merge-script 68b55209f1 Merge bitcoin-core/secp256k1#1619: musig: ctimetests: fix _declassify range for generated nonce points ...

57eda3ba30 musig: ctimetests: fix _declassify range for generated nonce points (Sebastian Falbesoner)

Pull request description:

  As noticed in https://github.com/bitcoin-core/secp256k1/pull/1614#discussion_r1796215582, the area marked as non-secret exceeds the nonce_pts array in the second iteration of the for loop. Fix that by passing the correct size to the _declassify call.

ACKs for top commit:
  sipa:
    utACK 57eda3ba30
  real-or-random:
    utACK 57eda3ba30

Tree-SHA512: ff8074e3d1078d66a52d08c661997856ff586b3b4564a865a75212b32fafd7906d58885371bd63005007fde554ebcad121ab66125abe4331cf0aac63fc018ed0

2024-10-22 12:00:49 +02:00

..

asm

asm: add .note.GNU-stack section for non-exec stack

2023-11-13 14:49:35 +00:00

modules

musig: ctimetests: fix _declassify range for generated nonce points

2024-10-20 02:29:35 +02:00

wycheproof

tests: Add Wycheproof ECDSA vectors

2023-04-09 06:17:16 +02:00

assumptions.h

assumptions: Use new STATIC_ASSERT macro

2024-01-08 16:10:55 +01:00

bench_ecmult.c

refactor: take use of secp256k1_scalar_{zero,one} constants (part 2)

2023-08-01 02:40:21 +02:00

bench_internal.c

bench: add --help option to bench_internal

2023-11-24 02:33:40 +01:00

bench.c

Add benchmarks for ellswift module

2023-06-20 11:31:58 -04:00

bench.h

bench: Make sys/time.h a system include

2023-04-21 11:18:36 +02:00

checkmem.h

msan: Add SECP256K1_CHECKMEM_MSAN_DEFINE which applies to memory sanitizer and not valgrind

2024-02-23 17:30:39 +00:00

CMakeLists.txt

build: allow enabling the musig module in cmake

2024-10-07 14:03:42 +00:00

ctime_tests.c

Add module "musig" that implements MuSig2 multi-signatures (BIP 327)

2024-10-07 14:03:42 +00:00

ecdsa_impl.h

Merge bitcoin-core/secp256k1#990: Add comment on length checks when parsing ECDSA sigs

2023-12-07 09:26:38 +01:00

ecdsa.h

Remove ecmult_context.

2021-08-20 11:11:26 -04:00

eckey_impl.h

refactor: take use of secp256k1_scalar_{zero,one} constants

2023-05-30 12:10:41 +02:00

eckey.h

Remove ecmult_context.

