalidity or ineffectiveness shall not invalidate the remainder
+of the License, and in such case Affirmer hereby affirms that he or she
+will not (i) exercise any of his or her remaining Copyright and Related
+Rights in the Work or (ii) assert any associated claims and causes of
+action with respect to the Work, in either case contrary to Affirmer's
+express Statement of Purpose.
+
+4. Limitations and Disclaimers.
+
+ a. No trademark or patent rights held by Affirmer are waived, abandoned,
+    surrendered, licensed or otherwise affected by this document.
+ b. Affirmer offers the Work as-is and makes no representations or
+    warranties of any kind concerning the Work, express, implied,
+    statutory or otherwise, including without limitation warranties of
+    title, merchantability, fitness for a particular purpose, non
+    infringement, or the absence of latent or other defects, accuracy, or
+    the present or absence of errors, whether or not discoverable, all to
+    the greatest extent permissible under applicable law.
+ c. Affirmer disclaims responsibility for clearing rights of other persons
+    that may apply to the Work or any use thereof, including without
+    limitation any person's Copyright and Related Rights in the Work.
+    Further, Affirmer disclaims responsibility for obtaining any necessary
+    consents, permissions or other rights required for any use of the
+    Work.
+ d. Affirmer understands and acknowledges that Creative Commons is not a
+    party to this document and has no duty or obligation with respect to
+    this CC0 or use of the Work.
+
+For more information, please see https://creativecommons.org/publicdomain/zero/1.0/

data/ext/ed25519_jruby/README.md

@@ -0,0 +1,77 @@
+EdDSA-Java
+==========
+
+[![Build Status](https://travis-ci.org/str4d/ed25519-java.svg?branch=master)](https://travis-ci.org/str4d/ed25519-java)
+
+This is an implementation of EdDSA in Java. Structurally, it is based on the ref10 implementation in SUPERCOP (see https://ed25519.cr.yp.to/software.html).
+
+There are two internal implementations:
+* A port of the radix-2^51 operations in ref10 - fast and constant-time, but only useful for Ed25519.
+* A generic version using BigIntegers for calculation - a bit slower and not constant-time, but compatible with any EdDSA parameter specification.
+
+
+To use
+------
+
+Download the latest .jar from the releases tab and place it in your classpath.
+
+Gradle users:
+
+```
+compile 'net.i2p.crypto:eddsa:0.2.0'
+```
+
+The code requires Java 6 (for e.g. the `Arrays.copyOfRange()` calls in `EdDSAEngine.engineVerify()`).
+
+The JUnit4 tests require the Hamcrest library `hamcrest-all.jar`.
+
+This code is released to the public domain and can be used for any purpose. See `LICENSE.txt` for details.
+
+Disclaimer
+----------
+
+There are **no** guarantees that this is secure for all cases, and users should
+review the code themselves before depending on it. PRs that fix bugs or improve
+reviewability are very welcome. Additionally:
+
+- The unit test suite includes tests against
+  [the data from the original Python implementation](https://ed25519.cr.yp.to/python/sign.input).
+- The code (as of 97cea3f0d910fc627c7b57b1bc4d783cdd0c2a4a) was reviewed by
+  [an independent developer](https://github.com/BloodyRookie).
+- The code (as of dc9f58f2c874463c15465326efc040d17a627b3a) was audited by an independent third party,
+  and the one issue found [was fixed](https://github.com/str4d/ed25519-java/pull/31).
+
+Code comparison
+---------------
+
+For ease of following, here are the main methods in ref10 and their equivalents in this codebase:
+
+| EdDSA Operation | ref10 function | Java function |
+| --------------- | -------------- | ------------- |
+| Generate keypair | `crypto_sign_keypair` | `EdDSAPrivateKeySpec` constructor |
+| Sign message | `crypto_sign` | `EdDSAEngine.engineSign` |
+| Verify signature | `crypto_sign_open` | `EdDSAEngine.engineVerify` |
+
+| EdDSA point arithmetic | ref10 function | Java function |
+| ---------------------- | -------------- | ------------- |
+| `R = b * B` | `ge_scalarmult_base` | `GroupElement.scalarMultiply` |
+| `R = a*A + b*B` | `ge_double_scalarmult_vartime` | `GroupElement.doubleScalarMultiplyVariableTime` |
+| `R = 2 * P` | `ge_p2_dbl` | `GroupElement.dbl` |
+| `R = P + Q` | `ge_madd`, `ge_add` | `GroupElement.madd`, `GroupElement.add` |
+| `R = P - Q` | `ge_msub`, `ge_sub` | `GroupElement.msub`, `GroupElement.sub` |
+
+
+Important changes
+-----------------
+
+### 0.2.0
+
+- Ed25519 is now named `Ed25519` in `EdDSANamedCurveTable`, and the previous public constant
+  (containing the older inaccurate name) has been removed.
+
+Credits
+-------
+
+* The Ed25519 class was originally ported by k3d3 from [the Python Ed25519 reference implementation](https://ed25519.cr.yp.to/python/ed25519.py).
+* Useful comments and tweaks were found in [the GNUnet implementation of Ed25519](https://gnunet.org/svn/gnunet-java/src/main/java/org/gnunet/util/crypto/) (based on k3d3's class).
+* [BloodyRookie](https://github.com/BloodyRookie) reviewed the code, adding many useful comments, unit tests and literature.