Google OSS-Fuzz and Google Wycheproof for Nettle?

for Nettle. https://github.com/google/wycheproof https://github.com/google/wycheproof/tree/master/java/com/google/security/wycheproof/testcases Has anybody looked at Wycheproof for testing Nettle? - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: Some ideas for new algorithms in Nettle

and is used in massively deployed protocols. But hey, It¨s just suggestions. I intended to provide code, but only if there is an interest for it. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. =====

Some ideas for new algorithms in Nettle

han Keccak. There is also versions of Blake2 suitable for embedded systems. https://blake2.net/ - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. ==== Joachim Strömbergson S

Re: nettle-3.1 loose ends

not a good way to do it. Sorry, my bad. I didn't imply that the constraint had anything to do with Nettle, just my personal problem with it. I am involved in open source hardware projects where these issues appears. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: Simplifying pic vs non-pic object files

Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se -BEGIN PGP SIGNATURE

Re: Side-channel silet memcmp

? uint8_t compare_digests(uint8_t *digest0, uint8_t *digest1, uint8_t *DIGEST_SIZE); or uint8_t compare_md5_digests(uint8_t *digest0, uint8_t *digest1); Or something like that. for MD5, SHA-digests, UMAC etc. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: Side-channel silet memcmp

bit faster than the brain. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

Re: Side-channel silet memcmp

a silent version om memcmp. I'm actually gonna check - their fork of OpenSSL should probably be using something like that. Nikos - What do you do in GnuTLS? - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: Side-channel silet memcmp

Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se -BEGIN PGP SIGNATURE

Re: [REVISED PATCH] Update of sha2.h to add sha512_224 and sha512_256.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Aloha! Niels Möller wrote: 1. For the sha512.c copyright header, should it be Copyright (C) 2014 Joachim Strömbergson, or Secworks AB, or something else? Just add me (Joachim) as coauthor if that is ok with you. It is mainly your code. 2. Test

Re: Support for FIPS 180-4 SHA-512/256?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Aloha! Joachim Strömbergson wrote: I can take a shot at the code changes and post patches. It wasn't really that hard. Patches will follow in two mails. I have not updated the H0 generation scripts used to verify the values (which you have done

[PATCH] Add support for SHA-512-224 and SHA-512-256 in sha2.h

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Aloha! - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

[REVISED PATCH] Update of sha512.c to add support for sha512_224 and sha512_256.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Aloha! And here is the patch for sha512.c in unified diff format. Hopfully the attachment will also be signed now. ;-) - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Support for FIPS 180-4 SHA-512/256?

- basically add more variants of the H0-constants and then truncate. The benefit for users would be better performance on 64 bit CPUs compared to SHA-256 and SHA-224. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: chacha

literature. DJB use the term nonce in both the sasa20 and chacha specs so I think nonce is the proper term to use. Esp since that seems to be the commonly used term. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: chacha assembly

tricks with the shifts. xmm-5 should be relevant. http://cr.yp.to/chacha.html Ah, and chacha seems to be about 15% faster than salsa20 Which seems to match what DJB claims in the paper. Good. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: [PATCH] Integration of chacha in Makefile.in

vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

Re: arctwo

bit keys. I tried to look at the report cards from SSL Labs to see how many actually includes them in the handshake. Judging by somewhat old stats from Qyalys quite a few servers support RC2 with 40 bit key as well as 128 bit key. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i

Re: arctwo

can be used. Don't know how common it is though. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

Regarding the nettle release plan page

- if it is 4 days, 4 weeks of 4 months to do the release.) (3) I'll try and work on the chacha support files the next weeks. (4) I'm prepared to do the darwin testing on OSX 10.9.x - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: Building nettle in OSX

, thanks! - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

Re: Mentioning of .bootstrap in INSTALL?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Aloha! Niels Möller wrote: Joachim Strömbergson joac...@secworks.se writes: At least not having one indirection in documentation. I think the bootstrap should be mentioned directly in a README, INSTALL etc file directly in the reop. I did

Building nettle in OSX

using: LLVM version 3.3svn, from Apple Clang 5.0 (build 500.2.79) Anybody succeeding and building nettle on OSX and if so how. Being able to use the optimized assembler versions would also be good. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning

Re: Mentioning of .bootstrap in INSTALL?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Aloha! Niels Möller wrote: Joachim Strömbergson joac...@secworks.se writes: Shouldn't INSTALL mention this? INSTALL is the generic GNU installation instructions, and intended for the user who has downloaded a release tarball. I'd prefer

[PATCH] source files for chacha

://github.com/secworks/nettle/tree/master/chacha - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

Re: Building nettle in OSX

. Since gcc in Xcode is actually a wrapper around clang/llvw. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

Re: Building nettle in OSX

: x86_64-apple-darwin13.0.0 - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

Re: Building nettle in OSX

the configuration, you'll need to do make distclean inbetween, otherwise the new configuration won't take effect properly. This sounds like the issue you're running into when trying to use --disable-assembler. Yes, yes, yes! Thanks. It now builds. - -- Med vänlig hälsning, Yours Joachim Strömbergson

Re: ChaCha stream cipher for Nettle available

, lets try and stay focused on security here - everybody knows that you always should two rounds of ROT13. Please add rot13r2 patch. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim

Safe curves (was: brainpool, Curve25519)

, support for the NIST curves might be needed. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se

Adding number of rounds to context for Salsa20?

hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se -BEGIN PGP

Status of Poly1305 and use of AES-NI in Poly1305, UMAC?

substantial performance if they could use AES-NI when available? - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. Joachim Strömbergson Secworks AB joac...@secworks.se