ruby_nacl 0.1.0
Sign up to get free protection for your applications and to get access to all the features.
- data/Changelog +0 -0
- data/README.md +49 -0
- data/ext/ruby_nacl/NaCl/MACROS +56 -0
- data/ext/ruby_nacl/NaCl/OPERATIONS +11 -0
- data/ext/ruby_nacl/NaCl/PROTOTYPES.c +26 -0
- data/ext/ruby_nacl/NaCl/PROTOTYPES.cpp +17 -0
- data/ext/ruby_nacl/NaCl/README +1 -0
- data/ext/ruby_nacl/NaCl/commandline/nacl-sha256.c +64 -0
- data/ext/ruby_nacl/NaCl/commandline/nacl-sha512.c +64 -0
- data/ext/ruby_nacl/NaCl/cpucycles/alpha.c +80 -0
- data/ext/ruby_nacl/NaCl/cpucycles/alpha.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/amd64cpuinfo.c +16 -0
- data/ext/ruby_nacl/NaCl/cpucycles/amd64cpuinfo.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/amd64cpuspeed.c +25 -0
- data/ext/ruby_nacl/NaCl/cpucycles/amd64cpuspeed.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/amd64tscfreq.c +18 -0
- data/ext/ruby_nacl/NaCl/cpucycles/amd64tscfreq.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/celllinux.c +83 -0
- data/ext/ruby_nacl/NaCl/cpucycles/celllinux.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/cortex.c +73 -0
- data/ext/ruby_nacl/NaCl/cpucycles/cortex.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/dev4ns.c +62 -0
- data/ext/ruby_nacl/NaCl/cpucycles/dev4ns.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/do +105 -0
- data/ext/ruby_nacl/NaCl/cpucycles/gettimeofday.c +32 -0
- data/ext/ruby_nacl/NaCl/cpucycles/gettimeofday.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/hppapstat.c +26 -0
- data/ext/ruby_nacl/NaCl/cpucycles/hppapstat.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/ia64cpuinfo.c +15 -0
- data/ext/ruby_nacl/NaCl/cpucycles/ia64cpuinfo.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/mips.c +65 -0
- data/ext/ruby_nacl/NaCl/cpucycles/mips.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/monotonic.c +34 -0
- data/ext/ruby_nacl/NaCl/cpucycles/monotonic.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/monotoniccpuinfo.c +33 -0
- data/ext/ruby_nacl/NaCl/cpucycles/monotoniccpuinfo.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/osfreq.c +65 -0
- data/ext/ruby_nacl/NaCl/cpucycles/powerpccpuinfo.c +95 -0
- data/ext/ruby_nacl/NaCl/cpucycles/powerpccpuinfo.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/powerpcmacos.c +42 -0
- data/ext/ruby_nacl/NaCl/cpucycles/powerpcmacos.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/sgi.c +38 -0
- data/ext/ruby_nacl/NaCl/cpucycles/sgi.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/sparc32cpuinfo.c +16 -0
- data/ext/ruby_nacl/NaCl/cpucycles/sparc32cpuinfo.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/sparccpuinfo.c +15 -0
- data/ext/ruby_nacl/NaCl/cpucycles/sparccpuinfo.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/test.c +77 -0
- data/ext/ruby_nacl/NaCl/cpucycles/x86cpuinfo.c +15 -0
- data/ext/ruby_nacl/NaCl/cpucycles/x86cpuinfo.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/x86cpuspeed.c +24 -0
- data/ext/ruby_nacl/NaCl/cpucycles/x86cpuspeed.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/x86estimate.c +59 -0
- data/ext/ruby_nacl/NaCl/cpucycles/x86estimate.h +27 -0
- data/ext/ruby_nacl/NaCl/cpucycles/x86tscfreq.c +17 -0
- data/ext/ruby_nacl/NaCl/cpucycles/x86tscfreq.h +27 -0
- data/ext/ruby_nacl/NaCl/cpuid/cbytes.c +16 -0
- data/ext/ruby_nacl/NaCl/cpuid/cpuid.c +41 -0
- data/ext/ruby_nacl/NaCl/cpuid/do +37 -0
- data/ext/ruby_nacl/NaCl/cpuid/unknown.c +7 -0
- data/ext/ruby_nacl/NaCl/cpuid/x86.c +41 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha256/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha256/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha256/ref/hmac.c +83 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha256/ref/verify.c +9 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha256/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha512256/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha512256/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha512256/ref/hmac.c +86 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha512256/ref/verify.c +9 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha512256/selected +0 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/hmacsha512256/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/measure.c +69 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/try.c +119 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/wrapper-auth.cpp +11 -0
- data/ext/ruby_nacl/NaCl/crypto_auth/wrapper-verify.cpp +14 -0
- data/ext/ruby_nacl/NaCl/crypto_box/curve25519xsalsa20poly1305/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_box/curve25519xsalsa20poly1305/ref/after.c +22 -0
- data/ext/ruby_nacl/NaCl/crypto_box/curve25519xsalsa20poly1305/ref/api.h +6 -0
- data/ext/ruby_nacl/NaCl/crypto_box/curve25519xsalsa20poly1305/ref/before.c +17 -0
- data/ext/ruby_nacl/NaCl/crypto_box/curve25519xsalsa20poly1305/ref/box.c +27 -0
- data/ext/ruby_nacl/NaCl/crypto_box/curve25519xsalsa20poly1305/ref/keypair.c +12 -0
- data/ext/ruby_nacl/NaCl/crypto_box/curve25519xsalsa20poly1305/selected +0 -0
- data/ext/ruby_nacl/NaCl/crypto_box/curve25519xsalsa20poly1305/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_box/measure.c +137 -0
- data/ext/ruby_nacl/NaCl/crypto_box/try.c +195 -0
- data/ext/ruby_nacl/NaCl/crypto_box/wrapper-box.cpp +24 -0
- data/ext/ruby_nacl/NaCl/crypto_box/wrapper-keypair.cpp +12 -0
- data/ext/ruby_nacl/NaCl/crypto_box/wrapper-open.cpp +27 -0
- data/ext/ruby_nacl/NaCl/crypto_core/hsalsa20/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/hsalsa20/ref/api.h +4 -0
- data/ext/ruby_nacl/NaCl/crypto_core/hsalsa20/ref/core.c +135 -0
- data/ext/ruby_nacl/NaCl/crypto_core/hsalsa20/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/hsalsa20/ref2/api.h +4 -0
- data/ext/ruby_nacl/NaCl/crypto_core/hsalsa20/ref2/core.c +108 -0
- data/ext/ruby_nacl/NaCl/crypto_core/hsalsa20/ref2/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/hsalsa20/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_core/measure.c +18 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa20/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa20/ref/api.h +4 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa20/ref/core.c +134 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa20/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa20/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa2012/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa2012/ref/api.h +4 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa2012/ref/core.c +134 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa2012/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa2012/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa208/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa208/ref/api.h +4 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa208/ref/core.c +134 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa208/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_core/salsa208/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_core/try.c +116 -0
- data/ext/ruby_nacl/NaCl/crypto_core/wrapper-empty.cpp +0 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/measure.c +66 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha256/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha256/ref/api.h +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha256/ref/hash.c +69 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha256/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha256/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha512/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha512/ref/api.h +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha512/ref/hash.c +71 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha512/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha512/selected +0 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/sha512/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/try.c +77 -0
