mirror of
https://github.com/luxfi/crypto.git
synced 2026-11-02 13:34:37 +00:00
zeekay
cc84032371
Replaces the stub backend (ErrBackendNotWired) with a working byte-
for-byte NIST-compatible HQC implementation. Build tag hqc_pqclean
activates the cgo path; default builds remain stub for portability.
Vendored:
- PQClean HQC-128/192/256 clean reference C (2023-04-30 NIST
submission), public domain
- PQClean shared fips202 (SHA-3 / SHAKE)
- Per-mode/per-source shim TUs (36 total) to keep PQClean's
static helpers isolated and avoid duplicate-symbol collisions
- randombytes_shim.c wiring PQClean's randombytes() to a Go-side
io.Reader callback, mutex-protected for concurrent dispatch
Tests:
- TestKAT_HQC128/192/256 — all three NIST KAT vectors verified
byte-for-byte against META.yml nistkat-sha256
- TestRoundTrip_AllModes — keygen → encap → decap roundtrip,
shared secrets byte-equal in all 3 modes
- TestDeterminism_AllModes — same seed produces identical ct/ss
(load-bearing for the precompile's on-chain determinism)
- -race clean
Correction: ciphertext sizes updated from 4481/9026/14469 (older
HQC round-3 listing) to PQClean's 4433/8978/14421 (2023-04-30 NIST
submission); the prior numbers would have failed round-trip with
a 48-byte mismatch.
28 lines
986 B
C
28 lines
986 B
C
#ifndef PQCLEAN_HQC256_CLEAN_API_H
|
|
#define PQCLEAN_HQC256_CLEAN_API_H
|
|
/**
|
|
* @file api.h
|
|
* @brief NIST KEM API used by the HQC_KEM IND-CCA2 scheme
|
|
*/
|
|
|
|
#include <stdint.h>
|
|
|
|
#define PQCLEAN_HQC256_CLEAN_CRYPTO_ALGNAME "HQC-256"
|
|
|
|
#define PQCLEAN_HQC256_CLEAN_CRYPTO_SECRETKEYBYTES 7317
|
|
#define PQCLEAN_HQC256_CLEAN_CRYPTO_PUBLICKEYBYTES 7245
|
|
#define PQCLEAN_HQC256_CLEAN_CRYPTO_BYTES 64
|
|
#define PQCLEAN_HQC256_CLEAN_CRYPTO_CIPHERTEXTBYTES 14421
|
|
|
|
// As a technicality, the public key is appended to the secret key in order to respect the NIST API.
|
|
// Without this constraint, PQCLEAN_HQC256_CLEAN_CRYPTO_SECRETKEYBYTES would be defined as 32
|
|
|
|
int PQCLEAN_HQC256_CLEAN_crypto_kem_keypair(uint8_t *pk, uint8_t *sk);
|
|
|
|
int PQCLEAN_HQC256_CLEAN_crypto_kem_enc(uint8_t *ct, uint8_t *ss, const uint8_t *pk);
|
|
|
|
int PQCLEAN_HQC256_CLEAN_crypto_kem_dec(uint8_t *ss, const uint8_t *ct, const uint8_t *sk);
|
|
|
|
|
|
#endif
|