sipa profile picture sipa

Pull-Requests
pull Slice bytes of G multiples to avoid cache timings. #1
sipa on March 6, 2014
pull Make aux_rnd32==NULL behave identical to 0x0000..00. #1002
sipa on October 30, 2021
pull Extra validation on top of #73 #103
sipa on November 13, 2014
pull Follow-ups to making all tables fully static #1041
sipa on December 15, 2021
pull Follow-ups to making all tables fully static #1042
sipa on December 17, 2021
pull Add another ecmult_multi test #1044
sipa on December 18, 2021
pull Faster fixed-input ecmult tests #1049
sipa on December 23, 2021
pull Use xoshiro256++ instead of RFC6979 for tests #1052
sipa on December 23, 2021
pull Signed-digit multi-comb ecmult_gen algorithm #1057
sipa on December 27, 2021
pull Signed-digit multi-comb ecmult_gen algorithm #1058
sipa on December 29, 2021 performance
pull Abstract out and merge all the magnitude/normalized logic #1066
sipa on January 29, 2022
pull Add DETERMINISTIC to avoid line number/source dependent binaries #107
sipa on November 17, 2014
pull Update README.md #108
sipa on November 17, 2014
pull Add missing infinity checks #110
sipa on November 18, 2014
pull Add x-only ecmult_const version with x specified as n/d #1118
sipa on July 3, 2022
pull ElligatorSwift + integrated x-only DH #1129
sipa on July 21, 2022 feature
pull [CI test, dontmerge] PR #1000 with __(u)mul128() based abstractions in int128_struct #1130
sipa on July 22, 2022
pull Add bounds checking to field element setters #114
sipa on November 24, 2014
pull Update macOS image for CI #1152
sipa on November 14, 2022
pull Add MSan CI jobs #1155
sipa on November 16, 2022
pull Followups to int128_struct arithmetic #1156
sipa on November 16, 2022
pull Don't split the g factor when not using endomorphism #116
sipa on November 25, 2014
pull Add support for msan instead of valgrind (for memcheck and ctime test) #1169
sipa on December 6, 2022
pull Switch all EC and ECDSA logic from num to scalar. #117
sipa on November 26, 2014
pull Don't use compute credits for now #1173
sipa on December 12, 2022
pull Some improvements to the changelog #1177
sipa on December 13, 2022
pull Tweak precomputed table size for G #118
sipa on November 26, 2014
pull Bugfix: pass SECP_CONFIG_DEFINES to bench compilation #1183
sipa on December 29, 2022
pull Signed-digit based ecmult_const algorithm #1184
sipa on December 30, 2022 performancerefactor/smell
pull Make the num module optional #119
sipa on November 28, 2014
pull Make all non-API functions (except main) static #1190
sipa on January 9, 2023
pull Switch to exhaustive groups with small B coefficient #1192
sipa on January 10, 2023
pull Faster const-time modinv divsteps (rebase of #1031) #1197
sipa on January 19, 2023 performance
pull Add x-only ECDH support to ecdh module #1198
sipa on January 27, 2023 featureperformance
pull Optimize doubling: secp256k1 has no y=0 point #120
sipa on November 28, 2014
pull Split fe_set_b32 into reducing and normalizing variants #1207
sipa on February 5, 2023
pull Correct typo in comment #121
sipa on November 28, 2014
pull Add secp256k1_fe_add_int function #1217
sipa on March 1, 2023
pull Do signature recovery/verification with 4 possible recid case #122
sipa on November 28, 2014
pull Avoid field inverse for r == x comparison #123
sipa on November 28, 2014
pull Enforce and use r != b for field multiplication #124
sipa on November 30, 2014
pull Rewrite field assembly to match the C version #125
sipa on November 30, 2014
pull Add two ECDSA edge case tests #126
sipa on December 1, 2014
pull Remove bits argument from secp256k1_wnaf_const{_xonly} #1265
sipa on April 10, 2023
pull Multiplication-only lambda splitter without bignum #127
sipa on December 1, 2014
pull Convert YASM code to inline assembly #128
