This unfortunately required a lot of refactoring. The inversion mod q
is now implemented with using a constant-time algorithm, unlike before,
but the point multiplications themselves are still using variable-time
implementations on most platforms, like before.
Note that the inversion algorithm is constant-time, but the primitive
operations that it is comprised of might not be fully constant-time
(yet).
Save a copy of the NSA Suite B Implementer's Guide to ECDSA since NSA
made it difficult to link to. Also Add references to the standards and
to the NSA guide to the code, and make it more clear how the code meets
the requirements.
Previously doc/doc.css was a symlink to util/doc.css, but symlinks
don't work well on Windows. Now util/doc.css is copied to the output
directory when the documentation is generated.
Change-Id: I2c9f4fee4f4307cc3dd70c4be380b4551d5e9ab5
Reviewed-on: https://boringssl-review.googlesource.com/5677
Reviewed-by: David Benjamin <davidben@chromium.org>
Reviewed-by: Adam Langley <agl@google.com>
Initial fork from f2d678e6e89b6508147086610e985d4e8416e867 (1.0.2 beta).
(This change contains substantial changes from the original and
effectively starts a new history.)
