mirror of
https://github.com/luxfi/crypto.git
synced 2026-10-30 16:59:13 +00:00
zeekay
cc84032371
Replaces the stub backend (ErrBackendNotWired) with a working byte-
for-byte NIST-compatible HQC implementation. Build tag hqc_pqclean
activates the cgo path; default builds remain stub for portability.
Vendored:
- PQClean HQC-128/192/256 clean reference C (2023-04-30 NIST
submission), public domain
- PQClean shared fips202 (SHA-3 / SHAKE)
- Per-mode/per-source shim TUs (36 total) to keep PQClean's
static helpers isolated and avoid duplicate-symbol collisions
- randombytes_shim.c wiring PQClean's randombytes() to a Go-side
io.Reader callback, mutex-protected for concurrent dispatch
Tests:
- TestKAT_HQC128/192/256 — all three NIST KAT vectors verified
byte-for-byte against META.yml nistkat-sha256
- TestRoundTrip_AllModes — keygen → encap → decap roundtrip,
shared secrets byte-equal in all 3 modes
- TestDeterminism_AllModes — same seed produces identical ct/ss
(load-bearing for the precompile's on-chain determinism)
- -race clean
Correction: ciphertext sizes updated from 4481/9026/14469 (older
HQC round-3 listing) to PQClean's 4433/8978/14421 (2023-04-30 NIST
submission); the prior numbers would have failed round-trip with
a 48-byte mismatch.
28 lines
683 B
C
28 lines
683 B
C
/*
|
|
* randombytes.h — header used by PQClean HQC sources to declare the
|
|
* randombytes() entry point. The actual implementation lives in
|
|
* crypto/hqc/randombytes_shim.c and reads from a Go-supplied buffer
|
|
* via a cgo callback (see backend_pqclean.go).
|
|
*
|
|
* This vendored header replaces PQClean's common/randombytes.h, which
|
|
* pulls in OS entropy sources we don't want for the deterministic
|
|
* KEM precompile.
|
|
*/
|
|
#ifndef PQCLEAN_HQC_RANDOMBYTES_H
|
|
#define PQCLEAN_HQC_RANDOMBYTES_H
|
|
|
|
#include <stddef.h>
|
|
#include <stdint.h>
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
int randombytes(uint8_t *output, size_t n);
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* PQCLEAN_HQC_RANDOMBYTES_H */
|