Frank Denis
25c18b66e5
Make crypto_hash a real function.
2013-04-21 17:32:07 -07:00
Frank Denis
7d916fb0b1
Make crypto_box functions actual functions, not macros.
2013-04-21 17:32:07 -07:00
Frank Denis
1cbe55f9bd
Sort filenames
2013-04-21 17:32:07 -07:00
Frank Denis
8a5165bf06
Start replacing macros with real functions. First candidate: crypto_auth
2013-04-21 17:32:07 -07:00
Frank Denis
1da604d27d
Allow building in a separate directory
2013-04-21 17:32:07 -07:00
Frank Denis
2b2b9846a6
Only compile curve25519_ref or curve25519_donna_c64
2013-04-21 17:32:07 -07:00
Frank Denis
2916224650
Use curve25519_donna_c64 instead of curve25519_ref if supported.
2013-04-21 17:32:07 -07:00
Frank Denis
7139def69f
HAVE_MODE_TI -> HAVE_TI_MODE
2013-04-21 17:32:07 -07:00
Frank Denis
9626bbeb44
(re)import curve25519_donna_c64
2013-04-21 17:32:07 -07:00
Frank Denis
1f596a0966
Add crypto_scalarmult.h
2013-04-21 17:32:07 -07:00
Frank Denis
ba13e40ad1
Update Makefile.am
2013-04-21 17:32:07 -07:00
Frank Denis
280ff25f52
Avoid duplicate crypto_verify.h
2013-04-21 17:32:07 -07:00
Frank Denis
b86a933ba5
Link aes128ctr
2013-04-21 17:32:06 -07:00
Frank Denis
7844b905d4
Avoid duplicate crypto_stream.h
2013-04-21 17:32:06 -07:00
Frank Denis
83842a73c8
Avoid duplicate crypto_sign.h
2013-04-21 17:32:06 -07:00
Frank Denis
8da4cb057c
Avoid duplicate crypto_shorthash.h
2013-04-21 17:32:06 -07:00
Frank Denis
d6636dbc7a
Avoid duplicate crypto_secretbox.h
2013-04-21 17:32:06 -07:00
Frank Denis
195df90524
Avoid duplicate crypto_scalarmult.h
2013-04-21 17:32:06 -07:00
Frank Denis
bb2af7396e
Avoid duplicate crypto_hashblocks.h
2013-04-21 17:32:06 -07:00
Frank Denis
32c2d620a9
Import missing api.h files
2013-04-21 17:32:06 -07:00
Frank Denis
c1c3ecd80a
Avoid duplicate crypto_hash.h
2013-04-21 17:32:06 -07:00
Frank Denis
34731d9717
Rename crypto_generichash.h
2013-04-21 17:32:06 -07:00
Frank Denis
24bd4137e9
Avoid duplicate crypto_core.h definitions
2013-04-21 17:32:06 -07:00
Frank Denis
03196c9550
Avoid duplicate crypto_box.h files
2013-04-21 17:32:05 -07:00
Frank Denis
1a86716acf
Avoid duplicate crypto_auth.h
2013-04-21 17:32:05 -07:00
Frank Denis
54d96dd417
rename crypto_onetimeauth local defines.
2013-04-21 17:32:05 -07:00
Frank Denis
fc98102f2a
sodium_reinit() and sodium_shutdown() are gone.
2013-04-21 17:32:05 -07:00
Frank Denis
05f45575bb
sodium_init() is not thread-safe. Roll your own locks if you need that.
2013-04-21 17:32:05 -07:00
Frank Denis
48d4b5ab1e
Rename curve25519 files so that we can introduce the donna_c64 version later.
2013-04-21 17:32:05 -07:00
Frank Denis
6f5f793195
Remove crypto_onetimeauth/poly1305/checksum
2013-04-21 17:32:05 -07:00
Frank Denis
e29d92347b
Remove crypto_onetimeauth/try.c
2013-04-21 17:32:05 -07:00
Frank Denis
03b82780fd
Import missing onetimeauth_poly1305_try.c
2013-04-21 17:32:05 -07:00
Frank Denis
3b57f77262
Pick the best working poly1305 implementation at runtime.
