M README.md → README.md

@@ -9,9 +9,6 @@ - X25519 for elliptic-curve Diffie-Hellman key exchange
 - SHA-256 and SHA-512 for hashing, ECDH, and Ed25519
 - Ed25519 for EdDSA
 
-## Known Vulnerabilities
-The CC20-P1305 implementation was not designed with side-channel attacks in mind. Rewriting it to perform actions in constant time is a goal currently being undertaken (after unit tests are in place).
-
 ## Testing Validations
 - The SHA-2 implementations pass all 586 NIST-provided test cases without memory violations (according to `valgrind`).
 - The Ed25519 implementation passes all 1024 provided test cases without memory violations (according to `valgrind`).

M tinycrypt/portable/kangarootwelve128.c → tinycrypt/portable/kangarootwelve128.c

@@ -180,7 +180,7 @@ {
   uint8_t buf[168];
   uint8_t state[200];
   turboshake128_init (state);
-  uint8_t encoded[8];
+  uint8_t encoded[16];
   uint64_t encoded_len;
   length_encode (cs_len, encoded, &encoded_len);
   const uint64_t s_size = input_len + cs_len + encoded_len;