Skip to content

Fix potential kyberslash attack#2

Closed
bifurcation wants to merge 17 commits intobifurcation:masterfrom
supinie:master
Closed

Fix potential kyberslash attack#2
bifurcation wants to merge 17 commits intobifurcation:masterfrom
supinie:master

Conversation

@bifurcation
Copy link
Owner

No description provided.

@codspeed-hq
Copy link

codspeed-hq bot commented May 31, 2024

CodSpeed Performance Report

Merging #2 will not alter performance

Comparing supinie:master (1335bd3) with master (95ff792)

Summary

✅ 4 untouched benchmarks

supinie and others added 4 commits June 4, 2024 14:42
Updates compress method to remove division of secret values by public value (q)
as described in the kyberslash attack
This tweaks the `repository` fields in Cargo metadata in order to use the correct (i.e. git clonable) URL.
The existing GitHub webUI URLs for each package have been retained and moved to `homepage` fields.
Previously `beta` was used for the `integer_division_remainder_used`
lint, which was stabilized in 1.79 which was released today.

Closes RustCrypto#27
dependabot bot and others added 11 commits July 8, 2024 09:00
…pto#33)

* build(deps): bump hybrid-array from 0.2.0-rc.8 to 0.2.0-rc.9

Bumps [hybrid-array](https://github.com/RustCrypto/hybrid-array) from 0.2.0-rc.8 to 0.2.0-rc.9.
- [Changelog](https://github.com/RustCrypto/hybrid-array/blob/master/CHANGELOG.md)
- [Commits](RustCrypto/hybrid-array@v0.2.0-rc.8...v0.2.0-rc.9)

---
updated-dependencies:
- dependency-name: hybrid-array
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* ml-kem: use `try_from` instead of deprecated `from_slice` (RustCrypto#34)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: supinie <86788874+supinie@users.noreply.github.com>
- Adds "About", "Crates", "License" and "Contribution" sections
- Adds badges and links
They don't fit inline anyway, and this is more readable
Bumps [zeroize](https://github.com/RustCrypto/utils) from 1.7.0 to 1.8.1.
- [Commits](RustCrypto/utils@zeroize-v1.7.0...zeroize-v1.8.1)

---
updated-dependencies:
- dependency-name: zeroize
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Adds `no_std` support to `dhkem`, which involved moving `std`-dependent
tests from `lib/` to the `tests/` directory, which links them in a
separate crate that can access `std`.

Also adds `default-features = false` to each of the elliptic curve
crate dependencies.

Finally, adds a CI check that the crate can link on a `no_std` target.
This maps to the `ecdh` feature name of the respective crates
Also adds `#[warn(missing_docs)]`.

This reduces the curve choices to the following:

- k256: secp256k1
- p256: NIST P-256
- p384: NIST P-384
- p521: NIST P-521

It also adds `*Kem` to the end of every type name, to avoid a name clash
between elliptic curves and their respective KEMs.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants