Matthias J. Kannwischer
1eb8fbe8d3
FrodoKEM: Fix bug in the output of the ct_verify function ( #367 )
...
* Fix bug in the output of the ct_verify function
A bug in the CCA transformation was reported on the pqc-forum on 2020-12-10
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/kSUKzDNc5ME
It was fixed today in 669522db63
2021-03-24 21:02:50 +00:00
Thom Wiggers
560ac15334
Fix missed overflowing mul in FrodoKEM
...
It happened in another place
2021-03-24 21:02:49 +00:00
Thom Wiggers
af9b25b8fa
Fix more overflowing muls in Frodo
2021-03-24 21:02:49 +00:00
Thom Wiggers
9a1319454f
Also fix problem in FrodoKEM-SHAKE
2021-03-24 21:02:49 +00:00
John M. Schanck
6154c0d7d3
astyle
2021-03-24 21:02:48 +00:00
John M. Schanck
512adcc0db
frodo: satisfy test_boolean
2021-03-24 21:02:48 +00:00
Douglas Stebila
96e5f1d7ae
Fix timing leak in decapsulation.
...
As identified in: Qian Guo, Thomas Johansson, Alexander Nilsson. A
key-recovery timing attack on post-quantum primitives using the
Fujisaki-Okamoto transformation and its application on FrodoKEM. In
CRYPTO 2020.
Based on
155c24c3df
2021-03-24 21:02:46 +00:00
Thom Wiggers
5b5956c2ef
fixup! Fix uint8_t to uint16_t upcast in Frodo
2021-03-24 21:02:46 +00:00
Thom Wiggers
3b655f3f72
Fix uint8_t to uint16_t upcast in Frodo
2021-03-24 21:02:46 +00:00
Thom Wiggers
f792b925b4
Enable optimizers on Windows ( #244 )
2019-10-21 14:23:59 +02:00
Thom Wiggers
2108bdcdb5
Make a static global explicitly const
2019-07-18 13:42:37 +02:00
Thom Wiggers
4cea81d15f
Convert principal-submitter into a list
...
There are schemes, like SABER (#192 ) that have more than one principal
submitter. Consistency warrants that we turn it into a list for all
schemes and don't do something with allowing either a str or a list:
that would just be very annoying to parse.
Closes #194
2019-06-21 09:30:55 +02:00
Douglas Stebila
9a82706697
Merge pull request #176 from PQClean/frodoopt
...
Add optimized FrodoKEM
2019-05-22 11:45:20 +02:00
Matthias J. Kannwischer
901761d88a
make VS compiler happy in matrix_shake.c
2019-05-21 16:22:09 +02:00
Matthias J. Kannwischer
57ad79ae3a
remove preprocessor conditionals from frodokem640shake
2019-05-21 15:51:56 +02:00
Matthias J. Kannwischer
7701666093
remove OPENSSL preprocessor conditionals
2019-05-21 15:17:57 +02:00
Matthias J. Kannwischer
081442bb8d
use more recent version of the code
2019-05-21 15:15:52 +02:00
Thom Wiggers
199adb8072
Add -Wredundant-decls
2019-05-20 16:12:01 +02:00
Matthias J. Kannwischer
a4906713be
use optimized matrix_shake.c for frodokem640shake
2019-05-20 15:12:51 +02:00
Matthias J. Kannwischer
0127ba93f5
Add IND-CPA/IND-CCA2 security field to METADATA. add test for it as well ( #165 )
2019-05-13 11:20:32 -04:00
Douglas Stebila
3494c96e53
Update to latest changes from upstream, fix correctness on MS Visual Studio ( #163 )
2019-05-05 18:33:34 -04:00
Douglas Stebila
6e1f66d047
Don't run testvectors checks on KEMs ( #161 )
2019-04-30 11:15:57 -04:00
Joost Rijneveld
68b12866ce
Use more standard Wvla
2019-04-24 13:52:02 +02:00
Joost Rijneveld
e32666a0ab
Throw errors when using variable-length arrays
...
