frost/secp256k1-zkp
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
secp256k1-zkp/src
History
Pieter Wuille 7b7503dac5
Merge bitcoin-core/secp256k1#1245: tests: Add Wycheproof ECDSA vectors 
e5de45460953c8ae16521b1928ac14de218998a3 tests: Add Wycheproof ECDSA vectors (RandomLattice)

Pull request description:

  This PR adds a test using the Wycheproof vectors as outlined in #1106. We add all 463 ECDSA test vectors. These vectors cover:
  - edge cases in arithmetic operations
  - signatures with special values for (r,s) that should be rejected
  - special cases of public keys

  The vectors are pulled from the Wycheproof project using a python script to emit C code.

  All the new ECDSA Wycheproof vectors pass.

ACKs for top commit:
  sipa:
    ACK e5de45460953c8ae16521b1928ac14de218998a3
  real-or-random:
    ACK e5de45460953c8ae16521b1928ac14de218998a3

Tree-SHA512: e9684f14ff3f5225a4a4949b490e07527d559c28aa61ed03c03bc52ea64785f0b80b9e1b1628665eacf24006526271ea0fb108629c9c3c1d758e52d214a056f1
2023-04-10 09:29:02 -04:00
..
asm
Set ARM ASM symbol visibility to hidden
2023-03-15 09:08:41 +00:00
modules
Merge bitcoin-core/secp256k1#1192: Switch to exhaustive groups with small B coefficient
2023-01-16 22:36:15 +01:00
wycheproof
tests: Add Wycheproof ECDSA vectors
2023-04-09 06:17:16 +02:00
assumptions.h
Simulated int128 type.
2022-11-07 16:37:24 -05:00
bench_ecmult.c
Make all non-API functions (except main) static
2023-01-09 12:02:27 -05:00
bench_internal.c
Add secp256k1_fe_is_square_var function
2023-02-28 15:57:32 -05:00
bench.c
Make all non-API functions (except main) static
2023-01-09 12:02:27 -05:00
bench.h
Make all non-API functions (except main) static
2023-01-09 12:02:27 -05:00
checkmem.h
Add support for msan integration to checkmem.h
2023-01-11 16:07:37 -05:00
CMakeLists.txt
cmake: Rename project to "libsecp256k1"
2023-03-08 21:22:24 +00:00
ctime_tests.c
ctime_tests: improve output when CHECKMEM_RUNNING is not defined
2023-01-18 09:02:47 +00:00
ecdsa_impl.h
refactor: Use (int)&(int) in boolean context to avoid compiler warning
2021-11-09 11:34:48 +01:00
ecdsa.h
Remove ecmult_context.
2021-08-20 11:11:26 -04:00
eckey_impl.h
Remove ecmult_context.
2021-08-20 11:11:26 -04:00
eckey.h
Remove ecmult_context.
2021-08-20 11:11:26 -04:00
ecmult_compute_table_impl.h
Move ecmult table computation code to separate file
2021-12-18 16:11:56 -05:00
ecmult_compute_table.h
Move ecmult table computation code to separate file
2021-12-18 16:11:56 -05:00
ecmult_const_impl.h
Add x-only ecmult_const version for x=n/d
2023-04-08 15:24:36 -04:00
ecmult_const.h
Add x-only ecmult_const version for x=n/d
2023-04-08 15:24:36 -04:00
ecmult_gen_compute_table_impl.h
Rename function secp256k1_ecmult_gen_{create_prec -> compute}_table
2021-12-18 16:11:52 -05:00
ecmult_gen_compute_table.h
Rename function secp256k1_ecmult_gen_{create_prec -> compute}_table
2021-12-18 16:11:52 -05:00
ecmult_gen_impl.h
ecmult_gen: Improve comments about projective blinding
2022-07-05 19:28:09 +02:00
ecmult_gen.h
config: Introduce DEBUG_CONFIG macro for debug output of config
2022-07-07 20:32:08 +02:00
ecmult_impl.h
Merge bitcoin-core/secp256k1#1244: Suppress -Wunused-parameter when building for coverage analysis
2023-03-28 07:18:23 +00:00
ecmult.h
config: Introduce DEBUG_CONFIG macro for debug output of config
2022-07-07 20:32:08 +02:00
field_5x52_asm_impl.h
Fix insecure links
2020-12-18 00:24:22 +02:00
field_5x52_impl.h
ct: Use volatile "trick" in all fe/scalar cmov implementations
2023-04-01 15:58:24 +09:00
field_5x52_int128_impl.h
int128: Tidy #includes of int128.h and int128_impl.h
