| 8274c41 | Matthias J. Kannwischer | 04 June 2021, 08:24:25 UTC | SPHINCS+ benchmarks (#192) | 04 June 2021, 08:24:25 UTC |
| 5ebac3b | Matthias J. Kannwischer | 30 May 2021, 02:05:04 UTC | Fix benchmarks.md | 30 May 2021, 02:05:04 UTC |
| 8f5b115 | Matthias J. Kannwischer | 25 May 2021, 08:20:13 UTC | Remove static buffers in NTRU (#191) * remove static from NTT buffers in NTRU * ntru benchmarks | 25 May 2021, 08:20:13 UTC |
| 65f12c6 | devillegna | 25 May 2021, 02:47:22 UTC | update bikel1/m4f and bikel3/m4f to ches2021 (#188) * update bikel[1,3]/m4f to ches2021 * updated bike in mupq * new bike benchmarks Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu> | 25 May 2021, 02:47:22 UTC |
| 175903d | Matthias J. Kannwischer | 24 May 2021, 03:45:55 UTC | Stack-optimized fips202 (#189) * stack-optimized fips202 * fips202stack benchmarks * switch to mupq master | 24 May 2021, 03:45:55 UTC |
| bc2ecc9 | Matthias J. Kannwischer | 08 April 2021, 02:09:08 UTC | Update PQClean to include new SPHINCS+ parameter sets (#187) * update pqclean to include new SPHINCS+ parameter sets * add SPHINCS+ benchmarks * switch mupq to master | 08 April 2021, 02:09:08 UTC |
| 438ab82 | Matthias J. Kannwischer | 23 March 2021, 07:26:35 UTC | Update README to not reference obsolete schemes | 23 March 2021, 07:26:35 UTC |
| 17e43e5 | vincentvbh | 08 March 2021, 09:09:53 UTC | fix a bug with very low prabability (#185) | 08 March 2021, 09:09:53 UTC |
| 27c7089 | vincentvbh | 03 March 2021, 07:48:06 UTC | Merge implementation of Rader's trick of sntrup761 and ntrulpr761 from https://tches.iacr.org/index.php/TCHES/article/view/8733 (#184) * add Darwin option to host_unidirectional * rm everything about sntrup761 * sntrup761 success; ntrulpr failed * rm ntrulpr files from sntrup * add missing files for sntrup * add missing sntrup file * ntrulpr compilable but ERROR KEYS * we start with rm everything in ntrulpr * all files tested * rm unsued files * add soft liks * more soft links * more soft links * add NTRUPrime benchmarks * updated kem.c from NTRUPrime-PolyMul * another attempt at the ntrulpr benchmarks * slightly tweak the check for MacOS Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu> | 03 March 2021, 07:48:06 UTC |
| 8a6fcf6 | Matthias J. Kannwischer | 18 February 2021, 06:55:29 UTC | Port Dilithium 3.1 changes to M4 implementation (#183) | 18 February 2021, 06:55:29 UTC |
| 992f0f2 | Michiel Van Beirendonck | 18 February 2021, 05:57:25 UTC | Stack optimizations and refactoring of NTT-based Saber (#181) * This is a large commit, grouping two types of changes on top of the NTT-based Saber. Firstly, this commit merges improvements between different Saber implementations. 1) For round 3, the Saber reference code was thoroughly refactored and the codebase reduced [https://github.com/KULeuven-COSIC/SABER]. These changes are now integrated into the m4 code. 2) All unnecessary modular reductions have been removed. The only modular reductions are now in the packing functions. 3) Packing/unpacking functions are simplified [PQClean, commit f8503cb]. 4) The secret-key is stored in compressed format [ia.cr/2020/268, Section 4.1]. This reduces the secret-key size, and the packing/unpacking functions are faster. (This requires a fix in pqm4’s testvectors.c, as the secret-key is checked against the one produced by PQclean). 5) During re-encryption, the verification of the ciphertext is performed in place [ia.cr/2020/268, Section 4.2]. 6) Use symlinks for Light/FireSaber to make (minimal) differences with Saber more clear. Secondly, this commit implements some optimizations and reduces the memory footprint of the NTT-based multiplication. 