aboutsummaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAge
...
| * | More Coq 8.4pl2 fixesGravatar Jason Gross2016-06-11
| | |
| * | Fix for Coq 8.4pl2Gravatar Jason Gross2016-06-11
| | |
| * | Work around bug #4811 (slow f_equal)Gravatar Jason Gross2016-06-11
| | | | | | | | | | | | | | | This is https://coq.inria.fr/bugs/show_bug.cgi?id=4811, [f_equal] loops(?) in 8.5pl1 (fixed already in 8.5.dev)
* | | starting rewrite using different definition of mapGravatar jadep2016-06-11
| | |
| * | Minor 8.5 changesGravatar Jason Gross2016-06-10
| | |
| * | More changes for 8.5Gravatar Jason Gross2016-06-10
| | | | | | | | | | | | [Local Coercion :=] changed meanings. Use [Let] and [Local Coercion] for consistent behavior
| * | 8.5 fixesGravatar Jason Gross2016-06-10
|/ /
| * improved generic field libraryGravatar Andres Erbsen2016-06-10
| |
| * improve generic field libraryGravatar Andres Erbsen2016-06-10
| |
| * experimentGravatar Andres Erbsen2016-06-07
| |
| * generic field definitionGravatar Andres Erbsen2016-06-07
| |
| * ed25519: refactor some ProperGravatar Andres Erbsen2016-06-06
| |
| * rewrite in Let_In binder by tacticGravatar Andres Erbsen2016-06-04
| |
| * Let_In rewritingGravatar Andres Erbsen2016-06-03
| |
| * leibniz equal version of topdown rewriting of sigma types: nicerGravatar Andres Erbsen2016-06-01
| |
| * leibniz equal version of topdown rewriting of sigma typesGravatar Andres Erbsen2016-06-01
| |
| * E impl: proper morphisms are hard to dow without setoidsGravatar Andres Erbsen2016-05-30
| |
| * ERep addGravatar Andres Erbsen2016-05-29
| |
| * --amendGravatar Andres Erbsen2016-05-28
| |
| * verify derivation, EdDSA layer: allow arbitrary equivalence relation for ↵Gravatar Andres Erbsen2016-05-28
| | | | | | | | ERep and SRep
| * verify derivation, EdDSA layer: remove unused context variablesGravatar Andres Erbsen2016-05-28
| |
| * verify derivation: EdDSA layerGravatar Andres Erbsen2016-05-28
| |
| * right after scalars to F lGravatar Andres Erbsen2016-05-27
| |
| * before changing SRep from N to F lGravatar Andres Erbsen2016-05-27
|/
* Merge branch 'master' of github.mit.edu:plv/fiat-cryptoGravatar jadep2016-05-25
|\
* | Fixed Encoding/PointEncodingTheorems; imports had been deleted, but for some ↵Gravatar jadep2016-05-25
| | | | | | | | reason I wasn't affected. Also updated the same file to use E module.
| * ed25519: indentation fixGravatar Andres Erbsen2016-05-24
| |
| * ed25519: integrate FRepPow and FRepInvGravatar Andres Erbsen2016-05-24
| |
| * ed25519: continue refactorGravatar Andres Erbsen2016-05-24
| |
| * PrimeFieldTheorems fermat inverse lemma: prove admitGravatar Andres Erbsen2016-05-24
| |
| * Factor some rewrites into a single [autorewrite]Gravatar Jason Gross2016-05-24
| | | | | | | | Slightly less [apply f_equal] beforehand, more automation.
| * Remove unfolding, rewrite -> setoid_rewriteGravatar Jason Gross2016-05-24
| | | | | | | | | | | | | | | | | | | | Moving the [scalar] argument to the beginning of [iter_op] makes inference of the [Proper] lemmas a bit easier. Making [Reflexive eq] come before [Reflexive Equivalence.equiv] allows [setoid_rewrite] to work; since [setoid_rewrite] does more unfolding than [rewrite], we no longer need to unfold things to make the [rewrite] work.
| * Fix some issues in Ed25519 tacticsGravatar Jason Gross2016-05-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Use replace rather than refine to speed up [Defined] and make the tactics easier to read - Use [apply f_equal] in place of [reflexivity] for unknown presumably arcane reasons to satisfy Coq's unifier - Factor out some tactics into tactic scripts - Write a lemma to pull functions out of [Let_In] - Fix autoindentation in emacs by wrapping [Let_In_unRep] in parentheses (probably a ProofGeneral regexp gone wrong) - Write a kludgy tactic to unfold [proj1_sig] only when applied to [exist] (Pair programming with Andres)
| * F,Ed25519: integrate F representation for mul,add,sub. Ed25519 even more ↵Gravatar Andres Erbsen2016-05-24
| | | | | | | | broken...
* | First stage of canonicalization proofs complete; proved 3 carry loops reduce ↵Gravatar jadep2016-05-20
| | | | | | | | input digits to their minimal widths. Remaining : name fixes and second stage -- proving that we subtract q iff the reduced input is over q (in the range [2^k-c, 2^k-1])
| * F: pow_nat_iter_op_correctGravatar Andres Erbsen2016-05-18
| |
| * F: fermat inversion lemma refactorGravatar Andres Erbsen2016-05-18
| |
| * unifiedAddM1Rep_sig: almost thereGravatar Andres Erbsen2016-05-18
| |
| * slightly nicer edwards curve extended coordinates additionGravatar Andres Erbsen2016-05-18
|/
* Implemented subtraction mod q as as (sub a b = sub (add a (2*q)) b) to avoid ↵Gravatar jadep2016-05-09
| | | | unsigned integer underflow. Also changed rep in Specific proofs so that it is PseudoMersenneBaseRep.rep rather than ModularBaseSystem.rep; these are equivalent but the first is the abstraction level we want.
* Changed name of Encoding to CanonicalEncoding, and changed notation to match.Gravatar jadep2016-04-29
|
* Moved sign_bit definition to Spec.Gravatar jadep2016-04-29
|
* Proved decode_point_eq in Ed25519 (comparing encodings is equivalent toGravatar jadep2016-04-29
| | | | comparing points).
* Cleanup: mostly moving lemmas to Util files, some moving lemmas to more ↵Gravatar jadep2016-04-28
| | | | general contexts.
* Completed encoding reorganization; factored sign_bit out of PointEncodings ↵Gravatar jadep2016-04-28
| | | | and finished encoding admits.
* ed25519: solve elliptic curve math admitsGravatar Andres Erbsen2016-04-25
|
* consolidate and rename Edwards curve lemmasGravatar Andres Erbsen2016-04-25
|
* Merge branch 'master' of github.mit.edu:plv/fiat-cryptoGravatar jadep2016-04-25
|\
* | Reorganization and revision of Encoding code and redefinition of sign_bit ↵Gravatar jadep2016-04-25
| | | | | | | | function.
| * refactor field lemmas out of ed25519Gravatar Andres Erbsen2016-04-25
| |