9 commits

Author	SHA1	Message	Date
Pieter Wuille	da55986fdf	Label variable-time functions correctly and don't use those in sign	2014-11-04 02:50:06 -08:00
Pieter Wuille	501d58f098	Get rid of {num,scalar,ecdsa_sig}_{init,free}	2014-11-03 01:31:04 -08:00
Pieter Wuille	03bfc07b9e	Avoid uninitialized access in secp256k1_gej_double	2014-10-26 06:51:38 -07:00
Pieter Wuille	1136bedbc2	Make secp256k1_ge_set_gej work with the point at infinity	2014-09-13 00:46:32 +02:00
Gregory Maxwell	2f6c801911	Try to not leave secret data on the stack or heap. ... This makes a basic effort and has not been audited. Doesn't appear to have a measurable performance impact on bench. It also adds a secp256k1_num_free to secp256k1_ecdsa_pubkey_create.	2014-08-14 07:06:36 -07:00
Peter Dettman	f16be77ffc	Use batch inversion in G precomputation	2014-07-17 15:33:00 +07:00
Pieter Wuille	4d79bebdff	Do not free endomorphism constants when disabled	2014-06-15 23:31:17 +02:00
Peter Dettman	09ca4f32e2	secp256k1_fe_sqrt checks for success ... - secp256k1_fe_sqrt now checks that the value it calculated is actually a square root. - Add return values to secp256k1_fe_sqrt and secp256k1_ge_set_xo. - Callers of secp256k1_ge_set_xo can use return value instead of explicit validity checks - Add random value tests for secp256k1_fe_sqrt	2014-05-21 10:22:14 +07:00
Pieter Wuille	11ab562203	Move implementations from impl/*.h to *_impl.h	2014-03-12 18:40:02 +01:00

Renamed from src/impl/group.h (Browse further)