laag-libsodium 1.0.16.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +7 -0
- data/.gitignore +57 -0
- data/LICENSE.txt +18 -0
- data/README.org +34 -0
- data/ext/laag/libsodium/extconf.rb +13 -0
- data/laag-libsodium.gemspec +20 -0
- data/lib/laag/libsodium.rb +31 -0
- data/vendor/github.com/jedisct1/libsodium/.gitignore +157 -0
- data/vendor/github.com/jedisct1/libsodium/.travis.yml +33 -0
- data/vendor/github.com/jedisct1/libsodium/AUTHORS +135 -0
- data/vendor/github.com/jedisct1/libsodium/ChangeLog +505 -0
- data/vendor/github.com/jedisct1/libsodium/LICENSE +18 -0
- data/vendor/github.com/jedisct1/libsodium/Makefile.am +24 -0
- data/vendor/github.com/jedisct1/libsodium/README.markdown +46 -0
- data/vendor/github.com/jedisct1/libsodium/THANKS +91 -0
- data/vendor/github.com/jedisct1/libsodium/appveyor.yml +25 -0
- data/vendor/github.com/jedisct1/libsodium/autogen.sh +36 -0
- data/vendor/github.com/jedisct1/libsodium/builds/.gitignore +7 -0
- data/vendor/github.com/jedisct1/libsodium/builds/Makefile.am +65 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/build/buildall.bat +14 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/build/buildbase.bat +70 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/Common.props +21 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/DLL.props +16 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/Debug.props +29 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/DebugDEXE.props +21 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/DebugDLL.props +20 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/DebugLEXE.props +20 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/DebugLIB.props +21 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/DebugLTCG.props +20 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/DebugSEXE.props +21 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/EXE.props +17 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/LIB.props +16 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/LTCG.props +13 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/Link.props +21 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/Messages.props +15 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/Output.props +30 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/Release.props +41 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/ReleaseDEXE.props +20 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/ReleaseDLL.props +19 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/ReleaseLEXE.props +20 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/ReleaseLIB.props +19 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/ReleaseLTCG.props +19 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/ReleaseSEXE.props +20 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/Win32.props +23 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/properties/x64.props +26 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/resource.h +14 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/resource.rc +63 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/version.h +32 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2010/libsodium/libsodium.props +48 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2010/libsodium/libsodium.vcxproj +324 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2010/libsodium/libsodium.vcxproj.filters +986 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2010/libsodium/libsodium.xml +15 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2010/libsodium.import.props +52 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2010/libsodium.import.xml +17 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2010/libsodium.sln +50 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2012/libsodium/libsodium.props +48 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2012/libsodium/libsodium.vcxproj +324 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2012/libsodium/libsodium.vcxproj.filters +986 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2012/libsodium/libsodium.xml +15 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2012/libsodium.import.props +52 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2012/libsodium.import.xml +17 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2012/libsodium.sln +50 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2013/libsodium/libsodium.props +48 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2013/libsodium/libsodium.vcxproj +324 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2013/libsodium/libsodium.vcxproj.filters +986 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2013/libsodium/libsodium.xml +15 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2013/libsodium.import.props +52 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2013/libsodium.import.xml +17 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2013/libsodium.sln +52 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2015/libsodium/libsodium.props +48 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2015/libsodium/libsodium.vcxproj +324 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2015/libsodium/libsodium.vcxproj.filters +986 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2015/libsodium/libsodium.xml +15 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2015/libsodium.import.props +52 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2015/libsodium.import.xml +17 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2015/libsodium.sln +52 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2017/libsodium/libsodium.props +48 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2017/libsodium/libsodium.vcxproj +324 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2017/libsodium/libsodium.vcxproj.filters +986 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2017/libsodium/libsodium.xml +15 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2017/libsodium.import.props +52 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2017/libsodium.import.xml +17 -0
- data/vendor/github.com/jedisct1/libsodium/builds/msvc/vs2017/libsodium.sln +52 -0
- data/vendor/github.com/jedisct1/libsodium/configure.ac +824 -0
- data/vendor/github.com/jedisct1/libsodium/contrib/Findsodium.cmake +288 -0
- data/vendor/github.com/jedisct1/libsodium/contrib/Makefile.am +3 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/Makefile.am +17 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/android-arm.sh +4 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/android-armv7-a.sh +4 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/android-armv8-a.sh +4 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/android-build.sh +82 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/android-mips32.sh +4 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/android-mips64.sh +4 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/android-x86.sh +4 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/android-x86_64.sh +4 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/emscripten-symbols.def +570 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/emscripten.sh +168 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/generate-emscripten-symbols.sh +57 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/ios.sh +125 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/msys2-win32.sh +18 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/msys2-win64.sh +18 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/nativeclient-pnacl.sh +27 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/nativeclient-x86.sh +19 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/nativeclient-x86_64.sh +19 -0
- data/vendor/github.com/jedisct1/libsodium/dist-build/osx.sh +20 -0
- data/vendor/github.com/jedisct1/libsodium/libsodium-uninstalled.pc.in +6 -0
- data/vendor/github.com/jedisct1/libsodium/libsodium.pc.in +11 -0
- data/vendor/github.com/jedisct1/libsodium/libsodium.sln +40 -0
- data/vendor/github.com/jedisct1/libsodium/libsodium.vcxproj +562 -0
- data/vendor/github.com/jedisct1/libsodium/libsodium.vcxproj.filters +720 -0
- data/vendor/github.com/jedisct1/libsodium/logo.png +0 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_check_catchable_abrt.m4 +57 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_check_catchable_segv.m4 +42 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_check_compile_flag.m4 +75 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_check_define.m4 +92 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_check_gnu_make.m4 +84 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_check_link_flag.m4 +75 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_pthread.m4 +485 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_tls.m4 +74 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ax_valgrind_check.m4 +241 -0
- data/vendor/github.com/jedisct1/libsodium/m4/ld-output-def.m4 +29 -0
- data/vendor/github.com/jedisct1/libsodium/msvc-scripts/Makefile.am +4 -0
- data/vendor/github.com/jedisct1/libsodium/msvc-scripts/process.bat +5 -0
- data/vendor/github.com/jedisct1/libsodium/msvc-scripts/rep.vbs +12 -0
- data/vendor/github.com/jedisct1/libsodium/msvc-scripts/sodium.props +28 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/.gitignore +5 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/README.md +59 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/libsodium.props +36 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/prepare.py +244 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/alpine-x64 +3 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/build +9 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/centos-x64 +3 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/debian-x64 +4 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/fedora-x64 +3 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/linux-x64 +4 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/opensuse-x64 +3 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/pack +5 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/test +27 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/dotnet-core/recipes/ubuntu-x64 +4 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/nuget/.gitignore +4 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/nuget/package.bat +13 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/nuget/package.config +4 -0
- data/vendor/github.com/jedisct1/libsodium/packaging/nuget/package.gsl +260 -0
- data/vendor/github.com/jedisct1/libsodium/regen-msvc/libsodium.vcxproj +326 -0
- data/vendor/github.com/jedisct1/libsodium/regen-msvc/libsodium.vcxproj.filters +23 -0
- data/vendor/github.com/jedisct1/libsodium/regen-msvc/libsodium.vcxproj.filters.tpl +35 -0
- data/vendor/github.com/jedisct1/libsodium/regen-msvc/libsodium.vcxproj.tpl +93 -0
- data/vendor/github.com/jedisct1/libsodium/regen-msvc/regen-msvc.py +136 -0
- data/vendor/github.com/jedisct1/libsodium/regen-msvc/tl_libsodium.vcxproj.filters.tpl +23 -0
- data/vendor/github.com/jedisct1/libsodium/regen-msvc/tl_libsodium.vcxproj.tpl +331 -0
- data/vendor/github.com/jedisct1/libsodium/src/Makefile.am +3 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/Makefile.am +290 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_aead/aes256gcm/aesni/aead_aes256gcm_aesni.c +1079 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_aead/chacha20poly1305/sodium/aead_chacha20poly1305.c +399 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_aead/xchacha20poly1305/sodium/aead_xchacha20poly1305.c +160 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_auth/crypto_auth.c +41 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_auth/hmacsha256/auth_hmacsha256.c +118 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_auth/hmacsha512/auth_hmacsha512.c +118 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_auth/hmacsha512256/auth_hmacsha512256.c +93 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_box/crypto_box.c +114 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_box/crypto_box_easy.c +115 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_box/crypto_box_seal.c +68 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_box/curve25519xchacha20poly1305/box_curve25519xchacha20poly1305.c +204 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_box/curve25519xchacha20poly1305/box_seal_curve25519xchacha20poly1305.c +79 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_box/curve25519xsalsa20poly1305/box_curve25519xsalsa20poly1305.c +156 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/core_ed25519.c +79 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/ed25519_ref10.c +2031 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_25_5/base.h +1344 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_25_5/base2.h +40 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_25_5/constants.h +20 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_25_5/fe.h +220 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_51/base.h +1344 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_51/base2.h +40 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_51/constants.h +21 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_51/fe.h +116 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/hchacha20/core_hchacha20.c +93 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/hsalsa20/core_hsalsa20.c +21 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/hsalsa20/ref2/core_hsalsa20_ref2.c +95 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_core/salsa/ref/core_salsa_ref.c +195 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/generichash_blake2.c +55 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2.h +109 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-compress-avx2.c +49 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-compress-avx2.h +140 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-compress-ref.c +93 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-compress-sse41.c +87 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-compress-sse41.h +103 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-compress-ssse3.c +90 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-compress-ssse3.h +103 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-load-avx2.h +340 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-load-sse2.h +164 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-load-sse41.h +307 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-ref.c +436 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/blake2b/ref/generichash_blake2b.c +111 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_generichash/crypto_generichash.c +91 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_hash/crypto_hash.c +20 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_hash/sha256/cp/hash_sha256_cp.c +254 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_hash/sha256/hash_sha256.c +13 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_hash/sha512/cp/hash_sha512_cp.c +282 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_hash/sha512/hash_sha512.c +13 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_kdf/blake2b/kdf_blake2b.c +52 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_kdf/crypto_kdf.c +49 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_kx/crypto_kx.c +143 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/crypto_onetimeauth.c +71 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/poly1305/donna/poly1305_donna.c +124 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/poly1305/donna/poly1305_donna.h +12 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/poly1305/donna/poly1305_donna32.h +235 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/poly1305/donna/poly1305_donna64.h +220 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/poly1305/onetimeauth_poly1305.c +90 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/poly1305/onetimeauth_poly1305.h +21 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/poly1305/sse2/poly1305_sse2.c +949 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_onetimeauth/poly1305/sse2/poly1305_sse2.h +12 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-core.c +549 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-core.h +297 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-encoding.c +305 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-encoding.h +33 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-fill-block-avx2.c +239 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-fill-block-avx512f.c +244 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-fill-block-ref.c +233 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-fill-block-ssse3.c +238 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2.c +277 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/argon2.h +305 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/blake2b-long.c +79 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/blake2b-long.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/blamka-round-avx2.h +150 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/blamka-round-avx512f.h +145 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/blamka-round-ref.h +40 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/blamka-round-ssse3.h +120 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/pwhash_argon2i.c +290 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/argon2/pwhash_argon2id.c +234 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/crypto_pwhash.c +211 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/scryptsalsa208sha256/crypto_scrypt-common.c +263 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/scryptsalsa208sha256/crypto_scrypt.h +98 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/scryptsalsa208sha256/nosse/pwhash_scryptsalsa208sha256_nosse.c +375 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/scryptsalsa208sha256/pbkdf2-sha256.c +95 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/scryptsalsa208sha256/pbkdf2-sha256.h +45 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/scryptsalsa208sha256/pwhash_scryptsalsa208sha256.c +285 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/scryptsalsa208sha256/scrypt_platform.c +108 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_pwhash/scryptsalsa208sha256/sse/pwhash_scryptsalsa208sha256_sse.c +400 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/crypto_scalarmult.c +33 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/ref10/x25519_ref10.c +159 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/ref10/x25519_ref10.h +10 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/consts.S +25 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/consts_namespace.h +20 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/curve25519_sandy2x.c +114 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/curve25519_sandy2x.h +9 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/fe.h +26 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/fe51.h +35 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/fe51_invert.c +58 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/fe51_mul.S +197 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/fe51_namespace.h +16 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/fe51_nsquare.S +172 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/fe51_pack.S +226 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/fe_frombytes_sandy2x.c +78 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/ladder.S +1440 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/ladder.h +18 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/ladder_base.S +1295 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/ladder_base.h +18 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/ladder_base_namespace.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/ladder_namespace.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/sandy2x.S +17 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/scalarmult_curve25519.c +59 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/curve25519/scalarmult_curve25519.h +11 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_scalarmult/ed25519/ref10/scalarmult_ed25519_ref10.c +86 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_secretbox/crypto_secretbox.c +67 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_secretbox/crypto_secretbox_easy.c +144 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_secretbox/xchacha20poly1305/secretbox_xchacha20poly1305.c +177 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_secretbox/xsalsa20poly1305/secretbox_xsalsa20poly1305.c +89 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_secretstream/xchacha20poly1305/secretstream_xchacha20poly1305.c +311 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_shorthash/crypto_shorthash.c +34 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_shorthash/siphash24/ref/shorthash_siphash24_ref.c +65 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_shorthash/siphash24/ref/shorthash_siphash_ref.h +24 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_shorthash/siphash24/ref/shorthash_siphashx24_ref.c +71 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_shorthash/siphash24/shorthash_siphash24.c +11 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_shorthash/siphash24/shorthash_siphashx24.c +11 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_sign/crypto_sign.c +115 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_sign/ed25519/ref10/keypair.c +91 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_sign/ed25519/ref10/obsolete.c +116 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_sign/ed25519/ref10/open.c +93 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_sign/ed25519/ref10/sign.c +144 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_sign/ed25519/ref10/sign_ed25519_ref10.h +18 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_sign/ed25519/sign_ed25519.c +97 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/dolbeau/chacha20_dolbeau-avx2.c +180 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/dolbeau/chacha20_dolbeau-avx2.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/dolbeau/chacha20_dolbeau-ssse3.c +174 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/dolbeau/chacha20_dolbeau-ssse3.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/dolbeau/u0.h +86 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/dolbeau/u1.h +98 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/dolbeau/u4.h +175 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/dolbeau/u8.h +357 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/ref/chacha20_ref.c +315 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/ref/chacha20_ref.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/stream_chacha20.c +130 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/chacha20/stream_chacha20.h +22 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/crypto_stream.c +49 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/ref/salsa20_ref.c +120 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/ref/salsa20_ref.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/stream_salsa20.c +100 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/stream_salsa20.h +16 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6/salsa20_xmm6-asm.S +960 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6/salsa20_xmm6.c +31 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6/salsa20_xmm6.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/salsa20_xmm6int-avx2.c +131 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/salsa20_xmm6int-avx2.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/salsa20_xmm6int-sse2.c +122 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/salsa20_xmm6int-sse2.h +8 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/u0.h +195 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/u1.h +207 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/u4.h +547 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/u8.h +476 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa2012/ref/stream_salsa2012_ref.c +106 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa2012/stream_salsa2012.c +26 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa208/ref/stream_salsa208_ref.c +106 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/salsa208/stream_salsa208.c +26 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/xchacha20/stream_xchacha20.c +69 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_stream/xsalsa20/stream_xsalsa20.c +66 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/crypto_verify/sodium/verify.c +98 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/Makefile.am +75 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/core.h +28 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_aead_aes256gcm.h +171 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_aead_chacha20poly1305.h +174 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_aead_xchacha20poly1305.h +97 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_auth.h +44 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_auth_hmacsha256.h +68 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_auth_hmacsha512.h +67 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_auth_hmacsha512256.h +62 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_box.h +173 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_box_curve25519xchacha20poly1305.h +159 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_box_curve25519xsalsa20poly1305.h +109 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_core_ed25519.h +37 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_core_hchacha20.h +35 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_core_hsalsa20.h +35 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_core_salsa20.h +35 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_core_salsa2012.h +35 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_core_salsa208.h +39 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_generichash.h +75 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_generichash_blake2b.h +117 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_hash.h +40 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_hash_sha256.h +57 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_hash_sha512.h +57 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_kdf.h +51 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_kdf_blake2b.h +42 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_kx.h +64 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_onetimeauth.h +62 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_onetimeauth_poly1305.h +67 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_pwhash.h +147 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_pwhash_argon2i.h +122 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_pwhash_argon2id.h +122 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_pwhash_scryptsalsa208sha256.h +120 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_scalarmult.h +45 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_scalarmult_curve25519.h +40 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_scalarmult_ed25519.h +41 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_secretbox.h +91 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_secretbox_xchacha20poly1305.h +68 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_secretbox_xsalsa20poly1305.h +67 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_secretstream_xchacha20poly1305.h +102 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_shorthash.h +39 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_shorthash_siphash24.h +48 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_sign.h +103 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_sign_ed25519.h +114 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_sign_edwards25519sha512batch.h +55 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_stream.h +56 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_stream_chacha20.h +98 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_stream_salsa20.h +57 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_stream_salsa2012.h +50 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_stream_salsa208.h +56 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_stream_xchacha20.h +57 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_stream_xsalsa20.h +57 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_verify_16.h +23 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_verify_32.h +23 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/crypto_verify_64.h +23 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/export.h +53 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/private/common.h +246 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/private/ed25519_ref10.h +125 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/private/ed25519_ref10_fe_25_5.h +1050 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/private/ed25519_ref10_fe_51.h +518 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/private/implementations.h +11 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/private/mutex.h +7 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/private/sse2_64_32.h +50 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/randombytes.h +68 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/randombytes_nativeclient.h +23 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/randombytes_salsa20_random.h +19 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/randombytes_sysrandom.h +19 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/runtime.h +52 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/utils.h +170 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium/version.h.in +33 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/include/sodium.h +70 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/randombytes/nativeclient/randombytes_nativeclient.c +61 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/randombytes/randombytes.c +206 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/randombytes/salsa20/randombytes_salsa20_random.c +564 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/randombytes/sysrandom/randombytes_sysrandom.c +382 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/sodium/codecs.c +333 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/sodium/core.c +231 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/sodium/runtime.c +286 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/sodium/utils.c +737 -0
- data/vendor/github.com/jedisct1/libsodium/src/libsodium/sodium/version.c +30 -0
- data/vendor/github.com/jedisct1/libsodium/test/Makefile.am +5 -0
- data/vendor/github.com/jedisct1/libsodium/test/constcheck.sh +19 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/Makefile.am +624 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/aead_aes256gcm.c +3243 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/aead_aes256gcm.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/aead_chacha20poly1305.c +372 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/aead_chacha20poly1305.exp +63 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/aead_xchacha20poly1305.c +198 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/aead_xchacha20poly1305.exp +51 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth.c +85 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth.exp +30 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth2.c +34 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth2.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth3.c +31 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth3.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth5.c +36 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth5.exp +0 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth6.c +23 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth6.exp +8 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth7.c +36 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/auth7.exp +0 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box.c +112 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box.exp +38 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box2.c +80 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box2.exp +34 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box7.c +50 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box7.exp +0 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box8.c +58 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box8.exp +0 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box_easy.c +71 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box_easy.exp +3 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box_easy2.c +149 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box_easy2.exp +7 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box_seal.c +44 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box_seal.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box_seed.c +30 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/box_seed.exp +8 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/chacha20.c +186 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/chacha20.exp +64 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/cmptest.h +138 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/codecs.c +226 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/codecs.exp +28 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core1.c +41 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core1.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core2.c +38 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core2.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core3.c +115 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core3.exp +3 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core4.c +36 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core4.exp +8 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core5.c +33 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core5.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core6.c +52 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core6.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core_ed25519.c +151 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/core_ed25519.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/ed25519_convert.c +76 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/ed25519_convert.exp +3 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/generichash.c +1406 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/generichash.exp +65 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/generichash2.c +56 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/generichash2.exp +64 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/generichash3.c +176 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/generichash3.exp +75 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/hash.c +47 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/hash.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/hash2.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/hash3.c +20 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/hash3.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/index.html.tpl +98 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/kdf.c +67 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/kdf.exp +77 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/keygen.c +67 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/keygen.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/kx.c +149 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/kx.exp +7 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/metamorphic.c +187 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/metamorphic.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/misuse.c +173 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/misuse.exp +0 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/nacl-test-wrapper.sh +35 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/onetimeauth.c +63 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/onetimeauth.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/onetimeauth2.c +33 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/onetimeauth2.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/onetimeauth7.c +36 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/onetimeauth7.exp +0 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pre.js.inc +20 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pwhash_argon2i.c +452 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pwhash_argon2i.exp +11 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pwhash_argon2id.c +503 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pwhash_argon2id.exp +14 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pwhash_scrypt.c +400 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pwhash_scrypt.exp +38 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pwhash_scrypt_ll.c +59 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/pwhash_scrypt_ll.exp +15 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/randombytes.c +167 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/randombytes.exp +2 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult.c +71 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult2.c +32 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult2.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult5.c +40 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult5.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult6.c +54 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult6.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult7.c +34 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult7.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult_ed25519.c +90 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/scalarmult_ed25519.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox.c +84 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox.exp +38 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox2.c +55 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox2.exp +17 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox7.c +36 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox7.exp +0 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox8.c +41 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox8.exp +0 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox_easy.c +124 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox_easy.exp +9 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox_easy2.c +72 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretbox_easy2.exp +5 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretstream.c +329 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/secretstream.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/shorthash.c +35 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/shorthash.exp +64 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sign.c +1331 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sign.exp +5 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/siphashx24.c +33 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/siphashx24.exp +64 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_core.c +42 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_core.exp +1 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_utils.c +178 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_utils.exp +16 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_utils2.c +98 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_utils2.exp +3 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_utils3.c +68 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_utils3.exp +2 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_version.c +18 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/sodium_version.exp +3 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/stream.c +65 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/stream.exp +67 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/stream2.c +47 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/stream2.exp +2 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/stream3.c +31 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/stream3.exp +4 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/stream4.c +50 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/stream4.exp +17 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/verify1.c +76 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/verify1.exp +2 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/wintest.bat +56 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/xchacha20.c +428 -0
- data/vendor/github.com/jedisct1/libsodium/test/default/xchacha20.exp +5 -0
- data/vendor/github.com/jedisct1/libsodium/test/quirks/quirks.h +51 -0
- metadata +613 -0
@@ -0,0 +1,400 @@
|
|
1
|
+
/*-
|
2
|
+
* Copyright 2009 Colin Percival
|
3
|
+
* Copyright 2012,2013 Alexander Peslyak
|
4
|
+
* All rights reserved.
