master
Add a couple more tests
Add AEGIS128L test, regen the ones for AEGIS256, sort
Add tests for AEGIS-256
Avoid memcmp() with len=0
Add aes256gcm test vectors
Add aes256gcm tests from project wycheproof
Use a guard page instead of NULL for opt arguments in tests
Add IETF-compatible version of chacha20poly1305
Remove unused variables
Add chacha20-poly1305 test from Project Wycheproof
aead_xchacha20poly1305_ietf_decrypt(): add a test with a NULL message
xchacha20 test: initialize the full nonce
Fix tests, use guard page instead of NULL because of Wasm
Test crypto_auth_hmacsha256_*()
Indentx
Move tests to test/default and windows to quirks/windows. test/default contains only tests using the default primitives for a given operation. We need to add other tests as well.
Add tests for auth_hmac_sha512
Add *_messagebytes_max() wrappers
Test crypto_box_(before|after)nm
More tests
Indent
Add a test with a null message in box_easy()
Test crypto_box_open_detached() with a weak PK
Add new tests for the crypto_box_*() precomputed interface
Fix flaky non-deterministic box_seal tests
Change crypto_box_seed_keypair to use SHA-512 of the seed
fix crypto_stream_chacha20_ietf tests (#946)
Use CLOCK_MONOTONIC for benchmarking, if possible
Refactor IPv6 zone ID parsing and reject malformed zone identifiers
Change sodium_ip2bin to take the ip length
Remove tests for deprecated functions
Add some tests for reduced-rounds salsa20
Fix format string sign
core_ed25519_is_valid_point: check Y==Z in addition to X==0
Remove crypto_core_ed25519_from_uniform
Format
Adjust KAT order
Add crypto_core_keccak1600_state, remove keccak1600_STATEBYTES
test: fix two error messages (#1034)
Initial support for ristretto255
Add further tests for ristretto255 hash to element from RFC9497 (#1516)
ED25519_NONDETERMINISTIC: derive keys from the seed the same way as when ED25519_NONDETERMINISTIC is not defined
Implement ed25519 -> curve25519 keys conversion
Remove generichash tests with invalid parameters They must be reintroduced at some point, probably by overriding the `abort` symbol.
C++ compat
Require the generichash state to be aligned
Test crypto_hash() with an input longer than the block size
sha3: make post-final misuse safe and deterministic
Put <meta> tag outside <style>
Export missing crypto_ipcrypt_nd_keygen() helper function
Add more tests
Move HKDF test to its own file
Properly test crypto_kdf_hkdf_sha*_keygen
Add some additional tests for HKDF and Salsa20/12
Add a high-level crypto_kem API mapping to xwing
ML-KEM: wipe ephemeral seeds and harden invalid-pk test
Add X-Wing
More keygen tests
Add a keygen function to all the primitives
Test KX with a weak PK
+ crypto_kx_*() API
casts
+ simple metamorphic tests for crypto_generichash()
Last exit() -> _exit() in misuse test
More tests, and start testing misuse cases
Check crypto_onetimeauth() streaming interface
Javascript tests: don't call FS.*() if the filesystem module is not present
Add a pwhash test with guarded memory; it doesn't hurt
Use less memory for the pwhash tests
Include argon2id in crypto_pwhash_primitive()
Remove unused variable in tests
Remove an unreliable scrypt test
Fix previous
Disable the pwhash_scrypt_ll test that requires 1 Gb RAM. This is way too much for many devices and for VPS users.
Rename randombytes_salsa20 to randombytes_internal and switch to ChaCha20
Do not use a zero nonce in randombytes_buf_deterministic()
test/default/run.sh compat with GNU find
Add a scalarmult test to show that the high bit is ignored
Simplify scalarmult{2,5} tests
scalarmult: check that the top bit is ignored
Add x25519 test vectors from project wycheproof
Add extra scalarmult tests
Add a test for crypto_scalarmult_ed25519
Add a test for crypto_secretbox() with c == m
secrebox: add a test with in/out buffers next to each other
Remove incorrect and useless cast
Support overlapping input and output regions in crypto_secretbox_detached() crypto_stream_salsa20() doesn't support overlapping input and output regions, except when they are aliases.
Make room for several secretstream
Add a test for siphashx24
Reintroduce shorthash, this time with the key...
Nits
Add ed25519ph
Add ge25519_p2_to_p3(), ge25519_p3_add(), ge25519_p3_sub()
Trim spaces
Skip the misuse handler test when running benchmarks or wasm
Remove error string from sodium_misuse()
Relax most __attribute__ ((nonnull)) to allow 0-length inputs to be NULL.
Handle SIGPROT, CHERI's in-address space security exception
Add sodium_{malloc,allocarray,free}() and sodium_mprotect_*()
tests/sodium_utils3: skip SIGSEGV check when tsan is enabled
+ sodium_library_minimal() and SODIUM_LIBRARY_MINIMAL
Add tests for sodium_*() functions.
Make the stream and stream2 test object code 1000x smaller
Just use some test vectors around the counter overflow
Add a test for crypto_stream_salsa20_xor_ic()
Braces
Less deterministic crypto_verify_*() tests
wasmer syntax for volumes seems to have changed
Revert "Enable building win/arm64 package using visual studio (#1130)"
One more test
Add tests for chacha&salsa with a counter around 2^32
Add SHAKE and TurboSHAKE