RFR: 8320192: SHAKE256 does not work correctly if n >= 137 [v3]

Weijun Wang weijun at openjdk.org
Mon Nov 20 13:58:01 UTC 2023


On Fri, 17 Nov 2023 00:05:59 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> When blocksize is less than digest output length, call `keccak` more.
>
> Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:
> 
>   add comment for squeezeOffset

New commit pushed. I've minimized the code changes for this bug fix. XOF functions are removed.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/16698#issuecomment-1819107486



More information about the security-dev mailing list