https://gitlab.synchro.net/main/sbbs/-/commit/d95878887e2dbc65241cb54f
Added Files:
src/ssh/kex/sntrup761_optblocker.c
Modified Files:
src/ssh/CMakeLists.txt TODO.md src/ssh/kex/curve25519-sha256.c hybrid-pq-kex.c libcrux_mlkem768_sha3.h mlkem768.c sntrup761.c
Log Message:
TODO items 170-178: KEX safety, vendor fixes, include guard
- KEX server reply overflow + narrowing safety (items 170-173):
UINT32_MAX pre-flight checks and incremental SIZE_MAX overflow
guards in curve25519-sha256.c and hybrid-pq-kex.c server paths;
initializer-style casts
- Vendor portability fixes: optblocker, popcount, byte-order (174-176)
- Strip 91 unused cryptoint functions from sntrup761.c (item 177)
- Replace #pragma once with standard include guard (item 178)
- Clean up TODO.md
Co-Authored-By: Claude Opus 4.6 (1M context) <
noreply@anthropic.com>
---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net