Issues

• Upstream: section 5.2.2's constant-digest requirement is unsatisfiable

  securityupstream
  OR13/mole#16 · Filter by author OR13 opened on Jul 28, 2026

• Upstream: editorial defects in the crypto draft

  documentationupstream
  OR13/mole#15 · Filter by author OR13 opened on Jul 28, 2026

• [meta] exp-ihat: index of open findings

  exp-ihatguessed-parameter
  OR13/mole#13 · Filter by author OR13 opened on Jul 28, 2026

• build: zeroize is pinned in Cargo.lock to hold MSRV 1.75

  exp-ihat
  OR13/mole#12 · Filter by author OR13 opened on Jul 28, 2026

• Upstream: the two grant exchanges have no correlation mechanism

  upstream
  OR13/mole#11 · Filter by author OR13 opened on Jul 28, 2026

• Upstream: Anchor nonce reuse recovers the secret key

  exp-ihatsecurityupstream
  OR13/mole#9 · Filter by author OR13 opened on Jul 28, 2026

• Upstream: challenge_digest binding (4.1.3) is implemented by no one

  exp-ihatguessed-parameter
  OR13/mole#8 · Filter by author OR13 opened on Jul 28, 2026

• Upstream: C' is used before it is defined

  exp-ihatguessed-parameterhelp wantedsecurity
  OR13/mole#5 · Filter by author OR13 opened on Jul 28, 2026

• Upstream: the two MoLE drafts disagree on point compression

  exp-ihatguessed-parameter
  OR13/mole#1 · Filter by author OR13 opened on Jul 28, 2026