|
5
|
+
*
|
6
|
+
* Redistribution and use in source and binary forms, with or without
|
7
|
+
* modification, are permitted provided that the following conditions
|
8
|
+
* are met:
|
9
|
+
* 1. Redistributions of source code must retain the above copyright
|
10
|
+
* notice, this list of conditions and the following disclaimer.
|
11
|
+
* 2. Redistributions in binary form must reproduce the above copyright
|
12
|
+
* notice, this list of conditions and the following disclaimer in the
|
13
|
+
* documentation and/or other materials provided with the distribution.
|
14
|
+
*
|
15
|
+
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
16
|
+
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
17
|
+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
18
|
+
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
19
|
+
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
20
|
+
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
21
|
+
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
22
|
+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
23
|
+
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
24
|
+
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
25
|
+
* SUCH DAMAGE.
|
26
|
+
*
|
27
|
+
* This file was originally written by Colin Percival as part of the Tarsnap
|
28
|
+
* online backup system.
|
29
|
+
*/
|
30
|
+
|
31
|
+
#include <errno.h>
|
32
|
+
#include <limits.h>
|
33
|
+
#include <stdint.h>
|
34
|
+
#include <stdlib.h>
|
35
|
+
#include <string.h>
|
36
|
+
|
37
|
+
#include "private/common.h"
|
38
|
+
#include "private/sse2_64_32.h"
|
39
|
+
|
40
|
+
#ifdef HAVE_EMMINTRIN_H
|
41
|
+
|
42
|
+
# ifdef __GNUC__
|
43
|
+
# pragma GCC target("sse2")
|
44
|
+
# endif
|
45
|
+
# include <emmintrin.h>
|
46
|
+
# if defined(__XOP__) && defined(DISABLED)
|
47
|
+
# include <x86intrin.h>
|
48
|
+
# endif
|
49
|
+
|
50
|
+
# include "../crypto_scrypt.h"
|
51
|
+
# include "../pbkdf2-sha256.h"
|
52
|
+
|
53
|
+
# if defined(__XOP__) && defined(DISABLED)
|
54
|
+
# define ARX(out, in1, in2, s) \
|
55
|
+
out = _mm_xor_si128(out, _mm_roti_epi32(_mm_add_epi32(in1, in2), s));
|
56
|
+
# else
|
57
|
+
# define ARX(out, in1, in2, s) \
|
58
|
+
{ \
|
59
|
+
__m128i T = _mm_add_epi32(in1, in2); \
|
60
|
+
out = _mm_xor_si128(out, _mm_slli_epi32(T, s)); \
|
61
|
+
out = _mm_xor_si128(out, _mm_srli_epi32(T, 32 - s)); \
|
62
|
+
}
|
63
|
+
# endif
|
64
|
+
|
65
|
+
# define SALSA20_2ROUNDS \
|
66
|
+
/* Operate on "columns". */ \
|
67
|
+
ARX(X1, X0, X3, 7) \
|
68
|
+
ARX(X2, X1, X0, 9) \
|
69
|
+
ARX(X3, X2, X1, 13) \
|
70
|
+
ARX(X0, X3, X2, 18) \
|
71
|
+
\
|
72
|
+
/* Rearrange data. */ \
|
73
|
+
X1 = _mm_shuffle_epi32(X1, 0x93); \
|
74
|
+
X2 = _mm_shuffle_epi32(X2, 0x4E); \
|
75
|
+
X3 = _mm_shuffle_epi32(X3, 0x39); \
|
76
|
+
\
|
77
|
+
/* Operate on "rows". */ \
|
78
|
+
ARX(X3, X0, X1, 7) \
|
79
|
+
ARX(X2, X3, X0, 9) \
|
80
|
+
ARX(X1, X2, X3, 13) \
|
81
|
+
ARX(X0, X1, X2, 18) \
|
82
|
+
\
|
83
|
+
/* Rearrange data. */ \
|
84
|
+
X1 = _mm_shuffle_epi32(X1, 0x39); \
|
85
|
+
X2 = _mm_shuffle_epi32(X2, 0x4E); \
|
86
|
+
X3 = _mm_shuffle_epi32(X3, 0x93);
|
87
|
+
|
88
|
+
/**
|
89
|
+
* Apply the salsa20/8 core to the block provided in (X0 ... X3) ^ (Z0 ... Z3).
|
90
|
+
*/
|
91
|
+
# define SALSA20_8_XOR(in, out) \
|
92
|
+
{ \
|
93
|
+
__m128i Y0 = X0 = _mm_xor_si128(X0, (in)[0]); \
|
94
|
+
__m128i Y1 = X1 = _mm_xor_si128(X1, (in)[1]); \
|
95
|
+
__m128i Y2 = X2 = _mm_xor_si128(X2, (in)[2]); \
|
96
|
+
__m128i Y3 = X3 = _mm_xor_si128(X3, (in)[3]); \
|
97
|
+
SALSA20_2ROUNDS \
|
98
|
+
SALSA20_2ROUNDS \
|
99
|
+
SALSA20_2ROUNDS \
|
100
|
+
SALSA20_2ROUNDS(out)[0] = X0 = _mm_add_epi32(X0, Y0); \
|
101
|
+
(out)[1] = X1 = _mm_add_epi32(X1, Y1); \
|
102
|
+
(out)[2] = X2 = _mm_add_epi32(X2, Y2); \
|
103
|
+
(out)[3] = X3 = _mm_add_epi32(X3, Y3); \
|
104
|
+
}
|
105
|
+
|
106
|
+
/**
|
107
|
+
* blockmix_salsa8(Bin, Bout, r):
|
108
|
+
* Compute Bout = BlockMix_{salsa20/8, r}(Bin). The input Bin must be 128r
|
109
|
+
* bytes in length; the output Bout must also be the same size.
