131 lines
8.3 KiB
C
131 lines
8.3 KiB
C
|
#ifndef HQC_PARAMETERS_H
|
||
|
|
#define HQC_PARAMETERS_H
|
||
|
|
/**
|
||
|
|
* @file parameters.h
|
||
|
|
* @brief Parameters of the HQC_KEM IND-CCA2 scheme
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include "api.h"
|
||
|
|
#include "api.h"
|
||
|
|
#include "vector.h"
|
||
|
|
|
||
|
|
|
||
|
|
#define CEIL_DIVIDE(a, b) (((a)/(b)) + ((a) % (b) == 0 ? 0 : 1)) /*!< Divide a by b and ceil the result*/
|
||
|
|
#define BITMASK(a, size) ((1UL << ((a) % (size))) - 1) /*!< Create a mask*/
|
||
|
|
|
||
|
|
/*
|
||
|
|
#define PARAM_N Define the parameter n of the scheme
|
||
|
|
#define PARAM_N1 Define the parameter n1 of the scheme (length of BCH code)
|
||
|
|
#define PARAM_N2 Define the parameter n2 of the scheme (length of the repetition code)
|
||
|
|
#define PARAM_N1N2 Define the parameter n1 * n2 of the scheme (length of the tensor code)
|
||
|
|
#define PARAM_OMEGA Define the parameter omega of the scheme
|
||
|
|
#define PARAM_OMEGA_E Define the parameter omega_e of the scheme
|
||
|
|
#define PARAM_OMEGA_R Define the parameter omega_r of the scheme
|
||
|
|
#define PARAM_SECURITY Define the security level corresponding to the chosen parameters
|
||
|
|
#define PARAM_DFR_EXP Define the decryption failure rate corresponding to the chosen parameters
|
||
|
|
|
||
|
|
#define SECRET_KEY_BYTES Define the size of the secret key in bytes
|
||
|
|
#define PUBLIC_KEY_BYTES Define the size of the public key in bytes
|
||
|
|
#define SHARED_SECRET_BYTES Define the size of the shared secret in bytes
|
||
|
|
#define CIPHERTEXT_BYTES Define the size of the ciphertext in bytes
|
||
|
|
|
||
|
|
#define UTILS_REJECTION_THRESHOLD Define the rejection threshold used to generate given weight vectors (see vector_set_random_fixed_weight function)
|
||
|
|
#define VEC_N_SIZE_BYTES Define the size of the array used to store a PARAM_N sized vector in bytes
|
||
|
|
#define VEC_K_SIZE_BYTES Define the size of the array used to store a PARAM_K sized vector in bytes
|
||
|
|
#define VEC_N1_SIZE_BYTES Define the size of the array used to store a PARAM_N1 sized vector in bytes
|
||
|
|
#define VEC_N1N2_SIZE_BYTES Define the size of the array used to store a PARAM_N1N2 sized vector in bytes
|
||
|
|
|
||
|
|
#define VEC_N_SIZE_64 Define the size of the array used to store a PARAM_N sized vector in 64 bits
|
||
|
|
#define VEC_K_SIZE_64 Define the size of the array used to store a PARAM_K sized vector in 64 bits
|
||
|
|
