github.com/katzenpost/circl commits | Ecosyste.ms: OpenCollective

Teach fork to use hpqc signature scheme interfaces

d6395ee88f68a4f6f48cccfe964d807275996c88 authored 10 months ago by David Stainton <[email protected]>

Merge branch 'new_kem_interface.1'

5fb03bb616074d843c6549101f18afb72b37378f authored 11 months ago by David Stainton <[email protected]>

Obey new variation of KEM scheme

b321cfffc44b2f8fadafcec3823ce7f4454dce01 authored 11 months ago by David Stainton <[email protected]>

Obey new variation of KEM scheme

847e1c5d37eb5b65d53c89e444a255296849a0b4 authored 11 months ago by David Stainton <[email protected]>

kem: fix text unmarshal for each kem

18895641f848271449b265d975dd7ba671e295cd authored 11 months ago by David Stainton <[email protected]>

Try fixing text unmarshaler like this

860c016157a29e344ce88b34351e7f08688cb40a authored 11 months ago by David Stainton <[email protected]>

kem: add text marshal unmarshal interfaces to pub key

76395c8a6bd19063fef96c881ed935b725b06e77 authored 11 months ago by David Stainton <[email protected]>

Use hpqc kem interfaces

a60da6747ebd224e77566b126ee02d2024ae18b3 authored 11 months ago by David Stainton <[email protected]>

Merge tag 'v1.3.7' into forked

0eb1e14380ebc9075c947aef11012f44d3362ee9 authored 11 months ago by David Stainton <[email protected]>

Releasing CIRCL v1.3.7

c48866b3068dfa83721c021dec03c777ba91abab authored 12 months ago by armfazh <[email protected]>

kyber: remove division by q in ciphertext compression

On some platforms, division by q leaks some information on the
ciphertext by its timing. If a ke...

75ef91e8a2f438e6ce2b6e620d236add8be1887d authored 12 months ago by Bas Westerbaan <[email protected]>

build(deps): bump golang.org/x/crypto

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.3.1-0.20221117191849-2c4766...

899732a43256a5d6fb779917f597b32939ca4ba4 authored about 1 year ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Releasing CIRCL v1.3.6

99f0f715ca5fbec868f5a0db1df2be6dcd28dbaa authored about 1 year ago by armfazh <[email protected]>

Updating blindrsa to be compliant with RFC9474.

ceb2d90c4922ec2e26be09a20f217ee57c8ba1c4 authored about 1 year ago by armfazh <[email protected]>

Apply thibmeu code review suggestions

Co-authored-by: Thibault <[email protected]>

e728d0d84e7e7cd9027050a62aa14adb8dec147c authored about 1 year ago by Armando Faz <[email protected]>

Change module name to katzenpost/circl

904e7ece8403cd066c1e15e429fbea5c148d470b authored about 1 year ago by David Stainton <[email protected]>

spelling: threshold

Signed-off-by: Josh Soref <[email protected]>

171c41832e7ec817b9b2873732db6da46bdb1139 authored over 1 year ago by Josh Soref <[email protected]>

spelling: alice

Signed-off-by: Josh Soref <[email protected]>

7f4276e52267e0dae79db68f9181a61e6bf3e944 authored over 1 year ago by Josh Soref <[email protected]>

spelling: representation

Signed-off-by: Josh Soref <[email protected]>

f22959ec58a8c3b4d4a4edabc0cb7dbabbe8a92b authored over 1 year ago by Josh Soref <[email protected]>

spelling: recovered

Signed-off-by: Josh Soref <[email protected]>

e84c34aeef2ba1beec275d796e1719d52c56d39b authored over 1 year ago by Josh Soref <[email protected]>

spelling: exponentiation

Signed-off-by: Josh Soref <[email protected]>

16268dcabb812c85312fb1dba9b3185478812fd6 authored over 1 year ago by Josh Soref <[email protected]>

