frost/secp256k1-zkp
3
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
Files
994b35010d1d62383be0ec970582ff4a171f7e84
secp256k1-zkp/src
History
Lőrinc 994b35010d field: correct fe_equal's b magnitude bound 
`secp256k1_fe_equal` negates `a` before adding `b`.
That gives the temporary value magnitude 2, and the following field addition requires the input magnitudes to sum to at most 32.
So the largest `b` magnitude the implementation can accept is 30, not 31.

Lower the documented and checked bound for `b` to 30.
Adjust the focused test to use random field elements with randomized magnitudes within the accepted `a <= 1` and `b <= 30` bounds.

Co-authored-by: Sebastian Falbesoner <sebastian.falbesoner@gmail.com>
Co-authored-by: Tim Ruffing <me@real-or-random.org>
2026-06-25 09:23:38 -07:00
..
asm
asm: add .note.GNU-stack section for non-exec stack
2023-11-13 14:49:35 +00:00
modules
test: musig: fix dead "aggnonce encodes two points at infinity" check
2026-06-10 00:21:24 +02:00
wycheproof
test: update wycheproof test vectors
2025-07-31 14:33:49 +01:00
assumptions.h
assumptions: Use new STATIC_ASSERT macro
2024-01-08 16:10:55 +01:00
bench_ecmult.c
refactor: rename _ecmult_gen -> _ecmult_gen_gej for consistency
2026-06-07 20:21:18 +02:00
bench_internal.c
bench: add internal benchmark for secp256k1_fe_normalize_var
2026-06-04 19:17:03 +02:00
bench.c
Merge bitcoin-core/secp256k1#1824: util: introduce and use ARRAY_SIZE macro
2026-03-03 15:31:46 +01:00
bench.h
refactor: Remove trailing whitespace
2026-02-02 13:01:18 +00:00
checkmem.h
build: Add -Wtrailing-whitespace=any compiler flag
2026-02-02 13:01:24 +00:00
CMakeLists.txt
cmake, refactor: Introduce SetLibtoolAbiVersion module
2026-06-09 13:22:57 +01:00
ctime_tests.c
test: enable -Wunused-function in test suite (Fix #1831)
2026-06-12 19:10:33 +05:30
ecdsa_impl.h
refactor: introduce _ecmult_gen_ge helper (preventing accidental gej leaks)
2026-06-07 20:21:18 +02:00
ecdsa.h
Remove ecmult_context.
2021-08-20 11:11:26 -04:00
eckey_impl.h
eckey: Call ecmult with NULL instead of zero scalar
2026-03-11 11:10:32 +01:00
eckey.h
remove secp256k1_eckey_pubkey_serialize function
2025-11-17 18:35:32 +01:00
ecmult_compute_table_impl.h
ecmult: Use size_t for array indices into tables
2026-01-07 11:58:12 +01:00
ecmult_compute_table.h
Move ecmult table computation code to separate file
2021-12-18 16:11:56 -05:00
ecmult_const_impl.h
group: Avoid using infinity field directly in other modules
2025-11-06 17:51:08 +01:00
ecmult_const.h
Make secp256k1_ecmult_const handle infinity
2023-05-10 09:06:02 -04:00
ecmult_gen_compute_table_impl.h
Permit COMB_BITS < 256 for exhaustive tests
2024-04-19 11:43:46 -04:00
ecmult_gen_compute_table.h
Permit COMB_BITS < 256 for exhaustive tests
2024-04-19 11:43:46 -04:00
ecmult_gen_impl.h
refactor: rename _ecmult_gen -> _ecmult_gen_gej for consistency
2026-06-07 20:21:18 +02:00
ecmult_gen.h
refactor: rename _ecmult_gen -> _ecmult_gen_gej for consistency
2026-06-07 20:21:18 +02:00
ecmult_impl.h
ecmult: Use size_t for array indices in _odd_multiplies_table
2026-01-07 11:58:12 +01:00
ecmult.h
ecmult: Document and test ng=NULL in ecmult
2026-03-11 11:10:32 +01:00
field_5x52_impl.h
field: force-inline 5x52 mul and sqr
2026-06-15 23:56:19 +02:00
field_5x52_int128_impl.h
field: force-inline 5x52 mul and sqr
2026-06-15 23:56:19 +02:00
field_5x52.h
Bugfix: correct SECP256K1_FE_CONST mag/norm fields
2023-05-11 06:18:37 -04:00
field_10x26_impl.h
Add VERIFY_CHECKs that flags are 0 or 1
2025-12-15 09:07:42 -05:00
field_10x26.h
Bugfix: correct SECP256K1_FE_CONST mag/norm fields
2023-05-11 06:18:37 -04:00
field_impl.h
field: correct fe_equal's b magnitude bound
2026-06-25 09:23:38 -07:00
field.h
field: correct fe_equal's b magnitude bound
2026-06-25 09:23:38 -07:00
group_impl.h
Add VERIFY_CHECKs that flags are 0 or 1
2025-12-15 09:07:42 -05:00
group.h
Add VERIFY_CHECKs that flags are 0 or 1
2025-12-15 09:07:42 -05:00
hash_impl.h
sha256: speed up writes using multi-block compression
2026-03-03 10:35:53 -03:00
hash.h
Add API to override SHA256 compression at runtime
2026-03-03 10:35:53 -03:00
hsort_impl.h
Add secp256k1_pubkey_sort
2024-04-25 20:23:31 +00:00
hsort.h
Add secp256k1_pubkey_sort
2024-04-25 20:23:31 +00:00
int128_impl.h
int128: Tidy #includes of int128.h and int128_impl.h
2022-11-07 16:38:30 -05:00
int128_native_impl.h
Move SECP256K1_INLINE macro definition out from include/secp256k1.h
2023-03-09 15:29:56 +00:00
int128_native.h
Simulated int128 type.