- data/ext/ruby_nacl/NaCl/crypto_hash/wrapper-hash.cpp +10 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/measure.c +18 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha256/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha256/inplace/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha256/inplace/blocks.c +228 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha256/inplace/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha256/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha256/ref/blocks.c +212 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha256/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha256/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/inplace/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/inplace/blocks.c +256 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/inplace/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/ref/blocks.c +239 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/selected +0 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/sha512/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/try.c +79 -0
- data/ext/ruby_nacl/NaCl/crypto_hashblocks/wrapper-empty.cpp +0 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/measure.c +69 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/53/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/53/auth.c +1616 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/53/verify.c +9 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/amd64/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/amd64/auth.s +2787 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/amd64/constants.s +85 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/amd64/verify.c +9 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/ref/auth.c +104 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/ref/verify.c +9 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/selected +0 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/x86/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/x86/auth.s +2779 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/x86/constants.s +85 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/poly1305/x86/verify.c +9 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/try.c +119 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/wrapper-auth.cpp +11 -0
- data/ext/ruby_nacl/NaCl/crypto_onetimeauth/wrapper-verify.cpp +14 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/base.c +8 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/const.s +114 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/fromdouble.s +195 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/init.s +13 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/mainloop.s +3990 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/mult.s +410 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/smult.c +91 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/square.s +298 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/athlon/todouble.s +144 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/donna_c64/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/donna_c64/base.c +8 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/donna_c64/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/donna_c64/smult.c +477 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/ref/base.c +16 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/ref/smult.c +265 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/curve25519/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/measure.c +61 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/try.c +126 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/wrapper-base.cpp +11 -0
- data/ext/ruby_nacl/NaCl/crypto_scalarmult/wrapper-mult.cpp +12 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/measure.c +75 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/try.c +129 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/wrapper-box.cpp +19 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/wrapper-open.cpp +22 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/xsalsa20poly1305/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/xsalsa20poly1305/ref/api.h +4 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/xsalsa20poly1305/ref/box.c +35 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/xsalsa20poly1305/selected +0 -0
- data/ext/ruby_nacl/NaCl/crypto_secretbox/xsalsa20poly1305/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/ref/api.h +3 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/ref/fe25519.c +345 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/ref/fe25519.h +54 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/ref/ge25519.c +227 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/ref/ge25519.h +34 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/ref/sc25519.c +146 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/ref/sc25519.h +51 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/ref/sign.c +103 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/selected +0 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/edwards25519sha512batch/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/measure.c +83 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/try.c +86 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/wrapper-keypair.cpp +12 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/wrapper-sign-open.cpp +24 -0
- data/ext/ruby_nacl/NaCl/crypto_sign/wrapper-sign.cpp +23 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/core2/afternm.s +12308 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/core2/api.h +3 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/core2/beforenm.s +13694 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/core2/stream.c +14 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/core2/xor.c +15 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/core2/xor_afternm.s +12407 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/afternm.c +158 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/api.h +3 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/beforenm.c +59 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/common.c +64 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/common.h +788 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/consts.c +14 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/consts.h +28 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/int128.c +128 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/int128.h +47 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/stream.c +28 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/types.h +10 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/portable/xor_afternm.c +180 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/aes128ctr/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/measure.c +73 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/amd64_xmm6/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/amd64_xmm6/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/amd64_xmm6/stream.s +4823 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/ref/stream.c +49 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/ref/xor.c +52 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/x86_xmm5/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/x86_xmm5/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa20/x86_xmm5/stream.s +5078 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/amd64_xmm6/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/amd64_xmm6/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/amd64_xmm6/stream.s +4823 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/ref/stream.c +49 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/ref/xor.c +52 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/x86_xmm5/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/x86_xmm5/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa2012/x86_xmm5/stream.s +5078 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/amd64_xmm6/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/amd64_xmm6/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/amd64_xmm6/stream.s +4823 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/ref/stream.c +49 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/ref/xor.c +52 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/x86_xmm5/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/x86_xmm5/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/salsa208/x86_xmm5/stream.s +5078 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/try.c +124 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/wrapper-stream.cpp +12 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/wrapper-xor.cpp +17 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/xsalsa20/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/xsalsa20/ref/api.h +2 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/xsalsa20/ref/implementors +1 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/xsalsa20/ref/stream.c +22 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/xsalsa20/ref/xor.c +23 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/xsalsa20/selected +0 -0
- data/ext/ruby_nacl/NaCl/crypto_stream/xsalsa20/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_stream.h +18 -0
- data/ext/ruby_nacl/NaCl/crypto_stream_aes128ctr.h +33 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/16/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/16/ref/api.h +1 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/16/ref/verify.c +24 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/16/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/32/checksum +1 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/32/ref/api.h +1 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/32/ref/verify.c +40 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/32/used +0 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/measure.c +18 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/try.c +75 -0
- data/ext/ruby_nacl/NaCl/crypto_verify/wrapper-empty.cpp +0 -0
- data/ext/ruby_nacl/NaCl/curvecp/LIBS +31 -0
- data/ext/ruby_nacl/NaCl/curvecp/README +10 -0
- data/ext/ruby_nacl/NaCl/curvecp/SOURCES +36 -0
- data/ext/ruby_nacl/NaCl/curvecp/TARGETS +5 -0
- data/ext/ruby_nacl/NaCl/curvecp/blocking.c +12 -0
- data/ext/ruby_nacl/NaCl/curvecp/blocking.h +7 -0
- data/ext/ruby_nacl/NaCl/curvecp/byte.h +8 -0
- data/ext/ruby_nacl/NaCl/curvecp/byte_copy.c +8 -0
- data/ext/ruby_nacl/NaCl/curvecp/byte_isequal.c +10 -0
- data/ext/ruby_nacl/NaCl/curvecp/byte_zero.c +7 -0
- data/ext/ruby_nacl/NaCl/curvecp/crypto_block.c +35 -0
- data/ext/ruby_nacl/NaCl/curvecp/crypto_block.h +4 -0
- data/ext/ruby_nacl/NaCl/curvecp/curvecpclient.c +476 -0
- data/ext/ruby_nacl/NaCl/curvecp/curvecpmakekey.c +57 -0
- data/ext/ruby_nacl/NaCl/curvecp/curvecpmessage.c +654 -0
- data/ext/ruby_nacl/NaCl/curvecp/curvecpprintkey.c +46 -0
- data/ext/ruby_nacl/NaCl/curvecp/curvecpserver.c +497 -0
- data/ext/ruby_nacl/NaCl/curvecp/die.c +42 -0
- data/ext/ruby_nacl/NaCl/curvecp/die.h +16 -0
- data/ext/ruby_nacl/NaCl/curvecp/e.c +106 -0
- data/ext/ruby_nacl/NaCl/curvecp/e.h +438 -0
- data/ext/ruby_nacl/NaCl/curvecp/hexparse.c +25 -0
- data/ext/ruby_nacl/NaCl/curvecp/hexparse.h +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/load.c +33 -0
- data/ext/ruby_nacl/NaCl/curvecp/load.h +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/nameparse.c +19 -0
- data/ext/ruby_nacl/NaCl/curvecp/nameparse.h +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/nanoseconds.c +27 -0
- data/ext/ruby_nacl/NaCl/curvecp/nanoseconds.h +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/open.h +10 -0
- data/ext/ruby_nacl/NaCl/curvecp/open_cwd.c +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/open_lock.c +19 -0
- data/ext/ruby_nacl/NaCl/curvecp/open_pipe.c +15 -0
- data/ext/ruby_nacl/NaCl/curvecp/open_read.c +17 -0
- data/ext/ruby_nacl/NaCl/curvecp/open_write.c +17 -0
- data/ext/ruby_nacl/NaCl/curvecp/portparse.c +14 -0
- data/ext/ruby_nacl/NaCl/curvecp/portparse.h +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/randommod.c +14 -0
- data/ext/ruby_nacl/NaCl/curvecp/randommod.h +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/safenonce.c +74 -0
- data/ext/ruby_nacl/NaCl/curvecp/safenonce.h +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/savesync.c +24 -0
- data/ext/ruby_nacl/NaCl/curvecp/savesync.h +6 -0
- data/ext/ruby_nacl/NaCl/curvecp/socket.h +9 -0
- data/ext/ruby_nacl/NaCl/curvecp/socket_bind.c +15 -0
- data/ext/ruby_nacl/NaCl/curvecp/socket_recv.c +23 -0
- data/ext/ruby_nacl/NaCl/curvecp/socket_send.c +19 -0
- data/ext/ruby_nacl/NaCl/curvecp/socket_udp.c +36 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint16_pack.c +7 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint16_pack.h +8 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint16_unpack.c +9 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint16_unpack.h +8 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint32_pack.c +9 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint32_pack.h +8 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint32_unpack.c +11 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint32_unpack.h +8 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint64_pack.c +13 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint64_pack.h +8 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint64_unpack.c +15 -0
- data/ext/ruby_nacl/NaCl/curvecp/uint64_unpack.h +8 -0
- data/ext/ruby_nacl/NaCl/curvecp/writeall.c +27 -0
- data/ext/ruby_nacl/NaCl/curvecp/writeall.h +6 -0
- data/ext/ruby_nacl/NaCl/do +468 -0
- data/ext/ruby_nacl/NaCl/inttypes/crypto_int16.c +3 -0
- data/ext/ruby_nacl/NaCl/inttypes/crypto_int32.c +3 -0
- data/ext/ruby_nacl/NaCl/inttypes/crypto_int64.c +3 -0
- data/ext/ruby_nacl/NaCl/inttypes/crypto_int8.c +3 -0
- data/ext/ruby_nacl/NaCl/inttypes/crypto_uint16.c +3 -0
- data/ext/ruby_nacl/NaCl/inttypes/crypto_uint32.c +3 -0
- data/ext/ruby_nacl/NaCl/inttypes/crypto_uint64.c +3 -0
- data/ext/ruby_nacl/NaCl/inttypes/crypto_uint8.c +3 -0
- data/ext/ruby_nacl/NaCl/inttypes/do +47 -0
- data/ext/ruby_nacl/NaCl/inttypes/signed.h +17 -0
- data/ext/ruby_nacl/NaCl/inttypes/unsigned.h +17 -0
- data/ext/ruby_nacl/NaCl/measure-anything.c +225 -0
- data/ext/ruby_nacl/NaCl/okcompilers/abiname.c +45 -0
- data/ext/ruby_nacl/NaCl/okcompilers/archivers +2 -0
- data/ext/ruby_nacl/NaCl/okcompilers/c +8 -0
- data/ext/ruby_nacl/NaCl/okcompilers/cpp +8 -0
- data/ext/ruby_nacl/NaCl/okcompilers/do +196 -0
- data/ext/ruby_nacl/NaCl/okcompilers/lib.c +29 -0
- data/ext/ruby_nacl/NaCl/okcompilers/lib.cpp +19 -0
- data/ext/ruby_nacl/NaCl/okcompilers/main.c +25 -0
- data/ext/ruby_nacl/NaCl/okcompilers/main.cpp +22 -0
- data/ext/ruby_nacl/NaCl/randombytes/devurandom.c +34 -0
- data/ext/ruby_nacl/NaCl/randombytes/devurandom.h +24 -0
- data/ext/ruby_nacl/NaCl/randombytes/do +43 -0
- data/ext/ruby_nacl/NaCl/randombytes/test.c +15 -0
- data/ext/ruby_nacl/NaCl/tests/auth.c +19 -0
- data/ext/ruby_nacl/NaCl/tests/auth.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/auth2.c +34 -0
- data/ext/ruby_nacl/NaCl/tests/auth2.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/auth3.c +34 -0
- data/ext/ruby_nacl/NaCl/tests/auth3.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/auth4.cpp +44 -0
- data/ext/ruby_nacl/NaCl/tests/auth4.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/auth5.c +36 -0
