Douglas Stebila ae1530d192 Fix timing leak in decapsulation. ... As identified in: Qian Guo, Thomas Johansson, Alexander Nilsson. A key-recovery timing attack on post-quantum primitives using the Fujisaki-Okamoto transformation and its application on FrodoKEM. In CRYPTO 2020. Based on 155c24c3df		2020-06-19 13:15:13 -04:00
..
api.h	add opt versions of frodokem976aes, frodokem976shake, frodokem1344aes, frodokem1344shake and the corresponding duplicate checks	2019-05-22 07:42:43 +02:00
common.h	Fix timing leak in decapsulation.	2020-06-19 13:15:13 -04:00
kem.c	Fix timing leak in decapsulation.	2020-06-19 13:15:13 -04:00
LICENSE	add opt versions of frodokem976aes, frodokem976shake, frodokem1344aes, frodokem1344shake and the corresponding duplicate checks	2019-05-22 07:42:43 +02:00
Makefile	add opt versions of frodokem976aes, frodokem976shake, frodokem1344aes, frodokem1344shake and the corresponding duplicate checks	2019-05-22 07:42:43 +02:00
Makefile.Microsoft_nmake	Enable optimizers on Windows (#244)	2019-10-21 14:23:59 +02:00
matrix_aes.c	Split aes*_keyexp up into ecb and ctr variants	2020-03-26 20:18:02 -04:00
noise.c	Make a static global explicitly const	2019-07-18 13:42:37 +02:00
params.h	add opt versions of frodokem976aes, frodokem976shake, frodokem1344aes, frodokem1344shake and the corresponding duplicate checks	2019-05-22 07:42:43 +02:00
util.c	Fix timing leak in decapsulation.	2020-06-19 13:15:13 -04:00