#define VEC_N1_SIZE_64 Define the size of the array used to store a PARAM_N1 sized vector in 64 bits
|
||
|
|
#define VEC_N1N2_SIZE_64 Define the size of the array used to store a PARAM_N1N2 sized vector in 64 bits
|
||
|
|
|
||
|
|
#define VEC_N_256_SIZE_64 Define the size of the array of 64 bits elements used to store an array of size PARAM_N considered as elements of 256 bits
|
||
|
|
#define VEC_N1N2_256_SIZE_64 Define the size of the array of 64 bits elements used to store an array of size PARAM_N1N2 considered as elements of 256 bits
|
||
|
|
|
||
|
|
#define PARAM_T Define a threshold for decoding repetition code word (PARAM_T = (PARAM_N2 - 1) / 2)
|
||
|
|
|
||
|
|
#define PARAM_DELTA Define the parameter delta of the scheme (correcting capacity of the BCH code)
|
||
|
|
#define PARAM_M Define a positive integer
|
||
|
|
#define PARAM_GF_POLY Generator polynomial of galois field GF(2^PARAM_M), represented in hexadecimial form
|
||
|
|
#define PARAM_GF_MUL_ORDER Define the size of the multiplicative group of GF(2^PARAM_M), i.e 2^PARAM_M -1
|
||
|
|
#define PARAM_K Define the size of the information bits of the BCH code
|
||
|
|
#define PARAM_G Define the size of the generator polynomial of BCH code
|
||
|
|
#define PARAM_FFT The additive FFT takes a 2^PARAM_FFT polynomial as input
|
||
|
|
We use the FFT to compute the roots of sigma, whose degree if PARAM_DELTA=60
|
||
|
|
The smallest power of 2 greater than 60+1 is 64=2^6
|
||
|
|
#define PARAM_BCH_POLY Generator polynomial of the BCH code
|
||
|
|
|
||
|
|
#define RED_MASK A mask fot the higher bits of a vector
|
||
|
|
#define SHA512_BYTES Define the size of SHA512 output in bytes
|
||
|
|
#define SEED_BYTES Define the size of the seed in bytes
|
||
|
|
#define SEEDEXPANDER_MAX_LENGTH Define the seed expander max length
|
||
|
|
*/
|
||
|
|
|
||
|
|
#define PARAM_N 69259
|
||
|
|
#define PARAM_N1 796
|
||
|
|
#define PARAM_N2 87
|
||
|
|
#define PARAM_N1N2 69252
|
||
|
|
#define PARAM_OMEGA 133
|
||
|
|
#define PARAM_OMEGA_E 153
|
||
|
|
#define PARAM_OMEGA_R 153
|
||
|
|
#define PARAM_SECURITY 256
|
||
|
|
#define PARAM_DFR_EXP 256
|
||
|
|
|
||
|
|
#define SECRET_KEY_BYTES PQCLEAN_HQC256_AVX2_CRYPTO_SECRETKEYBYTES
|
||
|
|
#define PUBLIC_KEY_BYTES PQCLEAN_HQC256_AVX2_CRYPTO_PUBLICKEYBYTES
|
||
|
|
#define SHARED_SECRET_BYTES PQCLEAN_HQC256_AVX2_CRYPTO_BYTES
|
||
|
|
#define CIPHERTEXT_BYTES PQCLEAN_HQC256_AVX2_CRYPTO_CIPHERTEXTBYTES
|
||
|
|
|
||
|
|
#define UTILS_REJECTION_THRESHOLD 16760678
|
||