1) Saber does not require any modular reduction apart from bitstream packing. Elements can be kept in int16_t (central-reduced) format. 1.a) The secret-key is sign-extended from 4-bit to 16-bit when unpacked. 1.b) The vectors b and b' are sign-extended from 10-bit to 16-bit when unpacked. 1.c) 1.a and 1.b allow to remove NTT_pk (with central reduction) and use NTT (without central reduction) uniformly. 1.d) NTT_inv and NTT_inv_inner include a final step that converts from int16_t back to mod_p or mod_q. This is not necessary and removed. 2) During encryption, the NTT of s' is only computed once and reused between A*s' and b*s'. 3) Some just-in-time memory optimizations of [ia.cr/2018/682, Section 2.2] are implemented for the NTT-based multiplication. Polynomial vectors are generated from their seed just-in-time, converted to NTT domain, and pointwise multiplied. The next polynomial vectors can reuse all the buffers. The idea is to extend this from polynomial vectors to individual polynomials. This still requires a new my_mul function. For {Fire,Light}Saber (keygen/encaps/decaps) the resulting implementation is approximately (2.3-2.6%/4.7-5.5%/7.4-9.5%) faster and uses (27-36%/47-61%/49-62%) less dynamic memory than the current version in pqm4. * Add central reduction for matrix A * Add benchmarks * WIP : more memory-efficient NTT implementation * Make secret key compression optional and comment out non-stack-optimized (very slightly faster) functions * Reclaim ~1kB more stack space shake_out was SABER_POLYVECBYTES instead of only SABER_POLYBYTES. Introduced a few unions to overlap memory. * rm redundant files * clean ups; add soft links * Reclaim ~1kB more stack space shake_out was SABER_POLYVECBYTES instead of only SABER_POLYBYTES. Introduced a few unions to overlap memory. * typo * Noinline no longer needed without fast funcs * add benchmarks Co-authored-by: vincentvbh <b05902122@ntu.edu.tw> Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu> | 18 February 2021, 05:57:25 UTC |
| 5fb6938 | devillegna | 18 February 2021, 05:11:19 UTC | BIKE submission for PQM4 (#175) * submission for PQM4 * re-org implementations * use C version cshift() temporarily * 1. fix incorrect key-gen for arm-none-eabi-gcc ver.10.2.1 2. remove usage of CCM for bikel1 * rip out openssl; always default to sha and aes shipped in mupq * remove usage of CCM in all implementations * move BIKE reference implementations to mupq * skip bikel3 for now * add BIKE benchmarks Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu> | 18 February 2021, 05:11:19 UTC |
| 4fc31d7 | Victor | 01 February 2021, 07:14:30 UTC | Udpated dilithium round2 to dilithium round 3 from NIST PQC Standariz… (#178) * Udpated dilithium round2 to dilithium round 3 from NIST PQC Standarization process. * update dilithium in pqclean * redo Dilithium benchmarks Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu> | 01 February 2021, 09:31:36 UTC |
| 20bcf68 | Matthias J. Kannwischer | 22 January 2021, 03:17:01 UTC | remove debugging artifact | 22 January 2021, 03:17:01 UTC |
| 6841a6b | Matthias J. Kannwischer | 04 January 2021, 02:41:56 UTC | Constant-time AES (https://eprint.iacr.org/2020/1123) (#173) * switch to fixsliced AES * tweak kyber-90s to use t-table AES for public inputs * update kyber-90s benchmarks with fixsliced AES * use t-tabe AES in Frodo for public matrix A * make ntrulpr work with fixsliced AES * update fixsliced AES from upstream * update performance of kyber-90s, ntrulpr, and hqc with new fixsliced AES * update AES information in README * rename _leaktime to _publicinputs * switch to mupq master; simply change include order | 04 January 2021, 02:41:56 UTC |
