Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add K12 as XOF #437

Merged
merged 1 commit into from
May 3, 2023
Merged

Add K12 as XOF #437

merged 1 commit into from
May 3, 2023

Conversation

bwesterb
Copy link
Member

@bwesterb bwesterb commented May 3, 2023

No description provided.

@bwesterb bwesterb requested a review from armfazh May 3, 2023 21:26
@bwesterb bwesterb merged commit 75b147d into main May 3, 2023
@bwesterb bwesterb deleted the bas/k12-xof branch May 3, 2023 22:05
jooola referenced this pull request in hetznercloud/terraform-provider-hcloud Jan 9, 2024
…834)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) |
`v1.3.3` -> `v1.3.7` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcloudflare%2fcircl/v1.3.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fcloudflare%2fcircl/v1.3.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fcloudflare%2fcircl/v1.3.3/v1.3.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcloudflare%2fcircl/v1.3.3/v1.3.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

####
[GHSA-9763-4f94-gfch](https://github.com/cloudflare/circl/security/advisories/GHSA-9763-4f94-gfch)

### Impact
On some platforms, when an attacker can time decapsulation of Kyber on
forged cipher texts, they could possibly learn (parts of) the secret
key.

Does not apply to ephemeral usage, such as when used in the regular way
in TLS.

### Patches
Patched in 1.3.7.

### References
- [kyberslash.cr.yp.to](https://kyberslash.cr.yp.to/)

---

### Release Notes

<details>
<summary>cloudflare/circl (github.com/cloudflare/circl)</summary>

###
[`v1.3.7`](https://github.com/cloudflare/circl/releases/tag/v1.3.7):
CIRCL v1.3.7

[Compare
Source](https://github.com/cloudflare/circl/compare/v1.3.6...v1.3.7)

#### CIRCL v1.3.7

##### What's Changed

- build(deps): bump golang.org/x/crypto from
0.3.1-0.20221117191849-2c476679df9a to 0.17.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/cloudflare/circl/pull/467](https://github.com/cloudflare/circl/pull/467)
- kyber: remove division by q in ciphertext compression by
[@&#8203;bwesterb](https://github.com/bwesterb) in
[https://github.com/cloudflare/circl/pull/468](https://github.com/cloudflare/circl/pull/468)
- Releasing CIRCL v1.3.7 by
[@&#8203;armfazh](https://github.com/armfazh) in
[https://github.com/cloudflare/circl/pull/469](https://github.com/cloudflare/circl/pull/469)

##### New Contributors

- [@&#8203;dependabot](https://github.com/dependabot) made their first
contribution in
[https://github.com/cloudflare/circl/pull/467](https://github.com/cloudflare/circl/pull/467)

**Full Changelog**:
cloudflare/circl@v1.3.6...v1.3.7

###
[`v1.3.6`](https://github.com/cloudflare/circl/releases/tag/v1.3.6):
CIRCL v1.3.6

[Compare
Source](https://github.com/cloudflare/circl/compare/v1.3.5...v1.3.6)

#### CIRCL v1.3.6

##### What's Changed

- internal: add TurboShake{128,256} by
[@&#8203;bwesterb](https://github.com/bwesterb) in
[https://github.com/cloudflare/circl/pull/430](https://github.com/cloudflare/circl/pull/430)
- Kangaroo12 draft -10 by
[@&#8203;bwesterb](https://github.com/bwesterb) in
[https://github.com/cloudflare/circl/pull/431](https://github.com/cloudflare/circl/pull/431)
- Add K12 as XOF by [@&#8203;bwesterb](https://github.com/bwesterb) in
[https://github.com/cloudflare/circl/pull/437](https://github.com/cloudflare/circl/pull/437)
- xof/k12: Fix a typo in the package documentation by
[@&#8203;cjpatton](https://github.com/cjpatton) in
[https://github.com/cloudflare/circl/pull/438](https://github.com/cloudflare/circl/pull/438)
- Set CIRCL version for generated assembler code. by
[@&#8203;armfazh](https://github.com/armfazh) in
[https://github.com/cloudflare/circl/pull/440](https://github.com/cloudflare/circl/pull/440)
- Add tkn20 benchmarks by
[@&#8203;tanyav2](https://github.com/tanyav2) in
[https://github.com/cloudflare/circl/pull/442](https://github.com/cloudflare/circl/pull/442)
- Add partially blind RSA implementation by
[@&#8203;chris-wood](https://github.com/chris-wood) in
[https://github.com/cloudflare/circl/pull/445](https://github.com/cloudflare/circl/pull/445)
- Update doc.go by
[@&#8203;nadimkobeissi](https://github.com/nadimkobeissi) in
[https://github.com/cloudflare/circl/pull/447](https://github.com/cloudflare/circl/pull/447)
- tss/rsa: key generation for threshold RSA (safe primes) by
[@&#8203;armfazh](https://github.com/armfazh) in
[https://github.com/cloudflare/circl/pull/450](https://github.com/cloudflare/circl/pull/450)
- Bumping Go version for CI jobs. by
[@&#8203;armfazh](https://github.com/armfazh) in
[https://github.com/cloudflare/circl/pull/457](https://github.com/cloudflare/circl/pull/457)
- Spelling by [@&#8203;jsoref](https://github.com/jsoref) in
[https://github.com/cloudflare/circl/pull/456](https://github.com/cloudflare/circl/pull/456)
- blindrsa: updating blindrsa to be compliant with RFC9474 by
[@&#8203;armfazh](https://github.com/armfazh) in
[https://github.com/cloudflare/circl/pull/464](https://github.com/cloudflare/circl/pull/464)
- Releasing CIRCL v1.3.6 by
[@&#8203;armfazh](https://github.com/armfazh) in
[https://github.com/cloudflare/circl/pull/465](https://github.com/cloudflare/circl/pull/465)

##### New Contributors

- [@&#8203;nadimkobeissi](https://github.com/nadimkobeissi) made their
first contribution in
[https://github.com/cloudflare/circl/pull/447](https://github.com/cloudflare/circl/pull/447)
- [@&#8203;jsoref](https://github.com/jsoref) made their first
contribution in
[https://github.com/cloudflare/circl/pull/456](https://github.com/cloudflare/circl/pull/456)

**Full Changelog**:
cloudflare/circl@v1.3.3...v1.3.6

###
[`v1.3.5`](https://github.com/cloudflare/circl/compare/v1.3.4...v1.3.5)

[Compare
Source](https://github.com/cloudflare/circl/compare/v1.3.4...v1.3.5)

###
[`v1.3.4`](https://github.com/cloudflare/circl/compare/v1.3.3...v1.3.4)

[Compare
Source](https://github.com/cloudflare/circl/compare/v1.3.3...v1.3.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/hetznercloud/terraform-provider-hcloud).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMjcuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEyNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants