Loup Vaillant

Monocypher's EdDSA API is susceptible to an underestimated misuse

7

I just saw this on [/r/crypto](https://www.reddit.com/r/crypto/comments/vfl2se/initial_impact_report_about_this_weeks_eddsa/). Monocypher's [current signature API](https://monocypher.org/manual/sign) provides a clean separation between the private and public keys: ```C void crypto_sign_public_key(uint8_t public_key[32], const uint8_t secret_key[32]); void crypto_sign(uint8_t signature[64],...

Streaming Interface for authenticated encryption?

29

Now that Monocypher is just under 1900 lines of code, we have room for more functionality. One that is very tempting to add is streaming AEAD, similar to [Libsodium's](https://doc.libsodium.org/secret-key_cryptography/secretstream). One...

XEdDSA support?

4

I’ve recently [been approached](https://github.com/covert-encryption/covert/issues/63#issuecomment-1013865897) about adding this feature to Monocypher. The use case is pretty simple: we have existing X25519 keys, and we would like to use them to sign...

Incorrect (non canonical) representative output for ScalarBaseMult()

2

Hi, I learned of this bug was found by @tankf33der. Contrary to the original paper, the Elligator 2 representative of of a public key is not always canonical. That is,...

Hi, Turns out we we don't really have roll as much crypto as your article says. Specifically, we can avoid implementing the round functions ourselves, and use regular Chacha20 instead....

Updated test vector coverage on the front page

5

Whycheproof test vectors are *amazing*. But to be of any use, people must know of their existence. When I first checked out Whycheproof, this list didn't include EdDSA, which my...

Compute the audit trail on the client so we can compare it to the TPM's

2

The Enhanced System API seems to be missing a core functionality: computing the audit trail of a session whenever we open one. Right now we can only ask the audit...

Explicit support for embedded targets

11

I've been approached lately by @Laczen about possibly making an "embedded edition" of Monocypher, less focused on speed and more focused on reducing footprint (binary & stack sizes). One particular...

make command broken out of the box

1

Steps to reproduce (from the README): $ git clone https://github.com/wjwwood/serial.git $ cd serial $ make Output: ``` cd build && cmake -DCMAKE_INSTALL_PREFIX=/tmp/usr/local .. CMake Deprecation Warning at CMakeLists.txt:1 (cmake_minimum_required): Compatibility...

Broken build (missing epsf file)

2

It does not work on my machine. All I get is a very quick error message that I don't understand. My setup is possibly missing something, but I have no...