Tony Arcieri

Yeah, that sounds good. See e.g. https://docs.rs/ml-kem/latest/ml_kem/trait.KemCore.html#tymethod.generate I can impl `KeySizeUser` on public keys still I guess, but it's missing a trait to do the encoding to an `Array`. I...

> It may work fine for currently implemented KEMs since they use key as a seed, but in future we may have algorithms which are more similar to elliptic curves...

#2096 moves RNG to specific traits for interfacing with `getrandom` and `rand_core`, which would address this issue

You can configure `typos` with various regexes for things to ignore: https://github.com/RustCrypto/traits/blob/0596378/.typos.toml#L8-L12

This looks OK to me, but @micolous looks like there's a merge conflict?

> I'm wondering if the documentation should be updated to use that add_certificate method instead? Yes, updating the documentation sounds good. If you can get me a working replacement code...

Is there a specific interoperability reason you want to support these? Or do you want them supported specifically for the sake of supporting them? Salsa20-80 and Salsa20-128 exist due to...

It could be interesting, especially as there are different ways keys could be build from components (e.g. from just `d` and `n` assuming a default `e` of 65537, or from...

The most important thing is for the implementation to be sound, which is a property I don't think an LLM is going to be able to inform you about. The...

`crypto-bigint` now has modular arithmetic operations on `Uint` which don't require converting into Montgomery form first, which could potentially be used for scalars cc @andrewwhitehead