2013-04-21 17:32:05 -07:00
Frank Denis
aa6488dbe9
Include <stdint.h> when we need SIZE_MAX
2013-04-21 17:32:05 -07:00
Frank Denis
98a87d8ea7
Add _sodium_alignedcalloc()
2013-04-21 17:32:05 -07:00
Frank Denis
c3d9659fc6
80 columns whenever possible
2013-04-21 17:32:04 -07:00
Frank Denis
7e2ccbe5ed
No more options
2013-04-21 17:32:04 -07:00
Frank Denis
47bc0aab79
sodium_init() doesn't take any options any more.
2013-04-21 17:32:04 -07:00
Frank Denis
8e7bb5d0ce
Move sodium-specific files to a dedicated directory
2013-04-21 17:32:04 -07:00
Frank Denis
98a58ff3f9
Fix sodium_init()
2013-04-21 17:32:04 -07:00
Frank Denis
dd45e3824f
Declare the sodium_options anon struct.
2013-04-21 17:32:04 -07:00
Frank Denis
b8bfcb7bd6
Link core.c
2013-04-21 17:32:04 -07:00
Frank Denis
363ff0bdc5
Import src/libsodium/include/sodium/crypto_onetimeauth_poly1305_53.h
2013-04-21 17:32:04 -07:00
Frank Denis
fe909c674f
Link the floating point implementation of poly1305
2013-04-21 17:32:04 -07:00
Frank Denis
ca781f4837
Include core.[ch]
2013-04-21 17:32:04 -07:00
Frank Denis
02cea61336
Add sodium_init(), sodium_reinit() and sodium_shutdown()
2013-04-21 17:32:03 -07:00
Frank Denis
232702ca83
Include randombytes implementations in sodium.h
2013-04-21 17:32:03 -07:00
Frank Denis
9f1fd2a71d
Turn implementation definitions to globals.
2013-04-21 17:32:03 -07:00
Frank Denis
7aa057dcd8
Make the randombytes interface consistent with crypto_onetimeauth
2013-04-21 17:32:03 -07:00
Frank Denis
5ba6aef1da
Export randombytes implementation structs
2013-04-21 17:32:03 -07:00
Frank Denis
05eefa306e
Export crypto_onetimeauth_poly1305_[ref_]implementation_name()
2013-04-21 17:32:03 -07:00
Frank Denis
ddb268c47c
Export crypto_onetimeauth_poly1305_ref_implementation()
2013-04-21 17:32:03 -07:00
Frank Denis
ab23649de5
Shorten randombytes_implementation members.
2013-04-21 17:32:03 -07:00
Frank Denis
f3e0d9a140
Make the crypto_onetimeauth_poly1305() implementation switchable at runtime
2013-04-21 17:32:03 -07:00
Frank Denis
96db80f17f
Move randombytes implementations to their own directory for consistency.
2013-04-21 17:32:03 -07:00
Frank Denis
707dcb0c44
Check if we need -lm for fe[gs]etenv()
2013-04-21 17:32:03 -07:00
Frank Denis
b64beede1d
Enforce round-to-nearest.
2013-04-21 17:32:03 -07:00
Frank Denis
b282b45dc7
Use standard C99 types
2013-04-21 17:32:02 -07:00
Frank Denis
a74cfe4112
Import poly1305_53
2013-04-21 17:31:54 -07:00
Frank Denis
e53e0895e7
Remove *_implementation_ macros.
...
They are identical for all implementations of a given primitive and
it's bound to always be the case.
We will eventually pick suitable implementations at run-time, so
these won't make any sense.
Remove implementation names/versions macros as well.
These should be functions, not macros.
2013-04-16 10:59:40 +02:00
Frank Denis
b33dba4fd7
ge25519_base.data is not required any more
2013-04-09 18:36:31 +02:00
Frank Denis
9833dfeac8
Don't forget to include crypto_shorthash headers in sodium.h
2013-04-04 14:21:20 -07:00
Frank Denis
d50249c927
Use stdbool macros instead of _Bool
...
Just to cope with that Visual Studio thing that still doesn't support C99.
I hate that because some libraries can redefine "bool" in an incompatible way.
