boringssl/crypto/curve25519
Adam Langley 472ba2c2dd Require that Ed25519 |s| values be < order.
https://tools.ietf.org/html/rfc8032#section-5.1.7 adds this requirement
to prevent signature malleability.

Change-Id: Iac9a3649d97fc69e6efb4aea1ab1e002768fadc9
Reviewed-on: https://boringssl-review.googlesource.com/25564
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2018-02-02 20:45:08 +00:00
..
asm Remove x86_64 x25519 assembly. 2018-02-01 21:44:58 +00:00
CMakeLists.txt Remove x86_64 x25519 assembly. 2018-02-01 21:44:58 +00:00
ed25519_test.cc Require that Ed25519 |s| values be < order. 2018-02-02 20:45:08 +00:00
ed25519_tests.txt Import additional test vectors from RFC 8032. 2017-03-30 16:28:55 +00:00
spake25519_test.cc Move curve25519 code to third_party/fiat. 2017-11-03 22:23:59 +00:00
spake25519.c Move curve25519 code to third_party/fiat. 2017-11-03 22:23:59 +00:00
x25519_test.cc curve25519: adhere to preconditions of fe_*. 2017-11-03 18:40:11 +00:00