All pull requests

Pull requests

• ML-DSA x86-64 sign: stop the norm checks at the first polynomial that fails (deterministic signing executes ~3.3% fewer instructions)

  untrusted-only
  #3765·reaperhulk opened Oct 30, 2026Member·

  ·

• AArch64 3DES-CBC: reuse the register-table DES kernel

  #3762·reaperhulk opened Oct 30, 2026Member·2/2·

  ·

• lean_cache.py: keep the build's messages out of the module archives

  #3761·reaperhulk opened Oct 30, 2026Member·

  ·
  1

• AArch64 3DES: reuse shorter scalar S-box circuits

  untrusted-only
  #3760·reaperhulk opened Oct 30, 2026Member·1/2·

  ·

• riscv64 runner image: link the tests with mold

  #3736·alex opened Oct 30, 2026Member·

  ·
  2

• Emitter: emit from module drivers, audit in the Lake build

  #3717·reaperhulk opened Oct 30, 2026Member·3/3·

  ·

• TCB emitter: module drivers, audits and runners

  #3716·reaperhulk opened Oct 30, 2026Member·2/3·

  ·

• CI: let the shard planner read libraries whose sources are generated

  #3715·reaperhulk opened Oct 30, 2026Member·1/3·

  ·

• CI: narrow Rust jobs by module cfg and in the merge queue; full runs every six hours

  #3176·reaperhulk opened Oct 23, 2026Member·

  ·

• [DRAFT stack] Indirect calls on x86-64, and one RSA-OAEP / RSA-PSS / RFC 6979 function per operation, through hash tables

  #2722·alex opened Oct 18, 2026Member·

  ·

• rustls-provider: a rustls CryptoProvider backed by verified-garbage, and benchmarks against aws-lc-rs

  #991·alex opened Oct 5, 2026Member·

  ·
  5

• Experiment: verified "no secret residue" on return (x86-64)

  #801·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative store bypass (Spectre v4) semantics and taint checker for x86-64

  #773·reaperhulk opened Oct 4, 2026Member·

  ·
  1

• Prototype: speculative constant time (Spectre v1/v1.1) for x86-64 taint proofs

  #769·reaperhulk opened Oct 4, 2026Member·

  ·
  3