boringssl/crypto/hrss
Adam Langley f8068ce885 HRSS: be strict about unused bits being zero.
It's excessively complex to worry about leaving these few bits for
extensions. If we need to change things, we can spin a new curve ID in
TLS. We don't need to support two versions during the transition because
a fallback to X25519 is still fine.

Change-Id: I0a4019d5693db0f0f3a5379909d99c2e2c762560
Reviewed-on: https://boringssl-review.googlesource.com/c/33704
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
2018-12-17 21:02:58 +00:00
..
asm Drop NEON assembly for HRSS. 2018-12-13 17:43:07 +00:00
hrss_test.cc HRSS: be strict about unused bits being zero. 2018-12-17 21:02:58 +00:00
hrss.c HRSS: be strict about unused bits being zero. 2018-12-17 21:02:58 +00:00
internal.h