15,000 lines of verified cryptography now in Python
In November 2022, I opened issue 99108 on
Python’s GitHub repository, arguing that after a recent CVE in its implementation of
SHA3, Python should embrace verified code for all of its hash-related infrastructure.
As of last week, this issue is now closed, and every single hash and HMAC algorithm exposed by
default in Python is now provided by HACL*, the
verified cryptographic library. There was no loss of functionality, and the transition was entirely
transparent for Python users. Python now ven...
Read more at jonathan.protzenko.fr