- data/ext/ruby_nacl/NaCl/tests/auth5.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/auth6.cpp +46 -0
- data/ext/ruby_nacl/NaCl/tests/auth6.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/box.c +63 -0
- data/ext/ruby_nacl/NaCl/tests/box.out +19 -0
- data/ext/ruby_nacl/NaCl/tests/box2.c +64 -0
- data/ext/ruby_nacl/NaCl/tests/box2.out +17 -0
- data/ext/ruby_nacl/NaCl/tests/box3.cpp +60 -0
- data/ext/ruby_nacl/NaCl/tests/box3.out +19 -0
- data/ext/ruby_nacl/NaCl/tests/box4.cpp +66 -0
- data/ext/ruby_nacl/NaCl/tests/box4.out +17 -0
- data/ext/ruby_nacl/NaCl/tests/box5.cpp +30 -0
- data/ext/ruby_nacl/NaCl/tests/box5.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/box6.cpp +43 -0
- data/ext/ruby_nacl/NaCl/tests/box6.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/box7.c +36 -0
- data/ext/ruby_nacl/NaCl/tests/box7.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/box8.c +41 -0
- data/ext/ruby_nacl/NaCl/tests/box8.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/core1.c +30 -0
- data/ext/ruby_nacl/NaCl/tests/core1.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/core2.c +33 -0
- data/ext/ruby_nacl/NaCl/tests/core2.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/core3.c +41 -0
- data/ext/ruby_nacl/NaCl/tests/core3.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/core4.c +33 -0
- data/ext/ruby_nacl/NaCl/tests/core4.out +8 -0
- data/ext/ruby_nacl/NaCl/tests/core5.c +32 -0
- data/ext/ruby_nacl/NaCl/tests/core5.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/core6.c +47 -0
- data/ext/ruby_nacl/NaCl/tests/core6.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/hash.c +14 -0
- data/ext/ruby_nacl/NaCl/tests/hash.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/hash2.cpp +18 -0
- data/ext/ruby_nacl/NaCl/tests/hash2.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/hash3.c +14 -0
- data/ext/ruby_nacl/NaCl/tests/hash3.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/hash4.cpp +18 -0
- data/ext/ruby_nacl/NaCl/tests/hash4.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth.c +42 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth.out +2 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth2.c +40 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth2.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth5.cpp +46 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth5.out +2 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth6.cpp +50 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth6.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth7.c +36 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth7.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth8.cpp +46 -0
- data/ext/ruby_nacl/NaCl/tests/onetimeauth8.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult.c +23 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult2.c +23 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult2.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult3.cpp +31 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult3.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult4.cpp +31 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult4.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult5.c +30 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult5.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult6.c +30 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult6.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult7.cpp +32 -0
- data/ext/ruby_nacl/NaCl/tests/scalarmult7.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox.c +56 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox.out +19 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox2.c +57 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox2.out +17 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox3.cpp +52 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox3.out +19 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox4.cpp +54 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox4.out +17 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox5.cpp +29 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox5.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox6.cpp +42 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox6.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox7.c +32 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox7.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox8.c +37 -0
- data/ext/ruby_nacl/NaCl/tests/secretbox8.out +0 -0
- data/ext/ruby_nacl/NaCl/tests/stream.c +29 -0
- data/ext/ruby_nacl/NaCl/tests/stream.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/stream2.c +27 -0
- data/ext/ruby_nacl/NaCl/tests/stream2.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/stream3.c +28 -0
- data/ext/ruby_nacl/NaCl/tests/stream3.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/stream4.c +53 -0
- data/ext/ruby_nacl/NaCl/tests/stream4.out +17 -0
- data/ext/ruby_nacl/NaCl/tests/stream5.cpp +29 -0
- data/ext/ruby_nacl/NaCl/tests/stream5.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/stream6.cpp +27 -0
- data/ext/ruby_nacl/NaCl/tests/stream6.out +1 -0
- data/ext/ruby_nacl/NaCl/tests/stream7.cpp +30 -0
- data/ext/ruby_nacl/NaCl/tests/stream7.out +4 -0
- data/ext/ruby_nacl/NaCl/tests/stream8.cpp +56 -0
- data/ext/ruby_nacl/NaCl/tests/stream8.out +17 -0
- data/ext/ruby_nacl/NaCl/try-anything.c +173 -0
- data/ext/ruby_nacl/NaCl/version +1 -0
- data/ext/ruby_nacl/extconf.rb +18 -0
- data/ext/ruby_nacl/ruby_nacl.cpp +147 -0
- data/ext/ruby_nacl/ruby_nacl.h +49 -0
- metadata +554 -0
@@ -0,0 +1,477 @@
|
|
1
|
+
/* Copyright 2008, Google Inc.
|
2
|
+
* All rights reserved.
|
3
|
+
*
|
4
|
+
* Code released into the public domain.
|
5
|
+
*
|
6
|
+
* curve25519-donna: Curve25519 elliptic curve, public key function
|
7
|
+
*
|
8
|
+
* http://code.google.com/p/curve25519-donna/
|
9
|
+
*
|
10
|
+
* Adam Langley <agl@imperialviolet.org>
|
11
|
+
*
|
12
|
+
* Derived from public domain C code by Daniel J. Bernstein <djb@cr.yp.to>
|
13
|
+
*
|
14
|
+
* More information about curve25519 can be found here
|
15
|
+
* http://cr.yp.to/ecdh.html
|
16
|
+
*
|
17
|
+
* djb's sample implementation of curve25519 is written in a special assembly
|
18
|
+
* language called qhasm and uses the floating point registers.
|
19
|
+
*
|
20
|
+
* This is, almost, a clean room reimplementation from the curve25519 paper. It
|
21
|
+
* uses many of the tricks described therein. Only the crecip function is taken
|
22
|
+
* from the sample implementation.
|
23
|
+
*/
|
24
|
+
|
25
|
+
#include <string.h>
|
26
|
+
#include <stdint.h>
|
27
|
+
#include "crypto_scalarmult.h"
|
28
|
+
|
29
|
+
typedef uint8_t u8;
|
30
|
+
typedef uint64_t felem;
|
31
|
+
// This is a special gcc mode for 128-bit integers. It's implemented on 64-bit
|
32
|
+
// platforms only as far as I know.
|
33
|
+
typedef unsigned uint128_t __attribute__((mode(TI)));
|
34
|
+
|
35
|
+
/* Sum two numbers: output += in */
|
36
|
+
static void fsum(felem *output, const felem *in) {
|
37
|
+
unsigned i;
|
38
|
+
for (i = 0; i < 5; ++i) output[i] += in[i];
|
39
|
+
}
|
40
|
+
|
41
|
+
/* Find the difference of two numbers: output = in - output
|
42
|
+
* (note the order of the arguments!)
|
43
|
+
*/
|
44
|
+
static void fdifference_backwards(felem *ioutput, const felem *iin) {
|
45
|
+
static const int64_t twotothe51 = (1l << 51);
|
46
|
+
const int64_t *in = (const int64_t *) iin;
|
47
|
+
int64_t *out = (int64_t *) ioutput;
|
48
|
+
|
49
|
+
out[0] = in[0] - out[0];
|
50
|
+
out[1] = in[1] - out[1];
|
51
|
+
out[2] = in[2] - out[2];
|
52
|
+
out[3] = in[3] - out[3];
|
53
|
+
out[4] = in[4] - out[4];
|
54
|
+
|
55
|
+
// An arithmetic shift right of 63 places turns a positive number to 0 and a
|
56
|
+
// negative number to all 1's. This gives us a bitmask that lets us avoid
|
57
|
+
// side-channel prone branches.