spelling: encryption

Signed-off-by: Josh Soref <[email protected]>

a00bc1af8997c76b2688c47f07ef2826c7adfd87 authored over 1 year ago by Josh Soref <[email protected]>

spelling: deterministic

Signed-off-by: Josh Soref <[email protected]>

3052013a63d5bafae149212da7155cc71db31c09 authored over 1 year ago by Josh Soref <[email protected]>

spelling: the

Signed-off-by: Josh Soref <[email protected]>

82b749575db9953cc5d4073b704e078d75ba9e5b authored over 1 year ago by Josh Soref <[email protected]>

spelling: mapping

Signed-off-by: Josh Soref <[email protected]>

fb0a6861e1795ac61d54a7fe216c86f3c9f524a1 authored over 1 year ago by Josh Soref <[email protected]>

spelling: recovers

Signed-off-by: Josh Soref <[email protected]>

b9e82f9de41d55842eeef2bef5359dd04dbefcaf authored over 1 year ago by Josh Soref <[email protected]>

spelling: absorbed

Signed-off-by: Josh Soref <[email protected]>

fb86491a42637750dc763de7e425150660a930a9 authored over 1 year ago by Josh Soref <[email protected]>

spelling: tripped

Signed-off-by: Josh Soref <[email protected]>

44133f703215856ee0b8f243778f24b001ff6c95 authored over 1 year ago by Josh Soref <[email protected]>

spelling: deterministically

Signed-off-by: Josh Soref <[email protected]>

f231c13d32533ff42dcbeaa2fb3beadc7ab61ab0 authored over 1 year ago by Josh Soref <[email protected]>

spelling: compliant

Signed-off-by: Josh Soref <[email protected]>

e57c142a74c9e796f54c0e1920c301b0197658d1 authored over 1 year ago by Josh Soref <[email protected]>

spelling: ciphertext

Signed-off-by: Josh Soref <[email protected]>

b6e37ef74af8a405a9799d4f333879c69a7f423d authored over 1 year ago by Josh Soref <[email protected]>

spelling: opposite

Signed-off-by: Josh Soref <[email protected]>

883c8090dbe038b0cc14e414943b52b0c1391aa6 authored over 1 year ago by Josh Soref <[email protected]>

spelling: title

Signed-off-by: Josh Soref <[email protected]>

dad216659ee1c9969957557a713537ceb589fce5 authored over 1 year ago by Josh Soref <[email protected]>

spelling: according

Signed-off-by: Josh Soref <[email protected]>

cc4fe1c0deee8e9a91f278b01a2ec94caa732535 authored over 1 year ago by Josh Soref <[email protected]>

spelling: compatibility

Signed-off-by: Josh Soref <[email protected]>

180417f2ec72c43523ce7ecae4b7ae12d8c91ba7 authored over 1 year ago by Josh Soref <[email protected]>

spelling: transposes

Signed-off-by: Josh Soref <[email protected]>

c2076d67b2c717b1b1c6f3aa3b324bf93079b6fb authored over 1 year ago by Josh Soref <[email protected]>

spelling: permutation

Signed-off-by: Josh Soref <[email protected]>

c2ce95dcab4102b354a0c4556c35bac83bfc36b6 authored over 1 year ago by Josh Soref <[email protected]>

spelling: only

Signed-off-by: Josh Soref <[email protected]>

f3b37b8b6a3e466d872853d5893b1a34c2867e2d authored over 1 year ago by Josh Soref <[email protected]>

spelling: convenient

Signed-off-by: Josh Soref <[email protected]>

d12f3338e770b65757a0c077c5748dd3ad501200 authored over 1 year ago by Josh Soref <[email protected]>

spelling: arbitrary

Signed-off-by: Josh Soref <[email protected]>

b15252a295492ccae85c353dd20edf078d46823c authored over 1 year ago by Josh Soref <[email protected]>

spelling: butterflies

Signed-off-by: Josh Soref <[email protected]>

150880c592ff7f7af05734001d8913bcb8e0b079 authored over 1 year ago by Josh Soref <[email protected]>

