saymrwulf/curve25519-dalek-source
1
0
Fork 0
mirror of https://github.com/saymrwulf/curve25519-dalek-source.git synced 2026-09-04 20:24:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
1163 commits 1 branch 0 tags 5.7 MiB
Commit graph

1163 commits

This branch
This branch
All branches
Author SHA1 Message Date
Henry de Valence
f825426ff4 Add impl Default, Identity for ExtendedPoint, CachedPoint. 2019-01-18 14:19:30 -08:00
Henry de Valence
da62569355 Add lookup table support. 2019-01-18 14:19:30 -08:00
Henry de Valence
6cec313f16 Add impl of Sub and Neg for Edwards points. 2019-01-18 14:19:30 -08:00
Henry de Valence
6faaef21df Add mul_by_pow_2 for IFMA 2019-01-18 14:19:30 -08:00
Henry de Valence
8e38ff2859 Add Edwards doubling implementation. 2019-01-18 14:19:30 -08:00
Henry de Valence
c4617b28a9 Add squaring implementation. 2019-01-18 14:19:30 -08:00
Henry de Valence
a62571b003 Reduce field elements during conversion to vector form. 
The IFMA types have tighter bounds than the u64 types.
 2019-01-18 14:19:30 -08:00
Henry de Valence
3f21bb3b58 Add skeleton of parallel Edwards formulas. 2019-01-18 14:19:30 -08:00
Henry de Valence
5880fced2b Add skeleton of shuffle and blend functions. 2019-01-18 14:19:30 -08:00
Henry de Valence
d90bb779ca Delay all computations using x[0], y[0] 
Since computation of the 0 term in reduction requires a multiplication with a
4-cycle latency, this ensures that the rest of the computation can start before
the 0 term is finished
 2019-01-18 14:19:30 -08:00
Henry de Valence
c925c76342 Change the strategy for reducing the high half of the product. 2019-01-18 14:19:30 -08:00
Henry de Valence
607b839032 Change size of limbs in the reduction test. 2019-01-18 14:19:30 -08:00
Henry de Valence
14163131f9 Lift the reduction state of the field elements into the type system. 
This splits the `FieldElement51x4` type into two types:

- `F51x4Reduced` (with reduced limbs)
- `F51x4Unreduced` (with unreduced limbs)

The reduction is implemented as a `From` impl to convert one type to the other.

The output of a multiplication is now a `F51x4Unreduced`.  The reason is that
the inputs to IFMA operations must be at most 52 bits, so it's not possible to
perform an addition of (51+epsilon)-bit values and still be small enough to be
used as an input to multiplication.  So, it doesn't make sense to perform a
reduction at the end of a multiplication, because the reduced values will be
fed into an addition or subtraction, which then needs to be re-reduced.
 2019-01-18 14:19:30 -08:00
Henry de Valence
ff49673214 Add impl Mul<(u32, u32, u32, u32)> for FieldElement51x4. 2019-01-18 14:19:30 -08:00
Henry de Valence
70199d6094 Add impl Mul<FieldElement51x4> for FieldElement51x4. 2019-01-18 14:19:30 -08:00
Henry de Valence
aa73d7b1bc Add a FieldElement51x4 type. 2019-01-18 14:19:30 -08:00
Henry de Valence
3233e2eac6 Fix: cfg_target_feature is stable since 1.27. 2019-01-18 14:19:20 -08:00
Henry de Valence
be77af1cd8 Remove unnecessary feature gate. 
The vector backend doesn't generate constants in build.rs, so this isn't necessary.
 2019-01-18 14:18:55 -08:00
Henry de Valence
e91cc685b1 Don't generate unused constants in build.rs. 2019-01-18 14:15:28 -08:00
Henry de Valence
47a164da4d Replace avx2_backend with simd_backend (autoselects AVX2/IFMA) 2019-01-18 01:52:17 -08:00
Henry de Valence
9ed2128a10 Add stub code for IFMA intrinsics in Rust. 2019-01-18 01:52:17 -08:00
Henry de Valence
0a97f5fe8c Don't compile the serial scalar_mul when using the vector one. 2019-01-18 01:52:07 -08:00
Henry de Valence
f1d2b5182b Restructure source tree into serial and vector backends. 
This begins to attempt to restructure the source tree so that the common parts
are common and the different parts are different.

