Commit Graph

9 Commits

Author SHA1 Message Date
Matthias J. Kannwischer
1eb8fbe8d3 FrodoKEM: Fix bug in the output of the ct_verify function (#367)
* Fix bug in the output of the ct_verify function

A bug in the CCA transformation was reported on the pqc-forum on 2020-12-10
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/kSUKzDNc5ME

It was fixed today in 669522db63.
This commit ports that fix to PQClean

* add note to SECURITY.md

* update upstream commit in META.yml
2021-03-24 21:02:50 +00:00
Thom Wiggers
560ac15334 Fix missed overflowing mul in FrodoKEM
It happened in another place
2021-03-24 21:02:49 +00:00
Thom Wiggers
af9b25b8fa Fix more overflowing muls in Frodo 2021-03-24 21:02:49 +00:00
John M. Schanck
6154c0d7d3 astyle 2021-03-24 21:02:48 +00:00
John M. Schanck
512adcc0db frodo: satisfy test_boolean 2021-03-24 21:02:48 +00:00
Douglas Stebila
96e5f1d7ae Fix timing leak in decapsulation.
As identified in: Qian Guo, Thomas Johansson, Alexander Nilsson. A 
key-recovery timing attack on post-quantum primitives using the 
Fujisaki-Okamoto transformation and its application on FrodoKEM. In 
CRYPTO 2020.

Based on 
155c24c3df
2021-03-24 21:02:46 +00:00
Matthias J. Kannwischer
5587cdb4a8 Add -Wmissing-prototypes (#109)
* fix prototypes for sphincs and static functions in aes.c

* fix missing prototypes in all frodo variants

* fix missing prototypes in kyber

* remove const from non-pointer arguments in Frodo

* add missing prototypes to requirements in README
2019-04-13 11:47:29 -04:00
Douglas Stebila
6ca367e2e6 Apply astyle 2019-04-11 08:18:49 -04:00
Douglas Stebila
30c8661d82 Add FrodoKEM-1344-AES 2019-04-10 12:16:24 -04:00