Peter Grehan 6136a10e35 Always clamp curve25519 keys prior to use. ... This fixes an issue where a private key contained bits that should have been cleared by the clamping process, but were passed through to the scalar multiplication routine and resulted in an invalid public key. Issue diagnosed (and an initial fix proposed) by shamaz.mazum in PR 252894. This fix suggested by Jason Donenfeld. PR: 252894 Reported by: shamaz.mazum (cherry picked from commit 5aaea4b99e)		2021-02-06 14:01:18 +10:00
..
crypto/zinc
blake2s.c
blake2s.h
chacha20-x86_64.S
curve25519.c	Always clamp curve25519 keys prior to use.	2021-02-06 14:01:18 +10:00
if_wg_session.c	if_wg: appease gcc	2020-12-11 22:52:03 +00:00
module.c	if_wg: fix modules load on !x86	2021-01-12 18:07:10 -04:00
poly1305-x86_64.S
wg_cookie.c
wg_noise.c