2022-11-07 16:38:30 -05:00
field_5x52.h
Fix insecure links
2020-12-18 00:24:22 +02:00
field_10x26_impl.h
ct: Use volatile "trick" in all fe/scalar cmov implementations
2023-04-01 15:58:24 +09:00
field_10x26.h
Fix insecure links
2020-12-18 00:24:22 +02:00
field_impl.h
Remove dependency on src/libsecp256k1-config.h
2022-12-15 10:56:16 +00:00
field.h
Add secp256k1_fe_add_int function
2023-03-02 17:09:25 -05:00
group_impl.h
Add secp256k1_fe_add_int function
2023-03-02 17:09:25 -05:00
group.h
group: add gej_eq_var
2022-12-07 10:54:50 +00:00
hash_impl.h
hash: Make code agnostic of endianness
2022-03-25 11:32:14 +01:00
hash.h
hash: Make code agnostic of endianness
2022-03-25 11:32:14 +01:00
int128_impl.h
int128: Tidy #includes of int128.h and int128_impl.h
2022-11-07 16:38:30 -05:00
int128_native_impl.h
Make secp256k1_i128_check_pow2 support -(2^n)
2023-02-27 15:38:05 -05:00
int128_native.h
Simulated int128 type.
2022-11-07 16:37:24 -05:00
int128_struct_impl.h
No need to subtract 1 before doing a right shift
2023-03-27 09:29:41 -04:00
int128_struct.h
Simulated int128 type.
2022-11-07 16:37:24 -05:00
int128.h
Make secp256k1_i128_check_pow2 support -(2^n)
2023-02-27 15:38:05 -05:00
modinv32_impl.h
Update comment for secp256k1_modinv32_inv256
2023-03-10 08:53:33 -05:00
modinv32.h
Native jacobi symbol algorithm
2023-02-28 15:54:00 -05:00
modinv64_impl.h
Remove redudent checks.
2023-03-07 09:10:36 -05:00
modinv64.h
Native jacobi symbol algorithm
2023-02-28 15:54:00 -05:00
precompute_ecmult_gen.c
Remove dependency on src/libsecp256k1-config.h
2022-12-15 10:56:16 +00:00
precompute_ecmult.c
Remove dependency on src/libsecp256k1-config.h
2022-12-15 10:56:16 +00:00
precomputed_ecmult_gen.c
Remove dependency on src/libsecp256k1-config.h
2022-12-15 10:56:16 +00:00
precomputed_ecmult_gen.h
Fix c++ build
2021-12-18 16:12:34 -05:00
precomputed_ecmult.c
Remove dependency on src/libsecp256k1-config.h
2022-12-15 10:56:16 +00:00
precomputed_ecmult.h
Switch to exhaustive groups with small B coefficient
2023-01-13 17:05:35 -05:00
scalar_4x64_impl.h
ct: Use volatile "trick" in all fe/scalar cmov implementations
2023-04-01 15:58:24 +09:00
scalar_4x64.h
Fix insecure links
2020-12-18 00:24:22 +02:00
scalar_8x32_impl.h
ct: Use volatile "trick" in all fe/scalar cmov implementations
2023-04-01 15:58:24 +09:00
scalar_8x32.h
Fix insecure links
2020-12-18 00:24:22 +02:00
scalar_impl.h
scalar: restrict split_lambda args, improve doc and VERIFY_CHECKs
2023-01-19 21:14:38 +00:00
scalar_low_impl.h
ct: Use volatile "trick" in all fe/scalar cmov implementations
2023-04-01 15:58:24 +09:00
scalar_low.h
Fix insecure links
2020-12-18 00:24:22 +02:00
scalar.h
scalar: restrict split_lambda args, improve doc and VERIFY_CHECKs
2023-01-19 21:14:38 +00:00
scratch_impl.h
scratch_destroy: move VERIFY_CHECK after invalid scrach space check
2022-06-29 20:24:11 +05:30
scratch.h
Remove underscores from header defs.
2021-01-23 14:48:35 -05:00
secp256k1.c
contexts: Forbid randomizing secp256k1_context_static
2023-01-18 16:47:31 +01:00
selftest.h
selftest: Rename internal function to make name available for API
2022-12-05 11:26:44 +01:00
testrand_impl.h
Use xoshiro256++ PRNG instead of RFC6979 in tests
2021-12-24 11:19:29 -05:00
testrand.h
Remove dependency on src/libsecp256k1-config.h
2022-12-15 10:56:16 +00:00
tests_exhaustive.c
Add exhaustive tests for ecmult_const_xonly
2023-04-08 15:25:41 -04:00
tests.c
Merge bitcoin-core/secp256k1#1245: tests: Add Wycheproof ECDSA vectors
2023-04-10 09:29:02 -04:00
util.h
Ensure safety of ctz_debruijn implementation.
2023-01-16 22:23:57 -05:00