Issues

• PIR for message fetching proposal

  freedomofpress/securedrop-protocol#436 · Filter by author lsd-cat opened on Oct 16, 2026

• specify revocation of short-lived epoch keys

  freedomofpress/securedrop-protocol#432 · Filter by author asraa opened on Oct 13, 2026
  1

• model epoch-based keys

  formal analysis
  Task

  freedomofpress/securedrop-protocol#431 · Filter by author cfm opened on Oct 13, 2026

• When is it acceptable for proofs (like tests) to fail?

  needs/discussionverification
  freedomofpress/securedrop-protocol#430 · Filter by author cfm opened on Oct 13, 2026
  1

• doc: add file explaining how to exercise the demo

  freedomofpress/securedrop-protocol#427 · Filter by author redshiftzero opened on Oct 8, 2026

• spec: describe instance and protocol level configurations

  freedomofpress/securedrop-protocol#425 · Filter by author asraa opened on Oct 8, 2026 · v0.4

• make libcrux-version also needs to handle multiple crate versions in the tree

  verification
  Bug

  freedomofpress/securedrop-protocol#424 · Filter by author cfm opened on Oct 8, 2026
  

• what should happen when the server hits MAX_MESSAGES?

  freedomofpress/securedrop-protocol#423 · Filter by author redshiftzero opened on Oct 8, 2026

• decorrelate challenge rounds from message fetches

  freedomofpress/securedrop-protocol#420 · Filter by author redshiftzero opened on Oct 7, 2026 · v0.5

• make hax fails under CONTAINER=1

  verification
  Bug

  freedomofpress/securedrop-protocol#418 · Filter by author cfm opened on Oct 6, 2026
  1

  

• Clear, stable interface/APIs with plain language documentation

  documentationrefactoring
  freedomofpress/securedrop-protocol#413 · Filter by author rocodes opened on Oct 4, 2026

• [Server, api] Autonomous vs fpf-signed enrollment should return different response types

  refactoringserver
  freedomofpress/securedrop-protocol#412 · Filter by author rocodes opened on Oct 4, 2026
  1

• parametrize MOCK_NEWSROOM_ID

  freedomofpress/securedrop-protocol#409 · Filter by author redshiftzero opened on Oct 2, 2026
  1

• spec: delete consumed ephemeral private keys

  freedomofpress/securedrop-protocol#408 · Filter by author redshiftzero opened on Oct 2, 2026

• shuffle or sort challenges

  security
  freedomofpress/securedrop-protocol#407 · Filter by author redshiftzero opened on Oct 2, 2026 · v0.4

• remove all unwraps, check all expects

  freedomofpress/securedrop-protocol#402 · Filter by author redshiftzero opened on Oct 1, 2026 · v0.4

• how to purge spam submissions from the server

  freedomofpress/securedrop-protocol#400 · Filter by author redshiftzero opened on Oct 1, 2026

• Attachments encryption should support streaming/chunks

  freedomofpress/securedrop-protocol#398 · Filter by author lsd-cat opened on Sep 30, 2026
  1

• Storage DoS on message submission: message unavailability

  security
  freedomofpress/securedrop-protocol#395 · Filter by author asraa opened on Sep 28, 2026
  2

• ci: keep track of code TODOs and issues with https://github.com/marketplace/actions/todo-backlinks

  CIproposal
  freedomofpress/securedrop-protocol#394 · Filter by author asraa opened on Sep 25, 2026
  2

• [proposal] Managing key types

  proposalrefactoring
  freedomofpress/securedrop-protocol#393 · Filter by author rocodes opened on Sep 24, 2026
  3

• [Proposal] crate separation and boundaries

  proposalrefactoring
  freedomofpress/securedrop-protocol#390 · Filter by author rocodes opened on Sep 24, 2026
  3

• Fix padded challenge generation in compute_fetch_challenges

  freedomofpress/securedrop-protocol#389 · Filter by author asraa opened on Sep 23, 2026 · v0.4
  1

• try extraction to Lean

  formal analysis
  freedomofpress/securedrop-protocol#382 · Filter by author cfm opened on Sep 21, 2026

• Reject malformed protocol inputs instead of panicking

  freedomofpress/securedrop-protocol#366 · Filter by author lsd-cat opened on Sep 11, 2026 · v0.4
  1