Alin-Petru Roșu

Is it possible that the check here unintentionally excludes last two indices for BDS reconstruction? Consider a case when an application does not store the BDS state. Upon specifying an...

Dear maintainers, NIST has selected the following set of parameters for SHAKE256. The digest size is set to 32 (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-208.pdf). At the moment, I expect the implementation follows RFC8391 (https://datatracker.ietf.org/doc/html/rfc8391#section-5.3)...