Commit 1330859
authored
![pulumi-renovate[bot]](https://avatars.githubusercontent.com/u/21992475?v=4&size=40){kind=avatar}
Update module github.com/cloudflare/circl to v1.6.5 (#774)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/cloudflare/circl](https://redirect.github.com/cloudflare/circl)
| `v1.6.3` → `v1.6.5` |
|
|
---
### Release Notes
<details>
<summary>cloudflare/circl (github.com/cloudflare/circl)</summary>
###
[`v1.6.5`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.5):
CIRCL v1.6.5
[Compare
Source](https://redirect.github.com/cloudflare/circl/compare/v1.6.4...v1.6.5)
#### What's Changed
- ascon: don't output plaintext if authentication fails by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​631](https://redirect.github.com/cloudflare/circl/pull/631)
- Dilithium: don't accept signatures with trailing data by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​632](https://redirect.github.com/cloudflare/circl/pull/632)
- Fix HPKE/KEM exact-length key unmarshaling by
[@​drmikecrypto](https://redirect.github.com/drmikecrypto) in
[#​627](https://redirect.github.com/cloudflare/circl/pull/627)
- Bump x/crypto and golangci-lint by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​637](https://redirect.github.com/cloudflare/circl/pull/637)
- ecc/bls12381: reject trailing data in G1/G2 SetBytes by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​636](https://redirect.github.com/cloudflare/circl/pull/636)
- eddilithium: fail verification if signature is wrong length by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​633](https://redirect.github.com/cloudflare/circl/pull/633)
- tss/rsa: fix length check to prevent runtime out-of-bounds panic by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​640](https://redirect.github.com/cloudflare/circl/pull/640)
- dleq: verify: return false instead of panic()ing on nil parameters by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​641](https://redirect.github.com/cloudflare/circl/pull/641)
- ed448: document verification behaviour by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​642](https://redirect.github.com/cloudflare/circl/pull/642)
- ed448: reject non-canonical point encodings by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​635](https://redirect.github.com/cloudflare/circl/pull/635)
- slhdsa: ensure full reads when rand source is provided by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​634](https://redirect.github.com/cloudflare/circl/pull/634)
- ed{25519,448}: don't accept trailing data for keys by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​643](https://redirect.github.com/cloudflare/circl/pull/643)
- frodo: pack: fix accidental zero buffer assumption by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​645](https://redirect.github.com/cloudflare/circl/pull/645)
- secretsharing: check that share ID is not zero. by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​644](https://redirect.github.com/cloudflare/circl/pull/644)
- kyber: document pk isn't checked like ML-KEM by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​648](https://redirect.github.com/cloudflare/circl/pull/648)
- zk/dleq: Don't accept trailing data on proof by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​649](https://redirect.github.com/cloudflare/circl/pull/649)
- slhdsa: don't panic if prehash-hash is out of range by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​647](https://redirect.github.com/cloudflare/circl/pull/647)
- goldilocks: don't panic when unmarshalling invalid point by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​646](https://redirect.github.com/cloudflare/circl/pull/646)
- hpke: don't panic when unmarshalling opener/sealer from empty buffer
by [@​bwesterb](https://redirect.github.com/bwesterb) in
[#​656](https://redirect.github.com/cloudflare/circl/pull/656)
- ot/simot: don't panic on mismatched ciphertext lengths by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​655](https://redirect.github.com/cloudflare/circl/pull/655)
- fourq: document point decoding is lenient by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​654](https://redirect.github.com/cloudflare/circl/pull/654)
- oprf: add note on multiple Point encodings by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​653](https://redirect.github.com/cloudflare/circl/pull/653)