It's okay. Until we have that in an exported prototype.
2013-03-31 15:28:15 -07:00
Frank Denis
e59ed29ee8
Export the shared library version, not just the package version.
2013-03-31 15:22:43 -07:00
Frank Denis
5f3104cf5f
Turn COMPILER_ASSERT() to assert() in generichash_blake2b.c
...
Thanks to @sneves
2013-03-31 14:56:27 -07:00
Frank Denis
077e89b6b5
Types definitions in randombytes.h require stdint.h, not inttypes.h
2013-03-31 14:51:06 -07:00
Frank Denis
b88d92d69d
Replace the ed25519 ref implementation with ref10 from supercop
2013-03-25 11:47:15 -07:00
Frank Denis
a8ba78e527
Accept a null keylen for blake2
2013-03-19 00:35:53 -07:00
Frank Denis
34f2982754
Use sodium_memzero() for secure_zero_memory() in Blake2
2013-03-19 00:16:09 -07:00
Frank Denis
aa422c7493
Import Blake2 - WIP
2013-03-19 00:13:25 -07:00
Frank Denis
8f83466c87
Don't include <string> when parsing headers as C++ code.
2013-03-18 23:29:58 -07:00
Frank Denis
2f30b21a5c
Remove api.h, we don't use it any more
2013-03-18 23:01:25 -07:00
Frank Denis
8b728c9034
Export sodium_memzero() as this will be required for Blake2, too.
2013-03-18 21:45:05 -07:00
Frank Denis
bc05a0f3d8
Remove sha512 inplace implementation
2013-03-18 21:05:24 -07:00
Frank Denis
f5f72f0165
Remove CurveCP
2013-03-16 19:59:25 -07:00
Frank Denis
9e7c960a02
const on return type is useless. Bump lib version by the way.
2013-03-11 22:46:17 -07:00
Frank Denis
c0475cc1e2
Remove donna_c64 implementation until we actually link it on 64-bit platforms
2013-03-11 15:15:10 -07:00
Frank Denis
12c4bee782
Remove unused implementations.
2013-03-11 15:14:52 -07:00
Frank Denis
f62f5ceb04
1L << 51 is an undefined behavior. Use 1 as a int64_t value.
2013-03-11 13:28:03 -07:00
Frank Denis
00b454d1f1
Revert "crypto_scalarmult_raw()"
...
This reverts commit 08a11d1a05
.
2013-03-03 14:03:54 -08:00
Frank Denis
37a1358b81
glibc needs -lrt to get clock_gettime()
...
Reported by csosstudy
2013-02-28 19:13:07 -08:00
Frank Denis
df814f98b4
Don't forget the prototype for crypto_sign_seed_keypair()
...
Spotted by @dstufft
2013-02-23 02:51:19 -08:00
Tony Arcieri
08a11d1a05
crypto_scalarmult_raw()
...
This provides a more direct interface to the crypto_scalarmult function.
By default, this function includes some bit-twiddling, which, to the
best of my understanding, ensures the integer provided as the left
operand of the multiplication operation fits within a specific limit.
(I believe this limit is the order of NaCl's standard group element,
but am not entirely certain). This change allows a user to pass in
an integer which is not subject to this bit-twiddling and can be passed
in wholesale.
The reason NaCl provides this API is to intentionally make it
easy-to-use for the purposes of computing public keys from private keys
or for performing Diffie-Hellman. The API it provides now makes it
quite difficult to do anything wrong yet still get a correct answer.
If we split this function in half, however, we can expose some
power-user functionality. Specifically I need this to implement
semiprivate keys:
https://gist.github.com/tarcieri/4760215
I've been double checking my implementation against a similar version in
SAGE for the past week or so trying to figure out what's wrong, and
today it was pointed out to me that NaCl's scalar multiplication
function automatically performs bit-twiddling for you.
I would love to continue to experiment with semiprivate keys on top of
NaCl. I have no serious intentions of actually using them as part of a
cryptosystem until there's some sort of proof of their security, or at
the very least, some reasonably educated guesses as to its security
properties.