sipa on December 2, 2014
pull Get rid of secp256k1_fe_const_b #1283
sipa on April 20, 2023
pull Bugfix: b is restricted, not r #129
sipa on December 2, 2014
pull Remove randomness tests #1298
sipa on May 8, 2023 assurance
pull Infinity handling: ecmult_const(infinity) works, and group verification #1299
sipa on May 9, 2023
pull Avoid normalize conditional on VERIFY #1300
sipa on May 9, 2023
pull Avoid using bench_verify_data as bench_sign_data; merge them #1301
sipa on May 9, 2023
pull Mark more assembly outputs as early clobber #1307
sipa on May 12, 2023 bug
pull Fix typo #131
sipa on December 2, 2014
pull release cleanup: bump version after 0.3.2 #1314
sipa on May 13, 2023
pull Do not invoke fe_is_zero on failed set_b32_limit #1316
sipa on May 15, 2023
pull Make fe_cmov take max of magnitudes #1317
sipa on May 15, 2023
pull Use constant-time conditional moves instead of byte slicing #132
sipa on December 2, 2014
pull Avoid undefined shift behaviour #133
sipa on December 3, 2014
pull Make scalar_add_bit test's overflow detection exact #134
sipa on December 3, 2014
pull Add ellswift to CHANGELOG #1354
sipa on June 21, 2023 documentation
pull Improve the benchmarks #136
sipa on December 4, 2014
pull Variable time normalize #137
sipa on December 5, 2014
pull Allocate precomputation arrays on the heap #138
sipa on December 5, 2014
pull Another redundant secp256k1_fe_normalize #140
sipa on December 6, 2014
pull Avoid the stack in assembly and use explicit registers #142
sipa on December 8, 2014
pull Add group.h ge/gej equality functions #1450
sipa on December 1, 2023 refactor/smell
pull Compile with -O3 by default #146
sipa on December 9, 2014
pull Really compile with -O3 by default #149
sipa on December 9, 2014
pull [API BREAK] Fix ECDSA message hashes to 32 bytes #150
sipa on December 9, 2014
pull X86 travis #151
sipa on December 9, 2014
pull Test #153
sipa on December 9, 2014
pull Weak normalization #154
sipa on December 10, 2014
pull Configure options reorganization #160
sipa on December 12, 2014
pull Some assembly for scalar operations #161
sipa on December 12, 2014
pull [API BREAK] Use a nonce-generation function instead of a nonce #162
sipa on December 12, 2014
pull [API BREAK] Use rfc6979 as default nonce-generation function #163
sipa on December 13, 2014
pull Remove GMP field implementation #168
sipa on December 17, 2014
pull Make signing fail if a too small buffer is passed. #169
sipa on December 18, 2014
pull Co-Z + effective affine precomputation + tests #174
sipa on December 29, 2014
pull Rework group tests #176
sipa on December 29, 2014
pull Improve release process: one PR for both steps #1810
sipa on January 26, 2026 meta/developmentrelease
pull Reduce the amount of runtime-initialized constants #191
sipa on January 21, 2015
pull Get rid of variable-length hex string conversions #196
sipa on January 25, 2015
pull Introduce compact storage types #199
sipa on January 25, 2015
pull Move implementations from impl/*.h to *_impl.h #2
sipa on March 7, 2014
pull Add group operation counts #203
sipa on January 27, 2015
pull Benchmarks for all internal operations #207
sipa on February 2, 2015
pull [API BREAK] Introduce explicit contexts #208
sipa on February 4, 2015
pull Effective affine precomputation (by Peter Dettman) #210
sipa on February 11, 2015
pull Co-Z based precomputation (by Peter Dettman) #211
sipa on February 11, 2015
pull Implement Schnorr signatures #212
sipa on February 13, 2015
pull Removed gotos, which are hard to trace and maintain. #213
sipa on February 13, 2015
pull Improve signing API documentation & specification #214
sipa on February 13, 2015
pull Use RFC6979 for test PRNGs #215
sipa on February 14, 2015
pull Use faster byteswapping and avoid alignment-increasing casts #216
