All pull requests

Pull requests

• Benchmarks: one file per algorithm

  #148·reaperhulk opened Sep 28, 2026Member·

  ·
  

• scrypt on ARM64: verified Salsa20/8, scryptBlockMix and scryptROMix, and the Rust API

  #146·reaperhulk opened Sep 28, 2026Member·

  ·
  

• Vectors: one file per source under vectors/sources/, not one shared sources.toml

  #147·reaperhulk opened Sep 28, 2026Member·

  ·
  

• PBKDF2-HMAC-SHA-256 on ARM64: verified iteration via calls of vg_sha256_compress

  #145·reaperhulk opened Sep 28, 2026Member·

  ·
  

• Rust: each module states its own architectures, and CAVP tests get a file per algorithm

  #144·reaperhulk opened Sep 28, 2026Member·

  ·
  

• ChaCha20 keystream XOR on AArch64: verified, calling vg_chacha20_block

  #143·alex opened Sep 28, 2026Member·

  ·

• GHASH on x86-64: carry-less products with mul (BearSSL ctmul64)

  #142·reaperhulk opened Sep 28, 2026Member·

  ·
  

• Poly1305 on AArch64: verified init/blocks/finalize

  #140·alex opened Sep 28, 2026Member·

  ·

• ChaCha20-Poly1305 on x86-64: verified seal and open, composed in assembly with calls

  #139·alex opened Sep 28, 2026Member·

  ·

• scrypt on x86-64: verified Salsa20/8, scryptBlockMix and scryptROMix, and the Rust API

  #138·reaperhulk opened Sep 28, 2026Member·

  ·
  

• AES-GCM on x86-64 with AES-NI and PCLMULQDQ, chosen at run time

  #137·reaperhulk opened Sep 28, 2026Member·

  ·
  

• AES-GCM on x86-64: scalar constant-time AES and GHASH, verified, with a Rust API

  #136·reaperhulk opened Sep 28, 2026Member·

  ·
  

• Benchmarks: run only the benchmarks of the modules a change touches

  #133·reaperhulk opened Sep 28, 2026Member·

  ·
  

• CI: skip the Rust jobs or the Lean job when a change can't affect them

  #131·reaperhulk opened Sep 28, 2026Member·

  ·
  

• ChaCha20 keystream XOR on x86-64: verified, calling vg_chacha20_block

  #130·alex opened Sep 28, 2026Member·

  ·

• Poly1305 on x86-64: verified init/blocks/finalize, and a Rust API

  #123·alex opened Sep 28, 2026Member·

  ·
  1

• SHA-384/512/512-224/512-256 on PPC64LE: verified compress/init/update/finalize

  #117·alex opened Sep 28, 2026Member·

  ·

• TCB: ARMv7 mul (32 × 32 → 32-bit multiply)

  #115·alex opened Sep 28, 2026Member·

  ·
  2

• PBKDF2-HMAC-SHA-256 on x86-64: verified iteration via calls of vg_sha256_compress

  #112·alex opened Sep 28, 2026Member·

  ·
  1

• HMAC-SHA-256 on PPC64LE: verified init/finalize

  #111·alex opened Sep 28, 2026Member·

  ·

• SHA-256 on PPC64LE: verified compress/init/update/finalize

  #110·alex opened Sep 28, 2026Member·

  ·

• ChaCha20 on PPC64LE: verified block function

  #109·alex opened Sep 28, 2026Member·

  ·

• TCB: 64-bit little-endian PowerPC (ISA model, printer, ELFv2 target)

  #108·alex opened Sep 28, 2026Member·

  ·

• CI: test on ppc64le, on a ppc64le runner as pyca/cryptography does

  #97·alex opened Sep 28, 2026Member·

  ·
  2

• PBKDF2-HMAC, generic over the hash function, on the verified HMAC

  #37·alex opened Sep 27, 2026Member·

  ·
  3