Jonathan Protzenko

What do you mean there is no connection? `EverCrypt_AEAD_create_in` modifies its `dst` parameter. Sketch: ``` EverCrypt_AEAD_state *st = NULL; if (EverCrypt_AEAD_create_in(Spec_..._AES128_GCM, &st, key) != EverCrypt...Success) // handle error if (EverCrypt_AEAD_encrypt(st,...

Same as with my encrypt example above? See my usage of `st`

Regarding the second point, if the functions are not exposed in EverCrypt_AEAD.h then you should not use them -- Vale.h is an internal header and you are not expected, as...

That's a good question. I don't have a good enough understanding of processor lineups to figure out whether picking, say, SSSE3 is a superior choice that will make our code...

Does AVX imply SSSE3? My recollection of what's being done in Firefox now is that the build and code are consistent, and the code is compiled with `-mavx` and then...

Hi Niek, Absolutely agreed, it's just a matter of "upgrading" a bunch of code to use the (somewhat recent) const pointer abstraction that until recently was not available in our...

Hi Niek, Yes, that seems incorrect. It looks like the counter argument should be `c0`, then the state should be updated to bump the counter. This module is unverified (per...

CC @fournet and @wintersteiger, for reference. Christoph, is this something you might have time for?

Using kremlin as a driver is totally deprecated. It's on my plate to write a "getting started" chapter that helps set up the environment, default makefiles, and covers proper usage...

that would be great, we control the environment for the linux build so can easily build with -fsanitize=foo and assume clang is available I have done this locally at least...