7 Commits

Author	SHA1	Message	Date
Matthias J. Kannwischer	1eb8fbe8d3	FrodoKEM: Fix bug in the output of the ct_verify function (#367) ... * Fix bug in the output of the ct_verify function A bug in the CCA transformation was reported on the pqc-forum on 2020-12-10 https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/kSUKzDNc5ME It was fixed today in 669522db63. This commit ports that fix to PQClean * add note to SECURITY.md * update upstream commit in META.yml	2021-03-24 21:02:50 +00:00
Thom Wiggers	560ac15334	Fix missed overflowing mul in FrodoKEM ... It happened in another place	2021-03-24 21:02:49 +00:00
Thom Wiggers	af9b25b8fa	Fix more overflowing muls in Frodo	2021-03-24 21:02:49 +00:00
John M. Schanck	6154c0d7d3	astyle	2021-03-24 21:02:48 +00:00
John M. Schanck	512adcc0db	frodo: satisfy test_boolean	2021-03-24 21:02:48 +00:00
Douglas Stebila	96e5f1d7ae	Fix timing leak in decapsulation. ... As identified in: Qian Guo, Thomas Johansson, Alexander Nilsson. A key-recovery timing attack on post-quantum primitives using the Fujisaki-Okamoto transformation and its application on FrodoKEM. In CRYPTO 2020. Based on 155c24c3df	2021-03-24 21:02:46 +00:00
Matthias J. Kannwischer	c7c080568e	add opt versions of frodokem976aes, frodokem976shake, frodokem1344aes, frodokem1344shake and the corresponding duplicate checks	2019-05-22 07:42:43 +02:00