|
58
|
+
int64_t t;
|
59
|
+
|
60
|
+
#define NEGCHAIN(a,b) \
|
61
|
+
t = out[a] >> 63; \
|
62
|
+
out[a] += twotothe51 & t; \
|
63
|
+
out[b] -= 1 & t;
|
64
|
+
|
65
|
+
#define NEGCHAIN19(a,b) \
|
66
|
+
t = out[a] >> 63; \
|
67
|
+
out[a] += twotothe51 & t; \
|
68
|
+
out[b] -= 19 & t;
|
69
|
+
|
70
|
+
NEGCHAIN(0, 1);
|
71
|
+
NEGCHAIN(1, 2);
|
72
|
+
NEGCHAIN(2, 3);
|
73
|
+
NEGCHAIN(3, 4);
|
74
|
+
NEGCHAIN19(4, 0);
|
75
|
+
NEGCHAIN(0, 1);
|
76
|
+
NEGCHAIN(1, 2);
|
77
|
+
NEGCHAIN(2, 3);
|
78
|
+
NEGCHAIN(3, 4);
|
79
|
+
}
|
80
|
+
|
81
|
+
/* Multiply a number by a scalar: output = in * scalar */
|
82
|
+
static void fscalar_product(felem *output, const felem *in, const felem scalar) {
|
83
|
+
uint128_t a;
|
84
|
+
|
85
|
+
a = ((uint128_t) in[0]) * scalar;
|
86
|
+
output[0] = a & 0x7ffffffffffff;
|
87
|
+
|
88
|
+
a = ((uint128_t) in[1]) * scalar + (a >> 51);
|
89
|
+
output[1] = a & 0x7ffffffffffff;
|
90
|
+
|
91
|
+
a = ((uint128_t) in[2]) * scalar + (a >> 51);
|
92
|
+
output[2] = a & 0x7ffffffffffff;
|
93
|
+
|
94
|
+
a = ((uint128_t) in[3]) * scalar + (a >> 51);
|
95
|
+
output[3] = a & 0x7ffffffffffff;
|
96
|
+
|
97
|
+
a = ((uint128_t) in[4]) * scalar + (a >> 51);
|
98
|
+
output[4] = a & 0x7ffffffffffff;
|
99
|
+
|
100
|
+
output[0] += (a >> 51) * 19;
|
101
|
+
}
|
102
|
+
|
103
|
+
/* Multiply two numbers: output = in2 * in
|
104
|
+
*
|
105
|
+
* output must be distinct to both inputs. The inputs are reduced coefficient
|
106
|
+
* form, the output is not.
|
107
|
+
*/
|
108
|
+
static void fmul(felem *output, const felem *in2, const felem *in) {
|
109
|
+
uint128_t t[9];
|
110
|
+
|
111
|
+
t[0] = ((uint128_t) in[0]) * in2[0];
|
112
|
+
t[1] = ((uint128_t) in[0]) * in2[1] +
|
113
|
+
((uint128_t) in[1]) * in2[0];
|
114
|
+
t[2] = ((uint128_t) in[0]) * in2[2] +
|
115
|
+
((uint128_t) in[2]) * in2[0] +
|
116
|
+
((uint128_t) in[1]) * in2[1];
|
117
|
+
t[3] = ((uint128_t) in[0]) * in2[3] +
|
118
|
+
((uint128_t) in[3]) * in2[0] +
|
119
|
+
((uint128_t) in[1]) * in2[2] +
|
120
|
+
((uint128_t) in[2]) * in2[1];
|
121
|
+
t[4] = ((uint128_t) in[0]) * in2[4] +
|
122
|
+
((uint128_t) in[4]) * in2[0] +
|
123
|
+
((uint128_t) in[3]) * in2[1] +
|
124
|
+
((uint128_t) in[1]) * in2[3] +
|
125
|
+
((uint128_t) in[2]) * in2[2];
|
126
|
+
t[5] = ((uint128_t) in[4]) * in2[1] +
|
127
|
+
((uint128_t) in[1]) * in2[4] +
|
128
|
+
((uint128_t) in[2]) * in2[3] +
|
129
|
+
((uint128_t) in[3]) * in2[2];
|
130
|
+
t[6] = ((uint128_t) in[4]) * in2[2] +
|
131
|
+
((uint128_t) in[2]) * in2[4] +
|
132
|
+
((uint128_t) in[3]) * in2[3];
|
133
|
+
t[7] = ((uint128_t) in[3]) * in2[4] +
|
134
|
+
((uint128_t) in[4]) * in2[3];
|
135
|
+
t[8] = ((uint128_t) in[4]) * in2[4];
|
136
|
+
|
137
|
+
t[0] += t[5] * 19;
|
138
|
+
t[1] += t[6] * 19;
|
139
|
+
t[2] += t[7] * 19;
|
140
|
+
t[3] += t[8] * 19;
|
141
|
+
|
142
|
+
t[1] += t[0] >> 51;
|
143
|
+
t[0] &= 0x7ffffffffffff;
|
144
|
+
t[2] += t[1] >> 51;
|
145
|
+
t[1] &= 0x7ffffffffffff;
|
146
|
+
t[3] += t[2] >> 51;
|
147
|
+
t[2] &= 0x7ffffffffffff;
|
148
|
+
t[4] += t[3] >> 51;
|
149
|
+
t[3] &= 0x7ffffffffffff;
|
150
|
+
t[0] += 19 * (t[4] >> 51);
|
151
|
+
t[4] &= 0x7ffffffffffff;
|
152
|
+
t[1] += t[0] >> 51;
|
153
|
+
t[0] &= 0x7ffffffffffff;
|
154
|
+
t[2] += t[1] >> 51;
|
155
|
+
t[1] &= 0x7ffffffffffff;
|
156
|
+
|
157
|
+
output[0] = t[0];
|
158
|
+
output[1] = t[1];
|
159
|
+
output[2] = t[2];
|
160
|
+
output[3] = t[3];
|
161
|
+
output[4] = t[4];
|
162
|
+
}
|
163
|
+
|
164
|
+
static void
|
165
|
+
fsquare(felem *output, const felem *in) {
|
166
|
+
uint128_t t[9];
|
167
|
+
|
168
|
+
t[0] = ((uint128_t) in[0]) * in[0];
|
169
|
+
t[1] = ((uint128_t) in[0]) * in[1] * 2;
|
170
|
+
t[2] = ((uint128_t) in[0]) * in[2] * 2 +
|
171
|
+
((uint128_t) in[1]) * in[1];
|
172
|
+
t[3] = ((uint128_t) in[0]) * in[3] * 2 +
|
173
|
+
((uint128_t) in[1]) * in[2] * 2;
|
174
|
+
t[4] = ((uint128_t) in[0]) * in[4] * 2 +
|
175
|
+
