All pull requests

Pull requests

• ARMv7 model: umaal, outside the baseline (feature umaal)

  #2836·alex opened Oct 19, 2026Member·

  ·

• ML-KEM x86-64: delete the AVX2 NTT and product nothing registers

  #2835·alex opened Oct 19, 2026Member·Queued

• Implement RSASSA-PKCS1-v1_5 on i686

  #2833·reaperhulk opened Oct 18, 2026Member·

  ·

• ML-KEM x86-64: fused encapsulation with 16-bit polynomials; delete the u32 code with AVX2

  #2830·alex opened Oct 18, 2026Member·Queued
  2

• Implement verified DSA parameter generation on AArch64

  #2828·reaperhulk opened Oct 18, 2026Member·

  ·

• Keep ARMv7 DSA doubling proofs compatible with clobbers frames

  #2820·reaperhulk opened Oct 18, 2026Member·

  ·

• Share ARMv7 DSA Montgomery context setup

  #2819·reaperhulk opened Oct 18, 2026Member·

  ·

• Specify callable DSA Montgomery context setup

  #2817·reaperhulk opened Oct 18, 2026Member·

  ·

• Lean shards: unpack only the modules a shard's sinks need

  #2800·reaperhulk opened Oct 18, 2026Member·

  ·

• Implement verified DSA parameter generation on x86-64

  #2767·reaperhulk opened Oct 18, 2026Member·

  ·

• rsa: add verified i686 core operations

  #2757·reaperhulk opened Oct 18, 2026Member·

  ·

• [DRAFT stack] Indirect calls on x86-64, and one RSA-OAEP / RSA-PSS / RFC 6979 function per operation, through hash tables

  #2722·alex opened Oct 18, 2026Member·

  ·

• rustls-provider: a rustls CryptoProvider backed by verified-garbage, and benchmarks against aws-lc-rs

  #991·alex opened Oct 5, 2026Member·

  ·
  5

• Experiment: verified "no secret residue" on return (x86-64)

  #801·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative store bypass (Spectre v4) semantics and taint checker for x86-64

  #773·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative constant time (Spectre v1/v1.1) for x86-64 taint proofs

  #769·reaperhulk opened Oct 4, 2026Member·

  ·
  3

• SHA-384/512/512-224/512-256 on PPC64LE: verified compress/init/update/finalize

  #117·alex opened Sep 28, 2026Member·

  ·
  2

• HMAC-SHA-256 on PPC64LE: verified init/finalize

  #111·alex opened Sep 28, 2026Member·

  ·
  7

• SHA-256 on PPC64LE: verified compress/init/update/finalize

  #110·alex opened Sep 28, 2026Member·

  ·
  3

• ChaCha20 on PPC64LE: verified block function, keystream XOR and streaming API

  #109·alex opened Sep 28, 2026Member·

  ·
  2

• TCB: 64-bit little-endian PowerPC (ISA model, printer, ELFv2 target)

  #108·alex opened Sep 28, 2026Member·

  ·
  1

• CI: test on ppc64le, on a ppc64le runner as pyca/cryptography does

  #97·alex opened Sep 28, 2026Member·

  ·
  5