(BENCH_INTERVAL): Reduced to 0.1 s.
(struct bench_memxor_info): New struct.
(bench_memxor): New function.
(time_memxor): New function.
(main): Use time_memxor. Added optional argument used to limit the
algorithms being benchmarked.

Rev: nettle/examples/nettle-benchmark.c:1.10

*** empty log message ***

Rev: nettle/ChangeLog:1.108

(BENCH_INTERVAL): Changed unit to
seconds.
(time_function): Use clock_gettime with CLOCK_PROCESS_CPUTIME_ID,
if available. This gives better accuracy, at least on recent
linux.

Rev: nettle/examples/nettle-benchmark.c:1.9

(nettle-benchmark): Link using $(BENCH_LIBS) rather than $(LIBS).

Rev: nettle/examples/Makefile.in:1.9

Check for clock_gettime, and add -lrt to BENCH_LIBS if needed.

Rev: nettle/configure.ac:1.25

*** empty log message ***

Rev: nettle/ChangeLog:1.107

Less quoting when invoking $CC, to allow CC="gcc -m32".

Rev: nettle/configure.ac:1.24

(ROUND): Adapted to new key convention, moving key xor to the end.

Rev: nettle/x86/camellia-crypt-internal.asm:1.2

(CAMELLIA_F_HALF_INV): Deleted macro.
(camellia_set_encrypt_key): Deleted the CAMELLIA_F_HALF_INV
operations intended for moving the key xor into the middle of the
round.

Rev: nettle/camellia-set-encrypt-key.c:1.5

(CAMELLIA_ROUNDSM): Moved addition of key to the end, to use a 64-bit
xor.

Rev: nettle/camellia-crypt-internal.c:1.3

New file.

Rev: nettle/x86_64/camellia-crypt-internal.asm:1.1

(LREG, HREG, XREG): New macros.

Rev: nettle/x86_64/machine.m4:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.106

Support shared libraries (dlls) with mingw32. Contributed by David
Hoyt.

Rev: nettle/configure.ac:1.23

* configure.ac: Changed version number to nettle-2.2.

Rev: nettle/ChangeLog:1.105
Rev: nettle/configure.ac:1.22

Use camellia-crypt-internal.asm, if available. Bumped soname to
libnettle.so.4, and reset LIBNETTLE_MINOR to zero.

Rev: nettle/ChangeLog:1.104
Rev: nettle/NEWS:1.8
Rev: nettle/configure.ac:1.21

*** empty log message ***

Rev: nettle/ChangeLog:1.103

Use camellia-crypt-internal.asm, if available.

Rev: nettle/configure.ac:1.20

Updated date, and list author info for the Camellia assembler
implementation.

Rev: nettle/nettle.texinfo:1.15

New file.

Rev: nettle/x86/camellia-crypt-internal.asm:1.1

* x86/machine.m4 (LREG, HREG): Moved macros here, from...
* x86/aes.m4: ...here.

Rev: nettle/x86/aes.m4:1.7
Rev: nettle/x86/machine.m4:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.102

Added missing functions rsa_sha512_verify and rsa_sha512_verify_digest.

Rev: nettle/nettle.texinfo:1.14

More info for nettle-2.1.

Rev: nettle/NEWS:1.7

* camellia.h (struct camellia_ctx): Eliminate the two unused
subkeys, and renumber the remaining ones.
* camellia-crypt-internal.c (_camellia_crypt): Updated for
renumbered subkeys.
* camellia-set-encrypt-key.c (camellia_set_encrypt_key): Likewise.
* camellia-set-decrypt-key.c (camellia_invert_key): Likewise.

Rev: nettle/ChangeLog:1.101
Rev: nettle/camellia-crypt-internal.c:1.2
Rev: nettle/camellia-set-decrypt-key.c:1.2
Rev: nettle/camellia-set-encrypt-key.c:1.4
Rev: nettle/camellia.h:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.100

(camellia_set_encrypt_key): Inline
the expansion of camellia_setup128 and camellia_setup256, keeping
the unexpanded key in scalar variables.
(camellia_setup128): Deleted.
(camellia_setup256): Deleted.

