pqc/crypto_kem/frodokem1344aes/clean
Matthias J. Kannwischer 1eb8fbe8d3 FrodoKEM: Fix bug in the output of the ct_verify function (#367)
* Fix bug in the output of the ct_verify function

A bug in the CCA transformation was reported on the pqc-forum on 2020-12-10
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/kSUKzDNc5ME

It was fixed today in 669522db63.
This commit ports that fix to PQClean

* add note to SECURITY.md

* update upstream commit in META.yml
2021-03-24 21:02:50 +00:00
..
api.h Add FrodoKEM-1344-AES 2019-04-10 12:16:24 -04:00
common.h Fix timing leak in decapsulation. 2021-03-24 21:02:46 +00:00
kem.c Fix timing leak in decapsulation. 2021-03-24 21:02:46 +00:00
LICENSE Add FrodoKEM-1344-AES 2019-04-10 12:16:24 -04:00
Makefile Add -Wredundant-decls 2019-05-20 16:12:01 +02:00
Makefile.Microsoft_nmake Enable optimizers on Windows (#244) 2019-10-21 14:23:59 +02:00
matrix_aes.c Split aes*_keyexp up into ecb and ctr variants 2021-03-24 21:02:46 +00:00
noise.c Make a static global explicitly const 2019-07-18 13:42:37 +02:00
params.h Add FrodoKEM-1344-AES 2019-04-10 12:16:24 -04:00
util.c FrodoKEM: Fix bug in the output of the ct_verify function (#367) 2021-03-24 21:02:50 +00:00