((uint128_t) in[3]) * in[1] * 2 +
|
176
|
+
((uint128_t) in[2]) * in[2];
|
177
|
+
t[5] = ((uint128_t) in[4]) * in[1] * 2 +
|
178
|
+
((uint128_t) in[2]) * in[3] * 2;
|
179
|
+
t[6] = ((uint128_t) in[4]) * in[2] * 2 +
|
180
|
+
((uint128_t) in[3]) * in[3];
|
181
|
+
t[7] = ((uint128_t) in[3]) * in[4] * 2;
|
182
|
+
t[8] = ((uint128_t) in[4]) * in[4];
|
183
|
+
|
184
|
+
t[0] += t[5] * 19;
|
185
|
+
t[1] += t[6] * 19;
|
186
|
+
t[2] += t[7] * 19;
|
187
|
+
t[3] += t[8] * 19;
|
188
|
+
|
189
|
+
t[1] += t[0] >> 51;
|
190
|
+
t[0] &= 0x7ffffffffffff;
|
191
|
+
t[2] += t[1] >> 51;
|
192
|
+
t[1] &= 0x7ffffffffffff;
|
193
|
+
t[3] += t[2] >> 51;
|
194
|
+
t[2] &= 0x7ffffffffffff;
|
195
|
+
t[4] += t[3] >> 51;
|
196
|
+
t[3] &= 0x7ffffffffffff;
|
197
|
+
t[0] += 19 * (t[4] >> 51);
|
198
|
+
t[4] &= 0x7ffffffffffff;
|
199
|
+
t[1] += t[0] >> 51;
|
200
|
+
t[0] &= 0x7ffffffffffff;
|
201
|
+
|
202
|
+
output[0] = t[0];
|
203
|
+
output[1] = t[1];
|
204
|
+
output[2] = t[2];
|
205
|
+
output[3] = t[3];
|
206
|
+
output[4] = t[4];
|
207
|
+
}
|
208
|
+
|
209
|
+
/* Take a little-endian, 32-byte number and expand it into polynomial form */
|
210
|
+
static void
|
211
|
+
fexpand(felem *output, const u8 *in) {
|
212
|
+
output[0] = *((const uint64_t *)(in)) & 0x7ffffffffffff;
|
213
|
+
output[1] = (*((const uint64_t *)(in+6)) >> 3) & 0x7ffffffffffff;
|
214
|
+
output[2] = (*((const uint64_t *)(in+12)) >> 6) & 0x7ffffffffffff;
|
215
|
+
output[3] = (*((const uint64_t *)(in+19)) >> 1) & 0x7ffffffffffff;
|
216
|
+
output[4] = (*((const uint64_t *)(in+25)) >> 4) & 0x7ffffffffffff;
|
217
|
+
}
|
218
|
+
|
219
|
+
/* Take a fully reduced polynomial form number and contract it into a
|
220
|
+
* little-endian, 32-byte array
|
221
|
+
*/
|
222
|
+
static void
|
223
|
+
fcontract(u8 *output, const felem *input) {
|
224
|
+
uint128_t t[5];
|
225
|
+
|
226
|
+
t[0] = input[0];
|
227
|
+
t[1] = input[1];
|
228
|
+
t[2] = input[2];
|
229
|
+
t[3] = input[3];
|
230
|
+
t[4] = input[4];
|
231
|
+
|
232
|
+
t[1] += t[0] >> 51; t[0] &= 0x7ffffffffffff;
|
233
|
+
t[2] += t[1] >> 51; t[1] &= 0x7ffffffffffff;
|
234
|
+
t[3] += t[2] >> 51; t[2] &= 0x7ffffffffffff;
|
235
|
+
t[4] += t[3] >> 51; t[3] &= 0x7ffffffffffff;
|
236
|
+
t[0] += 19 * (t[4] >> 51); t[4] &= 0x7ffffffffffff;
|
237
|
+
|
238
|
+
t[1] += t[0] >> 51; t[0] &= 0x7ffffffffffff;
|
239
|
+
t[2] += t[1] >> 51; t[1] &= 0x7ffffffffffff;
|
240
|
+
t[3] += t[2] >> 51; t[2] &= 0x7ffffffffffff;
|
241
|
+
t[4] += t[3] >> 51; t[3] &= 0x7ffffffffffff;
|
242
|
+
t[0] += 19 * (t[4] >> 51); t[4] &= 0x7ffffffffffff;
|
243
|
+
|
244
|
+
/* now t is between 0 and 2^255-1, properly carried. */
|
245
|
+
/* case 1: between 0 and 2^255-20. case 2: between 2^255-19 and 2^255-1. */
|
246
|
+
|
247
|
+
t[0] += 19;
|
248
|
+
|
249
|
+
t[1] += t[0] >> 51; t[0] &= 0x7ffffffffffff;
|
250
|
+
t[2] += t[1] >> 51; t[1] &= 0x7ffffffffffff;
|
251
|
+
t[3] += t[2] >> 51; t[2] &= 0x7ffffffffffff;
|
252
|
+
t[4] += t[3] >> 51; t[3] &= 0x7ffffffffffff;
|
253
|
+
t[0] += 19 * (t[4] >> 51); t[4] &= 0x7ffffffffffff;
|
254
|
+
|
255
|
+
/* now between 19 and 2^255-1 in both cases, and offset by 19. */
|
256
|
+
|
257
|
+
t[0] += 0x8000000000000 - 19;
|
258
|
+
t[1] += 0x8000000000000 - 1;
|
259
|
+
t[2] += 0x8000000000000 - 1;
|
260
|
+
t[3] += 0x8000000000000 - 1;
|
261
|
+
t[4] += 0x8000000000000 - 1;
|
262
|
+
|
263
|
+
/* now between 2^255 and 2^256-20, and offset by 2^255. */
|
264
|
+
|
265
|
+
t[1] += t[0] >> 51; t[0] &= 0x7ffffffffffff;
|
266
|
+
t[2] += t[1] >> 51; t[1] &= 0x7ffffffffffff;
|
267
|
+
t[3] += t[2] >> 51; t[2] &= 0x7ffffffffffff;
|
268
|
+
t[4] += t[3] >> 51; t[3] &= 0x7ffffffffffff;
|
269
|
+
t[4] &= 0x7ffffffffffff;
|
270
|
+
|
271
|
+
*((uint64_t *)(output)) = t[0] | (t[1] << 51);
|
272
|
+
*((uint64_t *)(output+8)) = (t[1] >> 13) | (t[2] << 38);
|
273
|
+
*((uint64_t *)(output+16)) = (t[2] >> 26) | (t[3] << 25);
|
274
|
+
*((uint64_t *)(output+24)) = (t[3] >> 39) | (t[4] << 12);