sipa on February 15, 2015
pull Get rid of hex format and some binary conversions #221
sipa on February 23, 2015
pull Add ability to pass extra entropy to rfc6979 #229
sipa on March 20, 2015
pull Fix typo: avg -> max #237
sipa on April 12, 2015
pull Tiny optimization #247
sipa on May 5, 2015
pull Correct secp256k1_gej_add_ge #260
sipa on June 22, 2015
pull Change RFC6979 implementation to be a generic PRNG #269
sipa on July 8, 2015
pull Verify the result of GMP modular inverse using non-GMP code #270
sipa on July 9, 2015
pull Make ecmult static precomputation default #274
sipa on July 14, 2015
pull Introduce callback functions for dealing with errors #278
sipa on July 18, 2015
pull Do not free endomorphism constants when disabled #28
sipa on June 15, 2014
pull [API CHANGE] Introduce pubkey and signature types #282
sipa on July 20, 2015
pull Actually test static precomputation in Travis #283
sipa on July 26, 2015
pull API documentation improvements #289
sipa on August 20, 2015
pull Move ECDSA pubkey recovery key to a module #291
sipa on August 27, 2015
pull [API BREAK] Change argument order to out/outin/in #293
sipa on August 27, 2015
pull [API BREAK] Remove _t in types due to being POSIX-reserved #294
sipa on August 28, 2015
pull Print success #295
sipa on August 28, 2015
pull Add sage verification script for the group laws #302
sipa on September 3, 2015
pull Introduce CHECK() for tests that works with NDEBUG. #31
sipa on June 15, 2014
pull [Schnorr API BREAK] Improve Schnorr multisigning API + refactoring #318
sipa on September 24, 2015
pull [Schnorr API BREAK] Improve Schnorr multisigning API + fix vulnerability #322
sipa on September 28, 2015
pull Overhaul ECDSA signature parsing: strict DER, compact sigs, tests, lower-S #334
sipa on October 12, 2015
pull Bugfix: swap arguments to noncefp #338
sipa on October 21, 2015
pull [API BREAK] Explicit flag handling (rebase + modification of #324) #339
sipa on October 21, 2015
pull No releases yet anyway #34
sipa on June 20, 2014
pull Make lax_der_privatekey_parsing.h not depend on internal code #342
sipa on October 26, 2015
pull Improvements for coordinate decompression #348
sipa on November 2, 2015
pull Rebase of #290 #349
sipa on November 2, 2015
pull This pull request should trigger a failure in Travis #35
sipa on June 21, 2014
pull Turn secp256k1_ec_pubkey_serialize outlen to in/out #351
sipa on November 5, 2015
pull Benchmark against OpenSSL verification #356
sipa on November 15, 2015
pull [SCHNORR BREAK] Use quadratic-residue-y as symmetry breaker #359
sipa on November 25, 2015
pull Add experimental features to configure #360
sipa on November 25, 2015
pull ARM assembly implementation of field_10x26 inner (rebase of #173) #366
sipa on December 12, 2015
pull Better randomness test for secp256k1_rand_bits #367
sipa on December 12, 2015
pull Test whether ECDH and Schnorr are enabled for JNI #398
sipa on May 25, 2016
pull Add support for testing quadratic residues #402
sipa on July 4, 2016
pull Make secp256k1_fe_sqrt constant time #405
sipa on July 9, 2016
pull Remove Schnorr experiment #425
sipa on November 18, 2016
pull Remove Schnorr from travis as well #427
sipa on November 27, 2016
pull Add secp256k1_fe_verify in field_5x52_impl and use it everywhere #44
sipa on July 15, 2014
pull Strauss-wNAF multimul #464
sipa on July 7, 2017
pull Multi-point multiplication support #473
sipa on August 17, 2017
pull Fixed multiple typos #478
sipa on September 25, 2017
pull Get rid of reserved _t in type names #479
sipa on September 27, 2017
pull Enable benchmark building by default #480
sipa on September 27, 2017
pull Add high-level secp256k1.c tests #49
sipa on August 3, 2014
pull Disambiguate bench functions and types #490
