curve25519-dalek-source/curve25519-dalek/src
Tony Arcieri 921bd7ced0
curve: use subtle::Choice for constant-time fixes (#665)
Alternative to #659/#661 and #662 which leverages `subtle::Choice` and
`subtle::ConditionallySelectable` as the optimization barriers.

Really the previous masking was there to conditionally add the scalar
field modulus on underflow, so instead of that, we can conditionally
select zero or the modulus using a `Choice` constructed from the
underflow bit.
2024-07-17 12:05:46 -06:00
..
backend curve: use subtle::Choice for constant-time fixes (#665) 2024-07-17 12:05:46 -06:00
constants.rs Deprecate BASEPOINT_ORDER from pub API consts (#581) 2023-09-17 23:59:05 -04:00
diagnostics.rs Workspace curve25519 under curve25519-dalek 2023-06-27 04:00:12 +00:00
edwards.rs Address new nightly clippy unnecessary qualifications (#639) 2024-03-07 16:58:20 -07:00
field.rs Fix new nightly redundant import lint warns (#638) 2024-02-29 18:56:52 -07:00
lib.rs Mitigate check-cfg until MSRV 1.77 (#652) 2024-05-09 07:24:16 -06:00
macros.rs Workspace curve25519 under curve25519-dalek 2023-06-27 04:00:12 +00:00
montgomery.rs curve: Add arbitrary integer multiplication with MontgomeryPoint::mul_bits_be (#555) 2023-08-28 01:58:41 -04:00
ristretto.rs Address new nightly clippy unnecessary qualifications (#639) 2024-03-07 16:58:20 -07:00
scalar.rs Mitigate check-cfg until MSRV 1.77 (#652) 2024-05-09 07:24:16 -06:00
traits.rs Fix new nightly redundant import lint warns (#638) 2024-02-29 18:56:52 -07:00
window.rs Address new nightly clippy unnecessary qualifications (#639) 2024-03-07 16:58:20 -07:00