That said, I would love to have this API. If there's worries about
exposing power-user APIs like this, perhaps we can be a bit more
"shouty" in the API name?
crypto_scalarmult_dangerously_direct_access() ? ;)
2013-02-21 20:59:57 -08:00
Frank Denis
0926fc974d
Some systems lack flock()
2013-02-18 15:51:21 -08:00
Frank Denis
329ec43e02
Include CurveCP's README
2013-02-18 15:40:41 -08:00
Frank Denis
f5af42f48d
CurveCP is optional
2013-02-18 15:28:43 -08:00
Frank Denis
926803f996
Move curvecp, split libcurvecp to its own dir
2013-02-18 15:14:55 -08:00
Frank Denis
60d788a444
Compile curvecp. This will be optional and disabled by default as it is
...
not exactly portable.
2013-02-18 13:56:29 -08:00
Frank Denis
6774b47cd4
Reintroduce shorthash, this time with the key...
2013-02-13 21:14:29 +08:00
Frank Denis
e5e2150919
Revert "Add crypto_shorthash() for non collision-resistant hash functions"
...
This reverts commit c8fe5c4afb
.
Conflicts:
.gitignore
test/Makefile.am
test/default/shorthash.c
test/default/shorthash.exp
2013-02-13 20:33:17 +08:00
Frank Denis
c8fe5c4afb
Add crypto_shorthash() for non collision-resistant hash functions
...
Currently using siphash-2-4
2013-02-09 03:51:20 +08:00
Frank Denis
eb96dcb0f7
Skip library version info on Windows
2013-02-04 22:52:51 -08:00
Frank Denis
2abcfa283a
BUmp version to 0.3
2013-02-04 22:28:17 -08:00
Frank Denis
6d3afb32de
Build the library as a module on Windows
2013-02-04 17:16:46 -08:00
Frank Denis
49461b5e66
Pass -no-undefined to libtool so that a native DLL can be built on Windows
2013-02-04 16:31:02 -08:00
Frank Denis
85ba9d3ff5
Add crypto_box_MACBYTES
2013-02-04 14:51:04 -08:00
Frank Denis
ca02a49b25
Bump minor
2013-01-28 21:46:51 -08:00
Tony Arcieri
c046fe8ccc
Rename crypto_sign_publickey to crypto_sign_seed_keypair
...
The crypto_sign_seed_keypair function is analagous to
crypto_sign_keypair, except it generates a keypair for a seed instead of
a random keypair.
I think this name makes more sense than crypto_sign_publickey.
2013-01-28 21:31:25 -08:00
Tony Arcieri
53d3b5969e
Add crypto_sign_publickey() API
...
This adds a new API crypto_sign_publickey, which works similarly to the
existing crypto_sign_keypair() API, but supports a 32-byte
user-specified seed value (k).
This API is necessary for implementing Ed25519 test vectors, for
example, since we need to pass in a known seed to ensure we're
computing the public key correctly.
The name and implementation are largely borrowed from Brian Warner's
python-ed25519 library. See:
d42d4b7049/src/ed25519.c (L21)
That said, perhaps a different name would be more descriptive, since it
still returns a keypair, not just the public key? Or perhaps that's
needless bikeshedding since this name is already in use.
2013-01-26 13:12:10 -08:00
Frank Denis
0ca9901e14
<poll.h> is not needed any more
2013-01-21 20:45:39 -08:00
Frank Denis
0d48d2a10b
Of course (...) in CryptGenRandom() the size comes before the buffer.
2013-01-21 19:45:58 -08:00
Frank Denis
4668611533
<sys/timeb.h> is required for Windows
2013-01-21 19:30:39 -08:00
Frank Denis
7ba8af5936
Check for SecureZeroMemory at compile time.
2013-01-21 19:18:15 -08:00
Frank Denis
0aaa42ed69
libsodium-randombytes is gone, remove it from all Makefiles
2013-01-21 18:43:11 -08:00
Frank Denis
dff36063a6
randombytes/randombytes_sysrandom.h moved to includes/sodium
2013-01-21 18:11:19 -08:00
Douglas Campos
fdbaa9a9ea
add AUTHORS file from designers/implementors files
2013-01-21 23:25:51 -02:00
Frank Denis
40d6182ecd
Indentation wankery
2013-01-21 14:44:22 -08:00
Frank Denis
68822dab0a
COMPILER_ASSERT is not needed for randombytes_sysrandom
2013-01-21 14:39:22 -08:00
Frank Denis
3505db86a5
Add randombytes_sysrandom and use that as the default randombytes impl.
