botan icon indicating copy to clipboard operation
botan copied to clipboard

Cryptography Toolkit

Results 267 botan issues
Sort by recently updated
recently updated
newest added

Adds the [initial public draft](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.ipd.pdf) of FIPS 204 (ML-DSA-IPD) to the existing Dilithium code. Since we will do a refactoring of Kyber/Dilithium for the finalized ML-KEM and ML-DSA standards (https://github.com/randombit/botan/pull/4024),...

Just wanted to open a discussion about HashFunction's `output_length()`. One feature that would be nice to have would be to a way to get the output length at compile-time rather...

enhancement

* The docs are out of date, eg referencing LLVM's subversion repo which no longer even exists. * libFuzzer is not explicitly required anymore, instead we should use `-fsanitize=fuzzer` for...

good first issue
help wanted
documentation

Right now we don't afaik check that these configurations build/work. Don't need to cover the entire matrix can just do a GCC+Linux build.

task

Not going to do this anytime soon, best to wait for when things are quiet in terms of active PRs. Maybe end of the year around holidays? This is just...

task

Collection of potential improvements on the public (and perhaps internal) X.509 API of the library. * [ ] `Path_Validation_Restrictions` are currently created with a constructor that is becoming quite bloated...

enhancement

Hi there, I found that the `Botan` will return `Aborted (core dump)` but not verification failed when using `Botan::x509_path_validate()` if the input certificate chain is not a desired string type/has...

In the beginning of the handshake the client sends ClientHello message with DTLS Record Version 1.0. The version of the inner message is 1.2. Server sets pending state to DTLS...

bug

We tried to test a scenario that the server has a delay before sending message, so we expect the client to do retransmission, but it seems like the client sends...

This adds a lot of noise to the CI output. I'm not sure why it's happening since for Linux, Boost in installed to `/usr/include` where certainly GCC should know that...