<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">OK, I’ve released my tiny x25519 code as open source. This is the platform-agnostic version. The ARM asm version isn’t there, it’s staying proprietary for now :-/. But you can get most of the effect by intrinsic’ing umaal and friends.<div class=""><br class=""></div><div class=""><a href="https://sourceforge.net/p/strobe/code/ci/master/tree/x25519.c" class="">https://sourceforge.net/p/strobe/code/ci/master/tree/x25519.c</a></div><div class=""><a href="https://sourceforge.net/p/strobe/code/ci/master/tree/x25519.h" class="">https://sourceforge.net/p/strobe/code/ci/master/tree/x25519.h</a></div><div class=""><br class=""></div><div class="">Presumably this code could be accelerated somewhat by using a dedicated sqr() routine, or by unrolling loops and inlining code. Maybe I’ll get around to that at some point, but there’s a bunch more to be done with that repository to make it useful.</div><div class=""><br class=""></div><div class="">These files also have a totally nonstandard signature implementation, the only real advantage of which is that it adds very little code.</div><div class=""><br class=""></div><div class="">Let me know what you think, or if you find any bugs or missing features.</div><div class=""><br class=""></div><div class="">Cheers,</div><div class="">— Mike</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Nov 9, 2016, at 4:13 PM, Jason A. Donenfeld <<a href="mailto:Jason@zx2c4.com" class="">Jason@zx2c4.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">I just tried out the so called "tweet nacl implementation", because it<br class="">has very tiny stack requirements. It was 26 times slower than donna.<br class="">Wow!<br class=""></div></div></blockquote></div><br class=""></div></body></html>