This repository claims the following, in README.md:
An IoT friendly, formally verified, crypto library based on libcrux.
Humans on the Earth are interested in assessing the security of this library. But in order to do so, and to avoid protracted debates in the event of any findings, the library must first expand on what it means by "formally verified" by providing clear security claims of targeted security guarantees.
Do you, for example, claim to provide timing attack resistance and secret independence, or only functional correctness?
Elaboration on these topics in the form of clear, precise claims would be welcome.
This repository claims the following, in
README.md:Humans on the Earth are interested in assessing the security of this library. But in order to do so, and to avoid protracted debates in the event of any findings, the library must first expand on what it means by "formally verified" by providing clear security claims of targeted security guarantees.
Do you, for example, claim to provide timing attack resistance and secret independence, or only functional correctness?
Elaboration on these topics in the form of clear, precise claims would be welcome.