- tss/rsa: don't panic when combining empty list of shares by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​652](https://redirect.github.com/cloudflare/circl/pull/652)
- ecc/p384: document that package is not fully constant time by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​651](https://redirect.github.com/cloudflare/circl/pull/651)
- ristretto: reject non-canonical scalars by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​650](https://redirect.github.com/cloudflare/circl/pull/650)
- Add more explicit constant time warnings by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​638](https://redirect.github.com/cloudflare/circl/pull/638)
- mlsbset: make Encode() constant time by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​639](https://redirect.github.com/cloudflare/circl/pull/639)
- mlsbset: fix stray index in Encode comment by
[@​lukevalenta](https://redirect.github.com/lukevalenta) in
[#​658](https://redirect.github.com/cloudflare/circl/pull/658)
- removeLen32Prefixed: check for possible data overflow by
[@​mdosch](https://redirect.github.com/mdosch) in
[#​629](https://redirect.github.com/cloudflare/circl/pull/629)
- expander: panic if requested output length overflows DST. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​664](https://redirect.github.com/cloudflare/circl/pull/664)
- zk/dleq: add base point `a` to challenge derivation. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​663](https://redirect.github.com/cloudflare/circl/pull/663)
- dh/sidh: document Import() side-effect for kem/sike. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​662](https://redirect.github.com/cloudflare/circl/pull/662)
- ecc/fourq: improve constant-timeness of fpSgn, fqSqrt. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​666](https://redirect.github.com/cloudflare/circl/pull/666)
- blinsign/blindrsa/partiallyblindrsa: reject malformed moduli. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​665](https://redirect.github.com/cloudflare/circl/pull/665)
- blindsign/blindrsa: align PSSZERO behavior with RFC 9474. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​660](https://redirect.github.com/cloudflare/circl/pull/660)
- ecc/fourq: fix fqSqr arithmetic error on amd64 by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​659](https://redirect.github.com/cloudflare/circl/pull/659)
- README: warn that not all packages are constant time by
[@​frangelbarrera](https://redirect.github.com/frangelbarrera) in
[#​668](https://redirect.github.com/cloudflare/circl/pull/668)
- internal/test: unify ACVP test vector parsing by
[@​ihopenre-eng](https://redirect.github.com/ihopenre-eng) in
[#​667](https://redirect.github.com/cloudflare/circl/pull/667)
- blindrsa: fix interface documentation by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​672](https://redirect.github.com/cloudflare/circl/pull/672)
- ecc/fourq: fix legacy (non-BMI2) GF(p^2) multiplication on amd64 by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​669](https://redirect.github.com/cloudflare/circl/pull/669)
- p384: document assumed reductions by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​670](https://redirect.github.com/cloudflare/circl/pull/670)
-
[`ed25519`](https://redirect.github.com/cloudflare/circl/commit/ed25519):
document another divergence with crypto/ed25519 by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​671](https://redirect.github.com/cloudflare/circl/pull/671)
- prio3/histogram: don't panic on measurement equal to the bucket count
by [@​bwesterb](https://redirect.github.com/bwesterb) in
[#​673](https://redirect.github.com/cloudflare/circl/pull/673)
- zk/qndleq: document Qn membership precondition by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​675](https://redirect.github.com/cloudflare/circl/pull/675)
- vdaf/prio3: require all prep shares by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​676](https://redirect.github.com/cloudflare/circl/pull/676)
- vdaf/prio3: document prep sequencing requirement by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​677](https://redirect.github.com/cloudflare/circl/pull/677)
- zk/dl: reject identity proof inputs by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​678](https://redirect.github.com/cloudflare/circl/pull/678)
- tss/rsa: document trusted modulus requirement by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​680](https://redirect.github.com/cloudflare/circl/pull/680)
