pierrelf.com / we
we (web engine): Experimental web browser project to understand the limits of Claude
Star
Fork 0
Watch

Fix Poly1305 final reduction: include h4 in conditional select master

The constant-time conditional select between h and g in the Poly1305 final reduction was missing h4/g4. When h >= p (2^130-5), the code selected g for h0-h3 but left h4 unchanged, producing incorrect tags for inputs where the accumulator exceeds the prime. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author Pierre Le Fevre Co-author Claude Opus 4.6 Committer Tangled Date Commit 4be3d255 Parent d548444d
+2
1 changed file