spelling: isogenous

Signed-off-by: Josh Soref <[email protected]>

20d4c2d675a4bf2b0c95059a12cdbf4ce40372cc authored over 1 year ago by Josh Soref <[email protected]>

spelling: element

Signed-off-by: Josh Soref <[email protected]>

8e5b305757755c41871bf701db8fae25a9fed1e4 authored over 1 year ago by Josh Soref <[email protected]>

spelling: divisible

Signed-off-by: Josh Soref <[email protected]>

67f1f420db9586f5428a6418231d426695f74de2 authored over 1 year ago by Josh Soref <[email protected]>

spelling: specialize

Signed-off-by: Josh Soref <[email protected]>

b4d5ea8da52254033a5e98897cf6aa71f7d1d854 authored over 1 year ago by Josh Soref <[email protected]>

spelling: decapsulation

Signed-off-by: Josh Soref <[email protected]>

f0b91028171f35bdcaae346925c9b86f5fc66888 authored over 1 year ago by Josh Soref <[email protected]>

spelling: cofactor

Signed-off-by: Josh Soref <[email protected]>

17f6d07c08315d3b1823da6b58173efa0b134d10 authored over 1 year ago by Josh Soref <[email protected]>

Bumping Go version for CI jobs.

b6a5470c8bc140d99a2e2af19f961ad99f27804d authored over 1 year ago by armfazh <[email protected]>

Key generation for threshold RSA (safe primes).

099d3138029043ea98dbc60e9b451a6d8b75cce6 authored over 1 year ago by armfazh <[email protected]>

Update doc.go

Fix typo.

c6e36610df7a47c5822e161cbd169bdc9e2ab636 authored over 1 year ago by Nadim Kobeissi <[email protected]>

Add partially blind RSA implementation (#445)

* Add partially blind RSA implementation

See the specification for more information:
https:/...

afe0bef2abf8a5f708d8d9388b093c9551139381 authored over 1 year ago by Christopher Wood <[email protected]>

Update comment to reference round 4 instead of round 3 NIST submission

7dfc396c96830ed3601ace705e1612b9bcc447f9 authored over 1 year ago by octeep <[email protected]>

Add tkn20 benchmarks

946a259d2256285cd86d9012e88a984ba3299e9e authored over 1 year ago by Tanya Verma <[email protected]>

Set CIRCL version for generated assembler code.

5fabdc712055166da1e52a981a7f3cafd904f971 authored over 1 year ago by armfazh <[email protected]>

xof/k12: Fix a typo in the package documentation

CFFRG -> CFRG

4da78653064e14884ee3bc3eba208268e1b0f843 authored over 1 year ago by Christopher Patton <[email protected]>

Add KangarooTwelve as XOF

75b147d005a72687172aaaae62e06878ea16e7db authored over 1 year ago by Bas Westerbaan <[email protected]>

Add KangarooTwelve draft -10

caa4d7bc1b4353279df3491caf38e3608fac4a67 authored over 1 year ago by Bas Westerbaan <[email protected]>

Add TurboShake{128,256}

90d75657facfac97d7ebeb77f334eb5631212fcc authored over 1 year ago by Bas Westerbaan <[email protected]>

Releasing CIRCL v1.3.3

3bef500f2b925f150815a360b90081021e082939 authored over 1 year ago by armfazh <[email protected]>

Add HPKE benchmarks

These benchmarks let one quickly compare the cost difference between two different
HPKE ciphersu...

4002bafcebdd3b32974f70cf86a4682f82d9b3b5 authored over 1 year ago by chriswood <[email protected]>

Remove scalar sha3 amd64 assembly

Somewhat surprisingly this leads to a small speed up. Results will
obviously vary per platform, ...

