This repository was archived by the owner on Oct 23, 2026. It is now read-only.

Repository navigation

Ct fixes - #1

Merged

dcharlot65-openie merged 7 commits into

mainfrom

Oct 16, 2026

Merged

Ct fixes#1
dcharlot65-openie merged 7 commits into
mainfrom
ct-fixes

Commits on Oct 16, 2026
- Compare AEAD, GCM and ML-KEM tags as bytes with an OR-of-XOR accumulator
  David Charlot
  committed
  39ab145
- X25519: replace the secret-bit branch with an arithmetic cswap
  David Charlot
  committed
  69f9216
- Hex helpers: parse and format secrets with arithmetic, no table
  David Charlot
  committed
  0ae07c0
- Ed25519: full-scan window select, branch-free scalar reduction
  David Charlot
  committed
  4e1d7cd
- ML-KEM: multiply-shift division, masked decaps select, FIPS 203 input checks
  David Charlot
  committed
  d8e4d5d
- HPKE and AES-GCM: no S-box table, masked GHASH, RFC 9180 all-zero DH check
  David Charlot
  committed
  c3dba32
- PQXDH: pqxdh_sk refuses an empty shared secret or DH
  David Charlot
  committed
  e7585c3