pqc/crypto_kem/frodokem976aes/clean
Matthias J. Kannwischer 3d7d2024fa
FrodoKEM: Fix bug in the output of the ct_verify function (#367)
* Fix bug in the output of the ct_verify function

A bug in the CCA transformation was reported on the pqc-forum on 2020-12-10
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/kSUKzDNc5ME

It was fixed today in 669522db63.
This commit ports that fix to PQClean

* add note to SECURITY.md

* update upstream commit in META.yml
2020-12-14 10:39:10 -05:00
..
api.h Add FrodoKEM-976-AES 2019-04-10 12:11:27 -04:00
common.h Fix timing leak in decapsulation. 2020-06-19 13:15:13 -04:00
kem.c Fix timing leak in decapsulation. 2020-06-19 13:15:13 -04:00
LICENSE Add FrodoKEM-976-AES 2019-04-10 12:11:27 -04:00
Makefile Add -Wredundant-decls 2019-05-20 16:12:01 +02:00
Makefile.Microsoft_nmake Enable optimizers on Windows (#244) 2019-10-21 14:23:59 +02:00
matrix_aes.c Split aes*_keyexp up into ecb and ctr variants 2020-03-26 20:18:02 -04:00
noise.c Make a static global explicitly const 2019-07-18 13:42:37 +02:00
params.h Add FrodoKEM-976-AES 2019-04-10 12:11:27 -04:00
util.c FrodoKEM: Fix bug in the output of the ct_verify function (#367) 2020-12-14 10:39:10 -05:00