795540340d5c79e5768a0135741cd7c3e5f7de93 authored over 1 year ago by Bas Westerbaan <[email protected]>

hpke: fix encapsulation seed in test for xyber

Instead of providing an ephemeral keypair for test vectors,
for which Kyber does not have an ana...

aef72508ab9bf35177e84ae23f94170f4546b63e authored over 1 year ago by Bas Westerbaan <[email protected]>

hpke: update and move xyber768d00 test vectors

808526a555262691f406ceed2ac1e4e7421faf96 authored over 1 year ago by Bas Westerbaan <[email protected]>

Address always nil parameter.

c7845aa1035e0b2d0397663e0adc283fd16af50a authored over 1 year ago by armfazh <[email protected]>

Adding NonceSize function to AEAD.

2475a3f4a6255da8795b2a8f0ec7e71e3ee6d37e authored over 1 year ago by armfazh <[email protected]>

Add X25519Kyber768Draft00 experimental HPKE KEM

This change also adds the ability to produce test vectors for the
draft specification:

https:...

eaec71f4cccf05035481b034b8ce9dc8755118ec authored over 1 year ago by chriswood <[email protected]>

Fix encapsulation seed size

f0db2881a9618356223ed31090cdb33feb1e6d23 authored over 1 year ago by Christopher Wood <[email protected]>

Check for crypto/rand errors and ReadFull io.Readers

In practice crypto/rand.Read never returns an error, but that is not
guaranteed. Check for those...

ff8d91225f8954b4970b6d6382d2e4c78f4a4cf8 authored almost 2 years ago by Bas Westerbaan <[email protected]>

Update go-ristretto dep

New version panic()s if reads from crypto/rand fail.

f4c0e87526ec17305e8a573f1c58acedc5539a92 authored almost 2 years ago by Bas Westerbaan <[email protected]>

revert pke/kyber changes

9d4f8c81e7453e0a51c055daa782e29282010a0d authored almost 2 years ago by Tom Thorogood <[email protected]>

tkn20,kyber,x25519,x448: plug constant-time leaks

In particular leaking z in kyber could be quite damaging:
https://groups.google.com/a/list.nist....

588a0e873049a24da2c649aea453ca07920308dc authored almost 2 years ago by Tom Thorogood <[email protected]>

Make ascon cipher go routine safe

Signed-off-by: Monis Khan <[email protected]>

a5c5796eb934a98461b6e2b146b49ad1455d216c authored almost 2 years ago by Monis Khan <[email protected]>

Reduce x/crypto and x/sys versions to match Go 1.20

CIRCL does not necessarily depend on newer x/crypto and x/sys versions.
Lower the version requir...

278354d01755a901d6629247e464265218d9d120 authored almost 2 years ago by Peter Wu <[email protected]>

Updating stdlib crypto library.

6210db7d118eb5fd8e0261a4355c1f5291196c32 authored almost 2 years ago by armfazh <[email protected]>

expander,tkn20: remove superfluous Reset calls

These are both called when the blake2b.XOF / hash.Hash has just been
freshly created.

055862bc4defe8e1ba2e6bb51be3a5599e279479 authored almost 2 years ago by Tom Thorogood <[email protected]>

tkn20: prevent panics on key gen errors

Both SystemSecretKey.KeyGen and Setup try to dereference the return
values from abe/cpabe/tkn20/...

547dd87d0478417099455546dcb51d728e543276 authored almost 2 years ago by Tom Thorogood <[email protected]>

Removes table of constants.

9aa87e4e2e5b10fc7492d4183b81b38f7835028d authored almost 2 years ago by armfazh <[email protected]>

dh/sidh: Avoid reference to global variable with MULX for rdcP434.

See bug in the compiler (issue #58735).

98ff19f3dd746e85eb8ed69de855a0ebaef6a16d authored almost 2 years ago by armfazh <[email protected]>

Detecting successful compilation as a plugin.

833045521ff3ace91cb9cbd910b91982cdceb416 authored almost 2 years ago by armfazh <[email protected]>

ecc/fourq: Workaround to remove R15 from fpMulBmi2.