Rev: nettle/camellia-set-encrypt-key.c:1.3

* camellia-set-encrypt-key.c (camellia_set_encrypt_key): Reduced
code size, no complete loop unroll. Use one loop for each phase of
the post-processing.

Rev: nettle/camellia-set-encrypt-key.c:1.2

Comment fix.

Rev: nettle/dsa.h:1.7

Updated and expanded section on DSA. Other minor fixes.

Rev: nettle/nettle.texinfo:1.13

Document aes_invert_key, and Camellia.

Rev: nettle/nettle.texinfo:1.12

Spacing fix.

Rev: nettle/ChangeLog:1.99

*** empty log message ***

Rev: nettle/ChangeLog:1.98

* testsuite/camellia-test.c: New tests for camellia_invert_key.
* testsuite/aes-test.c: New tests for aes_invert_key.

Rev: nettle/testsuite/aes-test.c:1.2
Rev: nettle/testsuite/camellia-test.c:1.2

* aes.h (aes_invert_key): Declare it.

* aes-set-decrypt-key.c (aes_invert_key): New function, key
inversion code extracted from aes_set_decrypt_key.
(aes_set_decrypt_key): Use aes_invert_key.

Rev: nettle/ChangeLog:1.97
Rev: nettle/aes-set-decrypt-key.c:1.2
Rev: nettle/aes.h:1.3

Added FIXME comment.

Rev: nettle/cast128.c:1.3

* camellia-set-encrypt-key.c (camellia_setup128): Generate
unmodified subkeys according to the spec. Moved clever combination
of subkeys to camellia_set_encrypt_key.
(camellia_setup256): Likewise.
(camellia_set_encrypt_key): Moved subkey post-processing code
here, and reduce code duplication between 128-bit keys and larger
keys.

* camellia.c: Deleted file, split into several new files...
* camellia-table.c (_camellia_table): New file with the constant
sbox tables.
* camellia-set-encrypt-key.c: New file.
(camellia_setup128): Generate unmodified subkeys according to the
spec. Moved clever combination of subkeys to camellia_set_encrypt_key.
(camellia_setup256): Likewise.

* camellia-set-decrypt-key.c: New file.
(camellia_invert_key): Key inversion function.
(camellia_set_decrypt_key): New key setup function.
* camellia-internal.h: New file.
* camellia-crypt.c (camellia_crypt): New file, new wrapper
function passing the sbox table to _camellia_crypt.
* camellia-crypt-internal.c (_camellia_crypt): New file, with main
encrypt/decrypt function.
* Makefile.in (nettle_SOURCES): Updated list of camellia source files.
(DISTFILES): Added camellia-internal.h.

Rev: nettle/ChangeLog:1.96
Rev: nettle/Makefile.in:1.26
Rev: nettle/camellia-crypt-internal.c:1.1
Rev: nettle/camellia-crypt.c:1.1
Rev: nettle/camellia-internal.h:1.1
Rev: nettle/camellia-set-decrypt-key.c:1.1
Rev: nettle/camellia-set-encrypt-key.c:1.1
Rev: nettle/camellia-table.c:1.1
Rev: nettle/camellia.c:1.5(DEAD)

* camellia-meta.c: Use _NETTLE_CIPHER_SEP_SET_KEY.

* camellia.h (struct camellia_ctx): Replaced flag camellia128 by
expanded key length nkeys.

* camellia.c (camellia_set_encrypt_key): Renamed, from...
(camellia_set_key): ... old name.
(camellia_invert_key): New function.
(camellia_set_decrypt_key): New function, using
camellia_invert_key.
(camellia_crypt): Renamed, from...
(camellia_encrypt): ... old name.
(camellia_decrypt): Deleted, no longer needed. camellia_crypt used
for both encryption and decryption.