sipa on December 19, 2017
pull More details in README.md #5
sipa on March 30, 2014
pull Add secp256k1_num_eq and use it in tests #50
sipa on August 9, 2014
pull Add secp256k1_ec_grind to grind keypairs #507
sipa on February 9, 2018 feature
pull Add VERIFY_CHECK and use CHECK macros more #54
sipa on August 18, 2014
pull Make tests and bench just use asm directly instead of library #55
sipa on August 19, 2014
pull Fix signedness mistakes in secp256k1_num_set_hex #56
sipa on August 26, 2014
pull Nothing-up-my-sleeving blinding for a*G #57
sipa on August 29, 2014
pull Only use the libcrypto part of OpenSSL #58
sipa on September 1, 2014
pull Disable restrict keyword in GCC/Clang #586
sipa on January 18, 2019
pull Add ladder implementation for inverses modulo the curve order #59
sipa on September 7, 2014
pull Split up signing and verification initialization #60
sipa on September 8, 2014
pull Use size_t shifts when computing a size_t #607
sipa on March 30, 2019
pull Make secp256k1_ge_set_gej work with the point at infinity #62
sipa on September 12, 2014
pull Make bench use external interface #67
sipa on September 29, 2014
pull Better randomization for tests #68
sipa on October 18, 2014
pull Signed-digit multi-comb for ecmult_gen (by peterdettman) #693
sipa on November 11, 2019
pull Run a Travis test on s390x (big endian) #696
sipa on November 28, 2019
pull Split up ecmult and ecmult_gen entirely #71
sipa on October 26, 2014
pull Move all non-ECDSA EC logic to eckey #72
sipa on October 27, 2014
pull Introduce secp256k1_scalar_t for future constant-time mod order operations #75
sipa on October 28, 2014
pull Unit tests for scalar #76
sipa on October 29, 2014
pull Implementations for scalar without data-dependent branches #77
sipa on October 29, 2014
pull secp256k1_gej_double_nonzero supports infinity #778
sipa on July 29, 2020
pull Remove OpenSSL bignum implementation #78
sipa on October 29, 2014
pull Use double-wide types for additions in scalar code #786
sipa on August 7, 2020
pull Add bench_inv tool #79
sipa on October 30, 2014
pull Make scalar/field choice depend on C-detected __int128 availability #793
sipa on August 9, 2020
pull Disable s390x again #794
sipa on August 9, 2020
pull Fix Jacobi benchmarks and other benchmark improvements #797
sipa on August 11, 2020
pull Check assumptions on integer implementation at compile time #798
sipa on August 13, 2020
pull Add fallback LE/BE for architectures with known endianness + SHA256 selftest #799
sipa on August 14, 2020
pull Make the bench tool deterministic and rename it to bench_verify #80
sipa on October 31, 2014
pull Make group order purely compile-time in exhaustive tests #807
sipa on September 4, 2020
pull Exhaustive test improvements + exhaustive schnorrsig tests #808
sipa on September 6, 2020
pull Use Montgomery multiplications in scalar inverses #81
sipa on October 31, 2014
pull Add bench_sign tool #82
sipa on October 31, 2014
pull Rip out non-endomorphism code #826
sipa on September 26, 2020
pull Rename testrand functions to have test in name #827
sipa on September 26, 2020
pull Rip out non-endomorphism code + dependencies #830
sipa on October 11, 2020
pull Safegcd inverses, drop Jacobi symbols, remove libgmp #831
sipa on October 12, 2020
pull Disable s390x build #842
sipa on October 28, 2020
pull Fix interaction between magnitudes and negation #85
sipa on November 2, 2014
pull Implement Schnorr signatures #87
sipa on November 3, 2014
pull Remove unused secp256k1_fe_inv_all_var #878
sipa on January 24, 2021
pull Avoid passing out-of-bound pointers to 0-size memcpy #879
sipa on January 24, 2021
pull [dontmerge] Introduce a bug on top of #864 to see if cirrus catches it #883
sipa on January 30, 2021
