ea87b30f89
Add view tags to outputs to reduce wallet scanning time
...
Implements view tags as proposed by @UkoeHB in MRL issue
https://github.com/monero-project/research-lab/issues/73
At tx construction, the sender adds a 1-byte view tag to each
output. The view tag is derived from the sender-receiver
shared secret. When scanning for outputs, the receiver can
check the view tag for a match, in order to reduce scanning
time. When the view tag does not match, the wallet avoids the
more expensive EC operations when deriving the output public
key using the shared secret.
2022-04-18 00:49:53 -07:00
da9aa1f7f8
Copyright: Update to 2022
2022-03-04 06:59:20 +01:00
5ed604fe5b
crypto: fix non zero scalar being 0 after reducing
2020-12-04 01:00:03 +00:00
6bfcd31015
Updates InProofV1, OutProofV1, and ReserveProofV1 to new V2 variants that include all public proof parameters in Schnorr challenges, along with hash function domain separators. Includes new randomized unit tests.
2020-08-09 18:42:15 -04:00
5ef0607da6
Update copyright year to 2020
...
Update copyright year to 2020
2020-05-06 22:36:54 -04:00
613071f4fa
use memwipe on secret k/alpha values
...
Reported by UkoeHB_ and sarang
2020-04-15 01:16:31 +00:00
8f6f674753
Merge pull request #5609
...
1dc3b1a
2019-08-27 15:14:15 -05:00
1dc3b1a516
wallet: add --extra-entropy command line flag
...
It lets the user add custom entropy to the PRNG.
It does this by hashing the new data and xoring the resulting
hash with the PRNG state.
2019-08-22 11:12:57 +00:00
4b1df4e50f
Fix for biased signature nonce
2019-08-12 15:58:15 -04:00
1f2930ce0b
Update 2019 copyright
2019-03-05 22:05:34 +01:00
bd98e99c80
Removed a lot of unnecessary includes
2018-11-15 17:29:34 +01:00
a4317e61b5
crypto: some paranoid checks in generate_signature/check_signature
...
Reported by QuarksLab.
2018-09-11 13:38:12 +00:00
7434df1cc6
crypto: never return zero in random32_unbiased
...
This avoids problems when the caller can't deal with a zero
walue, which happens often enough that it's worth nipping the
problem in the bud.
2018-09-11 13:38:12 +00:00
5295e4eb82
Merge pull request #4137
...
63e342b0496c7c
2018-08-15 17:17:34 -05:00
3fde902394
Merge pull request #4097
...
61caab8
2018-07-27 14:23:54 -05:00
0496c7c91a
crypto: do not use boost::value_initialized to init null skey/pkey
2018-07-20 23:06:22 +01:00
63e342be84
crypto: move null_pkey/null_skey to the cpp file
2018-07-15 19:09:36 +01:00
61caab8a8c
crypto: remove slight bias in key generation due to modulo
2018-07-05 09:18:01 +01:00
ef649f998d
crypto: remove unused unsafe random scalar generator
2018-06-28 16:44:13 +01:00
b6eb7484d1
Merge pull request #3592
...
90a16b16a61f52
2018-05-31 14:41:17 -05:00
9317bce9ca
crypto: more places needing fixing for GCC 8.1
2018-05-13 18:17:13 +01:00
90a16b119f
crypto: fix initialization order issue with random mutex
2018-04-10 12:30:48 +01:00
b2d23b189e
crypto: revert odd namespace changes made in #3303
2018-03-14 21:00:17 +09:00
fbcc91c2a4
Correct spelling mistakes.
2018-03-05 17:00:40 +00:00
e745c1e38d
Code modifications to integrate Ledger HW device into monero-wallet-cli.
...
The basic approach it to delegate all sensitive data (master key, secret
ephemeral key, key derivation, ....) and related operations to the device.
As device has low memory, it does not keep itself the values
(except for view/spend keys) but once computed there are encrypted (with AES
are equivalent) and return back to monero-wallet-cli. When they need to be
manipulated by the device, they are decrypted on receive.
