History log of /openbsd-current/usr.bin/ssh/sntrup761.c
Revision (<<< Hide revision tags) (Show revision tags >>>) Date Author Comments
# 1.6 11-Jan-2023 djm

remove whitespace at EOL from code extracted from SUPERCOP


Revision tags: OPENBSD_6_9_BASE OPENBSD_7_0_BASE OPENBSD_7_1_BASE OPENBSD_7_2_BASE
# 1.5 08-Jan-2021 dtucker

Update the sntrup761 creation script and generated code:
- remove unneeded header files and typedefs and rely on crypto_api.h
- add defines to map types used to the crypto_api ones instead of typedefs. This
prevents typedef name collisions in -portable.
- remove CRYPTO_NAMESPACE entirely instead of making it a no-op
- delete unused functions and make the remaining ones that aren't exported static.

ok djm@


# 1.4 04-Jan-2021 dtucker

estructure sntrup761.sh to process all files in a single list, which will
make it easier to reorder. Re-inline int32_MINMAX. ok tobhe@


# 1.3 03-Jan-2021 tobhe

Prevent redefinition of `crypto_int32' error with gcc3.
Fixes compilation on luna88k.

Feedback millert@
Found by and ok aoyama@


# 1.2 30-Dec-2020 tobhe

Use int64_t for intermediate values in int32_MINMAX to prevent signed
32-bit integer overflow.

Found by and ok djm@
ok markus@


# 1.1 29-Dec-2020 djm

Update/replace the experimental post-quantim hybrid key exchange
method based on Streamlined NTRU Prime (coupled with X25519).

The previous sntrup4591761x25519-sha512@tinyssh.org method is
replaced with sntrup761x25519-sha512@openssh.com. Per the authors,
sntrup4591761 was replaced almost two years ago by sntrup761.

The sntrup761 implementaion, like sntrup4591761 before it, is public
domain code extracted from the SUPERCOP cryptography benchmark
suite (https://bench.cr.yp.to/supercop.html).

Thanks for Daniel J Bernstein for guidance on algorithm selection.
Patch from Tobias Heider; feedback & ok markus@ and myself

(note this both the updated method and the one that it replaced are
disabled by default)


# 1.5 08-Jan-2021 dtucker

Update the sntrup761 creation script and generated code:
- remove unneeded header files and typedefs and rely on crypto_api.h
- add defines to map types used to the crypto_api ones instead of typedefs. This
prevents typedef name collisions in -portable.
- remove CRYPTO_NAMESPACE entirely instead of making it a no-op
- delete unused functions and make the remaining ones that aren't exported static.

ok djm@


# 1.4 04-Jan-2021 dtucker

estructure sntrup761.sh to process all files in a single list, which will
make it easier to reorder. Re-inline int32_MINMAX. ok tobhe@


# 1.3 03-Jan-2021 tobhe

Prevent redefinition of `crypto_int32' error with gcc3.
Fixes compilation on luna88k.

Feedback millert@
Found by and ok aoyama@


# 1.2 30-Dec-2020 tobhe

Use int64_t for intermediate values in int32_MINMAX to prevent signed
32-bit integer overflow.

Found by and ok djm@
ok markus@


# 1.1 29-Dec-2020 djm

Update/replace the experimental post-quantim hybrid key exchange
method based on Streamlined NTRU Prime (coupled with X25519).

The previous sntrup4591761x25519-sha512@tinyssh.org method is
replaced with sntrup761x25519-sha512@openssh.com. Per the authors,
sntrup4591761 was replaced almost two years ago by sntrup761.

The sntrup761 implementaion, like sntrup4591761 before it, is public
domain code extracted from the SUPERCOP cryptography benchmark
suite (https://bench.cr.yp.to/supercop.html).

Thanks for Daniel J Bernstein for guidance on algorithm selection.
Patch from Tobias Heider; feedback & ok markus@ and myself

(note this both the updated method and the one that it replaced are
disabled by default)


# 1.4 04-Jan-2021 dtucker

estructure sntrup761.sh to process all files in a single list, which will
make it easier to reorder. Re-inline int32_MINMAX. ok tobhe@


# 1.3 03-Jan-2021 tobhe

Prevent redefinition of `crypto_int32' error with gcc3.
Fixes compilation on luna88k.

Feedback millert@
Found by and ok aoyama@


# 1.2 30-Dec-2020 tobhe

Use int64_t for intermediate values in int32_MINMAX to prevent signed
32-bit integer overflow.

Found by and ok djm@
ok markus@


# 1.1 29-Dec-2020 djm

Update/replace the experimental post-quantim hybrid key exchange
method based on Streamlined NTRU Prime (coupled with X25519).

The previous sntrup4591761x25519-sha512@tinyssh.org method is
replaced with sntrup761x25519-sha512@openssh.com. Per the authors,
sntrup4591761 was replaced almost two years ago by sntrup761.

The sntrup761 implementaion, like sntrup4591761 before it, is public
domain code extracted from the SUPERCOP cryptography benchmark
suite (https://bench.cr.yp.to/supercop.html).

Thanks for Daniel J Bernstein for guidance on algorithm selection.
Patch from Tobias Heider; feedback & ok markus@ and myself

(note this both the updated method and the one that it replaced are
disabled by default)


# 1.3 03-Jan-2021 tobhe

Prevent redefinition of `crypto_int32' error with gcc3.
Fixes compilation on luna88k.

Feedback millert@
Found by and ok aoyama@


# 1.2 30-Dec-2020 tobhe

Use int64_t for intermediate values in int32_MINMAX to prevent signed
32-bit integer overflow.

Found by and ok djm@
ok markus@


# 1.1 29-Dec-2020 djm

Update/replace the experimental post-quantim hybrid key exchange
method based on Streamlined NTRU Prime (coupled with X25519).

The previous sntrup4591761x25519-sha512@tinyssh.org method is
replaced with sntrup761x25519-sha512@openssh.com. Per the authors,
sntrup4591761 was replaced almost two years ago by sntrup761.

The sntrup761 implementaion, like sntrup4591761 before it, is public
domain code extracted from the SUPERCOP cryptography benchmark
suite (https://bench.cr.yp.to/supercop.html).

Thanks for Daniel J Bernstein for guidance on algorithm selection.
Patch from Tobias Heider; feedback & ok markus@ and myself

(note this both the updated method and the one that it replaced are
disabled by default)


# 1.2 30-Dec-2020 tobhe

Use int64_t for intermediate values in int32_MINMAX to prevent signed
32-bit integer overflow.

Found by and ok djm@
ok markus@


# 1.1 29-Dec-2020 djm

Update/replace the experimental post-quantim hybrid key exchange
method based on Streamlined NTRU Prime (coupled with X25519).

The previous sntrup4591761x25519-sha512@tinyssh.org method is
replaced with sntrup761x25519-sha512@openssh.com. Per the authors,
sntrup4591761 was replaced almost two years ago by sntrup761.

The sntrup761 implementaion, like sntrup4591761 before it, is public
domain code extracted from the SUPERCOP cryptography benchmark
suite (https://bench.cr.yp.to/supercop.html).

Thanks for Daniel J Bernstein for guidance on algorithm selection.
Patch from Tobias Heider; feedback & ok markus@ and myself

(note this both the updated method and the one that it replaced are
disabled by default)