-
The documentation for AES-GCM-SIV references [a preprint](https://eprint.iacr.org/2017/168) and [a draft RFC](https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-06). Since then, the spec has been form…
-
The draft here https://datatracker.ietf.org/doc/draft-irtf-cfrg-hash-to-curve/. Thanks!
-
The current draft has `def BlindEvaluate` in https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-21.html#name-oprf-protocol, https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-21.html#name-voprf-…
-
https://mailarchive.ietf.org/arch/msg/cfrg/jmfn1b880x7-7gZKb7_uwLvE3oU/
Taylor R Campbell wrote:
Where does one find test vectors for the deterministic functions
defined here with the extra ran…
-
This issue is to track the CFRG PAKE selection process going on in the IETF. When that process completes, if they pick a PAKE other than SPAKE2, we should consider swapping out SPAKE2 if there are no…
-
Taylor R Campbell wrote:
Where does one find test vectors for the deterministic functions
defined here with the extra randomization parameters Z?
https://mailarchive.ietf.org/arch/msg/cfrg/jmfn1b…
-
The content related to the limits should be updated to reflect the changes to the CFRG draft:
https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-aead-limits-03
For instance the definition/des…
-
https://www.ietf.org/archive/id/draft-irtf-cfrg-bbs-signatures-05.html#name-bls12-381-shake-256
```
Note that these two ciphersuites differ only in the hash-to-curve suites used. The hash-to-curve…
-
https://tools.ietf.org/html/draft-irtf-cfrg-xchacha-01#section-2
```txt
AEAD_XChaCha20_Poly1305
XChaCha20-Poly1305 is a variant of the ChaCha20-Poly1305 AEAD
construction as defined in […
-
The HashToCurve functions are currently hard-coded to use the little-endian variant (https://tools.ietf.org/html/draft-irtf-cfrg-hash-to-curve-06#section-4.1.2) of sgn0. It would be helpful if there w…