Skip to content

Needless conversion of shared secret to bignum and back in hybrid KEX methods

In both SNTRUP761 and MLKEM768, the derived shared secret is unnecessarily converted to a bignum when storing it in the ssh_crypto_struct , only to be converted back to binary when we need to use it.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information