| 157e271 | Matthias J. Kannwischer | 09 December 2020, 20:02:30 UTC | Update PQClean (#172) * Updated sampling of uniform matrix of Kyber to round-3 tweaked approach * Integrated changes to noise sampling in Kyber512 * Updated links in kyber512-90s/m4 to use round-3 noise generation of kyber512/m4 * source ntruprime from pqclean * https://github.com/PQClean/PQClean/pull/324 * add HQC benchmarks. Closes #57 * Port https://github.com/PQClean/PQClean/pull/337 This ports a fix from upstream. This does not change performance by more than a few cycles. For details see https://github.com/jschanck/ntru/commit/e0ab9525f1797dcff875c67f08f56db03f3c7deb * Port https://github.com/PQClean/PQClean/pull/341 Fixes a typo in sample.c in PQClean which was also present in the pqm4 implementations. This changes testvectors, but not performance. * https://github.com/PQClean/PQClean/pull/348 * https://github.com/PQClean/PQClean/pull/340 * https://github.com/PQClean/PQClean/pull/350 * https://github.com/PQClean/PQClean/pull/361 * https://github.com/PQClean/PQClean/pull/349 Co-authored-by: Peter Schwabe <peter@cryptojedi.org> | 09 December 2020, 20:02:30 UTC |
| 3fd51a9 | Matthias J. Kannwischer | 08 December 2020, 16:16:49 UTC | Save memory space on stack measurement for signatures (#171) | 08 December 2020, 16:16:49 UTC |
| 34d6ed0 | Ko- | 20 November 2020, 19:51:38 UTC | Clarify pyserial installation instructions (#169) Fixes #168 | 20 November 2020, 19:51:38 UTC |
| 68007db | Matthias J. Kannwischer | 18 November 2020, 11:34:45 UTC | NTT-based multiplication for Saber and NTRU (#167) * add new Saber and NTRU code * add benchmarks | 18 November 2020, 11:34:45 UTC |
| f7a99d8 | Matthias J. Kannwischer | 27 October 2020, 13:01:44 UTC | fix ntruprime implementation for old gcc versions (#165) Some older gcc versions complain about mov.w with constants being too large. changing those to movw fixes this. | 27 October 2020, 13:01:44 UTC |
| a912d1c | Daan Sprenkels | 19 October 2020, 10:56:53 UTC | Merge pull request #163 from mupq/dilithiumm4 Faster and smaller Dilithium | 19 October 2020, 10:56:53 UTC |
| 4178be9 | Matthias J. Kannwischer | 19 October 2020, 10:42:30 UTC | dilithium benchmarks | 19 October 2020, 10:42:30 UTC |
| 8c23cf3 | Matthias J. Kannwischer | 19 October 2020, 08:28:14 UTC | Add speed and stack optimized implementations from https://eprint.iacr.org/2020/1278.pdf See https://github.com/dilithium-cortexm/dilithium-cortexm | 19 October 2020, 08:28:14 UTC |
| 56417d9 | Matthias J. Kannwischer | 24 July 2020, 07:55:01 UTC | clean-up interface | 24 July 2020, 07:55:01 UTC |
| cb2caa2 | Matthias J. Kannwischer | 24 July 2020, 01:43:46 UTC | remove non-round3 schemes (#162) NIST announced the Round 3 finalists and alternate candidates: https://groups.google.com/a/list.nist.gov/d/msg/pqc-forum/0ieuPB-b8eg/Cl7Ji8TpCwA PQClean removed threebears, ledakem, newhope, mqdss, qtesla in https://github.com/PQClean/PQClean/pull/305 MUPQ removed LUOV, RQC, ROLLO, Round5, ThreeBears, and LAC in https://github.com/mupq/mupq/pull/53 This commit removes the M4 implementations of schemes that did not make it to round 3 from pqm4 (Round5 and NewHope). It also removes the corresponding benchmark results. | 24 July 2020, 01:43:46 UTC |
| c32bcd0 | Ko- | 15 June 2020, 18:45:45 UTC | Revert "clean up Makefile" This reverts commit b64e5f1073cc24097579417a91bcee3ee85eb260. Those lines were not unused. | 15 June 2020, 18:45:45 UTC |
| b64e5f1 | Matthias J. Kannwischer | 11 June 2020, 02:28:43 UTC | clean up Makefile there were some unused rules in our Makefile that still originate from the messy first round Makefile | 11 June 2020, 02:34:52 UTC |
| 28eb2d8 | Matthias J. Kannwischer | 11 June 2020, 02:32:37 UTC | New Dilithium Code (#159) * Update Dilithium https://github.com/pq-crystals/dilithium/tree/19980fb52ce6b4b9ee0bacc6c63f5b11d0338a8d * Re-add optimizations from #105 https://eprint.iacr.org/2019/420 * update dilithium benchmarks | 11 June 2020, 02:32:37 UTC |
