summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Add valgrind annotations to ghash tests.ghash-sidechannel-silentNiels Möller2023-04-122-0/+21
* Rearrange tables, to avoid large offsets.Niels Möller2023-04-123-17/+23
* Slight reorder.Niels Möller2023-04-081-7/+7
* Do four bits per iteration.Niels Möller2023-04-081-10/+18
* Use sign bits and arithmetic right shift.Niels Möller2023-04-081-17/+10
* Cycle counts for ghash_update.Niels Möller2023-04-082-0/+18
* Use pand with memory src operand.Niels Möller2023-04-081-16/+12
* Rewrite x86_64 ghash_update to use sse2 instructions.Niels Möller2023-04-081-47/+33
* Update x86_64 ghash_update.Niels Möller2023-04-071-121/+34
* Rewrite ghash C implementation.Niels Möller2023-04-075-172/+62
* Update reference to the Yarrow paper.Justus Winter2023-04-031-1/+1
* ChangeLog and copyright update.Niels Möller2023-04-033-0/+9
* Merge branch 'nettle-x86_ghash' into masterNiels Möller2023-04-022-16/+91
|\
| * [x86_64] Use 2-way GHASH pclmul updateMaamoun TK2023-03-242-16/+91
* | New constant OCB_MAX_NONCE_SIZE.Niels Möller2023-03-252-0/+5
|/
* Add link to puthon bindings.Niels Möller2023-02-211-0/+2
* midipix platform supportred@foxi.me2023-02-161-0/+16
* x86_64: Fix incorrect w64 setup in sha256_compress_n.asm.Niels Möller2023-02-162-2/+7
* x86_64: Comment fixes.Niels Möller2023-02-165-8/+11
* Add benchmarking of ocb_aes128.ocb-mergeNiels Möller2023-02-082-0/+5
* Add tests of ocb message functions.Niels Möller2023-02-071-0/+157
* Implement OCB mode, RFC 7253.Niels Möller2023-02-0710-2/+1095
* Extend aead tests.Niels Möller2023-02-062-56/+87
* const-declare the xts_key argument to xts aes encrypt/decrypt message functions.Niels Möller2022-12-054-8/+15
* Add FIXME comment on ccm_aes128_encrypt_message, API could be improved.Niels Möller2022-12-051-0/+3
* Merge branch 'delete-arcfour-asm' into masterNiels Möller2022-11-109-665/+33
|\
| * Delete all arcfour assembly codedelete-arcfour-asmNiels Möller2022-08-079-665/+33
* | ChangeLog update.Niels Möller2022-11-091-0/+15
* | Merge branch 'nettle-ppc-poly1305-multi' into masterNiels Möller2022-11-099-81/+630
|\ \
| * | Whitespace fixes.Niels Möller2022-11-092-7/+7
| * | [PowerPC] Use INC_GPR/INC_VR marcos and define HAVE_NATIVE_poly1305_blocks in...Maamoun TK2022-11-084-26/+40
| * | Update BLOCK_R64 macro descriptionMaamoun TK2022-11-061-1/+1
| * | [PowerPC] Move register allocation from poly1305.m4Maamoun TK2022-11-063-90/+92
| * | [PowerPC] Implement _nettle_poly1305_blocks based on radix 2^44Maamoun TK2022-11-018-75/+608
* | | Add ASM_FLAGS variable to configure.Niels Möller2022-11-075-2/+12
* | | Comment fixNiels Möller2022-11-071-1/+1
|/ /
* | x86_64: Implement _nettle_poly1305_blocks.Niels Möller2022-10-313-1/+134
* | New function _nettle_poly1305_update.Niels Möller2022-10-317-7/+102
* | Minor comment fix.Niels Möller2022-10-311-1/+1
* | Merge branch 'power7-chacha-fix' into 'master'Niels Möller2022-10-201-16/+31
|\ \
| * | Fix illegal instruction in chacha-2core.asm on POWER7Maamoun TK2022-10-201-16/+31
|/ /
* | Documentation of Balloon hash.Zoltan Fridrich2022-10-161-0/+75
* | Use updated version of qemu that emulates vmsumudm properly on ppcMaamoun TK2022-10-131-2/+2
* | Undo workaround for unsupported vmsumudm on ppcMaamoun TK2022-10-133-8/+2
* | Fix bug in poly1305-internal.asm affecting big-endian modeMaamoun TK2022-10-131-1/+1
* | Add back implementation of mpn_sec_tabselect, for mini-gmp builds.Niels Möller2022-10-133-0/+31
* | Delete sec_tabselect, use gmp's mpn_sec_tabselect instead.Niels Möller2022-10-118-81/+19
* | Add benchmarking of modulo q inversion.Niels Möller2022-10-022-7/+19
* | Fix compiler warnings in the eccdata program.Niels Möller2022-09-291-2/+2
* | ChangeLog update.Niels Möller2022-09-291-0/+16