mirror of
https://github.com/luxfi/crypto.git
synced 2026-10-30 16:59:13 +00:00
zeekay
5649439c40
Fills the Rust binder gaps from CANONICAL_AUDIT.md (commit dbd728c). Each
crate is a thin extern-C binding to the corresponding luxcpp/crypto C-ABI
archive, mirroring the existing keccak/blake3/secp256k1/ed25519/slhdsa
pattern.
Per-crate layout: Cargo.toml + build.rs + src/lib.rs + tests/kat.rs.
build.rs resolves the luxcpp install dir via CRYPTO_DIR / CRYPTO_BUILD_DIR
with a fallback to ../../../../luxcpp/crypto/build-cto. Archives are linked
PRIVATE so blst/banderwagon/etc do not leak past the crate boundary.
Tests: 20 KATs pass across the 14 new crates against the live luxcpp
build at /Users/z/work/luxcpp/crypto/build-cto. Real-body algos (sha256,
ripemd160, blake2b, evm256, ipa, kzg, pedersen) are exercised against
known-answer vectors; algos whose c-abi shim returns CRYPTO_ERR_NOTIMPL
in this build (lamport, bls, mldsa, mlkem, ntt, poly_mul, aead) accept
either a successful round-trip or NOTIMPL coherently across all entry
points.
Workspace cargo build --release --workspace passes. The pre-existing
keccak/secp256k1/blake3 spec-vector tests fail at link time due to
unrelated lux_ prefix drift after the brand-neutral C-ABI rename; not
addressed in this batch.
35 lines
1.2 KiB
Rust
35 lines
1.2 KiB
Rust
// Copyright (c) 2024-2026 Lux Industries Inc.
|
|
// SPDX-License-Identifier: BSD-3-Clause-Eco
|
|
//
|
|
// ML-KEM (FIPS 203) binding smoke test.
|
|
|
|
use lux_crypto_mlkem::{decap, encap, keygen, Error, Mode, SS_LEN};
|
|
|
|
#[test]
|
|
fn keygen_encap_decap_roundtrip_or_notimpl_k768() {
|
|
let mode = Mode::K768;
|
|
let seed = [0x33u8; 32];
|
|
let mut pk = vec![0u8; mode.pk_len()];
|
|
let mut sk = vec![0u8; mode.sk_len()];
|
|
|
|
match keygen(mode, &seed, &mut pk, &mut sk) {
|
|
Ok(()) => {
|
|
let mut ct = vec![0u8; mode.ct_len()];
|
|
let mut ss_a = [0u8; SS_LEN];
|
|
let mut ss_b = [0u8; SS_LEN];
|
|
encap(mode, &pk, &mut ct, &mut ss_a).expect("encap after keygen");
|
|
decap(mode, &sk, &ct, &mut ss_b).expect("decap after encap");
|
|
assert_eq!(ss_a, ss_b, "shared secret must match across encap/decap");
|
|
}
|
|
Err(Error::Internal(-5)) => {
|
|
let mut ct = vec![0u8; mode.ct_len()];
|
|
let mut ss = [0u8; SS_LEN];
|
|
assert!(matches!(
|
|
encap(mode, &pk, &mut ct, &mut ss),
|
|
Err(Error::Internal(-5))
|
|
));
|
|
}
|
|
Err(other) => panic!("unexpected keygen error: {:?}", other),
|
|
}
|
|
}
|