|
110
|
+
*/
|
111
|
+
static inline void
|
112
|
+
blockmix_salsa8(const __m128i *Bin, __m128i *Bout, size_t r)
|
113
|
+
{
|
114
|
+
__m128i X0, X1, X2, X3;
|
115
|
+
size_t i;
|
116
|
+
|
117
|
+
/* 1: X <-- B_{2r - 1} */
|
118
|
+
X0 = Bin[8 * r - 4];
|
119
|
+
X1 = Bin[8 * r - 3];
|
120
|
+
X2 = Bin[8 * r - 2];
|
121
|
+
X3 = Bin[8 * r - 1];
|
122
|
+
|
123
|
+
/* 3: X <-- H(X \xor B_i) */
|
124
|
+
/* 4: Y_i <-- X */
|
125
|
+
/* 6: B' <-- (Y_0, Y_2 ... Y_{2r-2}, Y_1, Y_3 ... Y_{2r-1}) */
|
126
|
+
SALSA20_8_XOR(Bin, Bout)
|
127
|
+
|
128
|
+
/* 2: for i = 0 to 2r - 1 do */
|
129
|
+
r--;
|
130
|
+
for (i = 0; i < r;) {
|
131
|
+
/* 3: X <-- H(X \xor B_i) */
|
132
|
+
/* 4: Y_i <-- X */
|
133
|
+
/* 6: B' <-- (Y_0, Y_2 ... Y_{2r-2}, Y_1, Y_3 ... Y_{2r-1}) */
|
134
|
+
SALSA20_8_XOR(&Bin[i * 8 + 4], &Bout[(r + i) * 4 + 4])
|
135
|
+
|
136
|
+
i++;
|
137
|
+
|
138
|
+
/* 3: X <-- H(X \xor B_i) */
|
139
|
+
/* 4: Y_i <-- X */
|
140
|
+
/* 6: B' <-- (Y_0, Y_2 ... Y_{2r-2}, Y_1, Y_3 ... Y_{2r-1}) */
|
141
|
+
SALSA20_8_XOR(&Bin[i * 8], &Bout[i * 4])
|
142
|
+
}
|
143
|
+
|
144
|
+
/* 3: X <-- H(X \xor B_i) */
|
145
|
+
/* 4: Y_i <-- X */
|
146
|
+
/* 6: B' <-- (Y_0, Y_2 ... Y_{2r-2}, Y_1, Y_3 ... Y_{2r-1}) */
|
147
|
+
SALSA20_8_XOR(&Bin[i * 8 + 4], &Bout[(r + i) * 4 + 4])
|
148
|
+
}
|
149
|
+
|
150
|
+
# define XOR4(in) \
|
151
|
+
X0 = _mm_xor_si128(X0, (in)[0]); \
|
152
|
+
X1 = _mm_xor_si128(X1, (in)[1]); \
|
153
|
+
X2 = _mm_xor_si128(X2, (in)[2]); \
|
154
|
+
X3 = _mm_xor_si128(X3, (in)[3]);
|
155
|
+
|
156
|
+
# define XOR4_2(in1, in2) \
|
157
|
+
X0 = _mm_xor_si128((in1)[0], (in2)[0]); \
|
158
|
+
X1 = _mm_xor_si128((in1)[1], (in2)[1]); \
|
159
|
+
X2 = _mm_xor_si128((in1)[2], (in2)[2]); \
|
160
|
+
X3 = _mm_xor_si128((in1)[3], (in2)[3]);
|
161
|
+
|
162
|
+
static inline uint32_t
|
163
|
+
blockmix_salsa8_xor(const __m128i *Bin1, const __m128i *Bin2, __m128i *Bout,
|
164
|
+
size_t r)
|
165
|
+
{
|
166
|
+
__m128i X0, X1, X2, X3;
|
167
|
+
size_t i;
|
168
|
+
|
169
|
+
/* 1: X <-- B_{2r - 1} */
|
170
|
+
XOR4_2(&Bin1[8 * r - 4], &Bin2[8 * r - 4])
|
171
|
+
|
172
|
+
/* 3: X <-- H(X \xor B_i) */
|
173
|
+
/* 4: Y_i <-- X */
|
174
|
+
/* 6: B' <-- (Y_0, Y_2 ... Y_{2r-2}, Y_1, Y_3 ... Y_{2r-1}) */
|
175
|
+
XOR4(Bin1)
|
176
|
+
SALSA20_8_XOR(Bin2, Bout)
|
177
|
+
|
178
|
+
/* 2: for i = 0 to 2r - 1 do */
|
179
|
+
r--;
|
180
|
+
for (i = 0; i < r;) {
|
181
|
+
/* 3: X <-- H(X \xor B_i) */
|
182
|
+
/* 4: Y_i <-- X */
|
183
|
+
/* 6: B' <-- (Y_0, Y_2 ... Y_{2r-2}, Y_1, Y_3 ... Y_{2r-1}) */
|
184
|
+
XOR4(&Bin1[i * 8 + 4])
|
185
|
+
SALSA20_8_XOR(&Bin2[i * 8 + 4], &Bout[(r + i) * 4 + 4])
|
186
|
+
|
187
|
+
i++;
|
188
|
+
|
189
|
+
/* 3: X <-- H(X \xor B_i) */
|
190
|
+
/* 4: Y_i <-- X */
|
191
|
+
/* 6: B' <-- (Y_0, Y_2 ... Y_{2r-2}, Y_1, Y_3 ... Y_{2r-1}) */
|
192
|
+
XOR4(&Bin1[i * 8])
|
193
|
+
SALSA20_8_XOR(&Bin2[i * 8], &Bout[i * 4])
|
194
|
+
}
|
195
|
+
|
196
|
+
/* 3: X <-- H(X \xor B_i) */
|
197
|
+
/* 4: Y_i <-- X */
|
198
|
+
/* 6: B' <-- (Y_0, Y_2 ... Y_{2r-2}, Y_1, Y_3 ... Y_{2r-1}) */
|
199
|
+
XOR4(&Bin1[i * 8 + 4])
|
200
|
+
SALSA20_8_XOR(&Bin2[i * 8 + 4], &Bout[(r + i) * 4 + 4])
|
201
|
+
|
202
|
+
return _mm_cvtsi128_si32(X0);
|
203
|
+
}
|
204
|
+
|
205
|
+
# undef ARX
|
206
|
+
# undef SALSA20_2ROUNDS
|
207
|
+
# undef SALSA20_8_XOR
|
208
|
+
# undef XOR4
|
209
|
+
# undef XOR4_2
|
210
|
+
|
211
|
+
/**
|
212
|
+
* integerify(B, r):
|
213
|
+
* Return the result of parsing B_{2r-1} as a little-endian integer.
|
214
|
+
* Note that B's layout is permuted compared to the generic implementation.
|
215
|
+
*/
|
216
|
+
static inline uint32_t
|
217
|
+
integerify(const void *B, size_t r)
|
218
|
+
{
|
219
|
+
return *(const uint32_t *) ((uintptr_t)(B) + (2 * r - 1) * 64);
|
220
|
+
}
|
221
|
+
|
222
|
+
/**
|
223
|
+
* smix(B, r, N, V, XY):
|
224
|
+
* Compute B = SMix_r(B, N). The input B must be 128r bytes in length;
|
225
|
+
* the temporary storage V must be 128rN bytes in length; the temporary
|
226
|
+
* storage XY must be 256r + 64 bytes in length. The value N must be a
|
227
|
+
* power of 2 greater than 1. The arrays B, V, and XY must be aligned to a
|
228
|
+
* multiple of 64 bytes.