|
|
#define VEC_K_SIZE_BYTES CEIL_DIVIDE(PARAM_K, 8)
|
||
|
|
#define VEC_N_SIZE_BYTES CEIL_DIVIDE(PARAM_N, 8)
|
||
|
|
#define VEC_N1_SIZE_BYTES CEIL_DIVIDE(PARAM_N1, 8)
|
||
|
|
#define VEC_N1N2_SIZE_BYTES CEIL_DIVIDE(PARAM_N1N2, 8)
|
||
|
|
|
||
|
|
#define VEC_N_SIZE_64 CEIL_DIVIDE(PARAM_N, 64)
|
||
|
|
#define VEC_K_SIZE_64 CEIL_DIVIDE(PARAM_K, 64)
|
||
|
|
#define VEC_N1_SIZE_64 CEIL_DIVIDE(PARAM_N1, 64)
|
||
|
|
#define VEC_N1N2_SIZE_64 CEIL_DIVIDE(PARAM_N1N2, 64)
|
||
|
|
|
||
|
|
#define PARAM_N_MULT 71424
|
||
|
|
#define VEC_N_256_SIZE_64 (CEIL_DIVIDE(PARAM_N_MULT, 256) << 2)
|
||
|
|
#define VEC_N1N2_256_SIZE_64 (CEIL_DIVIDE(PARAM_N1N2, 256) << 2)
|
||
|
|
|
||
|
|
#define PARAM_T 43
|
||
|
|
|
||
|
|
#define PARAM_DELTA 60
|
||
|
|
#define PARAM_M 10
|
||
|
|
#define PARAM_GF_POLY 0x409
|
||
|
|
#define PARAM_GF_MUL_ORDER 1023
|
||
|
|
#define PARAM_K 256
|
||
|
|
#define PARAM_G 541
|
||
|
|
#define PARAM_FFT 6
|
||
|
|
#define PARAM_FFT_T 7
|
||
|
|
#define PARAM_BCH_POLY { \
|
||
|
|
1,1,0,1,1,0,1,0,0,0,0,1,0,1,0,1,1,1,1,1,1,0,1,1,0,1,1,1,1,1,0,0, \
|
||
|
|
1,0,0,1,0,1,1,0,1,0,0,1,1,1,0,0,1,1,1,0,0,0,1,0,1,0,1,0,1,1,0,0, \
|
||
|
|
1,0,1,0,0,1,0,0,0,1,1,1,1,1,1,1,0,0,1,1,1,1,0,1,0,1,0,1,1,0,1,0, \
|
||
|
|
0,1,0,1,1,1,0,0,0,1,1,1,1,0,0,0,1,0,1,1,1,1,0,1,0,0,1,1,1,1,0,1, \
|
||
|
|
0,0,0,1,0,0,1,1,1,1,1,0,1,0,0,0,1,0,1,1,0,0,0,1,0,1,0,0,1,0,0,0, \
|
||
|
|
1,1,0,1,0,1,0,1,1,0,1,1,0,0,1,1,1,0,0,1,0,1,0,0,1,0,0,1,1,0,1,0, \
|
||
|
|
0,0,0,1,1,0,0,0,0,1,0,1,1,0,1,1,0,1,0,0,0,1,1,1,0,1,0,1,1,0,0,1, \
|
||
|
|
1,0,1,1,0,0,0,1,0,1,1,0,0,0,1,0,0,0,0,0,0,1,0,0,0,0,1,1,0,0,1,0, \
|
||
|
|
0,0,1,1,0,0,1,1,1,0,0,0,1,0,0,1,1,1,1,0,0,0,0,0,1,1,0,0,1,0,1,1, \
|
||
|
|
1,1,1,1,0,1,1,1,0,0,1,1,0,0,1,1,1,1,1,0,0,0,0,1,0,1,1,1,0,1,0,1, \
|
||
|
|
0,0,0,0,1,1,0,0,0,0,1,0,0,0,1,0,1,0,1,0,1,1,0,0,0,1,0,1,1,0,0,0, \
|
||
|
|
1,0,0,1,0,0,1,1,0,0,1,0,1,0,0,1,1,1,1,0,0,1,1,0,0,1,1,0,1,0,1,1, \
|
||
|
|
0,0,0,0,0,0,0,0,1,0,1,1,0,0,0,0,0,0,1,1,0,1,0,1,0,0,0,0,0,1,1,1, \
|
||
|
|
0,1,0,1,1,0,1,1,1,1,0,1,1,1,0,1,1,0,1,1,1,1,1,0,0,1,0,0,1,1,0,0, \
|
||
|
|
0,0,0,0,1,0,1,0,0,0,0,0,1,0,1,1,1,1,1,0,0,1,1,1,0,0,0,0,1,0,1,1, \
|
||
|
|
1,1,0,0,1,0,0,1,1,1,1,1,0,0,0,0,0,0,0,0,0,0,1,0,1,0,1,1,0,1,0,0, \
|
||
|
|
1,0,1,1,0,0,0,0,0,1,1,1,1,0,1,0,0,1,0,0,0,0,1,0,0,0,0,0,1 \
|
||
|
|
};
|
||
|
|
|
||
|
|
#define RED_MASK 0x00000000000007ffUL
|
||
|
|
#define SHA512_BYTES 64
|
||
|
|
#define SEED_BYTES 40
|
||
|
|
#define SEEDEXPANDER_MAX_LENGTH 4294967295
|
||
|
|
|
||
|
|
#endif
|