crypto_dh
This page lists all primitives grouped under operation
crypto_dh
.
For each primitive, all listed implementations were checked across a number of compilers, compiler options, and hosts.
The progress bar shows the relative number of successes, fails, and errors:
crypto_aead_decrypt returns nonzero
The absolute number of successes, fails, and errors is shown to the left of the progress bar.
The following code was used to flag secret data, and test implementations:
1 | void timecop_doit(void) |
2 | { |
3 | poison(a, alen); |
4 | poison(b, blen); |
5 | crypto_dh_keypair(c,a); |
6 | crypto_dh_keypair(d,b); |
7 | unpoison(c, clen); |
8 | unpoison(d, dlen); |
9 | crypto_dh(e,d,a); |
10 | crypto_dh(f,c,b); |
11 | |
12 | } |
Click an implementation to see all checked compiler options.
claus
curve2251
curve25519
ed448goldilocks
ed521gs
gls254
gls254prot
hector
k277mon
k277taa
k298
kummer
nist521gs
nistp256
sclaus1024
sclaus2048
surf127eps
surf2113