| aac104e | Ko- | 30 May 2020, 10:58:54 UTC | Update NewHope to v1.1 (#158) * Update mupq; updates NewHope clean to v1.1 * Update NewHope m4 to v1.1 * Redo NewHope benchmarks | 30 May 2020, 10:58:54 UTC |
| 1cb728b | Ko- | 30 May 2020, 09:29:13 UTC | Update Round5 to new version (#157) * Update mupq; integrates new version of Round5 opt * Update r5nd-1cca-5d m4 to new version * Update other Round5 m4 implementations to new version * Update benchmarks for Round5 | 30 May 2020, 09:29:13 UTC |
| bfef406 | Matthias J. Kannwischer | 29 May 2020, 05:32:17 UTC | add gcc10 benchmarks | 30 May 2020, 09:21:49 UTC |
| af4b38f | Matthias J. Kannwischer | 29 May 2020, 06:12:56 UTC | update mupq (more robust result parsing) | 29 May 2020, 06:12:56 UTC |
| 84c5f91 | Ko- | 28 April 2020, 20:22:05 UTC | Update ROLLO implementation (#155) * Update mupq; integrate new ROLLO ref implementation * Benchmark new ROLLO ref implementation | 28 April 2020, 20:22:05 UTC |
| a1bbbd9 | Matthias J. Kannwischer | 27 April 2020, 23:26:41 UTC | fix lac to adhere to the new aes keyexp api | 27 April 2020, 23:26:41 UTC |
| 479f4a5 | Ko- | 27 April 2020, 20:06:25 UTC | Fix {sntrup,ntrulpr}761/m4f such that they compile Calls to aes256_keyexp were left in e1c6949 (#150) after attempting to rebase them after 1a6ee85 (#148). This changes the calls to aes256_ctr_keyexp. | 27 April 2020, 20:06:25 UTC |
| 7aa3be8 | Ko- | 22 April 2020, 14:14:14 UTC | Extend SIKE M4 benchmarks Now with 100 executions instead of 1. Doesn't change the results at all though. | 22 April 2020, 14:14:14 UTC |
| 87dd5c1 | Ko- | 22 April 2020, 12:40:58 UTC | Update RQC implementation (#153) * Update mupq; integrates new RQC implementations * Add rqc256 to skip_list On the host, rqc256 takes about 132KiB according to Valgrind * Increase stack to 128K for rqc192 On the host, Valgrind reported around 105KiB. On the board, test and testvectors ran fine with 112K, but the stack binary crashed, so it must have been very close. Increasing to 128K solved this. * Update RQC benchmarks Note that the stack numbers are not too interesting as the implementation uses dynamic memory allocation. | 22 April 2020, 12:40:58 UTC |
| e1c6949 | Matthias J. Kannwischer | 22 April 2020, 07:15:40 UTC | Add m4f Implementations of ntrulpr761 and sntrup761 (#150) * integrate sha512 from supercop20200409 * add sntrup761 m4 implementation * switch to m4f sha512 implementation * fix ntrup761 * rename implementation to m4f * ntrulpr761 * small changes to ntrulpr * another small speedup for sntrup761 * fix * another ntruprime update * NTRUPrime benchmarks | 22 April 2020, 07:15:40 UTC |
| 1da1518 | Matthias J. Kannwischer | 21 April 2020, 07:08:26 UTC | LACv3 Benchmarks (#147) | 21 April 2020, 07:08:26 UTC |
| 1a6ee85 | Matthias J. Kannwischer | 21 April 2020, 07:05:29 UTC | Update PQClean (#148) * integrate sha512 from supercop20200409 * skip mceliece * Port https://github.com/PQClean/PQClean/pull/279 I'm not a big fan of this change, but we have to do it to be compatible with PQClean. * Port HQC; skip because it does not fit https://github.com/PQClean/PQClean/pull/202 | 21 April 2020, 07:05:29 UTC |
| 04a8be2 | Ko- | 17 April 2020, 16:58:06 UTC | Integrate SIKE M4 implementation (#146) * Add SIKE m4 implementations Taken from https://github.com/solowal/SIKE_M4 * update sike LICENSE * Fix bug by adding naked attribute to two functions sikep434 and sikep751 now terminate at least, but testvectors still don't match * Change cSHAKE_simple back to SHAKE * Change CRYPTO_BYTES for p503 from 16 back to 24 * Change wrong number in comment to avoid confusion * Add benchmarks Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu> | 17 April 2020, 16:58:06 UTC |
