1. b2940d7 [crypto] Simplify DMEM interface for RSA. by Jade Philipoom · 2 years, 1 month ago
  2. f6298b3 [doc] Rewrite most frontmatters to Markdown titles by Hugo McNally · 2 years, 1 month ago
  3. 5dde5c8 [otbn,crypto] Add tests for GCD. by Jade Philipoom · 2 years, 1 month ago
  4. 834ed46 [crypto] Add an OTBN implementation of constant-time GCD. by Jade Philipoom · 2 years, 1 month ago
  5. 466fb13 [crypto] Record that an OTBN division helper function runs in constant time. by Jade Philipoom · 2 years, 1 month ago
  6. 32189fc [crypto] Add large- and medium-size tests for bignum division. by Jade Philipoom · 2 years, 1 month ago
  7. 1d134c8 [crypto] Add a small smoketest for bignum division. by Jade Philipoom · 2 years, 1 month ago
  8. b6eaf73 [crypto] Add OTBN implementation of bignum division. by Jade Philipoom · 2 years, 1 month ago
  9. cb48895 [sca] Add serial program for ECDSA-P256 key generation. by Jade Philipoom · 2 years, 1 month ago
  10. 6d925b7 [sca] Add OTBN entrypoint for P256 SCA capture. by Jade Philipoom · 2 years, 1 month ago
  11. 516992a [crypto] Add standalone OTBN test for P256 key derivation. by Jade Philipoom · 2 years, 2 months ago
  12. 61ce240 [crypto] Add key-from-seed operation for ECDSA-P256. by Jade Philipoom · 2 years, 2 months ago
  13. e29217d [crypto] Update P-256 random scalar generation subroutine. by Jade Philipoom · 2 years, 3 months ago
  14. 66f5ad5 [crypto] Support extra bits in scalar_mult_int. by Jade Philipoom · 2 years, 3 months ago
  15. 30316e3 [crypto] Reduce register pressure in scalar_mult_int. by Jade Philipoom · 2 years, 3 months ago
  16. bc4a611 [crypto] Update C code to use longer P-256 scalars. by Jade Philipoom · 2 years, 3 months ago
  17. 8f24880 [crypto] Remove unnecessary instructions from P256. by Jade Philipoom · 2 years, 3 months ago
  18. feab24e [crypto] Randomize both shares in p256_ecdsa_sign_test. by Jade Philipoom · 2 years, 3 months ago
  19. eec10f7 [crypto] Make p256_ecdsa_sign_test randomize private key. by Jade Philipoom · 2 years, 3 months ago
  20. 9920d1f [crypto] Store ECDSA-P256 private key d in 320-bit shares. by Jade Philipoom · 2 years, 3 months ago
  21. 66e792f [crypto] Use properly masked values in mod_inv. by Jade Philipoom · 2 years, 3 months ago
  22. f1fa1a2 [crypto] Make p256_ecdsa_sign_test randomize shares of k. by Jade Philipoom · 2 years, 3 months ago
  23. 6020587 [crypto] Adjust P-256 implementation to read k in 320 bits. by Jade Philipoom · 2 years, 3 months ago
  24. 6cf481d [otbn,sw] Fix initialization of WDRs in barrett384 by Andreas Kurth · 2 years, 2 months ago
  25. 3f8836e [otbn,sw] Initialise WDRs to 0 in code-snippets by Canberk Topal · 2 years, 2 months ago
  26. dd41ae9 [otbn/sca] Add new sca features for otbn_ecdsa_256 by Bilgiday Yuce · 2 years, 3 months ago
  27. de48cc3 [crypto,test] Make SHA-512 test runnable via Bazel. by Jade Philipoom · 2 years, 3 months ago
  28. d3cdb0d [sw,crypto] add SHA-512 implementation for OTBN by Felix Miller · 2 years, 8 months ago
  29. 6f32da6 [crypto] Update OTBN tests to use expected-value files. by Jade Philipoom · 2 years, 5 months ago
  30. 957be9e [otbn] Move all OTBN tests into new tests/ directory. by Jade Philipoom · 2 years, 5 months ago
  31. 484086e [crypto] Safely generate the P-256 secret scalar and random keys. by Jade Philipoom · 2 years, 5 months ago
  32. bcbae44 [crypto] Fix bug in ECDSA-P256 scalar inversion. by Jade Philipoom · 2 years, 5 months ago
  33. 35b0885 [crypto] Adjust P-256 implementations to handle masked values. by Jade Philipoom · 2 years, 6 months ago
