mirror of
https://github.com/luxfi/crypto.git
synced 2026-10-30 16:59:13 +00:00
zeekay
5649439c40
Fills the Rust binder gaps from CANONICAL_AUDIT.md (commit dbd728c). Each
crate is a thin extern-C binding to the corresponding luxcpp/crypto C-ABI
archive, mirroring the existing keccak/blake3/secp256k1/ed25519/slhdsa
pattern.
Per-crate layout: Cargo.toml + build.rs + src/lib.rs + tests/kat.rs.
build.rs resolves the luxcpp install dir via CRYPTO_DIR / CRYPTO_BUILD_DIR
with a fallback to ../../../../luxcpp/crypto/build-cto. Archives are linked
PRIVATE so blst/banderwagon/etc do not leak past the crate boundary.
Tests: 20 KATs pass across the 14 new crates against the live luxcpp
build at /Users/z/work/luxcpp/crypto/build-cto. Real-body algos (sha256,
ripemd160, blake2b, evm256, ipa, kzg, pedersen) are exercised against
known-answer vectors; algos whose c-abi shim returns CRYPTO_ERR_NOTIMPL
in this build (lamport, bls, mldsa, mlkem, ntt, poly_mul, aead) accept
either a successful round-trip or NOTIMPL coherently across all entry
points.
Workspace cargo build --release --workspace passes. The pre-existing
keccak/secp256k1/blake3 spec-vector tests fail at link time due to
unrelated lux_ prefix drift after the brand-neutral C-ABI rename; not
addressed in this batch.
36 lines
1.3 KiB
Rust
36 lines
1.3 KiB
Rust
// Copyright (c) 2024-2026 Lux Industries Inc.
|
|
// SPDX-License-Identifier: BSD-3-Clause-Eco
|
|
//
|
|
// ML-DSA (FIPS 204) binding smoke test. The luxcpp body currently returns
|
|
// CRYPTO_ERR_NOTIMPL (-5); this test confirms the C-ABI is reachable through
|
|
// Rust and round-trips correctly when wired.
|
|
|
|
use lux_crypto_mldsa::{keygen, sign, verify, Error, Mode};
|
|
|
|
#[test]
|
|
fn keygen_sign_verify_roundtrip_or_notimpl_m65() {
|
|
let mode = Mode::M65;
|
|
let seed = [0x7Au8; 32];
|
|
let mut pk = vec![0u8; mode.pk_len()];
|
|
let mut sk = vec![0u8; mode.sk_len()];
|
|
|
|
match keygen(mode, &seed, &mut pk, &mut sk) {
|
|
Ok(()) => {
|
|
let mut sig = vec![0u8; mode.sig_len()];
|
|
let n = sign(mode, &sk, b"lux-mldsa-binding-kat", &mut sig)
|
|
.expect("sign after keygen");
|
|
verify(mode, &pk, b"lux-mldsa-binding-kat", &sig[..n])
|
|
.expect("verify accepts honest signature");
|
|
}
|
|
Err(Error::Internal(-5)) => {
|
|
// CRYPTO_ERR_NOTIMPL; sign and verify must agree.
|
|
let mut sig = vec![0u8; mode.sig_len()];
|
|
assert!(matches!(
|
|
sign(mode, &sk, b"x", &mut sig),
|
|
Err(Error::Internal(-5))
|
|
));
|
|
}
|
|
Err(other) => panic!("unexpected keygen error: {:?}", other),
|
|
}
|
|
}
|