| 90754b1 | Matthias J. Kannwischer | 17 April 2020, 04:51:51 UTC | Faster SHA512 (#136) * integrate sha512 from supercop20200409 * update benchmarks with new SHA512 | 17 April 2020, 04:51:51 UTC |
| 20f1dff | Matthias J. Kannwischer | 05 April 2020, 09:20:26 UTC | Update libopencm3 to fix build with make >= 4.3 make 4.3 changed the behaviour of '+=' in a backward-incompatible way. (See https://lwn.net/Articles/810071/) This broke the libopencm3 build and got fixed in https://github.com/libopencm3/libopencm3/commit/72274d3caf09a5b4a6646e65bf376c91b8fa2ef1 | 05 April 2020, 09:20:26 UTC |
| 7e7703c | Ko- | 25 March 2020, 08:35:03 UTC | Update Round5 to third round (#135) * Update mupq; Round5 opt implementations * Remove SNEIK variants * Rename Round5 m4 CCA variants * Update r5nd-1cca-5d m4 implementation * Update symlinks other Round5 m4 implementations * Add Round5 m4 CPA variants * Force assembly addsub for Round5 m4 * Update round5 benchmarks (#134) * Update Round5 opt benchmarks Co-authored-by: Daan Sprenkels <daan@dsprenkels.com> | 25 March 2020, 08:35:03 UTC |
| 3b0ca85 | Matthias J. Kannwischer | 05 March 2020, 09:40:15 UTC | Update mupq to make serial output processing more robust See https://github.com/mupq/mupq/pull/43 | 05 March 2020, 09:41:47 UTC |
| 0972616 | Matthias J. Kannwischer | 15 February 2020, 09:41:15 UTC | Fixes #132 (#133) | 15 February 2020, 09:41:15 UTC |
| 7b37f04 | Matthias J. Kannwischer | 04 February 2020, 11:52:48 UTC | Take clean CPA three bears from PQClean (#131) * update three bears benchmarks for clean implementation * update mupq | 04 February 2020, 11:52:48 UTC |
| 2f3b8bd | Erdem ALKIM | 30 January 2020, 13:35:35 UTC | Remove unneeded file in NewHope m4 (#130) | 30 January 2020, 13:35:35 UTC |
| f0f573e | Erdem ALKIM | 30 January 2020, 10:08:04 UTC | Integrate faster NewHope m4 implementation (#129) In https://ia.cr/2020/012 Erdem Alkim, Yusuf Alper Bilgin, Murat Cenk, and François Gérard propose more optimizations to the NewHope M4 implementation. This integrates their nice work. We report a slightly higher cycle count than in that paper because of an extra bit reversal and because we currently don't use -flto. | 30 January 2020, 10:08:04 UTC |
| 944b3c3 | Yusuf Alper Bilgin | 20 January 2020, 16:43:41 UTC | Integrate faster Kyber m4 implementation (#128) In https://ia.cr/2020/012 Erdem Alkim, Yusuf Alper Bilgin, Murat Cenk, and François Gérard propose more optimizations to the Kyber M4 implementation. This integrates their nice work. We report a slightly higher cycle count than in that paper because of an extra Barrett reduction and because we currently don't use -flto. | 20 January 2020, 16:43:41 UTC |
| 8136c82 | Ko- | 03 December 2019, 08:05:37 UTC | Fix Round5 CCA KEMs (#127) * Update mupq; fixes Round5 opt CCA KEMs * Fix Round5 m4 CCA KEMs * Update Round5 benchmarks | 03 December 2019, 08:05:37 UTC |
| 89e9eb1 | Matthias J. Kannwischer | 25 November 2019, 13:33:26 UTC | Update libopencm3 (#125) In https://github.com/libopencm3/libopencm3/commit/ca6dcfbea137bd2145b4a7fbf24379f565f8280d libopencm3 slightly changed the clock setup so we need to adjust that as well. As all changes are in the clock setup, this does not affect benchmarks at all. | 25 November 2019, 13:33:26 UTC |
| 1624ff1 | Matthias J. Kannwischer | 18 November 2019, 09:34:49 UTC | add benchmarks of clean threebears (#124) | 18 November 2019, 09:34:49 UTC |
| 6ba5207 | Markku-Juhani O. Saarinen | 15 November 2019, 12:34:27 UTC | len and flag were flipped (#123) * len and flag were flipped * apply same fix to mupq | 15 November 2019, 12:34:27 UTC |