|
275
|
+
}
|
276
|
+
|
277
|
+
/* Input: Q, Q', Q-Q'
|
278
|
+
* Output: 2Q, Q+Q'
|
279
|
+
*
|
280
|
+
* x2 z3: long form
|
281
|
+
* x3 z3: long form
|
282
|
+
* x z: short form, destroyed
|
283
|
+
* xprime zprime: short form, destroyed
|
284
|
+
* qmqp: short form, preserved
|
285
|
+
*/
|
286
|
+
static void
|
287
|
+
fmonty(felem *x2, felem *z2, /* output 2Q */
|
288
|
+
felem *x3, felem *z3, /* output Q + Q' */
|
289
|
+
felem *x, felem *z, /* input Q */
|
290
|
+
felem *xprime, felem *zprime, /* input Q' */
|
291
|
+
const felem *qmqp /* input Q - Q' */) {
|
292
|
+
felem origx[5], origxprime[5], zzz[5], xx[5], zz[5], xxprime[5],
|
293
|
+
zzprime[5], zzzprime[5];
|
294
|
+
|
295
|
+
memcpy(origx, x, 5 * sizeof(felem));
|
296
|
+
fsum(x, z);
|
297
|
+
fdifference_backwards(z, origx); // does x - z
|
298
|
+
|
299
|
+
memcpy(origxprime, xprime, sizeof(felem) * 5);
|
300
|
+
fsum(xprime, zprime);
|
301
|
+
fdifference_backwards(zprime, origxprime);
|
302
|
+
fmul(xxprime, xprime, z);
|
303
|
+
fmul(zzprime, x, zprime);
|
304
|
+
memcpy(origxprime, xxprime, sizeof(felem) * 5);
|
305
|
+
fsum(xxprime, zzprime);
|
306
|
+
fdifference_backwards(zzprime, origxprime);
|
307
|
+
fsquare(x3, xxprime);
|
308
|
+
fsquare(zzzprime, zzprime);
|
309
|
+
fmul(z3, zzzprime, qmqp);
|
310
|
+
|
311
|
+
fsquare(xx, x);
|
312
|
+
fsquare(zz, z);
|
313
|
+
fmul(x2, xx, zz);
|
314
|
+
fdifference_backwards(zz, xx); // does zz = xx - zz
|
315
|
+
fscalar_product(zzz, zz, 121665);
|
316
|
+
fsum(zzz, xx);
|
317
|
+
fmul(z2, zz, zzz);
|
318
|
+
}
|
319
|
+
|
320
|
+
// -----------------------------------------------------------------------------
|
321
|
+
// Maybe swap the contents of two felem arrays (@a and @b), each @len elements
|
322
|
+
// long. Perform the swap iff @swap is non-zero.
|
323
|
+
//
|
324
|
+
// This function performs the swap without leaking any side-channel
|
325
|
+
// information.
|
326
|
+
// -----------------------------------------------------------------------------
|
327
|
+
static void
|
328
|
+
swap_conditional(felem *a, felem *b, unsigned len, felem iswap) {
|
329
|
+
unsigned i;
|
330
|
+
const felem swap = -iswap;
|
331
|
+
|
332
|
+
for (i = 0; i < len; ++i) {
|
333
|
+
const felem x = swap & (a[i] ^ b[i]);
|
334
|
+
a[i] ^= x;
|
335
|
+
b[i] ^= x;
|
336
|
+
}
|
337
|
+
}
|
338
|
+
|
339
|
+
/* Calculates nQ where Q is the x-coordinate of a point on the curve
|
340
|
+
*
|
341
|
+
* resultx/resultz: the x coordinate of the resulting curve point (short form)
|
342
|
+
* n: a little endian, 32-byte number
|
343
|
+
* q: a point of the curve (short form)
|
344
|
+
*/
|
345
|
+
static void
|
346
|
+
cmult(felem *resultx, felem *resultz, const u8 *n, const felem *q) {
|
347
|
+
felem a[5] = {0}, b[5] = {1}, c[5] = {1}, d[5] = {0};
|
348
|
+
felem *nqpqx = a, *nqpqz = b, *nqx = c, *nqz = d, *t;
|
349
|
+
felem e[5] = {0}, f[5] = {1}, g[5] = {0}, h[5] = {1};
|
350
|
+
felem *nqpqx2 = e, *nqpqz2 = f, *nqx2 = g, *nqz2 = h;
|
351
|
+
|
352
|
+
unsigned i, j;
|
353
|
+
|
354
|
+
memcpy(nqpqx, q, sizeof(felem) * 5);
|
355
|
+
|
356
|
+
for (i = 0; i < 32; ++i) {
|
357
|
+
u8 byte = n[31 - i];
|
358
|
+
for (j = 0; j < 8; ++j) {
|
359
|
+
const felem bit = byte >> 7;
|
360
|
+
|
361
|
+
swap_conditional(nqx, nqpqx, 5, bit);
|
362
|
+
swap_conditional(nqz, nqpqz, 5, bit);
|
363
|
+
fmonty(nqx2, nqz2,
|
364
|
+
nqpqx2, nqpqz2,
|
365
|
+
nqx, nqz,
|
366
|
+
nqpqx, nqpqz,
|
367
|
+
q);
|
368
|
+
swap_conditional(nqx2, nqpqx2, 5, bit);
|
369
|
+
swap_conditional(nqz2, nqpqz2, 5, bit);
|
370
|
+
|
371
|
+
t = nqx;
|
372
|
+
nqx = nqx2;
|
373
|
+
nqx2 = t;
|
374
|
+
t = nqz;
|
375
|
+
nqz = nqz2;
|
376
|
+
nqz2 = t;
|
377
|
+
t = nqpqx;
|
378
|
+
nqpqx = nqpqx2;
|
379
|
+
nqpqx2 = t;
|
380
|
+
t = nqpqz;
|
381
|
+
nqpqz = nqpqz2;
|
382
|
+
nqpqz2 = t;
|
383
|
+
|
384
|
+
byte <<= 1;
|
385
|
+
}
|
386
|
+
}
|
387
|
+
|
388
|
+
memcpy(resultx, nqx, sizeof(felem) * 5);
