All pull requests

Pull requests

• x86-64 P-521: the window method's digits by n's bits (131, not 133)

  #1179·alex opened Oct 7, 2026Member·

  ·

• x86 Ed25519/X25519: the comb's tables in a static, selected by one block

  #1178·alex opened Oct 7, 2026Member·

  ·

• x86-64 P-521 ADX: the multiplication's operands at one-byte displacements

  #1177·alex opened Oct 7, 2026Member·

  ·

• AArch64 Ed25519/X25519: the comb's tables in a static, selected by one block

  #1176·alex opened Oct 7, 2026Member·

  ·

• x86-64 AES-NI key expansion: aesenclast on broadcast words, not aeskeygenassist

  #1175·alex opened Oct 7, 2026Member·

  ·

• x86-64 P-521: x + x as the 521-bit rotation by one

  #1174·alex opened Oct 7, 2026Member·

  ·

• Rust printer: align every table of constants to 64 bytes

  #1173·alex opened Oct 7, 2026Member·

  ·

• x86-64 ML-KEM: vg_mlkem768_encrypt_mul and vg_mlkem1024_encrypt_mul, used by encryption

  #1172·alex opened Oct 7, 2026Member·

  ·

• x86-64 P-521 ADX arithmetic: first rows into empty registers, and the reductions' +1 in the carry chains

  #1171·alex opened Oct 7, 2026Member·

  ·

• x86-64 AES-GCM short path: only with text or more than 16 bytes of AAD

  #1170·alex opened Oct 7, 2026Member·

  ·

• AArch64 X448/Ed448: the comb's tables in a static, selected by one block

  #1169·alex opened Oct 7, 2026Member·

  ·

• Develop x86-64 P-256 public NAF verification

  #1168·reaperhulk opened Oct 7, 2026Member·

  ·

• x86-64 P-256 Montgomery squaring with ADX

  #1163·alex opened Oct 7, 2026Member·

  ·
  1

• x86-64 window method: the table's seven additions as a loop

  #1160·alex opened Oct 7, 2026Member·

  ·
  1

• rustls-provider: a rustls CryptoProvider backed by verified-garbage, and benchmarks against aws-lc-rs

  #991·alex opened Oct 5, 2026Member·

  ·
  2

• Experiment: verified "no secret residue" on return (x86-64)

  #801·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative store bypass (Spectre v4) semantics and taint checker for x86-64

  #773·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative constant time (Spectre v1/v1.1) for x86-64 taint proofs

  #769·reaperhulk opened Oct 4, 2026Member·

  ·
  3

• SHA-384/512/512-224/512-256 on PPC64LE: verified compress/init/update/finalize

  #117·alex opened Sep 28, 2026Member·

  ·
  2

• HMAC-SHA-256 on PPC64LE: verified init/finalize

  #111·alex opened Sep 28, 2026Member·

  ·
  5

• SHA-256 on PPC64LE: verified compress/init/update/finalize

  #110·alex opened Sep 28, 2026Member·

  ·
  3

• ChaCha20 on PPC64LE: verified block function, keystream XOR and streaming API

  #109·alex opened Sep 28, 2026Member·

  ·
  2

• TCB: 64-bit little-endian PowerPC (ISA model, printer, ELFv2 target)

  #108·alex opened Sep 28, 2026Member·

  ·
  1

• CI: test on ppc64le, on a ppc64le runner as pyca/cryptography does

  #97·alex opened Sep 28, 2026Member·

  ·
  5