tor - Transit encryption and privacy out of the box

Age	Commit message (Collapse)	Author
2014-09-25	Comments and tweaks based on review by asn	Nick Mathewson
	Add some documentation Rename "derive" -> "blind" Check for failure on randombytes().
2014-09-25	More documentation for ed25519 stuff.	Nick Mathewson

2014-09-25	Fix linux compilation of ed25519_ref10	Nick Mathewson
	Our integer-definition headers apparently suck in a definition for select(2), which interferes with the select() in ge_scalarmult_base.c
2014-09-25	Draft implementation for ed25519 key blinding, as in prop224	Nick Mathewson
	This implementation allows somebody to add a blinding factor to a secret key, and a corresponding blinding factor to the public key. Robert Ransom came up with this idea, I believe. Nick Hopper proved a scheme like this secure. The bugs are my own.
2014-09-25	Add curve25519->ed25519 key conversion per proposal 228	Nick Mathewson
	For proposal 228, we need to cross-certify our identity with our curve25519 key, so that we can prove at descriptor-generation time that we own that key. But how can we sign something with a key that is only for doing Diffie-Hellman? By converting it to the corresponding ed25519 point. See the ALL-CAPS warning in the documentation. According to djb (IIUC), it is safe to use these keys in the ways that ntor and prop228 are using them, but it might not be safe if we start providing crazy oracle access. (Unit tests included. What kind of a monster do you take me for?)
2014-09-25	Another ed25519 tweak: store secret keys in expanded format	Nick Mathewson
	This will be needed/helpful for the key blinding of prop224, I believe.
2014-09-25	Fix API for ed25519_ref10_open()	Nick Mathewson
	This is another case where DJB likes sticking the whole signature prepended to the message, and I don't think that's the hottest idea. The unit tests still pass.
2014-09-25	Tweak ed25519 ref10 signing interface to use less space.	Nick Mathewson
	Unit tests still pass.
2014-09-25	Tweak ref10 keygen APIs to be more sane.	Nick Mathewson

2014-08-26	ed25519_ref10: use uint64_t and int64_t, not long long	Nick Mathewson

2014-08-26	Add headers as needed to make ed25519_ref10 compile.	Nick Mathewson

2014-08-26	Add some explicit casts as needed to make ed25519_ref10 compile	Nick Mathewson
	Apparently, ref10 likes implicit conversions from int64 to int32 more than our warnings do.
2014-08-26	Add the ed25519 ref10 code verbatim from supercop-20140622	Nick Mathewson
	We might use libsodium or ed25519-donna later on, but for now, let's see whether this is fast enough. We should use it in all cases when performance doesn't matter.