- dh/csidh: harden key imports by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​689](https://redirect.github.com/cloudflare/circl/pull/689)
- zk/dleq: validate batch shape by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​684](https://redirect.github.com/cloudflare/circl/pull/684)
- ot/simot: make sender sessions one-shot by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​679](https://redirect.github.com/cloudflare/circl/pull/679)
- vdaf/prio3/sum: reject unsafe measurement bounds by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​682](https://redirect.github.com/cloudflare/circl/pull/682)
- tss/rsa: validate sign share protocol parameters by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​674](https://redirect.github.com/cloudflare/circl/pull/674)
- vdaf/prio3/sum: reject aggregate field overflow by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​681](https://redirect.github.com/cloudflare/circl/pull/681)
- vdaf/prio3: validate preparation inputs by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​683](https://redirect.github.com/cloudflare/circl/pull/683)
- oprf: reject invalid deterministic blinds by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​688](https://redirect.github.com/cloudflare/circl/pull/688)
- vdaf/prio3: reject degenerate parameters by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​685](https://redirect.github.com/cloudflare/circl/pull/685)
- oprf: validate finalize state by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​687](https://redirect.github.com/cloudflare/circl/pull/687)
#### New Contributors
- [@​drmikecrypto](https://redirect.github.com/drmikecrypto) made
their first contribution in
[#​627](https://redirect.github.com/cloudflare/circl/pull/627)
- [@​lukevalenta](https://redirect.github.com/lukevalenta) made
their first contribution in
[#​658](https://redirect.github.com/cloudflare/circl/pull/658)
- [@​mdosch](https://redirect.github.com/mdosch) made their first
contribution in
[#​629](https://redirect.github.com/cloudflare/circl/pull/629)
- [@​frangelbarrera](https://redirect.github.com/frangelbarrera)
made their first contribution in
[#​668](https://redirect.github.com/cloudflare/circl/pull/668)
- [@​ihopenre-eng](https://redirect.github.com/ihopenre-eng) made
their first contribution in
[#​667](https://redirect.github.com/cloudflare/circl/pull/667)
**Full Changelog**:
<cloudflare/circl@v1.6.4...v1.6.5>
###
[`v1.6.4`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.4):
CIRCL v1.6.4
[Compare
Source](https://redirect.github.com/cloudflare/circl/compare/v1.6.3...v1.6.4)
#### What's Changed
- Fix typo: it's to its by
[@​04cb](https://redirect.github.com/04cb) in
[#​588](https://redirect.github.com/cloudflare/circl/pull/588)
- ci: Bump Go version to 1.26 by
[@​armfazh](https://redirect.github.com/armfazh) in
[#​591](https://redirect.github.com/cloudflare/circl/pull/591)
- tss/rsa: polynomial evaluation using Horner's method by
[@​armfazh](https://redirect.github.com/armfazh) in
[#​590](https://redirect.github.com/cloudflare/circl/pull/590)
- zk/qndleq: Ensure large security parameter by
[@​armfazh](https://redirect.github.com/armfazh) in
[#​592](https://redirect.github.com/cloudflare/circl/pull/592)
- sign/bls: rejects aggregated signatures built with duplicated
messages. by [@​armfazh](https://redirect.github.com/armfazh) in
[#​595](https://redirect.github.com/cloudflare/circl/pull/595)
- Bump golang.org/x/crypto from 0.30.0 to 0.45.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​585](https://redirect.github.com/cloudflare/circl/pull/585)
- tss/rsa: avoiding overflow in lambda calculation with big.Int by
[@​armfazh](https://redirect.github.com/armfazh) in
[#​598](https://redirect.github.com/cloudflare/circl/pull/598)
- deps: Update CIRCL version in code generators. by
[@​armfazh](https://redirect.github.com/armfazh) in
[#​599](https://redirect.github.com/cloudflare/circl/pull/599)
- ci: add Semgrep OSS scanning workflow by
[@​hrushikeshdeshpande](https://redirect.github.com/hrushikeshdeshpande)
in [#​601](https://redirect.github.com/cloudflare/circl/pull/601)
- zk/qndleq: Fixes challenge calculation by
[@​armfazh](https://redirect.github.com/armfazh) in
[#​596](https://redirect.github.com/cloudflare/circl/pull/596)
- sign/bls: Check that signature cannot be the identity point by
