Rebase on upstream `e541a90e`#66

Closed

apoelstra wants to merge 157 commits intoBlockstreamResearch:secp256k1-zkpfrom

apoelstra:2019-05-rebase

Commits on Feb 26, 2018

Portability fix for the configure scripts generated
khorben
committed

Commits on Mar 6, 2018

Commits on Mar 27, 2018

Commits on Jul 6, 2018

Commits on Aug 13, 2018

Optimize secp256k1_fe_normalize_weak calls.
roconnor-blockstream
committed

Commits on Aug 14, 2018

secp256k1_fe_sqrt: Verify that the arguments don't alias.
roconnor-blockstream
committed

Commits on Aug 15, 2018

Make constants static:
roconnor-blockstream
committed

Commits on Oct 9, 2018

Make use of TAG_PUBKEY constants in secp256k1_eckey_pubkey_parse
Empact
committed

Commits on Oct 23, 2018

Correct order of libs returned on pkg-config --libs --static libsecp256k1 call.
pmienk
committed

Commits on Dec 14, 2018

Fix possible integer overflow in DER parsing
real-or-random
committed

Commits on Dec 17, 2018

Use __GNUC_PREREQ for detecting __builtin_expect
real-or-random
committed

Commits on Jan 27, 2019

Make randomization of a non-signing context a noop
real-or-random
committed

Commits on Feb 4, 2019

Merge #579: Use __GNUC_PREREQ for detecting __builtin_expect
sipa
committed

Commits on Feb 10, 2019

Commits on Feb 21, 2019

Commits on Feb 22, 2019

Merge #584: configure: Use CFLAGS_FOR_BUILD when checking native compiler
gmaxwell
committed

Commits on Feb 23, 2019

Commits on Feb 24, 2019

Commits on Mar 9, 2019

Add $(COMMON_LIB) to exhaustive tests to fix ARM asm build
gmaxwell
committed

Commits on Mar 10, 2019

Commits on Mar 11, 2019

Merge #599: Switch x86_64 asm to use "i" instead of "n" for immediate values.
gmaxwell
committed

Commits on Mar 18, 2019

Use trivial algorithm in ecmult_multi if scratch space is small
jonasnick
committed

Commits on Mar 21, 2019

Make sure we're not using an uninitialized variable in secp256k1_wnaf_const(...)
practicalswift
committed

Commits on Mar 30, 2019

travis: Remove unused sudo:false
MarcoFalke
committed
Use size_t shifts when computing a size_t
sipa
committed

Commits on Mar 31, 2019

Commits on May 7, 2019

Allow field_10x26_arm.s to compile for ARMv7 architecture
romanz
committed

Commits on May 9, 2019

Merge #612: Allow field_10x26_arm.s to compile for ARMv7 architecture
gmaxwell
committed

Commits on May 14, 2019

Pass scalar by reference in secp256k1_wnaf_const()
real-or-random
committed

Commits on May 15, 2019

Commits on May 16, 2019

Merge #619: Clear a copied secret key after negation
gmaxwell
committed

Commits on May 22, 2019

Commits on May 25, 2019

Commits on May 26, 2019

Commits on May 27, 2019

Merge #595: Allow to use external default callbacks
gmaxwell
committed

Commits on May 29, 2019

Commits on May 30, 2019

Add 64-bit integer utilities

gmaxwell
authored and
apoelstra
committed
Pedersen commitments, borromean ring signatures, and ZK range proofs.

