[Whonix-devel] Student recommendation for SPHINCS Implementation in Codecrypt

Thu May 23 02:25:01 CEST 2019

On 5/23/19 7:22 AM, Jean-Philippe Aumasson wrote:
> Hey,
>
> What would be required beyond the reference (or possibly the optimized)
> implementations that are at https://github.com/sphincs/sphincsplus?
>
Thanks for your reply.

Just C knowledge and preferably some idea of coding securely, but I
think cryptography learning is big on that anyway.

> On Wed, May 22, 2019 at 7:21 PM procmem at riseup.net
> <mailto:procmem at riseup.net> <procmem at riseup.net
> <mailto:procmem at riseup.net>> wrote:
>
>     Hi JP,
>
>     Whonix privacy distro dev here. If you know any enthusiastic students
>     who have time for a side project, please tell them about this
>     Codecrypt
>     (PQ cipher suite we discussed before) feature request for implementing
>     the stateless signature scheme SPHINCS - or your version SPHINCS+.
>
>     Codecrypt currently only supports FMTSeq which is very fragile because
>     signing key reuse destroys its security properties. Its use in VMs is
>     particularly hazardous if user rolls back a snapshot and forgets to
>     backup their keychain beforehand.
>
>     https://gitea.blesmrt.net/exa/codecrypt/issues/9#issuecomment-35
>
>     TIA
>
>     cc/ our mailing list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.whonix.org/pipermail/whonix-devel/attachments/20190523/a106caab/attachment.htm>