{"id":35072347,"url":"https://github.com/mimoo/strobe-mirror","last_synced_at":"2026-04-01T21:05:36.888Z","repository":{"id":76718473,"uuid":"92878174","full_name":"mimoo/strobe-mirror","owner":"mimoo","description":"This is a mirror of http://strobe.sourceforge.io/","archived":false,"fork":false,"pushed_at":"2017-05-31T09:53:11.000Z","size":10370,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-03-28T00:36:39.220Z","etag":null,"topics":["blinker","duplex","keccak","noise","strobe"],"latest_commit_sha":null,"homepage":null,"language":"HTML","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mimoo.png","metadata":{"files":{"readme":"README.txt","changelog":"HISTORY.txt","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-30T21:33:54.000Z","updated_at":"2017-05-31T09:53:12.000Z","dependencies_parsed_at":null,"dependency_job_id":"110adcba-96d9-4da8-b42c-89ca1b221876","html_url":"https://github.com/mimoo/strobe-mirror","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/mimoo/strobe-mirror","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mimoo%2Fstrobe-mirror","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mimoo%2Fstrobe-mirror/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mimoo%2Fstrobe-mirror/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mimoo%2Fstrobe-mirror/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mimoo","download_url":"https://codeload.github.com/mimoo/strobe-mirror/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mimoo%2Fstrobe-mirror/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31291989,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-01T13:12:26.723Z","status":"ssl_error","status_checked_at":"2026-04-01T13:12:25.102Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blinker","duplex","keccak","noise","strobe"],"created_at":"2025-12-27T11:57:32.575Z","updated_at":"2026-04-01T21:05:36.880Z","avatar_url":"https://github.com/mimoo.png","language":"HTML","readme":"STROBE protocol framework\n\nThis is a development release of the STROBE framework.  Although the\nspecification of the framework is at release level (1.0.0), the code is\ndevelopment-quality and not yet ready for production use.\n\nSTROBE's framework spec versioning (not software versioning) is a little\nbit funny.  Every protocol hashes the spec version into the cryptographic\nstate, so any change to the spec version string breaks interoperability.\nHowever, minor and patch revisions shouldn't break application\ncompatibility, so protocol specifications that make sense with 1.0.0\nshould also work with 1.0.1 and 1.1.0.\n\nTODO: Update this README to include worthwhile documentation and use cases\nfor STROBE.\n\n#############\nSide channels\n#############\n\nThe STROBE code is designed to resist timing side-channels that would\nrecover secret keys and messages.  Obviously, timing is affected by other\nvariables such as message lengths.\n\nThe compact X25519 code is designed to resist timing side-channels, including\nattacks on timing, caching, and branch prediction.  However, the code\nis incomplete in that regard, and should be tested on your particular CPU\nand compiler.  This warning is mainly in regard to embedded or old processors\nsuch as the Cortex-M0, Cortex-M3, 80386, 80486, Via Nano 2000, PowerPC G3,\nPowerPC G4, and RISC-V Rocket.  These processors have a multiplication\ninstruction which takes a variable amount of time depending on its operands.\nSince X25519 uses multiplication on sensitive data, some of that data will\nleak to an attacker who can observe timing information. There are per-CPU\nworkarounds for this problem, but none of them are yet included in STROBE's\nX25519 implementation.\n\nNewer CPUs such as the Cortex-M4 and higher, and modern X86 processors, should\nbe safe.  However, the test suite does not currently test resistance to timing\nattacks (TODO).\n\nOn vulnerable processors, I expect that ephemeral Curve25519 is safe, and that\nsignature verification leaks information that's public in most threat models\n(eg, the signer, signature and hashed message).  Signing and long-term X25519\nare probably vulnerable to key compromise.\n\nI would like to eventually place a warning on the X25519 code for this, but\nthere are so many CPUs affected that it would be difficult to test the warning\ncode.\n\nNone of this code is designed to resist physically invasive attacks such as\npower side channels, electromagnetic side channels, or fault attacks.\n\nRemember of course that this is alpha-quality software, and probably contains\nbugs which are more serious than timing attacks.\n\n#############\nMailing lists\n#############\n\nIf you use STROBE, please subscribe to at least the strobe-security mailing\nlist:\n     strobe-security@lists.sourceforge.net\n     https://lists.sourceforge.net/lists/listinfo/strobe-security\n\nThis mailing list is moderated and low-volume.  It will be used only to\nannounce security issues in STROBE, should they arise.\n    \nYou may also be interested in the strobe-announce and strobe-discuss\nmailing lists.\n\n     strobe-discuss@lists.sourceforge.net\n     https://lists.sourceforge.net/lists/listinfo/strobe-discuss\n\n     strobe-announce@lists.sourceforge.net\n     https://lists.sourceforge.net/lists/listinfo/strobe-announce\n\n###########################\nExport control notification\n###########################\n\nDownloading of this software may constitute an export or re-export of\ncryptographic software from the United States of America. The U.S.\ngovernment prohibits export of encryption source code to certain countries\nand individuals, including, but not limited to, the countries of Cuba, Iran,\nNorth Korea, Sudan, Syria, and residents and nationals of those countries.\nOther countries may also have restrictions on the import, possession, use,\nand/or re-export to another country, of encryption software. BEFORE using\nany encryption software, please check your country's laws, regulations and\npolicies concerning the import, possession, or use, and re-export of\nencryption software, to see if this is permitted.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmimoo%2Fstrobe-mirror","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmimoo%2Fstrobe-mirror","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmimoo%2Fstrobe-mirror/lists"}