pull [dontmerge] Introduce a bug on top of #864 to see if cirrus catches it #884
sipa on January 30, 2021
pull [dontmerge] Introduce a bug on top of #864 to see if cirrus catches it #885
sipa on January 30, 2021
pull [dontmerge] Introduce a bug on top of #864 to see if cirrus catches it #886
sipa on January 30, 2021
pull [dontmerge] Introduce a bug on top of #864 to see if cirrus catches it #887
sipa on January 30, 2021
pull Get rid of {num,scalar,ecdsa_sig}_{init,free} #89
sipa on November 3, 2014
pull Extra validation and comments on #73 #90
sipa on November 3, 2014
pull Add VERIFY_ONLY_CHECK that only evaluates in VERIFY mode #902
sipa on March 12, 2021
pull Make argument of fe_normalizes_to_zero{_var} const #903
sipa on March 12, 2021
pull Automatically check that VERIFY_CHECKs are side effect free #904
sipa on March 12, 2021
pull Use modified divsteps with initial delta=1/2 for constant-time #906
sipa on March 19, 2021
pull Extra validation and comments on top of: Rewrite mul/sqr for 32bit/64bit #91
sipa on November 3, 2014
pull Replace gen_context.c with a Python implementation #919
sipa on April 13, 2021
pull Test all ecmult functions with many j*2^i combinations #920
sipa on April 13, 2021
pull Add mingw32-w64/wine CI build #922
sipa on April 17, 2021
pull warnings: enable quiet builds #93
sipa on November 4, 2014
pull Add ARM32/ARM64 CI #930
sipa on May 2, 2021
pull Label variable-time functions correctly and don't use those in sign #94
sipa on November 4, 2014
pull Add random field multiply/square tests #955
sipa on June 21, 2021
pull Make aux_rand32 arg to secp256k1_schnorrsig_sign const #966
sipa on July 14, 2021
pull WIP WIP WIP 5x64 field representation #967
sipa on July 24, 2021
pull Native jacobi symbol algorithm #979
sipa on September 23, 2021
pull Branch-free point addition #98
sipa on November 11, 2014
pull Add Elligator Square module #982
sipa on September 28, 2021
pull [RFC] Remove OpenSSL testing support #983
sipa on September 28, 2021
pull Document some preconditions #99
sipa on November 11, 2014
pull Merge all "external" benchmarks into a single bench binary #991
sipa on October 17, 2021
pull Fix G.y parity in sage code #996
sipa on October 20, 2021
Issues
issue Recalibrate unit tests #1036
sipa on December 7, 2021
issue Split tests into public and internal ones #1037
sipa on December 7, 2021 assurance
issue Separate magnitude/normalization/... checking/propagation from implementations #1060
sipa on January 3, 2022
issue Constant-time tests on macOS #1151
sipa on November 14, 2022 assuranceci
issue Many warnings in autoconf #147
sipa on December 9, 2014
issue Support for optional parts #277
sipa on July 16, 2015
issue Pulltester for libsecp256k1? #29
sipa on June 15, 2014
issue Write a big fat disclaimer README.md #3
sipa on March 26, 2014
issue Native num implementation. #30
sipa on June 15, 2014
issue The secp256k1.o object should be built with NDEBUG #38
sipa on June 23, 2014
issue tests and bench do not need linking with secp256k1.o #39
sipa on June 23, 2014
issue Add a high-level API #4
sipa on March 26, 2014
issue Report build configuration in test/bench output #796
sipa on August 10, 2020
issue Default release compilation with -O3 #86
sipa on November 2, 2014
issue First compiling with asm and then without leaves the asm code in the binary #88
sipa on November 3, 2014
issue When cross-compiling for ARM, --with-asm=arm is not accepted #934
sipa on May 2, 2021
github-metadata-mirror

This is a metadata mirror of the GitHub repository bitcoin-core/secp256k1. This site is not affiliated with GitHub. Content is generated from a GitHub metadata backup.
generated: 2026-04-14 07:15 UTC
This site is hosted by @0xB10C
More mirrored repositories can be found on mirror.b10c.me