mirror of
https://github.com/luxfi/crypto.git
synced 2026-11-03 07:20:43 +00:00
zeekay
cc84032371
Replaces the stub backend (ErrBackendNotWired) with a working byte-
for-byte NIST-compatible HQC implementation. Build tag hqc_pqclean
activates the cgo path; default builds remain stub for portability.
Vendored:
- PQClean HQC-128/192/256 clean reference C (2023-04-30 NIST
submission), public domain
- PQClean shared fips202 (SHA-3 / SHAKE)
- Per-mode/per-source shim TUs (36 total) to keep PQClean's
static helpers isolated and avoid duplicate-symbol collisions
- randombytes_shim.c wiring PQClean's randombytes() to a Go-side
io.Reader callback, mutex-protected for concurrent dispatch
Tests:
- TestKAT_HQC128/192/256 — all three NIST KAT vectors verified
byte-for-byte against META.yml nistkat-sha256
- TestRoundTrip_AllModes — keygen → encap → decap roundtrip,
shared secrets byte-equal in all 3 modes
- TestDeterminism_AllModes — same seed produces identical ct/ss
(load-bearing for the precompile's on-chain determinism)
- -race clean
Correction: ciphertext sizes updated from 4481/9026/14469 (older
HQC round-3 listing) to PQClean's 4433/8978/14421 (2023-04-30 NIST
submission); the prior numbers would have failed round-trip with
a 48-byte mismatch.
41 lines
1006 B
C
41 lines
1006 B
C
#include "shake_ds.h"
|
|
|
|
|
|
/**
|
|
* @file shake_ds.c
|
|
* @brief Implementation SHAKE-256 with incremental API and domain separation
|
|
*/
|
|
|
|
|
|
|
|
/**
|
|
* @brief SHAKE-256 with incremental API and domain separation
|
|
*
|
|
* Derived from function SHAKE_256 in fips202.c
|
|
*
|
|
* @param[out] state Internal state of SHAKE
|
|
* @param[in] output Pointer to output
|
|
* @param[in] input Pointer to input
|
|
* @param[in] inlen length of input in bytes
|
|
* @param[in] domain byte for domain separation
|
|
*/
|
|
void PQCLEAN_HQC128_CLEAN_shake256_512_ds(shake256incctx *state, uint8_t *output, const uint8_t *input, size_t inlen, uint8_t domain) {
|
|
/* Init state */
|
|
shake256_inc_init(state);
|
|
|
|
/* Absorb input */
|
|
shake256_inc_absorb(state, input, inlen);
|
|
|
|
/* Absorb domain separation byte */
|
|
shake256_inc_absorb(state, &domain, 1);
|
|
|
|
/* Finalize */
|
|
shake256_inc_finalize(state);
|
|
|
|
/* Squeeze output */
|
|
shake256_inc_squeeze(output, 512 / 8, state);
|
|
|
|
/* Release ctx */
|
|
shake256_inc_ctx_release(state);
|
|
}
|