|
389
|
+
memcpy(resultz, nqz, sizeof(felem) * 5);
|
390
|
+
}
|
391
|
+
|
392
|
+
// -----------------------------------------------------------------------------
|
393
|
+
// Shamelessly copied from djb's code
|
394
|
+
// -----------------------------------------------------------------------------
|
395
|
+
static void
|
396
|
+
crecip(felem *out, const felem *z) {
|
397
|
+
felem z2[5];
|
398
|
+
felem z9[5];
|
399
|
+
felem z11[5];
|
400
|
+
felem z2_5_0[5];
|
401
|
+
felem z2_10_0[5];
|
402
|
+
felem z2_20_0[5];
|
403
|
+
felem z2_50_0[5];
|
404
|
+
felem z2_100_0[5];
|
405
|
+
felem t0[5];
|
406
|
+
felem t1[5];
|
407
|
+
int i;
|
408
|
+
|
409
|
+
/* 2 */ fsquare(z2,z);
|
410
|
+
/* 4 */ fsquare(t1,z2);
|
411
|
+
/* 8 */ fsquare(t0,t1);
|
412
|
+
/* 9 */ fmul(z9,t0,z);
|
413
|
+
/* 11 */ fmul(z11,z9,z2);
|
414
|
+
/* 22 */ fsquare(t0,z11);
|
415
|
+
/* 2^5 - 2^0 = 31 */ fmul(z2_5_0,t0,z9);
|
416
|
+
|
417
|
+
/* 2^6 - 2^1 */ fsquare(t0,z2_5_0);
|
418
|
+
/* 2^7 - 2^2 */ fsquare(t1,t0);
|
419
|
+
/* 2^8 - 2^3 */ fsquare(t0,t1);
|
420
|
+
/* 2^9 - 2^4 */ fsquare(t1,t0);
|
421
|
+
/* 2^10 - 2^5 */ fsquare(t0,t1);
|
422
|
+
/* 2^10 - 2^0 */ fmul(z2_10_0,t0,z2_5_0);
|
423
|
+
|
424
|
+
/* 2^11 - 2^1 */ fsquare(t0,z2_10_0);
|
425
|
+
/* 2^12 - 2^2 */ fsquare(t1,t0);
|
426
|
+
/* 2^20 - 2^10 */ for (i = 2;i < 10;i += 2) { fsquare(t0,t1); fsquare(t1,t0); }
|
427
|
+
/* 2^20 - 2^0 */ fmul(z2_20_0,t1,z2_10_0);
|
428
|
+
|
429
|
+
/* 2^21 - 2^1 */ fsquare(t0,z2_20_0);
|
430
|
+
/* 2^22 - 2^2 */ fsquare(t1,t0);
|
431
|
+
/* 2^40 - 2^20 */ for (i = 2;i < 20;i += 2) { fsquare(t0,t1); fsquare(t1,t0); }
|
432
|
+
/* 2^40 - 2^0 */ fmul(t0,t1,z2_20_0);
|
433
|
+
|
434
|
+
/* 2^41 - 2^1 */ fsquare(t1,t0);
|
435
|
+
/* 2^42 - 2^2 */ fsquare(t0,t1);
|
436
|
+
/* 2^50 - 2^10 */ for (i = 2;i < 10;i += 2) { fsquare(t1,t0); fsquare(t0,t1); }
|
437
|
+
/* 2^50 - 2^0 */ fmul(z2_50_0,t0,z2_10_0);
|
438
|
+
|
439
|
+
/* 2^51 - 2^1 */ fsquare(t0,z2_50_0);
|
440
|
+
/* 2^52 - 2^2 */ fsquare(t1,t0);
|
441
|
+
/* 2^100 - 2^50 */ for (i = 2;i < 50;i += 2) { fsquare(t0,t1); fsquare(t1,t0); }
|
442
|
+
/* 2^100 - 2^0 */ fmul(z2_100_0,t1,z2_50_0);
|
443
|
+
|
444
|
+
/* 2^101 - 2^1 */ fsquare(t1,z2_100_0);
|
445
|
+
/* 2^102 - 2^2 */ fsquare(t0,t1);
|
446
|
+
/* 2^200 - 2^100 */ for (i = 2;i < 100;i += 2) { fsquare(t1,t0); fsquare(t0,t1); }
|
447
|
+
/* 2^200 - 2^0 */ fmul(t1,t0,z2_100_0);
|
448
|
+
|
449
|
+
/* 2^201 - 2^1 */ fsquare(t0,t1);
|
450
|
+
/* 2^202 - 2^2 */ fsquare(t1,t0);
|
451
|
+
/* 2^250 - 2^50 */ for (i = 2;i < 50;i += 2) { fsquare(t0,t1); fsquare(t1,t0); }
|
452
|
+
/* 2^250 - 2^0 */ fmul(t0,t1,z2_50_0);
|
453
|
+
|
454
|
+
/* 2^251 - 2^1 */ fsquare(t1,t0);
|
455
|
+
/* 2^252 - 2^2 */ fsquare(t0,t1);
|
456
|
+
/* 2^253 - 2^3 */ fsquare(t1,t0);
|
457
|
+
/* 2^254 - 2^4 */ fsquare(t0,t1);
|
458
|
+
/* 2^255 - 2^5 */ fsquare(t1,t0);
|
459
|
+
/* 2^255 - 21 */ fmul(out,t1,z11);
|
460
|
+
}
|
461
|
+
|
462
|
+
int
|
463
|
+
crypto_scalarmult(u8 *mypublic, const u8 *secret, const u8 *basepoint) {
|
464
|
+
felem bp[5], x[5], z[5], zmone[5];
|
465
|
+
unsigned char e[32];
|
466
|
+
int i;
|
467
|
+
for (i = 0;i < 32;++i) e[i] = secret[i];
|
468
|
+
e[0] &= 248;
|
469
|
+
e[31] &= 127;
|
470
|
+
e[31] |= 64;
|
471
|
+
fexpand(bp, basepoint);
|
472
|
+
cmult(x, z, e, bp);
|
473
|
+
crecip(zmone, z);
|
474
|
+
fmul(z, x, zmone);
|
475
|
+
fcontract(mypublic, z);
|
476
|
+
return 0;
|
477
|
+
}
|
@@ -0,0 +1,16 @@
|
|
1
|
+
/*
|
2
|
+
version 20081011
|
3
|
+
Matthew Dempsky
|
4
|
+
Public domain.
|
5
|
+
Derived from public domain code by D. J. Bernstein.
|
6
|
+
*/
|
7
|
+
|
8
|
+
#include "crypto_scalarmult.h"
|
9
|
+
|
10
|
+
const unsigned char base[32] = {9};
|
11
|
+
|
12
|
+
int crypto_scalarmult_base(unsigned char *q,
|
13
|
+
const unsigned char *n)
|
14
|
+
{
|
15
|
+
return crypto_scalarmult(q,n,base);
|
16
|
+
}
|
@@ -0,0 +1 @@
|
|
1
|
+
Matthew Dempsky (Mochi Media)
|