| 670ec38 | Matthias J. Kannwischer | 29 October 2019, 13:52:15 UTC | update mupq (#122) https://github.com/mupq/mupq/pull/34 refactors our number printing to reduce code size. For pqm4 this does not matter that much, but let's keep it in sync with mupq. Our code benchmarks exclude this common code, so there is no need to update those numbers. This also pulls in a newer version of PQClean, which now includes qTesla (https://github.com/PQClean/PQClean/pull/239) Unfortunately, qtesla-I-p needs 174.5 KiB and qtesla-p-III needs 403.2 KiB of RAM, so it does not fit on our platform. | 29 October 2019, 13:52:15 UTC |
| f25922b | Ko- | 08 October 2019, 11:15:00 UTC | Add RQC{128,192,256} ref implementations (#121) * Update mupq; adds rqc ref implementations * Add RQC benchmarks | 08 October 2019, 11:15:00 UTC |
| 20bdec1 | Ko- | 08 October 2019, 10:48:50 UTC | Add ROLLO-{I,II,III}-{128,192,256} ref implementations (#120) * Update mupq; adds ROLLO ref implementations * Add ROLLO benchmarks | 08 October 2019, 10:48:50 UTC |
| 970afc2 | Matthias J. Kannwischer | 07 October 2019, 13:43:24 UTC | Add optimized Kyber-90s and update Kyber-90s from PQClean (#119) * change naming of falcon parameter sets to pqclean naming * add kyber-90 parameter sets * use our AES API in Kyber * fix symlinks * update pqclean; make kyber use fast aes * update kyber-90s benchmarks | 07 October 2019, 13:43:24 UTC |
| fdd41fa | Daan Sprenkels | 07 October 2019, 08:34:53 UTC | Add missing fields in benchmarkclock struct The missing fields are initialized with default values following the conventions of the predefined profiles from <libopencm3.org/docs/latest/stm32f4/html/rcc_8c_source.html>. I did not test this patch on the M4 hardware. | 07 October 2019, 12:07:29 UTC |
| 667d80b | Matthias J. Kannwischer | 01 October 2019, 23:48:38 UTC | Update PQClean (#116) * change naming of falcon parameter sets to pqclean naming * ignore rainbow paramter sets * add benchmarks for clean implementations of kyber-90s, falcon, and saber * update mupq to fix SHA2 SPHINCS+ builds | 01 October 2019, 23:48:38 UTC |
| 7514870 | leonbotros | 30 September 2019, 11:58:39 UTC | Fix kyber (#115) * fix inlined comparison * update documentation of indcpa_enc_cmp The `cmov` that is used in `crypto_kem_dec` to either derive the shared secret from the pre-key or the random `z` expects the `fail` input to be either 0 (if re-encryped ciphertext was the same as input ciphertext) or 1 (otherwise). We've inlined the comparison that used to be done by `verify` into `indcpa_enc` (renamed to `indcpa_enc_cmp`) to reduce the stack footprint. We made a small mistake in there so that it returned 0 in case of no failure and some other byte otherwise. This means that in case of a mismatch, cmov would write a mix of the pre-key and `z`. As this is hashed together with the ciphertext later this will still result in some shared secret different from the correct one, but this is not what you want. | 30 September 2019, 11:58:39 UTC |
| b4fea3f | Matthias J. Kannwischer | 25 September 2019, 08:44:35 UTC | Update Falcon to new fixed upstream version (#114) * Update Falcon to new fixed upstream version. On the 2019-09-18 the Falcon team announced that their implementation had two severe bugs that caused signatures to leak information about the secret key. These bugs also affected the implementations that were in pqm4. This commit updates our falcon implementation to the new upstream version from https://falcon-sign.info/ which fixes these bugs. * Update Falcon benchmarks | 25 September 2019, 08:44:35 UTC |
| 8a1a476 | Ko- | 24 September 2019, 07:19:14 UTC | Update LUOV to v2.1 | 24 September 2019, 07:22:20 UTC |