2013-01-21 14:36:26 -08:00
Frank Denis
3bb7e4b1b7
Rename salsa20_random.c to randombytes_salsa20_random.c for consistency
2013-01-21 13:58:18 -08:00
Frank Denis
8a54e2efa8
Implement randombytes_set_implementation()
2013-01-21 13:52:37 -08:00
Frank Denis
5788f3d6a8
Add randombytes wrappers.
...
These are real wrappers, not globals or macros, in order to make it easier
to use them in different programming languages.
2013-01-21 13:50:00 -08:00
Frank Denis
3444a46f35
Prepare for pluggable randombytes*() implementations.
2013-01-21 13:28:27 -08:00
Frank Denis
4c6e162c52
Remove libsodium-randombytes.
2013-01-21 12:46:40 -08:00
Frank Denis
137ae007ae
Export randombytes helpers
2013-01-21 12:35:58 -08:00
Frank Denis
dde2e8086c
Use salsa20_random() for randombytes, install libsodium-randombytes DLL.
2013-01-21 12:23:57 -08:00
Frank Denis
87af79c629
Don't include randombyte - move it to a different library.
2013-01-21 11:32:34 -08:00
Frank Denis
b4e28221e8
Add library version
2013-01-20 17:51:57 -08:00
Frank Denis
61775cc84d
Add missing dependencies
2013-01-20 17:23:37 -08:00
Frank Denis
d4a5db2459
Remove benchmark progs for now, they will be reintroduced later.
2013-01-20 17:05:24 -08:00
Frank Denis
9bb13efa5a
Don't forget to install version.h
2013-01-20 16:21:37 -08:00
Frank Denis
83961aae3b
How about just #include <sodium.h> to include everything you need?
2013-01-20 16:18:36 -08:00
Frank Denis
4825914aa8
Give C++ some love
2013-01-20 16:13:09 -08:00
Frank Denis
cfd84663b9
A library should expose its version
2013-01-20 16:04:43 -08:00
Frank Denis
40567fe583
Use $(top_srcdir) to reference the path to headers
2013-01-20 13:29:54 -08:00
Frank Denis
221da81226
Switch crypto_sign* to ed25519
...
Ok qmx@
2013-01-20 12:09:00 -08:00
Frank Denis
ed943d58f3
Link ed25519
2013-01-20 11:58:20 -08:00
Frank Denis
972984880e
Fix double definition of ge25519_base in ed25519
2013-01-20 11:57:39 -08:00
Douglas Campos
ee16bc6e6c
rename libnacl-ref -> libsodium
2013-01-20 17:23:32 -02:00
Frank Denis
8b3ac469f1
Install headers with high-level macros
2013-01-20 00:32:51 -08:00
Frank Denis
f266b4cbd4
Keep library version, it's not a plugin
2013-01-20 00:25:18 -08:00
Frank Denis
11bc2610ae
edwards25519sha512batch requires api.h
...
(but it will be replaced by ed25519 anyways)
2013-01-20 00:09:22 -08:00
Frank Denis
5a9209a4a8
Remove old dependencies
2013-01-20 00:01:29 -08:00
Frank Denis
33f97cbb3b
Replace the build system
2013-01-19 23:51:05 -08:00
Frank Denis
b801c07db2
One more Makefile.in
2013-01-19 18:10:29 -08:00
Frank Denis
9cd4c769a7
Add libnacl/Makefile.in
2013-01-19 18:08:06 -08:00
Frank Denis
9177909d03
Remove C++ wrappers
2013-01-19 16:45:10 -08:00
Frank Denis
b7075c1d9f
Drop PROTOTYPES.cpp, we don't build C++ wrappers.
2013-01-19 16:36:18 -08:00
Frank Denis
95b9c37cc5
Import libnacl from dnscrypt-proxy
2013-01-19 16:02:02 -08:00