2022-11-07 16:37:24 -05:00
int128_struct_impl.h
Use __shiftright128 intrinsic in secp256k1_u128_rshift on MSVC
2023-06-04 18:03:36 +01:00
int128_struct.h
Simulated int128 type.
2022-11-07 16:37:24 -05:00
int128.h
Make secp256k1_i128_check_pow2 support -(2^n)
2023-02-27 15:38:05 -05:00
modinv32_impl.h
f can never equal -m
2024-09-25 11:05:23 -04:00
modinv32.h
Native jacobi symbol algorithm
2023-02-28 15:54:00 -05:00
modinv64_impl.h
f can never equal -m
2024-09-25 11:05:23 -04:00
modinv64.h
Native jacobi symbol algorithm
2023-02-28 15:54:00 -05:00
precompute_ecmult_gen.c
util: introduce and use ARRAY_SIZE macro
2026-02-17 00:21:58 +01:00
precompute_ecmult.c
ecmult: Use size_t for array indices into tables
2026-01-07 11:58:12 +01:00
precomputed_ecmult_gen.c
Permit COMB_BITS < 256 for exhaustive tests
2024-04-19 11:43:46 -04:00
precomputed_ecmult_gen.h
Introduce SECP256K1_LOCAL_VAR macro
2025-03-11 21:58:55 +00:00
precomputed_ecmult.c
Drop no longer needed #include "../include/secp256k1.h"
2023-06-06 09:07:36 +01:00
precomputed_ecmult.h
Introduce SECP256K1_LOCAL_VAR macro
2025-03-11 21:58:55 +00:00
scalar_4x64_impl.h
Improve checks for scalar _get_bits methods
2026-04-12 17:37:42 +07:00
scalar_4x64.h
Fix insecure links
2020-12-18 00:24:22 +02:00
scalar_8x32_impl.h
Improve checks for scalar _get_bits methods
2026-04-12 17:37:42 +07:00
scalar_8x32.h
Fix insecure links
2020-12-18 00:24:22 +02:00
scalar_impl.h
Split memclear into two versions
2025-09-08 12:26:04 -04:00
scalar_low_impl.h
Improve checks for scalar _get_bits methods
2026-04-12 17:37:42 +07:00
scalar_low.h
make SECP256K1_SCALAR_CONST reduce modulo exhaustive group order
2023-11-04 15:54:08 -04:00
scalar.h
Add VERIFY_CHECKs that flags are 0 or 1
2025-12-15 09:07:42 -05:00
scratch_impl.h
scratch_destroy: move VERIFY_CHECK after invalid scrach space check
2022-06-29 20:24:11 +05:30
scratch.h
Remove unused scratch space from API
2024-10-21 09:18:44 +00:00
secp256k1.c
refactor: introduce _ecmult_gen_ge helper (preventing accidental gej leaks)
2026-06-07 20:21:18 +02:00
selftest.h
Introduce hash context to support pluggable SHA256 compression
2026-03-03 10:25:50 -03:00
testrand_impl.h
Merge bitcoin-core/secp256k1#1777: Make SHA256 compression runtime pluggable
2026-03-04 08:43:07 +01:00
testrand.h
testrand: Remove testrand_finish
2026-03-02 15:06:39 +01:00
tests_common.h
refactor: move 'gettime_i64()' to tests_common.h
2025-09-13 09:55:28 -04:00
tests_exhaustive.c
test: enable -Wunused-function in test suite (Fix #1831)
2026-06-12 19:10:33 +05:30
tests.c
field: correct fe_equal's b magnitude bound
2026-06-25 09:23:38 -07:00
testutil.h
Add API to override SHA256 compression at runtime
2026-03-03 10:35:53 -03:00
unit_test.c
test: enable -Wunused-function in test suite (Fix #1831)
2026-06-12 19:10:33 +05:30
unit_test.h
util: introduce and use ARRAY_SIZE macro
2026-02-17 00:21:58 +01:00
util_local_visibility.h
Introduce SECP256K1_LOCAL_VAR macro
2025-03-11 21:58:55 +00:00
util.h
field: force-inline 5x52 mul and sqr
2026-06-15 23:56:19 +02:00