All pull requests

Pull requests

• RISC-V RSA: batched divsteps inverse for crt_values and recover_primes_det's GCD

  #4062·alex opened Nov 2, 2026Member·

  ·

• RISC-V brainpoolP384r1 ECDSA verification: R = 4R by Jacobian doublings

  untrusted-only
  #4061·alex opened Nov 2, 2026Member·

  ·

• RISC-V brainpoolP256r1 ECDSA verification: R = 4R by Jacobian doublings

  untrusted-only
  #4060·alex opened Nov 2, 2026Member·

  ·

• RISC-V brainpoolP384r1: vg_brainpoolp384r1_mul by four-bit windows

  untrusted-only
  #4059·alex opened Nov 2, 2026Member·

  ·

• RISC-V brainpoolP256r1: vg_brainpoolp256r1_mul by four-bit windows

  untrusted-only
  #4058·alex opened Nov 2, 2026Member·

  ·

• brainpoolP384r1 on RISC-V: verified ECDSA (verify, RFC 6979 sign with SHA-384)

  #4056·alex opened Nov 2, 2026Member·

  ·

• brainpoolP256r1 on RISC-V: verified ECDSA (verify, RFC 6979 sign with SHA-256)

  #4055·alex opened Nov 2, 2026Member·

  ·

• Spec: remove RSA prime recovery by Appendix C.1 (trust change, removal only)

  #4035·reaperhulk opened Nov 2, 2026Member·2/2·

  ·

• Remove RSA prime recovery by Appendix C.1's implementations and proofs

  #4025·reaperhulk opened Nov 2, 2026Member·1/2·

  ·

• x86-64 RSA-OAEP with MGF1's hash function as a Hash table

  #4008·alex opened Nov 2, 2026Member·5/5·

  ·

• TCB: emit a generic caller once for every variant of an interface

  #3986·alex opened Nov 2, 2026Member·4/5·

  ·

• Proof framework: running an indirect call of a list of functions

  untrusted-only
  #3966·alex opened Nov 2, 2026Member·3/5·

  ·

• Spec: the hash-function table interface Hash, and RSA-OAEP with MGF1's hash as a table

  #3965·alex opened Nov 2, 2026Member·2/5·

  ·

• TCB: indirect calls through tables of functions (x86-64)

  #3963·alex opened Nov 2, 2026Member·1/5·

  ·

• Automatically prepare reused ML-DSA keys on AArch64

  #3819·reaperhulk opened Oct 31, 2026Member·2/2·

  ·

• Specify optional ML-DSA prepared key polynomial caches

  #3806·reaperhulk opened Oct 31, 2026Member·1/2·

  ·

• CI: narrow Rust jobs by module cfg and in the merge queue; full runs every six hours

  #3176·reaperhulk opened Oct 23, 2026Member·

  ·

• rustls-provider: a rustls CryptoProvider backed by verified-garbage, and benchmarks against aws-lc-rs

  #991·alex opened Oct 5, 2026Member·

  ·
  5

• Experiment: verified "no secret residue" on return (x86-64)

  #801·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative store bypass (Spectre v4) semantics and taint checker for x86-64

  #773·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative constant time (Spectre v1/v1.1) for x86-64 taint proofs

  #769·reaperhulk opened Oct 4, 2026Member·

  ·
  3