Rev: nettle/ChangeLog:1.95
Rev: nettle/camellia-meta.c:1.2
Rev: nettle/camellia.c:1.4
Rev: nettle/camellia.h:1.4

*** empty log message ***

Rev: nettle/ChangeLog:1.94

(_NETTLE_CIPHER_SEP_SET_KEY): New macro.

Rev: nettle/nettle-meta.h:1.7

Removed unnecessary include of memxor.h.

Rev: nettle/dsa-keygen.c:1.9

Fixed spelling in comment.

Rev: nettle/cbc.c:1.2

* camellia.c: Rewrote to use 64-bit type for subkeys and use
64-bit operations throughout. Performance on x86_32, when compiled
with gcc-4.4.4, is reduced by roughly 15%, this should be fixed
later.

* camellia.h (struct camellia_ctx): Use type uint64_t for subkeys.

Rev: nettle/ChangeLog:1.93
Rev: nettle/camellia.c:1.3
Rev: nettle/camellia.h:1.3

Added camellia ciphers.

Rev: nettle/ChangeLog:1.92
Rev: nettle/examples/nettle-benchmark.c:1.8

* aes.h (aes_encrypt, aes_decrypt): Declare ctx argument as const.
Also updated implementation.
* blowfish.h (blowfish_encrypt, blowfish_decrypt): Likewise.
* cast128.h (cast128_encrypt, cast128_decrypt): Likewise.
* serpent.h (serpent_encrypt, serpent_decrypt): Likewise.
* twofish.h (twofish_encrypt, twofish_decrypt): Likewise.

Rev: nettle/ChangeLog:1.91
Rev: nettle/aes-decrypt.c:1.2
Rev: nettle/aes-encrypt.c:1.2
Rev: nettle/aes.h:1.2
Rev: nettle/blowfish.c:1.3
Rev: nettle/blowfish.h:1.3
Rev: nettle/cast128.c:1.2
Rev: nettle/cast128.h:1.2
Rev: nettle/serpent.c:1.2
Rev: nettle/serpent.h:1.2
Rev: nettle/twofish.c:1.2
Rev: nettle/twofish.h:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.90

(TS_NETTLE_SOURCES): Added camellia-test.c.

Rev: nettle/testsuite/.test-rules.make:1.7
Rev: nettle/testsuite/Makefile.in:1.9

(nettle_camellia128): Declare.
(nettle_camellia192): Likewise.
(nettle_camellia256): Likewise.

Rev: nettle/nettle-meta.h:1.6

* Makefile.in (nettle_SOURCES): Added camellia.c and
camellia-meta.c.
(HEADERS): Added camellia.h.

* camellia-meta.c: New file.

* camellia.h: Rewrote interface to match nettle conventions.

* camellia.c: Converted to nettle conventions.
(camellia_encrypt128, camellia_encrypt256): Unified to new
function...
(camellia_encrypt): ...New function, with a loop doing 6
regular rounds, one FL round and one FLINV round per iteration,
with iteration count depending on the key size.

Rev: nettle/ChangeLog:1.89
Rev: nettle/Makefile.in:1.25
Rev: nettle/camellia-meta.c:1.1
Rev: nettle/camellia.c:1.2
Rev: nettle/camellia.h:1.2

New files, copied from
http://info.isl.ntt.co.jp/crypt/eng/camellia/dl/camellia-LGPL-1.2.0.tar.gz.

Rev: nettle/camellia.c:1.1
Rev: nettle/camellia.h:1.1

New file.

Rev: nettle/testsuite/camellia-test.c:1.1

*** empty log message ***

Rev: nettle/ChangeLog:1.88

Document new conventions for weak key and des
parity checks. Document des_check_parity.

Rev: nettle/NEWS:1.6
Rev: nettle/nettle.texinfo:1.11

(test_weak): Don't check the deleted status attribute.

Rev: nettle/testsuite/des-test.c:1.3

(des_key_sched): Rewrote error checking logic for
the case of non-zero des_check_key.

Rev: nettle/des-compat.c:1.3

Comment fix.

