Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						cef4ad2509 
					 
					
						
						
							
							Adapt sources to configurable config.h name  
						
						
						
						
					 
					
						2014-04-30 16:40:20 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						35e95ddca4 
					 
					
						
						
							
							Add special return code for ecdsa length mismatch  
						
						
						
						
					 
					
						2014-04-09 15:49:59 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						dd75c3183b 
					 
					
						
						
							
							Remove potential timing leak in ecdsa_sign()  
						
						
						
						
					 
					
						2014-03-31 11:55:42 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						9592485d0c 
					 
					
						
						
							
							Fix some MSVC12 conversion warnings  
						
						
						
						
					 
					
						2014-03-21 12:03:07 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						fe34a5fb83 
					 
					
						
						
							
							Add entropy callbacks to HMAC_DRBG  
						
						
						
						
					 
					
						2014-01-30 15:06:40 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						7845fc06c9 
					 
					
						
						
							
							Use new HMAC_DRBG module for deterministic ECDSA  
						
						
						
						
					 
					
						2014-01-30 10:58:48 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						9f3c7d7278 
					 
					
						
						
							
							Added missing POLARSSL_ECDSA_DETERMINISTIC around ecdsa_write_signature_det()  
						
						
						
						
					 
					
						2014-01-23 16:11:14 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						18e9f3282b 
					 
					
						
						
							
							Added missing static to md_info_by_size() in ecdsa.c  
						
						
						
						
					 
					
						2014-01-23 16:08:38 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						bf98c3dd11 
					 
					
						
						
							
							Merged deterministic ECDSA  
						
						... 
						
						
						
						Conflicts:
	library/ecdsa.c 
						
						
					 
					
						2014-01-23 15:48:01 +01:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						0ac99ca7bc 
					 
					
						
						
							
							Merged support for secp224k1, secp192k1 and secp25k1  
						
						
						
						
					 
					
						2014-01-22 13:10:48 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						7c59363a85 
					 
					
						
						
							
							Remove a few dead stores  
						
						
						
						
					 
					
						2014-01-22 13:02:39 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						5304812b2d 
					 
					
						
						
							
							Fix theoretical compliance issue in ECDSA  
						
						... 
						
						
						
						The issue would happen for curves whose bitlength is not a multiple of eight
(the only case is NIST P-521) with hashes that are longer than the bitlength
of the curve: since the wides hash is 512 bits long, this can't happen.
Fixing however as a matter of principle and readability. 
						
						
					 
					
						2014-01-17 21:41:39 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						5e6edcfd96 
					 
					
						
						
							
							Add fallback for md_alg == NONE to ecdsa_sign_det()  
						
						
						
						
					 
					
						2014-01-07 16:19:28 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						937340bce0 
					 
					
						
						
							
							Add ecdsa_write_signature_det()  
						
						
						
						
					 
					
						2014-01-06 15:29:03 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						f42bca6da0 
					 
					
						
						
							
							Little HMAC_DRBG refactoring  
						
						
						
						
					 
					
						2014-01-06 15:29:03 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						4daaef7e27 
					 
					
						
						
							
							Add ecdsa_sign_det() with test vectors  
						
						
						
						
					 
					
						2014-01-06 15:29:03 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						461d416892 
					 
					
						
						
							
							Add minified HMAC_DRBG for deterministic ECDSA  
						
						
						
						
					 
					
						2014-01-06 11:01:38 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						e7072f8d11 
					 
					
						
						
							
							Fix theoretical compliance issue in ECDSA  
						
						... 
						
						
						
						The issue would happen for curves whose bitlength is not a multiple of eight
(the only case is NIST P-521) with hashes that are longer than the bitlength
of the curve: since the wides hash is 512 bits long, this can't happen.
Fixing however as a matter of principle and readability. 
						
						
					 
					
						2014-01-06 11:01:38 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						97871ef236 
					 
					
						
						
							
							Some operations are not supported with Curve25519  
						
						
						
						
					 
					
						2013-12-05 15:58:38 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						178d9bac3c 
					 
					
						
						
							
							Fix ECDSA corner case: missing reduction mod N  
						
						... 
						
