Gregory Maxwell 34a67c773b Eliminate harmless non-constant time operations on secret data.
There were several places where the code was non-constant time
 for invalid secret inputs.  These are harmless under sane use
 but get in the way of automatic const-time validation.

(Nonce overflow in signing is not addressed, nor is s==0 in
 signing)
2020-02-20 17:27:03 +00:00
..
2019-12-13 11:23:39 +01:00
2019-09-05 09:19:41 +02:00
2018-07-06 08:40:35 -04:00
2018-07-06 08:40:35 -04:00
2017-09-27 15:03:20 -07:00