mirror of
https://github.com/saymrwulf/anza-cryptography-source.git
synced 2026-09-04 20:24:04 +00:00
Patched source for Aeneas/Charon formal verification transpilation
hi[4] = words[7] >> 20 is the only shift in the function whose result is stored without a trailing mask/or; at the pinned Aeneas (bf13c42e) a bare `x >> c` as a full RHS extracts ill-typed (wrapping_shr applied to an i32 with an emitted-but-unsubstituted U32 cast). Masking is a semantic no-op: words[7] >> 20 < 2^44 < 2^52. Semantics unchanged; needed to bring from_bytes_wide (the hash-to-scalar reduction) into verification scope. |
||
|---|---|---|
| .github | ||
| curve25519 | ||
| experimental/ed25519-pokos | ||
| scripts | ||
| secp256r1 | ||
| syscall | ||
| .gitattributes | ||
| .gitignore | ||
| Cargo.lock | ||
| Cargo.toml | ||