Rev: nettle/des-compat.h:1.2

(des3_set_key): Changed weak key detection logic.
Complete key setup also for weak keys, and don't set the status
attribute.

Rev: nettle/des3.c:1.2

(des_set_key): New iteration logic, to keep key pointer unchanged.
Moved weak key check to the end, and don't set the status
attribute.
(des_encrypt): Ignore status attribute.
(des_decrypt): Likewise.

Rev: nettle/des.c:1.3

(enum des_error): Deleted.
(struct des_ctx): Deleted status attribute.
(struct des3_ctx): Likewise.

Rev: nettle/des.h:1.3

(initial_ctx): Deleted status value.
(blowfish_encrypt): Ignore status attribute.
(blowfish_decrypt): Likewise.
(blowfish_set_key): return result from weak key check, without
setting the status attribute.

Rev: nettle/blowfish.c:1.2

(enum blowfish_error): Deleted.
(struct blowfish_ctx): Deleted status attribute.

Rev: nettle/blowfish.h:1.2

(des_headers): Deleted parity.h.

Rev: nettle/Makefile.in:1.24

*** empty log message ***

Rev: nettle/ChangeLog:1.87

(test_des): New function.
(test_weak): New function.
(test_main): Use test_des and test_weak. Added tests for all the
weak keys. Added some tests with invalid (to be ignored) parity
bits.

Rev: nettle/testsuite/des-test.c:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.86

(parity_16): New smaller parity table.
(des_check_parity): New function.
(des_fix_parity): Use parity_16.
(des_weak_p): New weak-key detection. Ignores parity bits, and
uses a hash table.
(des_set_key): Deleted parity checking code. Replaced old weak-key
detection code by a call to des_weak_p.

Rev: nettle/des.c:1.2
Rev: nettle/des.h:1.2

*** empty log message ***

Rev: nettle/ChangeLog:1.85

(test_dsa_key): Updated for new name DSA_SHA1_MIN_P_BITS.

Rev: nettle/testsuite/testutils.c:1.9

(dsa_generate_keypair): Use DSA_SHA1_MIN_P_BITS and
DSA_SHA256_MIN_P_BITS.

Rev: nettle/dsa-keygen.c:1.8

(DSA_MIN_P_BITS, DSA_Q_OCTETS, DSA_Q_BITS): Renamed to...
(DSA_SHA1_MIN_P_BITS, DSA_SHA1_Q_OCTETS, DSA_SHA1_Q_BITS): New names.

Rev: nettle/dsa.h:1.6

(dsa_keypair_from_sexp_alist): New argument q_bits.
Renamed parameter limit to p_max_bits.
(dsa_sha1_keypair_from_sexp): Renamed, was dsa_keypair_from_sexp.
Updated to call dsa_keypair_from_sexp_alist with the new argument.
(dsa_sha256_keypair_from_sexp): New function.
(dsa_signature_from_sexp): New argument q_bits.

Rev: nettle/sexp2dsa.c:1.3

(dsa_params_from_der_iterator): Enforce 160-bit limit
on q. Renamed parameter limit to p_max_bits.
(dsa_openssl_private_key_from_der_iterator): Enforce 160-bit limit
on q and x. Renamed parameter limit to p_max_bits.

Rev: nettle/der2dsa.c:1.4

Parameter rename.

Rev: nettle/bignum.h:1.8
Rev: nettle/der-iterator.c:1.2

(test_main): Added test for dsa-sha256.

Rev: nettle/testsuite/dsa-test.c:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.84

(test_main): Provide expected value of the signature.

Rev: nettle/testsuite/dsa-test.c:1.4

(test_dsa160): Added argument for expected signature.
(test_dsa256): Likewise.

Rev: nettle/testsuite/dsa-keygen-test.c:1.5
Rev: nettle/testsuite/testutils.c:1.8
Rev: nettle/testsuite/testutils.h:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.83

* examples/random-prime.c (main): Updated for nettle_random_prime
change.
* testsuite/random-prime-test.c (test_main): Likewise.