  34. 5db8283 [crypto] Bugfix for RSA-4096 encryption. by Jade Philipoom · 2 years, 5 months ago
  35. 5e22807 [crypto] Modify ECDSA-P256 DMEM interface. by Jade Philipoom · 2 years, 6 months ago
  36. 18a7479 [otbn,util] Add initial constants to constant-time checker. by Jade Philipoom · 2 years, 7 months ago
  37. 6b746f7 [crypto] Add constant-time test rule for OTBN programs. by Jade Philipoom · 2 years, 8 months ago
  38. 493dc9d [test] Add OTBN sideloading test. by Jade Philipoom · 2 years, 7 months ago
  39. 544f725 [p256/p384, otbn] Switch RND usage to URND where possible by Pirmin Vogel · 2 years, 7 months ago
  40. b5c3adf [otbn,sw] Fix data memory section for `barrett384` by Andreas Kurth · 2 years, 7 months ago
  41. af5f6e9 [sca/otbn] Add capture support for OTBN ECDSA apps by Bilgiday Yuce · 2 years, 8 months ago
  42. 4027dc4 [crypto] Add Ed25519 scalar field arithmetic. by Jade Philipoom · 2 years, 10 months ago
  43. 11a6983 [sw,crypto] OTBN implementation of X25519. by Jade Philipoom · 3 years ago
  44. 18563ab [otbn] Update bus accessible size to 3kiB by Rupert Swarbrick · 3 years, 1 month ago
  45. 1013e5f [sw,crypto] Ed25519 point addition implementation. by Jade Philipoom · 3 years ago
  46. 58d38c1 [otbn,sw] Use app symbols for parameter addresses by Andreas Kurth · 2 years, 9 months ago
  47. 6695f30 [meson] remove all `meson.build` files by Timothy Trippel · 2 years, 9 months ago
  48. cd78b23 [crypto] Update name of generated RSA modexp file. by Jade Philipoom · 2 years, 10 months ago
  49. 6195eef [bazel,otbn] Add otbn_test rule for OTBN simulator tests. by Jade Philipoom · 2 years, 11 months ago
  50. ba488e1 [sw,crypto] Add X25519/Ed25519 finite field arithmetic and a couple of tests. by Jade Philipoom · 3 years ago
  51. a7b30e6 [bazel] update `build_otbn.py` to import otbn_ld module by Timothy Trippel · 2 years, 11 months ago
  52. 024e393 [bazel] update `build_otbn.py` to import otbn_as module by Timothy Trippel · 2 years, 11 months ago
  53. b1caf36 [sw,otbn] Add Bazel rules for all targets in sw/otbn/code-snippets. by Jade Philipoom · 3 years ago
  54. b8a7078 [sw,crypto] Replace Barrett reduction with Solinas in P-384 lib. by Jade Philipoom · 3 years, 1 month ago
  55. cdcb696 [sw,otbn] Remove outdated Makefile/rules.mk from code-snippets. by Jade Philipoom · 3 years ago
  56. 8fce79d [bazel] Format all BUILD files in the repo by Miguel Young de la Sota · 3 years ago
  57. 5a1d9e5 [sw,otbn] Add Bazel rules for all sw/otbn/crypto targets. by Jade Philipoom · 3 years ago
  58. ff1944c [sw,crypto] Bazel target for non-mask-ROM RSA-3072 entrypoint. by Jade Philipoom · 3 years ago
  59. 9defc77 [sw,otbn] Add OTBN code snippet for P-384 Solinas reduce. by Jade Philipoom · 3 years, 1 month ago
  60. 0b725cd [sw,crypto] Test vector setup for ECDSA-P256 verify. by Jade Philipoom · 3 years, 1 month ago
  61. 61fe79c Remove incorrect byte count from comment by Rupert Swarbrick · 3 years, 1 month ago
  62. 6ab836a [sw,test,otbn] Add the chip level tests rng and urng entropy for otbn by Douglas Reis · 3 years, 1 month ago
  63. a689532 [sw/meson] Update meson version and fix deprecation issues by Luís Marques · 3 years, 1 month ago
  64. feaca73 [bazel] Solving little warnings in the SW by Drew Macrae · 3 years, 1 month ago
  65. 69caba8 [sw,crypto] Replace handwritten RSA-3072 verify with verified assembly. by Jade Philipoom · 3 years, 2 months ago
  66. 027e47c [sw,crypto] Remove support for RSA with exponent 3. by Jade Philipoom · 3 years, 2 months ago
