4372 Commits
Author SHA1 Message Date
Frank Denis 77e1ce5d6d Add code comments about why variable-time is fine for public inputs 1.0.22-RELEASE 1.0.22 2026-04-09 23:00:06 +02:00
Frank Denis d57f757b52 Update ChangeLog 2026-04-09 23:00:06 +02:00
Frank Denis c213b0808b Regen emscripten symbols 2026-04-09 23:00:05 +02:00
Frank Denis d022f2d637 State wipe 2026-04-09 23:00:05 +02:00
Frank Denis 758bb4a4de ML-KEM: wipe ephemeral seeds and harden invalid-pk test 2026-04-09 23:00:05 +02:00
Frank Denis bf8cf449ea sha3: make post-final misuse safe and deterministic 2026-04-09 23:00:05 +02:00
Frank Denis 3ab195644f Add .swival/ and tmp/ to .gitignore 2026-04-09 23:00:05 +02:00
Frank Denis 57c6200865 Regen 2026-04-09 23:00:05 +02:00
Frank Denis 9a16e6b79a Add SHA-3 and KEM symbols to emscripten exports 2026-04-09 23:00:05 +02:00
Frank Denis 30a18ae407 Add a high-level crypto_kem API mapping to xwing 2026-04-09 23:00:05 +02:00
Frank Denis 3fa3eac209 Add X-Wing 2026-04-09 23:00:05 +02:00
Frank Denis bca64e0982 Add ML-KEM768 2026-04-09 23:00:05 +02:00
Frank Denis 350313ec20 Add support for SHA3 2026-04-09 23:00:05 +02:00
Frank Denis 2f8a60ae82 Update ChangeLog 2026-04-09 23:00:05 +02:00
Frank Denis a09f7ed21a Add some coverage exclusions 2026-04-09 23:00:05 +02:00
Frank Denis 8490eeb0d5 Add a couple more tests 2026-04-09 23:00:04 +02:00
Frank Denis b0d658a856 Add a couple more tests 2026-04-09 23:00:04 +02:00
Frank Denis dc213c8e8e Add some additional tests for HKDF and Salsa20/12 2026-04-09 23:00:04 +02:00
Frank Denis bb1894c528 Prepare for 1.0.22 2026-04-09 23:00:04 +02:00
Frank Denis 98e1f0dba7 SHAKE: in case update is called right after squeezing, permute
Calling update after squeezing is undocumented and non standard,
but if an application still decides to do it, permute the state
before absorbing so that it's still safe to do so.

We can easily do it since we keep track of the state.

Still return an error as this is not the expected usage of SHAKE,
and zeroing the state is another thing we could do.
2026-04-09 23:00:04 +02:00
Frank Denis a338eaaa02 apple-xcframework: move headers into a Clibsodium subdirectory
The generated Clibsodium.xcframework will have headers at
Headers/Clibsodium/ instead of Headers/

This prevents the module.modulemap collision when used alongside
other xcframeworks.
2026-04-09 23:00:04 +02:00
Frank Denis db920a146c Add NEON optimizations for Argon2 2026-04-09 23:00:04 +02:00
Frank Denis 3e7548c62f Update GitHub actions 1.0.21-FINAL 2026-04-09 22:59:47 +02:00
Frank Denis 4defa543c4 Relax crypto_auth_hmacsha{256,512}_init to accept NULL pointers 2026-04-09 22:20:32 +02:00
Frank Denis d2f922522b Regen 2026-04-09 23:00:19 +02:00
Frank Denis 45b5cae00a Include <core.h> to get sodium_misuse 2026-04-09 22:18:52 +02:00
Frank Denis d6820320e8 Allow NULL pointers (with length=0) with shorthash 2026-04-09 22:18:47 +02:00
Frank Denis c1fe2af601 Reject impossible lengths in crypto_box 2026-04-09 22:18:41 +02:00
Frank Denis c7fb97c2bf Add some zeroing 2026-04-09 22:18:35 +02:00
Frank Denis 874c12a3ae Add some message size guards in AEGIS, for consistency 2026-04-09 22:18:29 +02:00
Frank Denis 0a23c7b3f0 Update msys2 2026-04-09 22:18:22 +02:00
Frank Denis a77b7e7bbf Add Visual Studio quirks back 2026-04-09 00:42:34 +02:00
Frank Denis 4fe02571dd Fix compilation on ARM with very old gcc versions 2026-04-09 00:28:22 +02:00
Frank Denis d4bc6fb5fe Unify AES key expansion code on ARM 2026-04-09 00:28:18 +02:00
Frank Denis 829426cd1d More fixes for MSVC/aarch64 2026-04-09 00:28:13 +02:00
Frank Denis 2d949f8330 Add support for MSVC to aes256gcm 2026-04-09 00:28:09 +02:00
Frank Denis 168e60a217 Add casts for aarch64+gcc 2026-04-09 00:28:06 +02:00
Frank Denis 00ff370f84 Try to enable aes256-gcm even on non-clang compilers 2026-04-09 00:28:03 +02:00
Frank Denis 5160d47a9d Remove trailing comma 2026-04-09 00:15:51 +02:00
Frank Denis 098c5d46d3 Call sodium_misuse on ridiculously high base64 input lengths 2026-04-08 21:41:43 +02:00
Frank Denis 9abddb72aa Add version consistency check to CI 2026-04-08 21:41:29 +02:00
Frank Denis 5cc1bbafde Do not strip debug builds 2026-04-08 10:09:15 +02:00
Frank Denis dc059149dc Add conftest files to .gitignore 2026-04-08 09:42:21 +02:00
Frank Denis 1518607867 C++ compat 2026-04-05 21:58:17 +02:00
Frank Denis 369fd35e07 Revert "local-dynamic is enough"
This reverts commit 462e9a648b.
2026-04-04 22:45:15 +02:00
Frank Denis 175d573e29 Remove ctype usage 2026-04-04 22:41:59 +02:00
Frank Denis 7a69ca5bc9 Refactor IPv6 zone ID parsing and reject malformed zone identifiers 2026-04-04 22:35:40 +02:00
Frank Denis 97a6e1d2d8 gcc on FreeBSD can produce bogus code for isspace 2026-04-04 22:24:16 +02:00
Frank Denis d44576d85a defined _AIX -> defined(_AIX) 2026-04-04 22:05:00 +02:00
Frank Denis bd6402c5db Define TLS as _Thread_local only if not properly autoconfigured 2026-04-04 11:12:55 +02:00