zugzwang

It is nice that git-crypt reads the gpg executable from the git config `gpg.program` configuration. This allows one to interface with other PGP implementations, as soon as the desired commands...

Support for √2?

1

I have a customer that is not particularly fond of π. Is √2 on the roadmap? If so, any ETA?

Today I forgot the name of a note, and couldn't find it so I navigated to my notes directory. Would you accept a PR for listing all existing notes? E.g....

This branch contains a better linted crypto package with golint, vet, errcheck, deadcode, etc. - Export functions, variables, methods, properties with initialisms are not corrected in order to preserve the...

How to peek into DER and stop reading early?

1

In some scenarios, I want to peek into a DER, parse an early element (think of an OID), and return it. It appears that I cannot do that with `BERReader`...

Consider renaming Kyber to ML-KEM

8

I am testing my implementations of both Kyber round 3 and ML-KEM. Currently, PQClean/crypto_kem/kyber{512,768,1024} implement the NIST draft, henceforth ML-KEM. It is not clear from the documentation of the [pqcrypto_kyber...

Potential compiler introduced timing leak

2

I haven't confirmed but it looks like this library is also vulnerable to https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/hqbtIGFKIpU See https://github.com/Argyle-Software/kyber/blob/476e22c1a1ed579f3030e1ae46077036dc384d7f/src/reference/poly.rs#L291 and the fix in the reference implementation https://github.com/pq-crystals/kyber/commit/9b8d30698a3e7449aeb34e62339d4176f11e3c6c

Correctness of key padding for obfuscation of short TDEA/AES keys is not enforced

1

## Issue In this implementation, some test vectors have wrong inner key padding. This can be seen by looking at the decrypted data before unpadding, or even by inspecting the...