Files
accel/ops/code/code_cpu_randombytes.go
zeekay e830255ea3 ops/code: the native HQC link is opt-in again (-tags=lux_hqc_native)
cgo says a C compiler is available. It does not say libluxgpu_hqc and
lux/gpu/hqc.h are installed. code_cpu.go declared the second fact as the
first, so any consumer that turns cgo on for an unrelated reason — blst,
say — had to carry a luxgpu install or fail to compile:

  ops/code/code_cpu.go:102:10: fatal error: lux/gpu/hqc.h:
  No such file or directory

Two facts, two predicates. This restores the pairing ops/code carried
through v1.2.4 and that every other optional native link in accel still
uses: crypto_secp256k1_cgo.go and ops/crypto/crypto_msm_native.go behind
lux_crypto_native, ops/fhe/cgo.go behind luxfhe, internal/capi/real.go
behind lux_accel_real. ops/code was the lone file keyed on bare cgo.

code_nocgo.go covers the complement, so a plain cgo build now reports
ErrNativeHQCUnavailable — the error the API already documents — instead
of failing to build. -tags=lux_hqc_native links the native oracle
unchanged.

Verified: build + test at CGO=0; CGO=1 with and without the tag; both
again under -tags=accel. Full suite green.
2026-08-21 00:08:45 -07:00

43 lines
1.6 KiB
Go

// Copyright (C) 2024-2026, Lux Industries Inc. All rights reserved.
// See the file LICENSE for licensing terms.
//go:build cgo && !hqc_pqclean && lux_hqc_native
// Standalone `randombytes` shim for the accel/ops/code binding.
//
// PQClean's HQC reference (inside libluxgpu_hqc.a) calls `extern int
// randombytes(out, n)` for every entropy byte it needs. When this
// package is consumed in isolation (e.g. by `go test ./ops/code/...`
// or a downstream service that does NOT also link luxfi/crypto/hqc),
// no other TU provides that symbol; this file does.
//
// The build tag `hqc_pqclean` deliberately matches the tag that
// luxfi/crypto/hqc uses to wire in its OWN `randombytes_shim.c`.
// When that tag is set, both crypto/hqc and accel/ops/code are
// linked into the same binary — only crypto/hqc's shim provides
// `randombytes`, and that shim dispatches between the TLS seed
// buffer (for batch ops) and the Go io.Reader (for single-op
// dispatch). Excluding this file in that case prevents the
// duplicate-symbol link error.
package code
/*
#include <stdint.h>
#include <stddef.h>
// Forward declaration of the TLS seed reader exposed by libluxgpu_hqc.
extern int lux_hqc_randombytes(uint8_t* out, size_t n);
// randombytes — strong definition for standalone accel/ops/code use.
// Forwards to the canonical TLS seed reader. The C++ batch kernel
// pre-installs a per-slot seed slice before each inner PQClean
// invocation, so every read here returns deterministic bytes from
// the caller-provided seed buffer.
int randombytes(uint8_t* out, size_t n);
int randombytes(uint8_t* out, size_t n) {
return lux_hqc_randombytes(out, n);
}
*/
import "C"