|
229
|
+
*/
|
230
|
+
static void
|
231
|
+
smix(uint8_t *B, size_t r, uint32_t N, void *V, void *XY)
|
232
|
+
{
|
233
|
+
size_t s = 128 * r;
|
234
|
+
__m128i * X = (__m128i *) V, *Y;
|
235
|
+
uint32_t *X32 = (uint32_t *) V;
|
236
|
+
uint32_t i, j;
|
237
|
+
size_t k;
|
238
|
+
|
239
|
+
/* 1: X <-- B */
|
240
|
+
/* 3: V_i <-- X */
|
241
|
+
for (k = 0; k < 2 * r; k++) {
|
242
|
+
for (i = 0; i < 16; i++) {
|
243
|
+
X32[k * 16 + i] = LOAD32_LE(&B[(k * 16 + (i * 5 % 16)) * 4]);
|
244
|
+
}
|
245
|
+
}
|
246
|
+
|
247
|
+
/* 2: for i = 0 to N - 1 do */
|
248
|
+
for (i = 1; i < N - 1; i += 2) {
|
249
|
+
/* 4: X <-- H(X) */
|
250
|
+
/* 3: V_i <-- X */
|
251
|
+
Y = (__m128i *) ((uintptr_t)(V) + i * s);
|
252
|
+
blockmix_salsa8(X, Y, r);
|
253
|
+
|
254
|
+
/* 4: X <-- H(X) */
|
255
|
+
/* 3: V_i <-- X */
|
256
|
+
X = (__m128i *) ((uintptr_t)(V) + (i + 1) * s);
|
257
|
+
blockmix_salsa8(Y, X, r);
|
258
|
+
}
|
259
|
+
|
260
|
+
/* 4: X <-- H(X) */
|
261
|
+
/* 3: V_i <-- X */
|
262
|
+
Y = (__m128i *) ((uintptr_t)(V) + i * s);
|
263
|
+
blockmix_salsa8(X, Y, r);
|
264
|
+
|
265
|
+
/* 4: X <-- H(X) */
|
266
|
+
/* 3: V_i <-- X */
|
267
|
+
X = (__m128i *) XY;
|
268
|
+
blockmix_salsa8(Y, X, r);
|
269
|
+
|
270
|
+
X32 = (uint32_t *) XY;
|
271
|
+
Y = (__m128i *) ((uintptr_t)(XY) + s);
|
272
|
+
|
273
|
+
/* 7: j <-- Integerify(X) mod N */
|
274
|
+
j = integerify(X, r) & (N - 1);
|
275
|
+
|
276
|
+
/* 6: for i = 0 to N - 1 do */
|
277
|
+
for (i = 0; i < N; i += 2) {
|
278
|
+
__m128i *V_j = (__m128i *) ((uintptr_t)(V) + j * s);
|
279
|
+
|
280
|
+
/* 8: X <-- H(X \xor V_j) */
|
281
|
+
/* 7: j <-- Integerify(X) mod N */
|
282
|
+
j = blockmix_salsa8_xor(X, V_j, Y, r) & (N - 1);
|
283
|
+
V_j = (__m128i *) ((uintptr_t)(V) + j * s);
|
284
|
+
|
285
|
+
/* 8: X <-- H(X \xor V_j) */
|
286
|
+
/* 7: j <-- Integerify(X) mod N */
|
287
|
+
j = blockmix_salsa8_xor(Y, V_j, X, r) & (N - 1);
|
288
|
+
}
|
289
|
+
|
290
|
+
/* 10: B' <-- X */
|
291
|
+
for (k = 0; k < 2 * r; k++) {
|
292
|
+
for (i = 0; i < 16; i++) {
|
293
|
+
STORE32_LE(&B[(k * 16 + (i * 5 % 16)) * 4], X32[k * 16 + i]);
|
294
|
+
}
|
295
|
+
}
|
296
|
+
}
|
297
|
+
|
298
|
+
/**
|
299
|
+
* escrypt_kdf(local, passwd, passwdlen, salt, saltlen,
|
300
|
+
* N, r, p, buf, buflen):
|
301
|
+
* Compute scrypt(passwd[0 .. passwdlen - 1], salt[0 .. saltlen - 1], N, r,
|
302
|
+
* p, buflen) and write the result into buf. The parameters r, p, and buflen
|
303
|
+
* must satisfy r * p < 2^30 and buflen <= (2^32 - 1) * 32. The parameter N
|
304
|
+
* must be a power of 2 greater than 1.
|
305
|
+
*
|
306
|
+
* Return 0 on success; or -1 on error.
|
307
|
+
*/
|
308
|
+
int
|
309
|
+
escrypt_kdf_sse(escrypt_local_t *local, const uint8_t *passwd, size_t passwdlen,
|
310
|
+
const uint8_t *salt, size_t saltlen, uint64_t N, uint32_t _r,
|
311
|
+
uint32_t _p, uint8_t *buf, size_t buflen)
|
312
|
+
{
|
313
|
+
size_t B_size, V_size, XY_size, need;
|
314
|
+
uint8_t * B;
|
315
|
+
uint32_t *V, *XY;
|
316
|
+
size_t r = _r, p = _p;
|
317
|
+
uint32_t i;
|
318
|
+
|
319
|
+
/* Sanity-check parameters. */
|
320
|
+
# if SIZE_MAX > UINT32_MAX
|
321
|
+
/* LCOV_EXCL_START */
|
322
|
+
if (buflen > (((uint64_t)(1) << 32) - 1) * 32) {
|
323
|
+
errno = EFBIG;
|
324
|
+
return -1;
|
325
|
+
}
|
326
|
+
/* LCOV_EXCL_END */
|
327
|
+
# endif
|
328
|
+
if ((uint64_t)(r) * (uint64_t)(p) >= ((uint64_t) 1 << 30)) {
|
329
|
+
errno = EFBIG;
|
330
|
+
return -1;
|
331
|
+
}
|
332
|
+
if (N > UINT32_MAX) {
|
333
|
+
errno = EFBIG;
|
334
|
+
return -1;
|
335
|
+
}
|
336
|
+
if (((N & (N - 1)) != 0) || (N < 2)) {
|
337
|
+
errno = EINVAL;
|
338
|
+
return -1;
|
339
|
+
}
|
340
|
+
if (r == 0 || p == 0) {
|
341
|
+
errno = EINVAL;
|
342
|
+
return -1;
|
343
|
+
}
|
344
|
+
/* LCOV_EXCL_START */
|
345
|
+
if ((r > SIZE_MAX / 128 / p) ||
|
346
|
+
# if SIZE_MAX / 256 <= UINT32_MAX
|
347
|
+
(r > SIZE_MAX / 256) ||
|
348
|
+
# endif
|
349
|
+
(N > SIZE_MAX / 128 / r)) {
|
350
|
+
errno = ENOMEM;
|
351
|
+
return -1;
|
352
|
+
}
|
353
|
+
/* LCOV_EXCL_END */
|
354
|
+
|
355
|
+
/* Allocate memory. */
|
356
|
+
B_size = (size_t) 128 * r * p;
|
357
|
+
V_size = (size_t) 128 * r * N;
|
358
|
+
need = B_size + V_size;
|
359
|
+
/* LCOV_EXCL_START */
|
360
|
+
if (need < V_size) {
|
361
|
+
errno = ENOMEM;
|
362
|
+
return -1;
|
363
|
+
}
|
364
|
+
/* LCOV_EXCL_END */
|
365
|
+
XY_size = (size_t) 256 * r + 64;
|
366
|
+
need += XY_size;
|
367
|
+
/* LCOV_EXCL_START */
|
368
|
+
if (need < XY_size) {
|
369
|
+
errno = ENOMEM;
|
370
|
+
return -1;
|
371
|
+
}
|
372
|
+
/* LCOV_EXCL_END */
|
373
|
+
if (local->size < need) {
|
374
|
+