gmaxwell
authored and
apoelstra
committed
[RANGEPROOF BREAK] Use quadratic residue for tie break and modularity cleanup
apoelstra
committed
rangeproof: expose sidechannel message field in the signing API
apoelstra
committed
Constant-time generator module

sipa
authored and
apoelstra
committed
Expose generator in pedersen/rangeproof API

sipa
authored and
apoelstra
committed
rangeproof: several API changes
apoelstra
committed
Implement ring-signature based whitelist delegation scheme
apoelstra
committed
add surjection proof module
apoelstra
committed
rangeproof: fix memory leak in unit tests
apoelstra
committed
surjectionproof: tests_impl.h s/assert/CHECK/g
apoelstra
committed
surjectionproof: add API unit tests
apoelstra
committed
surjectionproof: rename unit test functions to be more consistent with other modules
apoelstra
committed
rangeproof: add API tests
apoelstra
committed
Fix include/secp256k1_rangeproof.h function argument documentation.

jonasnick
authored and
apoelstra
committed
whitelist: fix serialize/parse API to take serialized length
apoelstra
committed
Fix checks of whitelist serialize/parse arguments

jonasnick
authored and
apoelstra
committed
Add n_keys argument to whitelist_verify

jonasnick
authored and
apoelstra
committed
Fix pedersen_blind_generator_blind_sum return value documentation

jonasnick
authored and
apoelstra
committed
Fix generator makefile

instagibbs
authored and
apoelstra
committed
generator: remove unnecessary ARG_CHECK from generate()
apoelstra
committed
generator: add API tests
apoelstra
committed
add whitelist_impl.h to include for dist

instagibbs
authored and
apoelstra
committed
Add whitelisting benchmark

jonasnick
authored and
apoelstra
committed
Minor bugfix. Wrong length due to NUL character.

datavetaren
authored and
apoelstra
committed
Reject surjection proofs with trailing garbage

real-or-random
authored and
apoelstra
committed
Test for rejection of trailing bytes in surjection proofs

real-or-random
authored and
apoelstra
committed
Test for rejection of trailing bytes in range proofs

real-or-random
authored and
apoelstra
committed
fix spelling in documentation

instagibbs
authored and
apoelstra
committed
Expose generator in shared library

FrankC01
authored and
apoelstra
committed
rangeproof: add fixed vector test case
apoelstra
committed
rangeproof: check that points deserialize correctly when verifying rangeproof
apoelstra
committed
generator: verify correctness of point when parsing
apoelstra
committed
rangeproof: verify correctness of pedersen commitments when parsing
apoelstra
committed
rangeproof: fix serialization of pedersen commintments
apoelstra
committed
add unit test for generator and pedersen commitment roundtripping
apoelstra
committed
Add comment to explain effect of max_n_iterations in surjectionproof_init

jonasnick
authored and
apoelstra
committed
Add explanation about how BIP32 unhardened derivation can be used to simplify whitelisting

jonasnick
authored and
apoelstra
committed
Enable more builds with rest of experimental flags

instagibbs
authored and
apoelstra
committed
rangeproof: reduce iteration count in unit tests
apoelstra
committed
use proper types for rangeproof min/max

instagibbs
authored and
apoelstra
committed
add chacha20 function
apoelstra
committed
Add schnorrsig module which implements BIP-schnorr [0] compatible signing, verification and batch verification.
apoelstra
committed
Add MuSig module which allows creating n-of-n multisignatures and adaptor signatures.

jonasnick
authored and
apoelstra
committed
Add 3-of-3 MuSig example

jonasnick
authored and
apoelstra
committed
musig: add user documentation
apoelstra
committed
generator: remove `CHECK` abort calls exposed by public API
apoelstra
committed
Fix a small typo in the generator parameter name

romanz
authored and
apoelstra
committed
Clean up ./configure help strings (zkp extensions)

real-or-random
authored and
apoelstra
committed
Add bench_generator and bench_rangeproof to .gitignore

romanz
authored and
apoelstra
committed
Clarify how to derive alternative generator H

jonasnick
authored and
apoelstra
committed
Improve explanation of key cancellation attack in whitelist.md

jonasnick
authored and
apoelstra
committed
work in progress: add _allocate_initialized/destroy funcs

dgpv
authored and
apoelstra
committed
Improve comments for surctionproof init+alloc/destroy funcs

dgpv
authored and
apoelstra
committed