See bug in the compiler (issue #58632).

e9fa36af54df285e77a9e1d14842b66e0095b480 authored almost 2 years ago by armfazh <[email protected]>

math/fp25519: Workaround to remove R15 from integerMulAdx.

See bug in the compiler (issue #58632).

d8d412a704407f051e88f0b77933d408e976f601 authored almost 2 years ago by armfazh <[email protected]>

math/fp448: Workaround to remove R15 from integerMulAdx.

See bug in the compiler (issue #58632).

c9d27d513e5d26f542d00ae48c8200d773853a97 authored almost 2 years ago by armfazh <[email protected]>

dh/csidh: Avoid reference to global variable with MULX for mulBmiAsm.

See bug in the compiler (issue #58735).

be39e0eaf5fdee69aa6387e734bcf293e9981f5e authored almost 2 years ago by armfazh <[email protected]>

dh/sidh: Avoid reference to global variable with MULX for rdcP751.

See bug in the compiler (issue #58735).

c2daa9563cc745b9da1a8eec0fcf8fcafb4d3a93 authored almost 2 years ago by armfazh <[email protected]>

dh/sidh: Avoid reference to global variable with MULX for rdcP503.

See bug in the compiler (issue #58735).

fc67c74fdaee2e8c593aff070280c55c382b5419 authored almost 2 years ago by armfazh <[email protected]>

ecc/p384: Remove R15 from arith p384.

See bug in the compiler (issue #58632).

e792bdbf83bc5bff37d326231fe27b4c9c5b9629 authored almost 2 years ago by armfazh <[email protected]>

Allow concatenating and reuse payloads.

eb5ff89fc24b99ab661464990fcaa5f835a7f651 authored almost 2 years ago by armfazh <[email protected]>

Updating formulas for constants.

32c12402686edc018d16d385be0b2bcab6525aa8 authored almost 2 years ago by armfazh <[email protected]>

Ascon80pq to cipher\ascon

801c3270c7e3c939315d9c170e40fc8c9c6058a9 authored almost 2 years ago by Daniel <[email protected]>

Applying review comments and more testing for Ascon.

31b7af268a97375602e628ebbaf9a99e1ebeb941 authored almost 2 years ago by armfazh <[email protected]>

Adding a 64-bit oriented implementation for ascon.

e32c54ebd08e443d303905440eb090b942c1c44b authored almost 2 years ago by armfazh <[email protected]>

Replaces substitution layer by 64-bit operations.

9e98cf552fef450e52b1c9d095dfb61582255828 authored almost 2 years ago by armfazh <[email protected]>

Add constant time compare.

6718e7029fe4277ce19d68ed36148d6e0831c098 authored almost 2 years ago by armfazh <[email protected]>

Repacing third slice by conditional execution.

a9b05ae35b76382777cd62698ce83701a94cafbd authored almost 2 years ago by armfazh <[email protected]>

Remove unnecessary if condition.

a2a80ed762b9575b2cb2a26908dfc628fdec1b11 authored almost 2 years ago by armfazh <[email protected]>

Adding ASCON, an AEAD lightweight cipher.

d92e954167065c53f60cbc7af34b513e2888340d authored almost 2 years ago by armfazh <[email protected]>

ckem: pass xof to elliptic.GenerateKey directly

d5f5e29609b5e04f8bccefa9b6aaa36b568b8dbe authored almost 2 years ago by Bas Westerbaan <[email protected]>

kem: add P-256 + Kyber768Draft00 hybrid

90f2a3efe4fe61ffa83ca0dfa66a3fc0a498419a authored almost 2 years ago by Bas Westerbaan <[email protected]>

Bumping Go minimum version.

73a249657e5179e6986bc5499c48437beee7169b authored almost 2 years ago by armfazh <[email protected]>

Adds prefixed labels and updates nomenclature.

2481411a5f3c2ed5b06d4451c824e7538d208de1 authored almost 2 years ago by armfazh <[email protected]>