if (free_region(local)) {
|
375
|
+
return -1; /* LCOV_EXCL_LINE */
|
376
|
+
}
|
377
|
+
if (!alloc_region(local, need)) {
|
378
|
+
return -1; /* LCOV_EXCL_LINE */
|
379
|
+
}
|
380
|
+
}
|
381
|
+
B = (uint8_t *) local->aligned;
|
382
|
+
V = (uint32_t *) ((uint8_t *) B + B_size);
|
383
|
+
XY = (uint32_t *) ((uint8_t *) V + V_size);
|
384
|
+
|
385
|
+
/* 1: (B_0 ... B_{p-1}) <-- PBKDF2(P, S, 1, p * MFLen) */
|
386
|
+
PBKDF2_SHA256(passwd, passwdlen, salt, saltlen, 1, B, B_size);
|
387
|
+
|
388
|
+
/* 2: for i = 0 to p - 1 do */
|
389
|
+
for (i = 0; i < p; i++) {
|
390
|
+
/* 3: B_i <-- MF(B_i, N) */
|
391
|
+
smix(&B[(size_t) 128 * i * r], r, (uint32_t) N, V, XY);
|
392
|
+
}
|
393
|
+
|
394
|
+
/* 5: DK <-- PBKDF2(P, B, 1, dkLen) */
|
395
|
+
PBKDF2_SHA256(passwd, passwdlen, B, B_size, 1, buf, buflen);
|
396
|
+
|
397
|
+
/* Success! */
|
398
|
+
return 0;
|
399
|
+
}
|
400
|
+
#endif
|
@@ -0,0 +1,33 @@
|
|
1
|
+
|
2
|
+
#include "crypto_scalarmult.h"
|
3
|
+
|
4
|
+
const char *
|
5
|
+
crypto_scalarmult_primitive(void)
|
6
|
+
{
|
7
|
+
return crypto_scalarmult_PRIMITIVE;
|
8
|
+
}
|
9
|
+
|
10
|
+
int
|
11
|
+
crypto_scalarmult_base(unsigned char *q, const unsigned char *n)
|
12
|
+
{
|
13
|
+
return crypto_scalarmult_curve25519_base(q, n);
|
14
|
+
}
|
15
|
+
|
16
|
+
int
|
17
|
+
crypto_scalarmult(unsigned char *q, const unsigned char *n,
|
18
|
+
const unsigned char *p)
|
19
|
+
{
|
20
|
+
return crypto_scalarmult_curve25519(q, n, p);
|
21
|
+
}
|
22
|
+
|
23
|
+
size_t
|
24
|
+
crypto_scalarmult_bytes(void)
|
25
|
+
{
|
26
|
+
return crypto_scalarmult_BYTES;
|
27
|
+
}
|
28
|
+
|
29
|
+
size_t
|
30
|
+
crypto_scalarmult_scalarbytes(void)
|
31
|
+
{
|
32
|
+
return crypto_scalarmult_SCALARBYTES;
|
33
|
+
}
|
@@ -0,0 +1,159 @@
|
|
1
|
+
|
2
|
+
#include <stddef.h>
|
3
|
+
#include <stdint.h>
|
4
|
+
|
5
|
+
#include "../scalarmult_curve25519.h"
|
6
|
+
#include "export.h"
|
7
|
+
#include "private/ed25519_ref10.h"
|
8
|
+
#include "utils.h"
|
9
|
+
#include "x25519_ref10.h"
|
10
|
+
|
11
|
+
/*
|
12
|
+
* Reject small order points early to mitigate the implications of
|
13
|
+
* unexpected optimizations that would affect the ref10 code.
|
14
|
+
* See https://eprint.iacr.org/2017/806.pdf for reference.
|
15
|
+
*/
|
16
|
+
static int
|
17
|
+
has_small_order(const unsigned char s[32])
|
18
|
+
{
|
19
|
+
CRYPTO_ALIGN(16)
|
20
|
+
static const unsigned char blacklist[][32] = {
|
21
|
+
{ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
|
22
|
+
{ 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
|
23
|
+
{ 0xe0, 0xeb, 0x7a, 0x7c, 0x3b, 0x41, 0xb8, 0xae, 0x16, 0x56, 0xe3, 0xfa, 0xf1, 0x9f, 0xc4, 0x6a, 0xda, 0x09, 0x8d, 0xeb, 0x9c, 0x32, 0xb1, 0xfd, 0x86, 0x62, 0x05, 0x16, 0x5f, 0x49, 0xb8, 0x00 },
|
24
|
+
{ 0x5f, 0x9c, 0x95, 0xbc, 0xa3, 0x50, 0x8c, 0x24, 0xb1, 0xd0, 0xb1, 0x55, 0x9c, 0x83, 0xef, 0x5b, 0x04, 0x44, 0x5c, 0xc4, 0x58, 0x1c, 0x8e, 0x86, 0xd8, 0x22, 0x4e, 0xdd, 0xd0, 0x9f, 0x11, 0x57 },
|
25
|
+
{ 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
|
26
|
+
{ 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
|
27
|
+
{ 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f },
|
28
|
+
{ 0xcd, 0xeb, 0x7a, 0x7c, 0x3b, 0x41, 0xb8, 0xae, 0x16, 0x56, 0xe3, 0xfa, 0xf1, 0x9f, 0xc4, 0x6a, 0xda, 0x09, 0x8d, 0xeb, 0x9c, 0x32, 0xb1, 0xfd, 0x86, 0x62, 0x05, 0x16, 0x5f, 0x49, 0xb8, 0x80 },
|
29
|
+
{ 0x4c, 0x9c, 0x95, 0xbc, 0xa3, 0x50, 0x8c, 0x24, 0xb1, 0xd0, 0xb1, 0x55, 0x9c, 0x83, 0xef, 0x5b, 0x04, 0x44, 0x5c, 0xc4, 0x58, 0x1c, 0x8e, 0x86, 0xd8, 0x22, 0x4e, 0xdd, 0xd0, 0x9f, 0x11, 0xd7 },
|
30
|
+
{ 0xd9, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
|
31
|
+
{ 0xda, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff },
|
32
|
+
{ 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff }
|
33
|
+
};
|
34
|
+
unsigned char c[12] = { 0 };
|
35
|
+
unsigned int k;
|
36
|
+
size_t i, j;
|
37
|
+
|
38
|
+
COMPILER_ASSERT(12 == sizeof blacklist / sizeof blacklist[0]);
|
39
|
+
for (j = 0; j < 32; j++) {
|
40
|
+
for (i = 0; i < sizeof blacklist / sizeof blacklist[0]; i++) {
|
41
|
+
c[i] |= s[j] ^ blacklist[i][j];
|
42
|
+
}
|
43
|
+
}
|
44
|
+
k = 0;
|
45
|
+
for (i = 0; i < sizeof blacklist / sizeof blacklist[0]; i++) {
|
46
|
+
k |= (c[i] - 1);
|
47
|
+
}
|
48
|
+
return (int) ((k >> 8) & 1);
|
49
|
+
}
|
50
|
+
|
51
|
+
static int
|
52
|
+
crypto_scalarmult_curve25519_ref10(unsigned char *q,
|
53
|
+
const unsigned char *n,
|
54
|
+
const unsigned char *p)
|
55
|
+
{
|
56
|
+
unsigned char *t = q;
|
57
|
+
unsigned int i;
|
58
|
+
fe25519 x1;
|
59
|
+
fe25519 x2;
|
60
|
+
fe25519 z2;
|
61
|
+
fe25519 x3;
|
62
|
+
fe25519 z3;
|
63
|
+