| 8e662d7 | Matthias J. Kannwischer | 19 September 2019, 07:38:03 UTC | update mupq to fix Python 3.6 compatibility and dubious use of printf (#112) | 19 September 2019, 07:38:03 UTC |
| 3f2f58a | Matthias J. Kannwischer | 10 September 2019, 09:43:44 UTC | fix incremental sha512 (#110) | 10 September 2019, 09:43:44 UTC |
| f5198cb | Ko- | 09 September 2019, 08:16:08 UTC | Fix hal_get_time() hal_get_time() gave wrong values if the SysTick counter reached 0 between reading overflowcnt and calling systick_get_value(). This behavior is now addressed by retrying if that happens. Thanks to djb for pointing that out to us. The reset value is also increased to the maximum of 2^24-1, such that there is less overhead from the interrupt handler, and overflowcnt is marked volatile. | 10 September 2019, 08:42:46 UTC |
| 60e418f | Matthias J. Kannwischer | 05 September 2019, 12:13:32 UTC | fix sphincs-haraka-192s-robust benchmarks there seems to be a small mistake in our previous SPHINCS+ results. For sphincs-haraka-192s-robust the cycle count for key gen and signing was the same which doesn't make sense. When re-running the benchmarks I got vastly different numbers. This must have been a glitch during the previous benchmarks. | 05 September 2019, 12:23:31 UTC |
| be0c421 | fragerar | 05 September 2019, 07:53:57 UTC | New ARM assembly optimized code for NewHope (#108) * newhope512cpa * newhope512cca 1024cpa and 1024cca * benchmark newhope | 05 September 2019, 07:53:57 UTC |
| da6104f | Ko- | 03 September 2019, 12:36:26 UTC | Fix broken links in README | 03 September 2019, 12:36:26 UTC |
| 93cfaf4 | Matthias J. Kannwischer | 20 August 2019, 16:19:49 UTC | remove withdrawn qTesla parameter sets (#107) | 20 August 2019, 16:19:49 UTC |
| b87b354 | Matthias J. Kannwischer | 15 August 2019, 12:50:42 UTC | Merge pull request #106 from mupq/posix Don't use any sed flags | 15 August 2019, 12:50:42 UTC |
| 64468e6 | Ko- | 15 August 2019, 12:01:28 UTC | Don't use any sed flags | 15 August 2019, 12:01:28 UTC |
| b2d4a8a | PRASANNA-RAVI | 15 August 2019, 11:09:48 UTC | Optimizations of Dilithium's signing procedure (#105) * Create opt * Delete opt * Create .gitkeep * Create .gitkeep * Delete .gitkeep * Delete .gitkeep * Create .gitkeep * Add files via upload * Delete poly.c * Delete poly.h * Delete sign.c * Add files via upload * Create .gitkeep * Create .gitkeep * Add files via upload * Add files via upload * dilithium signing procedure changes * prasanna latest commit * prasanna latest commit * Revert symlinks for r5nd-5kemcca-5d * prasanna latest commits with dilithium4 * Revert change to Makefile * Revert change to AES * Revert changes to r5nd-5kemcca-0d * add new dilithium benchmarks | 15 August 2019, 11:09:48 UTC |
| 93d444a | Matthias J. Kannwischer | 22 July 2019, 14:00:26 UTC | Fix Kyber assembly for older compilers (#103) Newer compilers manage to detect this automatically and use movw instead, but this throws errors on older ones (e.g., on arm-none-abi-gcc 6.3.1). | 22 July 2019, 14:00:26 UTC |
| f8408c0 | Matthias J. Kannwischer | 18 July 2019, 06:07:34 UTC | Add Falcon (#102) * add -lm to LDFLAGS_HOST * skip implementations of falcon1024-tree * add m4 optimized implementations of falcon * add benchmarks | 18 July 2019, 06:07:34 UTC |
| cd3d685 | Matthias J. Kannwischer | 06 July 2019, 15:01:52 UTC | Update qTesla code (#101) * update mupq and README * qtesla benchmarks * update mupq | 06 July 2019, 15:01:52 UTC |
| b5fd63b | Matthias J. Kannwischer | 01 July 2019, 06:52:57 UTC | Skip pqclean implementations of ledakemlt{12,32,52} These implementations consume way too much RAM (see #59): - ledakemlt12: 853 KiB - ledakemlt32: 1533 KiB - ledakemlt52: 2523 KiB | 01 July 2019, 06:52:57 UTC |