Windows already complains about this in CI, but this will
let us catch these issues on Linux as well.
2019-04-24 12:35:17 +02:00
Joost Rijneveld
baf93e2826
Merge pull request #146 from PQClean/move-secret-key-to-scheme-meta
...
Move secret key length back to scheme-level META
2019-04-18 17:14:08 +02:00
Thom Wiggers
b5d4e93478
Add -O3 to CFLAGS
2019-04-17 11:56:16 +02:00
Joost Rijneveld
972315dec5
Move secret key length back to scheme-level META
2019-04-17 11:08:45 +02:00
Douglas Stebila
c0cf260113
Merge branch 'master' into nist-kat
2019-04-16 16:20:31 -04:00
Thom Wiggers
eb5f7f1e57
Fix int/size_t comparison in frodo
2019-04-16 13:37:50 +02:00
Douglas Stebila
c42619d855
Merge branch 'master' into nist-kat
2019-04-14 19:28:59 -04:00
Douglas Stebila
ff71e7de11
Correct FrodoKEM submitter list
2019-04-14 17:38:53 -04:00
Douglas Stebila
8e7cf2b5cd
Fix linter complaints
2019-04-14 17:29:58 -04:00
Douglas Stebila
a815543f32
Add NIST KAT check for KEMs
2019-04-14 17:17:11 -04:00
Matthias J. Kannwischer
5587cdb4a8
Add -Wmissing-prototypes ( #109 )
...
* fix prototypes for sphincs and static functions in aes.c
* fix missing prototypes in all frodo variants
* fix missing prototypes in kyber
* remove const from non-pointer arguments in Frodo
* add missing prototypes to requirements in README
2019-04-13 11:47:29 -04:00
Douglas Stebila
cfc9705751
test_format wasn't actually checking output of astyle
...
It was only checking the return code, but astyle was always returning 0.
Changed to parse the output and look for the string "Formatted"
2019-04-10 21:23:33 -04:00
Douglas Stebila
6fabab1fd9
Merge branch 'master' into more-frodo
2019-04-09 09:06:20 -04:00
Joost Rijneveld
fe010541ec
Move secret key length to implementation meta
2019-04-08 11:39:17 +02:00
Douglas Stebila
a296085e57
Merge branch 'master' into more-frodo
2019-04-06 08:51:03 -04:00
Joost Rijneveld
e2fcad2823
Merge branch 'master' into reduce-iterations
2019-04-06 13:10:21 +02:00
Thom Wiggers
d39d7c66db
Add missing metadata to META
2019-04-05 16:38:26 +02:00
Douglas Stebila
19d177efb3
Use 5 iteractions for functional tests and test vectors
2019-04-05 10:22:52 -04:00
Douglas Stebila
72ff0dae94
Minor reformatting
2019-04-04 12:05:20 -04:00
Douglas Stebila
4162be0401
Switch for int and unsigned char to size_to and uint8_t
2019-04-02 14:06:06 -04:00
Douglas Stebila
41bc57689c
Fix more compiler warnings
2019-03-31 21:55:55 -04:00
Douglas Stebila
1e5e9d96f8
Fix compiler warnings and bug
2019-03-31 21:52:35 -04:00
Douglas Stebila
9cb1c56ac1
Make Frodo code endian-agnostic
2019-03-31 21:44:36 -04:00
Douglas Stebila
028fb2120e
Fix typo
2019-03-21 23:53:53 -04:00
Douglas Stebila
ca798ee18a
Fix Windows warnings
2019-03-21 23:51:34 -04:00
Douglas Stebila
f0ba4f2051
Add Windows Makefile
2019-03-21 23:48:52 -04:00
Douglas Stebila
e153dfdf56
Apply clang-tidy
2019-03-21 23:40:12 -04:00