fe25519 tmp0;
|
64
|
+
fe25519 tmp1;
|
65
|
+
int pos;
|
66
|
+
unsigned int swap;
|
67
|
+
unsigned int b;
|
68
|
+
|
69
|
+
if (has_small_order(p)) {
|
70
|
+
return -1;
|
71
|
+
}
|
72
|
+
for (i = 0; i < 32; i++) {
|
73
|
+
t[i] = n[i];
|
74
|
+
}
|
75
|
+
t[0] &= 248;
|
76
|
+
t[31] &= 127;
|
77
|
+
t[31] |= 64;
|
78
|
+
fe25519_frombytes(x1, p);
|
79
|
+
fe25519_1(x2);
|
80
|
+
fe25519_0(z2);
|
81
|
+
fe25519_copy(x3, x1);
|
82
|
+
fe25519_1(z3);
|
83
|
+
|
84
|
+
swap = 0;
|
85
|
+
for (pos = 254; pos >= 0; --pos) {
|
86
|
+
b = t[pos / 8] >> (pos & 7);
|
87
|
+
b &= 1;
|
88
|
+
swap ^= b;
|
89
|
+
fe25519_cswap(x2, x3, swap);
|
90
|
+
fe25519_cswap(z2, z3, swap);
|
91
|
+
swap = b;
|
92
|
+
fe25519_sub(tmp0, x3, z3);
|
93
|
+
fe25519_sub(tmp1, x2, z2);
|
94
|
+
fe25519_add(x2, x2, z2);
|
95
|
+
fe25519_add(z2, x3, z3);
|
96
|
+
fe25519_mul(z3, tmp0, x2);
|
97
|
+
fe25519_mul(z2, z2, tmp1);
|
98
|
+
fe25519_sq(tmp0, tmp1);
|
99
|
+
fe25519_sq(tmp1, x2);
|
100
|
+
fe25519_add(x3, z3, z2);
|
101
|
+
fe25519_sub(z2, z3, z2);
|
102
|
+
fe25519_mul(x2, tmp1, tmp0);
|
103
|
+
fe25519_sub(tmp1, tmp1, tmp0);
|
104
|
+
fe25519_sq(z2, z2);
|
105
|
+
fe25519_scalar_product(z3, tmp1, 121666);
|
106
|
+
fe25519_sq(x3, x3);
|
107
|
+
fe25519_add(tmp0, tmp0, z3);
|
108
|
+
fe25519_mul(z3, x1, z2);
|
109
|
+
fe25519_mul(z2, tmp1, tmp0);
|
110
|
+
}
|
111
|
+
fe25519_cswap(x2, x3, swap);
|
112
|
+
fe25519_cswap(z2, z3, swap);
|
113
|
+
|
114
|
+
fe25519_invert(z2, z2);
|
115
|
+
fe25519_mul(x2, x2, z2);
|
116
|
+
fe25519_tobytes(q, x2);
|
117
|
+
|
118
|
+
return 0;
|
119
|
+
}
|
120
|
+
|
121
|
+
static void
|
122
|
+
edwards_to_montgomery(fe25519 montgomeryX, const fe25519 edwardsY, const fe25519 edwardsZ)
|
123
|
+
{
|
124
|
+
fe25519 tempX;
|
125
|
+
fe25519 tempZ;
|
126
|
+
|
127
|
+
fe25519_add(tempX, edwardsZ, edwardsY);
|
128
|
+
fe25519_sub(tempZ, edwardsZ, edwardsY);
|
129
|
+
fe25519_invert(tempZ, tempZ);
|
130
|
+
fe25519_mul(montgomeryX, tempX, tempZ);
|
131
|
+
}
|
132
|
+
|
133
|
+
static int
|
134
|
+
crypto_scalarmult_curve25519_ref10_base(unsigned char *q,
|
135
|
+
const unsigned char *n)
|
136
|
+
{
|
137
|
+
unsigned char *t = q;
|
138
|
+
ge25519_p3 A;
|
139
|
+
fe25519 pk;
|
140
|
+
unsigned int i;
|
141
|
+
|
142
|
+
for (i = 0; i < 32; i++) {
|
143
|
+
t[i] = n[i];
|
144
|
+
}
|
145
|
+
t[0] &= 248;
|
146
|
+
t[31] &= 127;
|
147
|
+
t[31] |= 64;
|
148
|
+
ge25519_scalarmult_base(&A, t);
|
149
|
+
edwards_to_montgomery(pk, A.Y, A.Z);
|
150
|
+
fe25519_tobytes(q, pk);
|
151
|
+
|
152
|
+
return 0;
|
153
|
+
}
|
154
|
+
|
155
|
+
struct crypto_scalarmult_curve25519_implementation
|
156
|
+
crypto_scalarmult_curve25519_ref10_implementation = {
|
157
|
+
SODIUM_C99(.mult =) crypto_scalarmult_curve25519_ref10,
|
158
|
+
SODIUM_C99(.mult_base =) crypto_scalarmult_curve25519_ref10_base
|
159
|
+
};
|
@@ -0,0 +1,25 @@
|
|
1
|
+
#ifdef IN_SANDY2X
|
2
|
+
|
3
|
+
/*
|
4
|
+
REDMASK51 is from amd64-51/consts.s.
|
5
|
+
*/
|
6
|
+
|
7
|
+
#include "consts_namespace.h"
|
8
|
+
.data
|
9
|
+
.p2align 4
|
10
|
+
v0_0: .quad 0, 0
|
11
|
+
v1_0: .quad 1, 0
|
12
|
+
v2_1: .quad 2, 1
|
13
|
+
v9_0: .quad 9, 0
|
14
|
+
v9_9: .quad 9, 9
|
15
|
+
v19_19: .quad 19, 19
|
16
|
+
v38_1: .quad 38, 1
|
17
|
+
v38_38: .quad 38, 38
|
18
|
+
v121666_121666: .quad 121666, 121666
|
19
|
+
m25: .quad 33554431, 33554431
|
20
|
+
m26: .quad 67108863, 67108863
|
21
|
+
subc0: .quad 0x07FFFFDA, 0x03FFFFFE
|
22
|
+
subc2: .quad 0x07FFFFFE, 0x03FFFFFE
|
23
|
+
REDMASK51: .quad 0x0007FFFFFFFFFFFF
|
24
|
+
|
25
|
+
#endif
|
@@ -0,0 +1,20 @@
|
|
1
|
+
#ifndef consts_namespace_H
|
2
|
+
#define consts_namespace_H
|
3
|
+
|
4
|
+
#define v0_0 crypto_scalarmult_curve25519_sandy2x_v0_0
|
5
|
+
#define v1_0 crypto_scalarmult_curve25519_sandy2x_v1_0
|
6
|
+
#define v2_1 crypto_scalarmult_curve25519_sandy2x_v2_1
|
7
|
+
#define v9_0 crypto_scalarmult_curve25519_sandy2x_v9_0
|
8
|
+
#define v9_9 crypto_scalarmult_curve25519_sandy2x_v9_9
|
9
|
+
#define v19_19 crypto_scalarmult_curve25519_sandy2x_v19_19
|
10
|
+
#define v38_1 crypto_scalarmult_curve25519_sandy2x_v38_1
|
11
|
+
#define v38_38 crypto_scalarmult_curve25519_sandy2x_v38_38
|
12
|
+
#define v121666_121666 crypto_scalarmult_curve25519_sandy2x_v121666_121666
|
13
|
+
#define m25 crypto_scalarmult_curve25519_sandy2x_m25
|
14
|
+
#define m26 crypto_scalarmult_curve25519_sandy2x_m26
|
15
|
+
#define subc0 crypto_scalarmult_curve25519_sandy2x_subc0
|
16
|
+
#define subc2 crypto_scalarmult_curve25519_sandy2x_subc2
|
17
|
+
#define REDMASK51 crypto_scalarmult_curve25519_sandy2x_REDMASK51
|
18
|
+
|
19
|
+
#endif /* ifndef consts_namespace_H */
|
20
|
+
|