forked from pool/liboqs
Marcus Meissner
5ceb73367d
* Key encapsulation mechanisms:
- HQC: Disabled compiler optimizations to avoid secret-dependent branching in certain configurations. HQC remains disabled by default.
- ML-KEM: Updated the default ML-KEM implementation to [PQCP's mlkem-native v1.0.0](https://github.com/pq-code-package/mlkem-native/releases/tag/v1.0.0).
* Digital signature schemes:
- New API: added an API function to check if a signature scheme supports signing with a context string.
- SNOVA: added [SNOVA](https://snova.pqclab.org/) from NIST Additional Signature Schemes Round 2.
* Other changes:
- Added an AVX512VL-optimized backend for SHA3.
- Improved memory management throughout the codebase.
- CVE-2025-52473: Disabled compiler optimizations for HQC to avoid
secret-dependent branches. Thank you to Zhenzhi Lai and Zhiyuan Zhang
from from the University of Melbourne and the Max Planck Institute
for Security and Privacy for identifying the issue. (bsc#1246301)
- new major library version liboqs.so.8
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/liboqs?expand=0&rev=36
20 lines
1.4 KiB
Diff
20 lines
1.4 KiB
Diff
Index: liboqs-0.13.0/src/kem/frodokem/kem_frodokem.h
|
|
===================================================================
|
|
--- liboqs-0.13.0.orig/src/kem/frodokem/kem_frodokem.h
|
|
+++ liboqs-0.13.0/src/kem/frodokem/kem_frodokem.h
|
|
@@ -12,10 +12,10 @@
|
|
#define OQS_KEM_frodokem_640_aes_length_shared_secret 16
|
|
#define OQS_KEM_frodokem_640_aes_length_keypair_seed 0
|
|
OQS_KEM *OQS_KEM_frodokem_640_aes_new(void);
|
|
-OQS_API OQS_STATUS OQS_KEM_frodokem_640_aes_keypair(uint8_t *public_key, uint8_t *secret_key);
|
|
-OQS_API OQS_STATUS OQS_KEM_frodokem_640_aes_keypair_derand(uint8_t *public_key, uint8_t *secret_key, const uint8_t *seed);
|
|
-OQS_API OQS_STATUS OQS_KEM_frodokem_640_aes_encaps(uint8_t *ciphertext, uint8_t *shared_secret, const uint8_t *public_key);
|
|
-OQS_API OQS_STATUS OQS_KEM_frodokem_640_aes_decaps(uint8_t *shared_secret, const uint8_t *ciphertext, const uint8_t *secret_key);
|
|
+OQS_API OQS_STATUS OQS_KEM_frodokem_640_aes_keypair(unsigned char *public_key, unsigned char *secret_key);
|
|
+OQS_API OQS_STATUS OQS_KEM_frodokem_640_aes_keypair_derand(unsigned char *public_key, unsigned char *secret_key, const unsigned char *seed);
|
|
+OQS_API OQS_STATUS OQS_KEM_frodokem_640_aes_encaps(unsigned char *ciphertext, unsigned char *shared_secret, const unsigned char *public_key);
|
|
+OQS_API OQS_STATUS OQS_KEM_frodokem_640_aes_decaps(unsigned char *shared_secret, const unsigned char *ciphertext, const unsigned char *secret_key);
|
|
#endif
|
|
|
|
#ifdef OQS_ENABLE_KEM_frodokem_640_shake
|