sftcd

On 09/03/2020 20:26, rgog wrote: > Found this paper interesting as it talks about the security > challenges with the current Centralized Public Key Infrastructure > (PKI) and sheds light...

Hiya, On 08/03/2020 19:38, Sumit Mukhija wrote: > > You can view, comment on, or merge this pull request online at: > > https://github.com/sftcd/cs7053/pull/8 > > -- Commit Summary --...

On 08/03/2020 20:33, Sumit Mukhija wrote: > Mostly because it points out the way public keys might be weak (The > given example with date of birth and characters) even...

On 20/04/2021 17:01, Hans-Christoph Steiner wrote: > @sftcd do you know about how current Cloudflare's Go implementation is? CF are up to date with draft-10. But for ooni you don't...

On 20/04/2021 17:57, Hans-Christoph Steiner wrote: > I guess the tricky part is getting access to the TLS transaction at the right > place to insert that code-point and random...

On 29/07/2022 07:38, Divyank Katira wrote: > I am leaning towards the GREASE approach as it seems like a less > intrusive change than using a Go fork. Even though...

> @sftcd this is a first pass, that just does the X25519 & X448 KEM. It includes code that is shared with the rest of hpke in hpke_util.c We will...

Just started to play with this - added a bit of test code for when doing HPKE encryption, just for x25519 and with base mode, and not pushed anywhere yet....

> It doesnt do it currently.. I wasnt sure if I should do that internally if no ikm is supplied, or whether the caller does it.. I'd say it might...

Yeah I think the above is correct (as per https://www.rfc-editor.org/rfc/rfc7748#section-5) , but not sure your new code needs to do that - for test purposes I just compare the result...