SIDH_p751

Commit graph

Autor	SHA1	Nachricht	Datum
Henry Case	b4df092ecd	cleanup: move from/to bytes conversion to single function From/to bytes conversion is needed only in ExtensionFieldElement. Patch moves all conversion code to single place. Patch also removes some testing helpers which are no longer needed.	vor 6 Jahren
Kris Kwiatkowski	3479e45558	cleanup: removes PrimeFieldElement inversion	vor 6 Jahren
Henry Case	1c2c27017e	cleanup: removes PrimeFieldElement::square method The method is implemented in exactly same way as multiplication. Currently there is no explenation for it's existance. Benchmarking shows no change	vor 6 Jahren
Henry Case	0e6db56864	cleanup: removes unused PrimeFieldElement methods	vor 6 Jahren
Henry Case	c3a637c2ec	p751: implements platform independent field arithmetic * Code is much slower than x86 specialized implementation * Cross checked on ARMv8 (32-bit)	vor 6 Jahren
Henry Case	b5fdd4e3ed	removes fp751ConditionalAssign	vor 6 Jahren
Henry de Valence	4928f87299	p751sidh: rename package to p751sidh, p751toolbox	vor 7 Jahren
Henry de Valence	f8efbfa69f	cln16sidh: prepare for code splitting	vor 7 Jahren
Henry de Valence	11976a638e	cln16sidh: add de/serialization for SIDH public keys	vor 7 Jahren
Henry de Valence	d19dd55622	cln16sidh: use public keys without curve parameters A later revision of the CLN paper uses the Montgomery relation to recover the a value from the three x-coordinates in the public key, saving its transmission. This patch improves slightly over the description in the paper, by projectivizing the computation of the first four-isogeny; this means that it's not necessary to perform an inversion to get the affine a value.	vor 7 Jahren
Henry de Valence	de4cd5d7ff	cln16sidh: add negation operators	vor 7 Jahren
Henry de Valence	8ff5a111cd	cln16sidh: add E(F_p) functionality	vor 7 Jahren
Henry de Valence	2c10aa9d31	cln16sidh: rename ExtensionFieldElementConditionalSwap	vor 7 Jahren
Henry de Valence	324f240daa	cln16sidh: add conditional swaps	vor 7 Jahren
Henry de Valence	15dbd8c7ee	cln16sidh: add Zero, One constructors to ExtensionFieldElement	vor 7 Jahren
Henry de Valence	18fd617020	cln16sidh: add 4-way batch inversion	vor 7 Jahren
Henry de Valence	719c07b83b	cln16sidh: add conditional assignment code	vor 7 Jahren
Henry de Valence	50aa855b53	cln16sidh: clarify doc for P34	vor 7 Jahren
Henry de Valence	1ae37f11fd	cln16sidh: add uint64 constructor for PrimeFieldElements	vor 7 Jahren
Henry de Valence	11d48b0d4d	cln16sidh: make FieldElement more like Go's big.Int API Having operators return pointers to the recievers makes it possible to chain operations.	vor 7 Jahren
Henry de Valence	207046f6f8	cln16sidh: add note on multiplication counts for p34 chain	vor 7 Jahren
Henry de Valence	1e9183798a	cln16sidh: add prime field square roots	vor 7 Jahren
Henry de Valence	55fd3a1b5b	cln16sidh: add extension field inversion	vor 7 Jahren
Henry de Valence	af7d9758a8	cln16sidh: add PrimeFieldElement inversion	vor 7 Jahren
Henry de Valence	dd4c5788b3	cln16sidh: add exponentiation chain for x^((p-3)/4) The implementation is a basic sliding-window with a series of hardcoded values for how many times to square and what to multiply.	vor 7 Jahren
Henry de Valence	47240368a0	cln16sidh: add prime field squaring function	vor 7 Jahren
Henry de Valence	63e467d02b	cln16sidh: add extension field squaring; fix broken multiplication	vor 7 Jahren
Henry de Valence	652c53a41e	cln16sidh: Refactor field types and tests. Split the field arithmetic code into three types: - ExtensionFieldElement :: represents an element of F_{p^2} - PrimeFieldElement :: represents an element of F_{p} - fp751Element :: internal type holding an element of F_{p} The difference between PrimeFieldElement and fp751Element types is that the PrimeFieldElement assigns a particular interpretation (Montgomery form) to its data, while the fp751Element doesn't.	vor 7 Jahren
Henry de Valence	d142194e06	cln16sidh: make FieldElement internals private	vor 7 Jahren
Henry de Valence	dd5e786467	cln16sidh: annotate extension field multiplication	vor 7 Jahren
Henry de Valence	7d70c2fc06	cln16sidh: add equality methods and refactor tests	vor 7 Jahren
Henry de Valence	13a2726b3a	cln16sidh: add a strong reduction function Add a function to perform "strong reduction": given an element in [0,2*p), reduce to an element in [0,p) in constant time.	vor 7 Jahren
Henry de Valence	78ed6d36e0	cln16sidh: Add prototype of extension field multiplication	vor 7 Jahren
Henry de Valence	f75e7dabea	cln16sidh: Rename functions and add go:noescape In order to have an assembly-implemented function operate on some data, it's necessary to pass pointers to the data into the assembly implementation. However, Go sees a pointer to some data passed into a function, and cannot prove that the function does not keep pointers to that data. It therefore assumes that the data escapes the local scope, and moves it onto the heap. To avoid allocations in the hot path, instead mark the functions with //go:noescape, which instructs the compiler that the inputs don't escape.	vor 7 Jahren
Henry de Valence	fc667f6c75	cln16sidh: port p-751 reduction and lazy adds from MSR assembly	vor 7 Jahren
Henry de Valence	b017b109ce	cln16sidh: port p-751 multiplication from MSR assembly	vor 7 Jahren
Henry de Valence	066696a432	cln16sidh: Preliminary work on porting x64 asm to Go This ports the fpadd751_asm and fpsub751_asm functions from the MSR implementation to Go, and adds property testing and benchmarks. I chose these functions to start because they use no stack, so there's no need to interact with Go's stack handling. Some care and trickery is required because Go's assembler misassembles `MOVQ $0, AX` into `xor eax, eax`, which destroys the carry flags. Otherwise the assembly is essentially similar (i.e., easily diff'able) compared to the MSR implementation.	vor 7 Jahren

7 Commits (40f4da22657db96cdc6ce58daf2482aa40425c7d)