aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-10-26Use ${AR} for cross-building.Paul Selkirk
Regular ar is fine, but this feels cleaner.
2015-10-19catch up to changes in core version numbersPaul Selkirk
2015-10-04Handle missing hash cores more gracefully.Rob Austein
2015-10-04Disallow NULL core argument in lowest-level HAL I/O routines.Rob Austein
2015-10-04Helps to select the CSPRNG core before trying to call it.Rob Austein
2015-10-04Whack libhal API to use current configure_core_selector mechanism.Rob Austein
Compiles, not yet tested.
2015-10-04off_t => hal_addr_t.Rob Austein
2015-10-03Use initializers for automatic variables of type fp_int because it's aRob Austein
bit more obvious when we've forgotten to do this than when we've forgotten to call fp_init() or memset(). Convert rsa.c to use the one-element-array idiom so we can get stop prefixing every bignum reference with "&".
2015-10-02Impressive how much trouble one can get into with one uninitialized bignum.Rob Austein
2015-10-02Testing shows that signature and verification are both faster withRob Austein
mixed Jacobian-affine addition, so go with that. Minor additional clean-up and comments.
2015-10-02Revise point addition and point scalar multiplication routines to useRob Austein
mixed Jacobian-affine coordinates, per a suggestion from Pavel. Old code still present under compile time conditional for easy comparison, but will probably go away soon along with a bit of minor cleanup.
2015-09-14Fencepost error in hal_ecdas_key_from_ecpoint().Rob Austein
2015-09-14P-512 parameters were mislabeled.Rob Austein
2015-09-12PKCS #11 testing turned up a problem with P-521, don't reallyRob Austein
understand the bug yet, but first step is fixing test-ecdsa.
2015-09-11Avoid gratuitous assertion failure if caller gives us a larger bufferRob Austein
than necessary when writing private key to DER.
2015-09-08Merge branch 'master' into ecdsaRob Austein
This required a bit of manual cleanup in hal.h, hash.c, and rsa.c. No intended changes to functionality provided by parent comments, just a few tweaks to track API changes beyond git's ken.
2015-09-08Merge branch 'state_access'Rob Austein
2015-09-08Merge branch 'modexps6'Rob Austein
2015-09-06Add ECPoint I/O functions. ASN.1 cleanup.Rob Austein
2015-09-02Still more const-ification.Rob Austein
2015-09-02Add PKCS11 ECDSA signature format.Rob Austein
2015-09-02Identify PBKDF2 tests.Rob Austein
2015-09-02Clean up excessively complicated handling of opaque types in hash andRob Austein
RSA code; use simpler model (pointer to incomplete structure) used in ECDSA code. Refactor RSA code to use shared ASN.1 routines.
2015-08-27Add point validation check to hal_ecdsa_verify(). Update README.mdRob Austein
and code comments.
2015-08-26Signature works better if we read the entire hash.Rob Austein
2015-08-25More ASN.1 fixes.Rob Austein
2015-08-25Rework RFC 5915 ASN.1.Rob Austein
2015-08-25More test code.Rob Austein
2015-08-25ASN.1 bugfixes.Rob Austein
2015-08-25Add keygen/sign/verify test with dynamic (not test vector) key.Rob Austein
2015-08-24First stumblings towards ECDSA test code.Rob Austein
2015-08-22Rework point_scalar_multiply() to avoid a timing leak with small scalars.Rob Austein
2015-08-22Add hal_ecdsa_verify(). Move hashing out of ECDSA routines. Clean upRob Austein
a few bits that didn't pass self-review.
2015-08-21Updated point doubling and addition to use algorithms from theRob Austein
hyperelliptic.org formula database. Compiles, still not tested.
2015-08-21Snapshot along the way to ECDSA. Code mostly written, except forRob Austein
ecdsa_verify(). Untested. Point addition and doubling algorithms are the ones from libtomcrypt, main point of this commit is to save those before replacing them with faster algorithms from hyperelliptic.org.
2015-07-18Re-enable key generation test and RSA blinding.Rob Austein
2015-07-18Add support for dynamic allocation of hash and HMAC state, for casesRob Austein
where it's unavoidable.
2015-07-17Debian Jessie hangs with bs=128, Kosagi forum tells us that the magicRob Austein
solution is to change to bs=32.
2015-07-17First cut at libhal support for hash cores with ability to save andRob Austein
restore internal state. Compiles, not yet tested.
2015-07-14Changes to support Pavel's ModExpS6 core.Rob Austein
2015-07-07Track move of third party libraries to /sw/thirdparty/.Rob Austein
2015-07-05Add load_novena_fpga script.Rob Austein
2015-07-05Use C99 variadic macro as safety wrapper around variadic function.Rob Austein
Are we having fun yet?
2015-07-05NULL-terminate string list, doh.Rob Austein
2015-07-05novena-eim.h had an invisible dependency on <sys/types.h>, at least onRob Austein
Debian Wheezy (ie, on the Novena).
2015-07-05Get rid of autoconf, as we don't really need it. Add eim_peek_pokeRob Austein
utility program, based on Paul's example in the core/platform/novena repository.
2015-07-01Change default to use software modexp until we sort out performanceRob Austein
issues in ModExp core.
2015-06-30Track ModExp core exponent padding change: this enables the short exponent ↵Rob Austein
fast path.
2015-06-26Verify signature in key generation test.Rob Austein
2015-06-24Rework API for loading keys from components. Relax key sizeRob Austein
constraints to allow any key size within our supported range, since hsmbully seems to want to twist this knob to every possible setting.