All pull requests

Pull requests

• ML-DSA x86-64: verify with the public-key hash the key keeps

  #3745·reaperhulk opened Oct 30, 2026Member·

  ·

• ML-DSA x86-64 sign: each row of w with one fused dot-inverse call

  #3744·reaperhulk opened Oct 30, 2026Member·

  ·

• ARMv7 brainpoolP256r1: [k]G by the shared signed seven-bit comb (sign 5.9×, public key 8×, verify 1.8× faster)

  #3743·reaperhulk opened Oct 30, 2026Member·

  ·

• ARMv7 P-384: [k]G by the shared signed seven-bit comb (sign 5.9×, public key 8×, verify 1.8× faster)

  #3742·reaperhulk opened Oct 30, 2026Member·

  ·

• ARMv7 P-256: [k]G by the shared signed seven-bit comb (sign 5.9×, public key 8×, verify 1.8× faster)

  #3741·reaperhulk opened Oct 30, 2026Member·

  ·

• AArch64 ML-DSA: stop rejected signing attempts after whole-vector norm checks

  #3740·reaperhulk opened Oct 30, 2026Member·

  ·

• Static checks: run the checks as background steps

  #3739·reaperhulk opened Oct 30, 2026Member·

  ·

• riscv64 runner image: link the tests with mold

  #3736·alex opened Oct 30, 2026Member·

  ·
  2

• Emitter: emit from module drivers, audit in the Lake build

  #3717·reaperhulk opened Oct 30, 2026Member·3/3·

  ·

• TCB emitter: module drivers, audits and runners

  #3716·reaperhulk opened Oct 30, 2026Member·2/3·

  ·

• CI: let the shard planner read libraries whose sources are generated

  #3715·reaperhulk opened Oct 30, 2026Member·1/3·

  ·

• CI: narrow Rust jobs by module cfg and in the merge queue; full runs every six hours

  #3176·reaperhulk opened Oct 23, 2026Member·

  ·

• [DRAFT stack] Indirect calls on x86-64, and one RSA-OAEP / RSA-PSS / RFC 6979 function per operation, through hash tables

  #2722·alex opened Oct 18, 2026Member·

  ·

• rustls-provider: a rustls CryptoProvider backed by verified-garbage, and benchmarks against aws-lc-rs

  #991·alex opened Oct 5, 2026Member·

  ·
  5

• Experiment: verified "no secret residue" on return (x86-64)

  #801·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative store bypass (Spectre v4) semantics and taint checker for x86-64

  #773·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative constant time (Spectre v1/v1.1) for x86-64 taint proofs

  #769·reaperhulk opened Oct 4, 2026Member·

  ·
  3