						
						
						No security issue, can cause valid signatures to be rejected.
Reported by DualTachyon on github. 
						
						
					 
					
						2013-10-29 13:40:17 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						1001e32d6f 
					 
					
						
						
							
							Fix return value of ecdsa_from_keypair()  
						
						
						
						
					 
					
						2013-10-28 14:01:08 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						161ef968db 
					 
					
						
						
							
							Cache pre-computed points for ecp_mul()  
						
						... 
						
						
						
						Up to 1.25 speedup on ECDSA sign for small curves, but mainly useful as a
preparation for fixed-point mult (a few prototypes changed in constness). 
						
						
					 
					
						2013-09-18 15:37:44 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						456d3b9b0b 
					 
					
						
						
							
							Make ECP error codes more specific  
						
						
						
						
					 
					
						2013-09-18 14:35:53 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						4cf0686d6d 
					 
					
						
						
							
							Remove spurious '+ 3' in ecdsa_write_signature()  
						
						
						
						
					 
					
						2013-09-18 14:34:33 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						c75c56fef7 
					 
					
						
						
							
							Fix off-by-one error in ecdsa_write_signature()  
						
						... 
						
						
						
						Made some signature fail with 521-bit curve 
						
						
					 
					
						2013-09-02 16:25:37 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						e09d2f8261 
					 
					
						
						
							
							Change ecp_mul() prototype to allow randomization  
						
						... 
						
						
						
						(Also improve an error code while at it.) 
						
						
					 
					
						2013-09-02 14:29:09 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						db77175e99 
					 
					
						
						
							
							Make ecdsa_verify() return value more explicit  
						
						
						
						
					 
					
						2013-08-27 22:21:21 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						f499993cb2 
					 
					
						
						
							
							Add ecdsa_from_keypair()  
						
						... 
						
						
						
						Also fix bug/limitation in mpi_copy: would segfault if src just initialised
and not set to a value yet. (This case occurs when copying a context which
contains only the public part of the key, eg.) 
						
						
					 
					
						2013-08-20 20:46:03 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						8eebd012b9 
					 
					
						
						
							
							Add an ecdsa_genkey() function  
						
						
						
						
					 
					
						2013-08-20 20:08:28 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						b694b4896c 
					 
					
						
						
							
							Add ecdsa_{read,write}_signature()  
						
						
						
						
					 
					
						2013-08-20 20:04:16 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						56a487a17f 
					 
					
						
						
							
							Minor ecdsa cleanups  
						
						... 
						
						
						
						- point_format is of no use
- d was init'ed and free'd twice 
						
						
					 
					
						2013-08-16 14:00:52 +02:00 
						 
				 
			
				
					
						
							
							
								Paul Bakker 
							
						 
					 
					
						
						
							
						
						cca998a4c5 
					 
					
						
						
							
							Fixed memory leak in ecdsa_sign() / ecdsa_verify() in case of error  
						
						
						
						
					 
					
						2013-07-26 14:22:16 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						7c8934ea0e 
					 
					
						
						
							
							Add ecdsa_init and ecdsa_free  
						
						
						
						
					 
					
						2013-07-08 15:30:23 +02:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						3aeb5a7192 
					 
					
						
						
							
							Add ECDSA signature primitive.  
						
						
						
						
					 
					
						2013-01-26 19:11:28 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						b309ab2936 
					 
					
						
						
							
							Add ECDSA sign primitive  
						
						
						
						
					 
					
						2013-01-26 19:11:28 +01:00 
						 
				 
			
				
					
						
							
							
								Manuel Pégourié-Gonnard 
							
						 
					 
					
						
						
							
						
						2aea1416f9 
					 
					
						
						
							
							Add skeleton ecdsa.[ch]  
						
						
						
						
					 
					
						2013-01-26 19:11:28 +01:00