The backend is now split into two parts:
- serial (containing the implementation using serial formulas and mixed-model arithmetic).
- vector (containing the implementation using parallel formulas and single-model arithmetic).

The serial scalar_mul tree is now under backend::serial::scalar_mul.
The avx2 scalar_mul tree is now under backend::avx2::scalar_mul.
 2019-01-18 01:49:40 -08:00
Henry de Valence
94cb3e7842 Rename field types based on radix. 
`FieldElement32` -> `FieldElement2625`
`FieldElement64` -> `FieldElement51`
`Scalar32` -> `Scalar29`
`Scalar64` -> `Scalar52`

This naming is more accurate and would let us add an ADX backend later.
 2019-01-17 22:21:55 -08:00
Henry de Valence
4814242d00 Merge branch 'master' into develop 2019-01-17 19:26:50 -08:00
Henry de Valence
3564d18ff8 Merge branch 'release/1.0.2' 2019-01-17 19:26:35 -08:00
Henry de Valence
0328fb1342 Bump patch version 2019-01-17 19:25:34 -08:00
Henry de Valence
f48980cb5b
Merge pull request #223 from hdevalence/ristretto-fix 
Fix variable naming in Ristretto decoding formulas
 2019-01-16 17:54:23 -08:00
Henry de Valence
e6f27ca996 Fix Ristretto variable naming in decoding function 
The code swaps u_1 and u_2 relative to the formulas (probably when doing the change for a=-1)
 2019-01-13 18:01:00 -08:00
Артём Павлов [Artyom Pavlov]
4e4730303d enable rand_core/std 2019-01-05 14:32:36 +03:00
Артём Павлов [Artyom Pavlov]
d6ca36fa0b replace rand with rand_core+rand_os 2019-01-05 14:27:24 +03:00
Jeff Burdges
20fd561482 Support passing both borrowed and owned Rngs 2018-12-26 17:09:20 +01:00
Henry de Valence
78cc7748d7 Merge branch 'master' into develop 2018-12-13 15:45:22 -08:00
Henry de Valence
7de65dc32c Merge branch 'release/1.0.1' 2018-12-13 15:45:09 -08:00
Henry de Valence
5d4b5cb2a4 Bump version to 1.0.1 2018-12-13 15:43:26 -08:00
Henry de Valence
fca2cd5f95 Use the released version of subtle (oops) 2018-12-13 15:42:31 -08:00
Henry de Valence
3d6e0804de Merge branch 'master' into develop 2018-12-13 15:39:25 -08:00
Henry de Valence
9855ba6b51 Merge branch 'release/1.0.0' 2018-12-13 15:39:06 -08:00
Henry de Valence
9b4361db8b Finalize 1.0.0 2018-12-13 15:35:32 -08:00
Henry de Valence
6239a92055 Merge branch 'master' into develop 2018-11-18 10:47:51 -08:00
Henry de Valence
cd14527420 Merge branch 'release/1.0.0-pre.1' 2018-11-18 10:47:40 -08:00
Henry de Valence
7f63eaec60 Bump version to 1.0.0-pre.1 2018-11-18 10:44:30 -08:00
Henry de Valence
fc067303bb
Merge pull request #211 from IronCoreLabs/rand-0.6 
Update to use Rand 0.6
 2018-11-15 11:13:45 -08:00
Henry de Valence
55b96aab6d
Merge pull request #210 from DebugSteven/default-montgomerypoint 
Default & Identity trait for MontgomeryPoint
 2018-11-14 20:35:35 -08:00
DebugSteven
39145da396 implement default for MontgomeryPoint using zero byte array 2018-11-14 23:16:50 -05:00
Colt Frederickson
b5d6e94a64 Build for 0.6.0 2018-11-14 14:39:47 -07:00
DebugSteven
2adc985f63 default & identity trait for MontgomeryPoint 2018-11-14 14:43:11 -05:00
Henry de Valence
b75d528f4a Merge branch 'master' into develop 2018-11-05 16:22:10 -08:00
Henry de Valence
d58b663ea8 Merge branch 'release/1.0.0-pre.0' 2018-11-05 16:21:57 -08:00
Henry de Valence
18a7fb360a Bump version to 1.0.0-pre.0 2018-11-05 16:15:07 -08:00