7982ef5a73
crypto: fix non zero scalar being 0 after reducing
4 years ago
6bfcd31015
Updates InProofV1, OutProofV1, and ReserveProofV1 to new V2 variants that include all public proof parameters in Schnorr challenges, along with hash function domain separators. Includes new randomized unit tests.
4 years ago
5ef0607da6
Update copyright year to 2020
...
Update copyright year to 2020
4 years ago
613071f4fa
use memwipe on secret k/alpha values
...
Reported by UkoeHB_ and sarang
4 years ago
8f6f674753
Merge pull request #5609
...
1dc3b1a
5 years ago
1dc3b1a516
wallet: add --extra-entropy command line flag
...
It lets the user add custom entropy to the PRNG.
It does this by hashing the new data and xoring the resulting
hash with the PRNG state.
5 years ago
4b1df4e50f
Fix for biased signature nonce
5 years ago
1f2930ce0b
Update 2019 copyright
5 years ago
bd98e99c80
Removed a lot of unnecessary includes
6 years ago
a4317e61b5
crypto: some paranoid checks in generate_signature/check_signature
...
Reported by QuarksLab.
6 years ago
7434df1cc6
crypto: never return zero in random32_unbiased
...
This avoids problems when the caller can't deal with a zero
walue, which happens often enough that it's worth nipping the
problem in the bud.
6 years ago
5295e4eb82
Merge pull request #4137
...
63e342b0496c7c
6 years ago
3fde902394
Merge pull request #4097
...
61caab8
6 years ago
0496c7c91a
crypto: do not use boost::value_initialized to init null skey/pkey
6 years ago
63e342be84
crypto: move null_pkey/null_skey to the cpp file
6 years ago
61caab8a8c
crypto: remove slight bias in key generation due to modulo
6 years ago
ef649f998d
crypto: remove unused unsafe random scalar generator
6 years ago
b6eb7484d1
Merge pull request #3592
...
90a16b16a61f52
6 years ago
9317bce9ca
crypto: more places needing fixing for GCC 8.1
6 years ago
90a16b119f
crypto: fix initialization order issue with random mutex
6 years ago
b2d23b189e
crypto: revert odd namespace changes made in #3303
6 years ago
fbcc91c2a4
Correct spelling mistakes.
6 years ago
e745c1e38d
Code modifications to integrate Ledger HW device into monero-wallet-cli.
...
The basic approach it to delegate all sensitive data (master key, secret
ephemeral key, key derivation, ....) and related operations to the device.
As device has low memory, it does not keep itself the values
(except for view/spend keys) but once computed there are encrypted (with AES
are equivalent) and return back to monero-wallet-cli. When they need to be
manipulated by the device, they are decrypted on receive.
Moreover, using the client for storing the value in encrypted form limits
the modification in the client code. Those values are transfered from one
C-structure to another one as previously.
The code modification has been done with the wishes to be open to any
other hardware wallet. To achieve that a C++ class hw::Device has been
introduced. Two initial implementations are provided: the "default", which
remaps all calls to initial Monero code, and the "Ledger", which delegates
all calls to Ledger device.
6 years ago
666a76652b
Merge pull request #3187
...
851bd057
6 years ago
851bd057ec
call _exit instead of abort in release mode
...
Avoids cores being created, as they're nowadays often piped
to some call home system
6 years ago
18216f19dd
Update 2018 copyright
6 years ago
53ad5a0f42
Subaddresses
7 years ago
b5345ef4f0
crypto: use malloc instead of alloca
7 years ago
8da82256d4
crypto: moved boost::lock_guard into a smaller scope
7 years ago
c9e0e944e9
Signature proving payment to destination by only revealing key derivation, not the actual tx secret key
7 years ago
c3599fa7b9
update copyright year, fix occasional lack of newline at line end
7 years ago
b00da61eab
Preliminary support for DragonFly BSD
...
- It builds but no further testing has been done.
8 years ago
d4b62a1e29
rct amount key modified as per luigi1111's recommendations
...
This allows the key to be not the same for two outputs sent to
the same address (eg, if you pay yourself, and also get change
back). Also remove the key amounts lists and return parameters
since we don't actually generate random ones, so we don't need
to save them as we can recalculate them when needed if we have
the correct keys.
8 years ago
e70e8a69f4
crypto: error out where appropriate
8 years ago
6462a3a6db
crypto: fix compile error: use named type in sizeof
...
Btw, the warning 4200 remains disabled, but it did not get triggered
(GCC 6.1.1, ARM). But, perhaps a better way than disabling
the warning would be to do what is suggested here:
http://stackoverflow.com/questions/3350852/how-to-correctly-fix-zero-sized-array-in-struct-union-warning-c4200-without%3E
8 years ago
d539be3359
crypto: make clear generate_random_bytes is not thread safe
...
And add a thread safe version to encourage proper use
8 years ago
b937a2c915
Use boost::thread instead of std::thread
...
and all other associated IPC
8 years ago
28f95eb001
OpenBSD support for Monero.
8 years ago
de03926850
updated copyright year
9 years ago
f4b69d553a
year updated in license
10 years ago
6afbdd9754
FreeBSD alloca.h reference fixed
10 years ago
6fc995fe5d
License updated to BSD 3-clause
10 years ago
d22e458c6c
builds, but doesn't link. other than that, electrum-style recovery implemented (but not tested\!)
10 years ago
4f382b3830
most functions prototyped/modified for wallet recovery
10 years ago
296ae46ed8
moved all stuff to github
10 years ago
175d06e75e
crypto lib
11 years ago
moneromooo-monero
Sarang Noether
SomaticFanatic
luigi1111
binaryFate
Martijn Otto
moneroexamples
stoffu
Edward Betts
cslashm
Riccardo Spagni
xmr-eric
kenshi84
Antonio Huete Jimenez
redfish
Howard Chu
me0wmix
Thomas Winget
Antonio Juarez
amjuarez