  67. e9c6841 [sw,crypto] Fix cryptolib tests. by Jade Philipoom · 3 years, 2 months ago
  68. 69fb25d [sw,crypto] Adjust parameters for R^2 algorithm. by Jade Philipoom · 3 years, 2 months ago
  69. e21ff4d [sw,crypto] Implement faster algorithm for Montgomery R^2 on OTBN. by Jade Philipoom · 3 years, 2 months ago
  70. f0ed295 [otbn,crypto] Use .bss for RSA buffers. by Jade Philipoom · 3 years, 3 months ago
  71. 52dd4cd [bazel] build smoketests by Drew Macrae · 3 years, 3 months ago
  72. 7090d9e [sw,crypto] Move symbol address loads outside modexp. by Jade Philipoom · 3 years, 2 months ago
  73. 9b34e4a [bazel] Build mask_rom with bazel by Chris Frantz · 3 years, 4 months ago
  74. 8c1eecd [sw,otbn] Implement e=3 signature verification for RSA-3072. by Jade Philipoom · 3 years, 3 months ago
  75. b0b3c4f [sw/silicon_creator] Use sw/otbn RSA assembly files instead of local copies. by Jade Philipoom · 3 years, 4 months ago
  76. 9e307e7 [sw,otbn] Add runnable wrapper for all RSA-3072 operations. by Jade Philipoom · 3 years, 4 months ago
  77. 448151f [sw,otbn] Add runnable wrapper for RSA R^2 + modexp computation. by Jade Philipoom · 3 years, 4 months ago
  78. 17c6a7c [sw,otbn,crypto] Add test for RSA-3072 constant computations. by Jade Philipoom · 3 years, 4 months ago
  79. 4776053 [sw/otbn] Add RSA-3072 constant precomputation. by Jade Philipoom · 3 years, 4 months ago
  80. 4792ebf [sw/otbn] Change buffer names for RSA-3072 constants. by Jade Philipoom · 3 years, 4 months ago
  81. 97af266 [otbn,util] Halve the DMEM region in OTBN's linker script by Rupert Swarbrick · 3 years, 5 months ago
  82. 4613966 [otbn,sw] Zero the work buffer in rsa.s by Rupert Swarbrick · 3 years, 4 months ago
  83. cc80879 [sw/otbn] Move crypto assembly files into new folder. by Jade Philipoom · 3 years, 4 months ago
  84. bc424b2 [otbn,sw] Combine input and output buffers for RSA code by Rupert Swarbrick · 3 years, 4 months ago
  85. 135a6c4 [sw] Clarify bounds for Barrett multiplication in ECDSA-P256. by Jade Philipoom · 3 years, 5 months ago
  86. a248064 [otbn,sw] Use weak symbols to shrink data in rsa_verify_3072_test by Rupert Swarbrick · 3 years, 5 months ago
  87. 3750b48 [otbn,sw] Add -gc-sections to OTBN link commands by Rupert Swarbrick · 3 years, 5 months ago
  88. 9b1392e [otbn,sw] Update code snippet examples to refer to their sections by Rupert Swarbrick · 3 years, 5 months ago
  89. 72056ee [otbn,sw] Ensure entry points are at address zero by Rupert Swarbrick · 3 years, 6 months ago
  90. b9dca5d [otbn,sw] Don't use START_ADDR in p256 test by Rupert Swarbrick · 3 years, 6 months ago
  91. ddfe341 [otbn] P256 test: Read nonce and blinding constant from RND/URND by Philipp Wagner · 3 years, 8 months ago
  92. 20a0514 [otbn] P256: Don't overlap rnd with x_r by Philipp Wagner · 3 years, 8 months ago
  93. cc4bb4f [otbn] P256: Explicitly align variables by Philipp Wagner · 3 years, 8 months ago
  94. c88c5a1 [otbn] Fix expected result in p256_ecdsa_verify_test.s by Philipp Wagner · 3 years, 8 months ago
  95. 0c5e5cf [otbn] Fix spelling mistakes in P256 software by Philipp Wagner · 3 years, 8 months ago
  96. a8b39e8 [otbn] P256: Read blinding randomness from DMEM by Philipp Wagner · 3 years, 8 months ago
  97. a83df9d [otbn] Convert RSA example to a single entry point by Rupert Swarbrick · 3 years, 6 months ago
  98. 0b958df [otbn] Test access to randomness by Philipp Wagner · 3 years, 8 months ago
  99. 29b7c57 [otbn] Indent loop body in assembly by Philipp Wagner · 3 years, 8 months ago
  100. caac1af [otbn/sw] Specify CSR index in hex by Philipp Wagner · 3 years, 8 months ago