| 7e000ce | Matthias J. Kannwischer | 01 July 2019, 06:51:13 UTC | update mupq to add release function for AES key schedule. Fixes #98 (#100) | 01 July 2019, 06:51:13 UTC |
| 3533104 | Ko- | 27 June 2019, 07:19:15 UTC | Add Round5 (#99) * Add R5ND_1KEMCCA_5d m4 implementation * Add other Round5 parameter sets * Add linker scripts for R5N1_5KEM parameter sets * Add Round5 benchmarks * Update mupq; integrate Round5 opt implementations | 27 June 2019, 07:19:15 UTC |
| ee9fdb0 | Matthias J. Kannwischer | 13 June 2019, 14:33:37 UTC | Merge branch 'frodokemround2' | 13 June 2019, 14:33:37 UTC |
| 972aa92 | Matthias J. Kannwischer | 13 June 2019, 14:31:41 UTC | Merge branch 'frodokemround2' | 13 June 2019, 14:31:41 UTC |
| c46a47b | Matthias J. Kannwischer | 13 June 2019, 14:11:12 UTC | frodo benchmarks | 13 June 2019, 14:11:12 UTC |
| f84574d | Matthias J. Kannwischer | 13 June 2019, 09:10:19 UTC | frodokem640aes | 13 June 2019, 09:13:27 UTC |
| 711be16 | Matthias J. Kannwischer | 13 June 2019, 08:06:04 UTC | reduce stack usage to make frodokem640aes fit | 13 June 2019, 08:06:04 UTC |
| 9a12821 | Matthias J. Kannwischer | 12 June 2019, 14:08:30 UTC | optimized frodokem640shake round 2 | 12 June 2019, 14:08:30 UTC |
| cd1c7e4 | Ko- | 12 June 2019, 11:26:57 UTC | Update README with cSHAKE The cshake{128,256}_simple API is now deprecated. Implementations should use the more generic cSHAKE API from sp800-185.h. | 12 June 2019, 11:26:57 UTC |
| 6e4d959 | Ko- | 12 June 2019, 09:36:45 UTC | Add ThreeBears (#96) * Update mupq; import ThreeBears implementations * Add sp800-185.c to Makefile * Add ThreeBears to benchmarks | 12 June 2019, 09:36:45 UTC |
| 2362319 | Matthias J. Kannwischer | 12 June 2019, 08:44:29 UTC | Update README.md | 12 June 2019, 08:44:29 UTC |
| 93c5c86 | Matthias J. Kannwischer | 12 June 2019, 08:42:54 UTC | Merge branch 'dilithium' | 12 June 2019, 08:42:54 UTC |
| 5e62e82 | Ko- | 12 June 2019, 08:25:49 UTC | Add LUOV (#94) * Update mupq * Add larger LUOV parameter sets to skip_list * Add LUOV to benchmarks | 12 June 2019, 08:25:49 UTC |
| 2b67625 | Matthias J. Kannwischer | 12 June 2019, 06:26:14 UTC | update dilithium | 12 June 2019, 08:23:13 UTC |
| 50b6e0c | Joost Rijneveld | 21 May 2019, 12:56:04 UTC | Fix typo in ldscript Makefile selection | 12 June 2019, 06:29:50 UTC |
| 4525a4b | Joost Rijneveld | 21 May 2019, 12:47:47 UTC | Allow implementation-specific linker scripts This already adds one for Frodo640AES/opt | 12 June 2019, 06:29:32 UTC |
| 3ba5029 | Ko- | 10 June 2019, 15:04:32 UTC | Allow AES to be called with non-aligned pointers (#93) Passing a pointer to an address that is not a multiple of 4 bytes will incur a minor performance penalty. It's only a couple of cycles and it is better than hanging completely. To aligned pointers, there is no speed difference. Only a slightly larger code size. | 10 June 2019, 15:04:32 UTC |
| 375bf99 | leonbotros | 05 June 2019, 17:12:55 UTC | Cleaning m4 implementations of Kyber (#92) | 05 June 2019, 17:12:55 UTC |
| 79579db | Matthias J. Kannwischer | 31 May 2019, 06:44:52 UTC | rename dilithium to dilithium2 | 31 May 2019, 06:44:52 UTC |
| 0f29c2a | Ko- | 29 May 2019, 12:50:00 UTC | Update NTRU Prime to Round 2 and add parameter sets (#91) * Update mupq * Update benchmarks NTRU Prime * Remove NTRU Prime from Round 1 list in README | 29 May 2019, 12:50:00 UTC |
| 7b01d1d | Matthias J. Kannwischer | 27 May 2019, 00:40:03 UTC | update README.md | 27 May 2019, 00:40:03 UTC |
| 9e86604 | Matthias J. Kannwischer | 27 May 2019, 00:38:30 UTC | remove old m4 implementations | 27 May 2019, 00:39:37 UTC |
| 99a9a9e | Matthias J. Kannwischer | 26 May 2019, 12:57:53 UTC | benchmarks frodokem opt | 27 May 2019, 00:39:37 UTC |
