mirror of
https://github.com/luxfi/crypto.git
synced 2026-11-03 07:20:43 +00:00
zeekay
cc84032371
Replaces the stub backend (ErrBackendNotWired) with a working byte-
for-byte NIST-compatible HQC implementation. Build tag hqc_pqclean
activates the cgo path; default builds remain stub for portability.
Vendored:
- PQClean HQC-128/192/256 clean reference C (2023-04-30 NIST
submission), public domain
- PQClean shared fips202 (SHA-3 / SHAKE)
- Per-mode/per-source shim TUs (36 total) to keep PQClean's
static helpers isolated and avoid duplicate-symbol collisions
- randombytes_shim.c wiring PQClean's randombytes() to a Go-side
io.Reader callback, mutex-protected for concurrent dispatch
Tests:
- TestKAT_HQC128/192/256 — all three NIST KAT vectors verified
byte-for-byte against META.yml nistkat-sha256
- TestRoundTrip_AllModes — keygen → encap → decap roundtrip,
shared secrets byte-equal in all 3 modes
- TestDeterminism_AllModes — same seed produces identical ct/ss
(load-bearing for the precompile's on-chain determinism)
- -race clean
Correction: ciphertext sizes updated from 4481/9026/14469 (older
HQC round-3 listing) to PQClean's 4433/8978/14421 (2023-04-30 NIST
submission); the prior numbers would have failed round-trip with
a 48-byte mismatch.
61 lines
1.7 KiB
C
61 lines
1.7 KiB
C
#include "domains.h"
|
|
#include "fips202.h"
|
|
#include "shake_prng.h"
|
|
|
|
/**
|
|
* @file shake_prng.c
|
|
* @brief Implementation of SHAKE-256 based seed expander
|
|
*/
|
|
|
|
|
|
/**
|
|
* @brief Initialise a SHAKE-256 based seed expander
|
|
*
|
|
* Derived from function SHAKE_256 in fips202.c
|
|
*
|
|
* @param[out] state Keccak internal state and a counter
|
|
* @param[in] seed A seed
|
|
* @param[in] seedlen The seed bytes length
|
|
*/
|
|
void PQCLEAN_HQC128_CLEAN_seedexpander_init(seedexpander_state *state, const uint8_t *seed, size_t seedlen) {
|
|
uint8_t domain = SEEDEXPANDER_DOMAIN;
|
|
shake256_inc_init(state);
|
|
shake256_inc_absorb(state, seed, seedlen);
|
|
shake256_inc_absorb(state, &domain, 1);
|
|
shake256_inc_finalize(state);
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
* @brief A SHAKE-256 based seed expander
|
|
*
|
|
* Derived from function SHAKE_256 in fips202.c
|
|
* Squeezes Keccak state by 64-bit blocks (hardware version compatibility)
|
|
*
|
|
* @param[out] state Internal state of SHAKE
|
|
* @param[out] output The XOF data
|
|
* @param[in] outlen Number of bytes to return
|
|
*/
|
|
void PQCLEAN_HQC128_CLEAN_seedexpander(seedexpander_state *state, uint8_t *output, size_t outlen) {
|
|
const size_t bsize = sizeof(uint64_t);
|
|
const size_t remainder = outlen % bsize;
|
|
uint8_t tmp[sizeof(uint64_t)];
|
|
shake256_inc_squeeze(output, outlen - remainder, state);
|
|
if (remainder != 0) {
|
|
shake256_inc_squeeze(tmp, bsize, state);
|
|
output += outlen - remainder;
|
|
for (size_t i = 0; i < remainder; ++i) {
|
|
output[i] = tmp[i];
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @brief Release the seed expander context
|
|
* @param[in] state Internal state of the seed expander
|
|
*/
|
|
void PQCLEAN_HQC128_CLEAN_seedexpander_release(seedexpander_state *state) {
|
|
shake256_inc_ctx_release(state);
|
|
}
|