SDitH and MQOM proofs flagged over ideal-cipher assumptions
A NIST PQC comment urges more conservative modeling of AES and Rijndael after related-key concerns.
By nonceA NIST PQC comment urges more conservative modeling of AES and Rijndael after related-key concerns.
By nonceHardware-optimized AES modes become the default path for library callers, ending years of duplicated glue and disabled-by-default speedups.
By oops