2021-08-20 11:11:26 -04:00

ecmult_compute_table_impl.h

Move ecmult table computation code to separate file

2021-12-18 16:11:56 -05:00

ecmult_compute_table.h

Move ecmult table computation code to separate file

2021-12-18 16:11:56 -05:00

ecmult_const_impl.h

Rename scalar_get_bits -> scalar_get_bits_limb32; return uint32_t

2024-04-19 11:43:46 -04:00

ecmult_const.h

Make secp256k1_ecmult_const handle infinity

2023-05-10 09:06:02 -04:00

ecmult_gen_compute_table_impl.h

Permit COMB_BITS < 256 for exhaustive tests

2024-04-19 11:43:46 -04:00

ecmult_gen_compute_table.h

Permit COMB_BITS < 256 for exhaustive tests

2024-04-19 11:43:46 -04:00

ecmult_gen_impl.h

Permit COMB_BITS < 256 for exhaustive tests

2024-04-19 11:43:46 -04:00

ecmult_gen.h

Permit COMB_BITS < 256 for exhaustive tests

2024-04-19 11:43:46 -04:00

ecmult_impl.h

Rename scalar_get_bits -> scalar_get_bits_limb32; return uint32_t

2024-04-19 11:43:46 -04:00

ecmult.h

small fixes

2023-07-03 17:05:55 +02:00

field_5x52_impl.h

field: Remove x86_64 asm

2023-11-24 08:11:08 +01:00

field_5x52_int128_impl.h

remove superfluous #ifdef VERIFY/#endif preprocessor conditions

2023-12-01 00:54:41 +01:00

field_5x52.h

Bugfix: correct SECP256K1_FE_CONST mag/norm fields

2023-05-11 06:18:37 -04:00

field_10x26_impl.h

remove superfluous #ifdef VERIFY/#endif preprocessor conditions

2023-12-01 00:54:41 +01:00

field_10x26.h

Bugfix: correct SECP256K1_FE_CONST mag/norm fields

2023-05-11 06:18:37 -04:00

field_impl.h

introduce and use SECP256K1_{FE,GE,GEJ}_VERIFY macros

2023-12-01 00:54:58 +01:00

field.h

doc: clarify input requirements for secp256k1_fe_mul

2024-02-27 16:32:49 +01:00

group_impl.h

group: add ge_to_bytes_ext and ge_from_bytes_ext

2024-10-07 14:03:40 +00:00

group.h

group: add ge_to_bytes_ext and ge_from_bytes_ext

2024-10-07 14:03:40 +00:00

hash_impl.h

refactor: Drop unused cast

2023-07-24 13:14:23 +01:00

hash.h

hash: Make code agnostic of endianness

2022-03-25 11:32:14 +01:00

hsort_impl.h

Add secp256k1_pubkey_sort

2024-04-25 20:23:31 +00:00

hsort.h

Add secp256k1_pubkey_sort

2024-04-25 20:23:31 +00:00

int128_impl.h

int128: Tidy #includes of int128.h and int128_impl.h

2022-11-07 16:38:30 -05:00

int128_native_impl.h

Move SECP256K1_INLINE macro definition out from include/secp256k1.h

2023-03-09 15:29:56 +00:00

int128_native.h

Simulated int128 type.

2022-11-07 16:37:24 -05:00

int128_struct_impl.h

Use __shiftright128 intrinsic in secp256k1_u128_rshift on MSVC

2023-06-04 18:03:36 +01:00

int128_struct.h

Simulated int128 type.

2022-11-07 16:37:24 -05:00

int128.h

Make secp256k1_i128_check_pow2 support -(2^n)

2023-02-27 15:38:05 -05:00

modinv32_impl.h

f can never equal -m

2024-09-25 11:05:23 -04:00

modinv32.h

Native jacobi symbol algorithm

2023-02-28 15:54:00 -05:00

modinv64_impl.h

f can never equal -m

2024-09-25 11:05:23 -04:00

modinv64.h

Native jacobi symbol algorithm

2023-02-28 15:54:00 -05:00

precompute_ecmult_gen.c

Permit COMB_BITS < 256 for exhaustive tests

2024-04-19 11:43:46 -04:00

precompute_ecmult.c

Fix a typo in the error message

2023-06-24 20:18:45 +01:00

precomputed_ecmult_gen.c

Permit COMB_BITS < 256 for exhaustive tests

2024-04-19 11:43:46 -04:00

precomputed_ecmult_gen.h

Signed-digit multi-comb ecmult_gen algorithm

2024-04-19 11:43:22 -04:00

precomputed_ecmult.c

Drop no longer needed #include "../include/secp256k1.h"

2023-06-06 09:07:36 +01:00

precomputed_ecmult.h

Drop no longer needed #include "../include/secp256k1.h"

2023-06-06 09:07:36 +01:00

scalar_4x64_impl.h

Make secp256k1_scalar_get_bits support 32-bit reads

2024-04-19 11:43:46 -04:00

scalar_4x64.h

Fix insecure links

2020-12-18 00:24:22 +02:00

scalar_8x32_impl.h

Make secp256k1_scalar_get_bits support 32-bit reads

2024-04-19 11:43:46 -04:00

scalar_8x32.h

Fix insecure links

2020-12-18 00:24:22 +02:00

scalar_impl.h

Fix typos

2024-01-03 20:03:07 +08:00

scalar_low_impl.h

Make secp256k1_scalar_get_bits support 32-bit reads

2024-04-19 11:43:46 -04:00

scalar_low.h

make SECP256K1_SCALAR_CONST reduce modulo exhaustive group order

2023-11-04 15:54:08 -04:00

scalar.h

Make secp256k1_scalar_get_bits support 32-bit reads

2024-04-19 11:43:46 -04:00

scratch_impl.h

scratch_destroy: move VERIFY_CHECK after invalid scrach space check

2022-06-29 20:24:11 +05:30

scratch.h

Remove unused scratch space from API

2024-10-21 09:18:44 +00:00

secp256k1.c

Remove unused scratch space from API

2024-10-21 09:18:44 +00:00

selftest.h

selftest: Rename internal function to make name available for API

2022-12-05 11:26:44 +01:00

testrand_impl.h

refactor: Use array initialization for unterminated strings

2024-08-15 17:58:14 +02:00

testrand.h

tests: refactor: drop secp256k1_ prefix from testrand.h functions

2024-05-27 03:29:36 +02:00

tests_exhaustive.c

tests: refactor: drop secp256k1_ prefix from testrand.h functions

2024-05-27 03:29:36 +02:00

tests.c

Add module "musig" that implements MuSig2 multi-signatures (BIP 327)

2024-10-07 14:03:42 +00:00

testutil.h

tests: do not use functions from extrakeys module

2024-07-24 06:57:38 +00:00

util.h

util: add constant-time is_zero_array function

2024-10-07 14:03:42 +00:00