Moreover, using the client for storing the value in encrypted form limits
the modification in the client code. Those values are transfered from one
C-structure to another one as previously.
The code modification has been done with the wishes to be open to any
other hardware wallet. To achieve that a C++ class hw::Device has been
introduced. Two initial implementations are provided: the "default", which
remaps all calls to initial Monero code, and the "Ledger", which delegates
all calls to Ledger device.
2018-03-04 12:54:53 +01:00
666a76652b
Merge pull request #3187
...
851bd057
2018-02-16 14:20:31 +01:00
851bd057ec
call _exit instead of abort in release mode
...
Avoids cores being created, as they're nowadays often piped
to some call home system
2018-02-01 13:32:46 +00:00
18216f19dd
Update 2018 copyright
2018-01-26 10:03:20 -05:00
53ad5a0f42
Subaddresses
2017-10-07 13:06:21 +09:00
b5345ef4f0
crypto: use malloc instead of alloca
2017-08-23 13:38:03 +01:00
8da82256d4
crypto: moved boost::lock_guard into a smaller scope
2017-06-22 18:11:15 +09:00
c9e0e944e9
Signature proving payment to destination by only revealing key derivation, not the actual tx secret key
2017-06-22 18:11:13 +09:00
c3599fa7b9
update copyright year, fix occasional lack of newline at line end
2017-02-21 19:38:18 +02:00
b00da61eab
Preliminary support for DragonFly BSD
...
- It builds but no further testing has been done.
2016-12-15 02:27:53 -08:00
d4b62a1e29
rct amount key modified as per luigi1111's recommendations
...
This allows the key to be not the same for two outputs sent to
the same address (eg, if you pay yourself, and also get change
back). Also remove the key amounts lists and return parameters
since we don't actually generate random ones, so we don't need
to save them as we can recalculate them when needed if we have
the correct keys.
2016-08-28 21:30:19 +01:00
e70e8a69f4
crypto: error out where appropriate
2016-08-28 21:28:29 +01:00
6462a3a6db
crypto: fix compile error: use named type in sizeof
...
Btw, the warning 4200 remains disabled, but it did not get triggered
(GCC 6.1.1, ARM). But, perhaps a better way than disabling
the warning would be to do what is suggested here:
http://stackoverflow.com/questions/3350852/how-to-correctly-fix-zero-sized-array-in-struct-union-warning-c4200-without%3E
2016-05-18 01:01:58 -04:00
d539be3359
crypto: make clear generate_random_bytes is not thread safe
...
And add a thread safe version to encourage proper use
2016-05-15 00:05:59 +01:00
b937a2c915
Use boost::thread instead of std::thread
...
and all other associated IPC
2016-03-11 15:09:50 +00:00
28f95eb001
OpenBSD support for Monero.
2016-01-21 11:18:26 -07:00
de03926850
updated copyright year
2015-12-31 08:39:56 +02:00
f4b69d553a
year updated in license
2015-01-02 18:52:46 +02:00
6afbdd9754
FreeBSD alloca.h reference fixed
2014-09-09 12:37:19 +02:00
6fc995fe5d
License updated to BSD 3-clause
2014-07-23 15:03:52 +02:00
d22e458c6c
builds, but doesn't link. other than that, electrum-style recovery implemented (but not tested\!)
2014-06-12 19:05:51 -04:00
4f382b3830
most functions prototyped/modified for wallet recovery
2014-06-12 19:05:51 -04:00
296ae46ed8
moved all stuff to github
2014-03-03 22:07:58 +00:00
175d06e75e
crypto lib
2013-11-15 02:28:17 +04:00
j-berman
mj-xmr
moneromooo-monero
Sarang Noether
SomaticFanatic
luigi1111
binaryFate
Martijn Otto
moneroexamples
stoffu
Edward Betts
cslashm
Riccardo Spagni
xmr-eric
kenshi84
Antonio Huete Jimenez
redfish
Howard Chu
me0wmix
Thomas Winget
Antonio Juarez
amjuarez