filippo.io/mlkem768
Languages and libraries
cryptography library
SHOW HN2024
How HN took it
8 positive, 17 neutral or asking, 1 mixed, 7 critical, out of 33 comments about the project. Thread score +0.02.
Design: 2 for, 2 againstPrivacy: 0 for, 3 againstDocs: 1 for, 0 againstIdea: 0 for, 1 againstExecution: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Implementation written to avoid secret-dependent code paths
From 1 comment
Go is as susceptible to timing side channels as C, if not less. (The difference being that while there is one major Go compiler, which usually does not go overboard with…
FiloSottile on HN
Readable Unicode variable names in code
From 1 comment
I have no ability to judge the quality of this algorithm or implementation, but I do thoroughly approve of the usage of unicode in variable names: ``` ρ, σ := G[:32], G[32:] ```…
gnfargbl on HN
Objections
Pure Go may be vulnerable to timing and power side channels
From 1 comment
Correct me if I'm wrong, but if it's written in pure Go, wouldn't that make it susceptible to timing/power side channel attacks?
bennettnate5 on HN
Rolling your own crypto is risky; use OpenSSL instead
From 1 comment
Whatever happened to "don't roll your own crypto"? Isn't this work best left to OpenSSL for example.
lopkeny12ko on HN
Requests
Implementations for other languages like Java and C#
From 1 comment
Anyone aware of such implementations for other languages (java, c#, etc)?
mooreds on HN
Questions
What is the real state of quantum computing threat
From 1 comment
So what is the actual state of Quantum computing in regards to the level that would make something like this necessary? Is it become like AI where instead of actually coming into…
hattmall on HN
Would a faster Kyber 90s mode without SHA-3 be feasible
From 1 comment
Neat that it can also work as draft00/kyber v3 =) How hard would it be to support a fast Kyber 90's mode, without SHA-3? (I suppose you would have to break the abstraction for…
tux3 on HN
Alternatives named
Kudelski's crystals-go library, discontinued after KyberSlash vulnerability
From 1 comment
Hello from Kudelski Security. This is super timely, because we recently had to discontinue one of the other only existing Go libraries for quantum-resistant cryptography in Go!…
tgkudelski on HN