FiloSottile/mlkem768

Stars
131
Rank 275,867 (Top 6 %)
Language
Go
License
BSD 3-Clause "New...
Created about 1 year ago
Updated 2 months ago

FiloSottile/mlkem768

FiloSottile

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A Go implementation of the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber).

filippo.io/mlkem768

https://pkg.go.dev/filippo.io/mlkem768

Package mlkem768 implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber).

Only the recommended ML-KEM-768 parameter set is provided.

The version currently implemented is the one specified by NIST FIPS 203 ipd, with the unintentional transposition of the matrix A reverted to match the behavior of Kyber version 3.0. Future v0 versions of this package might introduce backwards incompatible changes to implement changes to FIPS 203.

This package targets security, correctness, simplicity, readability, and reviewability as its primary goals. All critical operations are performed in constant time.

Variable and function names, as well as code layout, are selected to facilitate reviewing the implementation against the NIST FIPS 203 ipd document.

Reviewers unfamiliar with polynomials or linear algebra might find the background at https://words.filippo.io/kyber-math/ useful.

This code is aimed at being upstreamed in the standard library.

mkcert

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

yubikey-agent

yubikey-agent is a seamless ssh-agent for YubiKeys.

Heartbleed

A checker (site and tool) for CVE-2014-0160

whoami.filippo.io

A ssh server that knows who you are. $ ssh whoami.filippo.io

passage

A fork of password-store (https://www.passwordstore.org) that uses age (https://age-encryption.org) as backend.

gvt

gvt was a minimal go vendoring tool, based on gb-vendor. Today, you want to use modules instead.

homebrew-musl-cross

Homebrew Formula for static-friendly musl-based GCC macOS-to-Linux cross-compilers

captive-browser

A dedicated Chrome instance to log into captive portals without messing with DNS settings.

awesome-age

A collection of projects and resources in the age file encryption ecosystem.

mostly-harmless

A bag of various unrelated projects with varying levels of serviceability and destructiveness.

CVE-2016-2107

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

vendorcheck

Check that all your Go dependencies are properly vendored

edwards25519

filippo.io/edwards25519 — A safer, faster, and more powerful low-level edwards25519 Go implementation.

sunlight

A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

ed25519-dalek-rustgo

Wrapper for curve25519-dalek using rustgo, a technique to directly call Rust code from Go programs with near-zero overhead, meant to replace manually written assembly.

tracetools

Tools to process Go trace logs into various profiles. Complement for "go tool trace".

typage

A TypeScript implementation of the age file encryption format, based on libsodium.

zcash-mini

A minimal portable Zcash z-address generator for offline / paper wallets

BERserk

A Go implementation of the BERserk attack against Mozilla NSS ASN.1 parsing of PKCS#1 RSA signatures with e = 3. Complete of a certificate generation tool, works with CAs in the trust store.

hstools

Library and tools to interact with and analyze Tor HSDirs.

homebrew-gomod

A brew command to cleanly install binaries from Go modules.

blockchainr

Exploiting ECDSA Failures in the Bitcoin Blockchain

openbsd-fde-crack

Some code to bruteforce OpenBSD softraid encrypted drives - NOT A READY-TO-USE TOOL

intermediates

Package filippo.io/intermediates embeds a bundle of known unexpired, unrevoked intermediate certificates chaining to roots in the Mozilla Root Program

travis-cron

This web app allows you to trigger Travis CI builds periodically

gorebuild

Extract the import path of Go binaries and rebuild them. No more stale GOROOT.

nistec

NIST P elliptic curves (re-exported from crypto/internal/nistec)

otherport

LD_PRELOAD hack to redirect connections to other ports

powersoftau

An independent implementation of the Powers of Tau MPC ceremony.

HNTitles

Tweet probabilistically generated HN post titles.

go-cpace-ristretto255

An EXPERIMENTAL Go implementation of the CPace PAKE, instantiated with the ristretto255 group.

alum

A forwarding mail server inspired by @alum.mit.edu

xaes256gcm

Package xaes256gcm implements the XAES-256-GCM extended-nonce AEAD.

FiloSottile

keygen

Deterministic key generation for Go.

axel

Axel Download Accelerator [git mirror]

b2

Efficient, idiomatic Go library for Backblaze B2 Cloud Storage.

bigmod

A constant-time library for big integers modulo a prime, usable for cryptographic applications. Exported from crypto/internal/bigmod, the backend of crypto/rsa and crypto/ecdsa.

crypto.py

A collection of pure Python crypto implementations. All modules are standalone. Available in Python 2 and Python 3 flavors!

litetlog

A collection of liteweight transparency logging tools, compatible with the Sigsum and Omniwitness ecosystems.

Pendolo-OpenCV

Griffith

Media collection manager [MIRROR]

blog.filippo.io

blog.filippo.io theme. Slightly tweaked 0.9.4 Casper. Pretty please, don't just clone it <3

homebrew-lite

Modified homebrew-core formula with fewer dependencies.

torspec

Forked from git.torproject.org/torspec.git

.github

hs-api-playground

Playground for the Hacker School API

WPA-hazard

Deep into the default WPA generation algorithms

homebrew-age

filosottile.github.io

An empty repository for redirecting filosottile.github.io to filippo.io (https://github.com/FiloSottile/filippo.io).

crypto-tls-bogo-shim

A shim to test Go crypto/tls with the BoringSSL test suite. Which is based on crypto/tls. So meta.