Rev: nettle/examples/random-prime.c:1.3
Rev: nettle/testsuite/random-prime-test.c:1.2

(test_main): Updated expected signatures.

Rev: nettle/testsuite/rsa-keygen-test.c:1.4

(bignum_random_prime): Deleted function.
(rsa_generate_keypair): Use new nettle_random_prime. Generate
secret factors p and q with the two most significant bits set.

Rev: nettle/rsa-keygen.c:1.8

(dsa_generate_keypair): Updated for changes in nettle_random_prime and
_nettle_generate_pocklington_prime. Invoke progress callback.

Rev: nettle/dsa-keygen.c:1.7

(_nettle_generate_pocklington_prime): New
argument top_bits_set, to optionally generate primes with the two
most significant bits set. Reordered argument list.
(nettle_random_prime): Likewise, added top_bits_set argument.
Invoke progress callback when a prime is generated.

Rev: nettle/bignum-random-prime.c:1.6
Rev: nettle/bignum.h:1.7

*** empty log message ***

Rev: nettle/ChangeLog:1.82

(dsa_generate_keypair): Use _nettle_generate_pocklington_prime.
Deleted old key generation code.

Rev: nettle/dsa-keygen.c:1.6

* bignum-random-prime.c (_nettle_generate_pocklington_prime): Also
return the used r. Updated caller.

Rev: nettle/bignum-random-prime.c:1.5
Rev: nettle/bignum.h:1.6

*** empty log message ***

Rev: nettle/ChangeLog:1.81

* examples/random-prime.c (main): Allow sizes down to 3 bits.

Rev: nettle/examples/random-prime.c:1.2

(_nettle_generate_pocklington_prime): New
function. Rely on mpz_probab_prime_p (for lack of a trial division
function) for trial division.
(nettle_random_prime): Rewritten. Uses the prime table for the
smallest sizes, then trial division using a new set of tables, and
then Maurer's algorithm, calling the new
_nettle_generate_pocklington_prime for the final search.

Rev: nettle/ChangeLog:1.80
Rev: nettle/bignum-random-prime.c:1.4
Rev: nettle/bignum.h:1.5

Comment improvement.

Rev: nettle/dsa-keygen.c:1.5

*** empty log message ***

Rev: nettle/ChangeLog:1.79

(test_main): Updated for dsa testing changes.

Rev: nettle/testsuite/dsa-test.c:1.3

(test_main): Test dsa256.

Rev: nettle/testsuite/dsa-keygen-test.c:1.4

* testsuite/testutils.h (struct nettle_mac): New struct, currently
unused.

* testsuite/testutils.c (test_mac): New function (currently not
used).
(test_dsa): Replaced by two new functions...
(test_dsa160): New function.
(test_dsa256): New function.
(test_dsa_key): New argument q_size.
(DSA_VERIFY): Generalized.

Rev: nettle/testsuite/testutils.c:1.7
Rev: nettle/testsuite/testutils.h:1.4

(dsa_generate_keypair): Rewritten, now generating primes using
Pocklington's theorem. Takes both p_size and q_size as arguments.

Rev: nettle/dsa-keygen.c:1.4
Rev: nettle/dsa.h:1.5

Added documentation for sha224 and sha384.

Rev: nettle/nettle.texinfo:1.10

Added comment describing Pcklington's theorem.

Rev: nettle/bignum-random-prime.c:1.3

(miller_rabin_pocklington): Fixed broken
logic when Miller-rabin succeeds early.

Rev: nettle/ChangeLog:1.78
Rev: nettle/bignum-random-prime.c:1.2

* bignum-next-prime.c: Include stdlib.h, needed for alloca on
freebsd.
* hmac.c: Likewise.

Rev: nettle/ChangeLog:1.77
Rev: nettle/bignum-next-prime.c:1.5
Rev: nettle/hmac.c:1.2

* examples/Makefile.in (SOURCES): Added random-prime.c.

Rev: nettle/examples/Makefile.in:1.8