[@​armfazh](https://redirect.github.com/armfazh) in
[#​603](https://redirect.github.com/cloudflare/circl/pull/603)
- ml-dsa: Don't use tr pointer by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​606](https://redirect.github.com/cloudflare/circl/pull/606)
- ecc/bls12381: affinize must handle identity elements. by
[@​armfazh](https://redirect.github.com/armfazh) in
[#​604](https://redirect.github.com/cloudflare/circl/pull/604)
- pki: check pem.Decode returned nil block. by
[@​z9z](https://redirect.github.com/z9z) in
[#​607](https://redirect.github.com/cloudflare/circl/pull/607)
- abe/cpabe/tkn20: fix AND-gate secret sharing. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​610](https://redirect.github.com/cloudflare/circl/pull/610)
- hpke: fix verifyPSKInputs() to match spec. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​612](https://redirect.github.com/cloudflare/circl/pull/612)
- hpke: Warn about nonce misuse during marshaling by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​613](https://redirect.github.com/cloudflare/circl/pull/613)
- hpke: don't panic when parsing on hybrid keys/ciphertexts. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​614](https://redirect.github.com/cloudflare/circl/pull/614)
- blindsign/blindrsa: reject non-canonical signatures. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​615](https://redirect.github.com/cloudflare/circl/pull/615)
- blindsign/blindrsa: reject message unless co-prime with modulus by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​616](https://redirect.github.com/cloudflare/circl/pull/616)
- oprf: reject identity element as public key. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​619](https://redirect.github.com/cloudflare/circl/pull/619)
- Add AGENTS.md and REVIEW\.md for contributor and AI agent guidance by
[@​dotjs](https://redirect.github.com/dotjs) in
[#​620](https://redirect.github.com/cloudflare/circl/pull/620)
- ecc/bls12381: check input length for infinity encoding in SetBytes. by
[@​bwesterb](https://redirect.github.com/bwesterb) in
[#​618](https://redirect.github.com/cloudflare/circl/pull/618)
- abe/cpabe/tkn20: bound recursion depth when parsing policies. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​622](https://redirect.github.com/cloudflare/circl/pull/622)
- abe/cpabe/tkn20: reject ciphertexts with trailing data. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​621](https://redirect.github.com/cloudflare/circl/pull/621)
- abe/cpabe/tkn20: handle short ciphertexts as errors. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​611](https://redirect.github.com/cloudflare/circl/pull/611)
- abe/cpabe/tkn20: enforce wire count matches policy. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​624](https://redirect.github.com/cloudflare/circl/pull/624)
- abe/cpabe/tkn20: handle malformed ciphertext header. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​623](https://redirect.github.com/cloudflare/circl/pull/623)
- abe/cpabe/tkn20: reject circuits with invalid topologies. by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​625](https://redirect.github.com/cloudflare/circl/pull/625)
- Release CIRCL v1.6.4 by
[@​cjpatton](https://redirect.github.com/cjpatton) in
[#​626](https://redirect.github.com/cloudflare/circl/pull/626)
#### New Contributors
- [@​04cb](https://redirect.github.com/04cb) made their first
contribution in
[#​588](https://redirect.github.com/cloudflare/circl/pull/588)
- [@​z9z](https://redirect.github.com/z9z) made their first
contribution in
[#​607](https://redirect.github.com/cloudflare/circl/pull/607)
- [@​dotjs](https://redirect.github.com/dotjs) made their first
contribution in
[#​620](https://redirect.github.com/cloudflare/circl/pull/620)
**Full Changelog**:
<cloudflare/circl@v1.6.3...v1.6.4>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- Monday through Friday (`* * * * 1-5`)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>1 parent 52a2e64 commit 1330859
2 files changed
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
72 | 72 | | |
73 | 73 | | |
74 | 74 | | |
75 | | - | |
| 75 | + | |
76 | 76 | | |
77 | 77 | | |
78 | 78 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
138 | 138 | | |
139 | 139 | | |
140 | 140 | | |
141 | | - | |
142 | | - | |
| 141 | + | |
| 142 | + | |
143 | 143 | | |
144 | 144 | | |
145 | 145 | | |
| |||
0 commit comments