aa4611a4d1
This PR sacrifices passing some extra arguments to get rid of the global state. * Haraka needs state in all hash calls, this results in changes to the hash functions specified in `hash.h`. The extra pointers passed would not be necessary for SHA256 or SHAKE256. * SHAKE256 did not have global state, but uniformity in the implementations requires us to pass around the new state context anyway. Otherwise, @joostrijneveld's SPHINCS+ generator doesn't really work anymore). We introduce a new header file called `primitive.h` which defines the required state type for the generic functions. I did not go into replacing _all_ occurrences of state variables by the new `hash_state` macro.
33 lines
1.1 KiB
C
33 lines
1.1 KiB
C
#ifndef SPX_FORS_H
|
|
#define SPX_FORS_H
|
|
|
|
#include <stdint.h>
|
|
|
|
#include "params.h"
|
|
#include "primitive.h"
|
|
|
|
/**
|
|
* Signs a message m, deriving the secret key from sk_seed and the FTS address.
|
|
* Assumes m contains at least SPX_FORS_HEIGHT * SPX_FORS_TREES bits.
|
|
*/
|
|
void PQCLEAN_SPHINCSHARAKA256SROBUST_CLEAN_fors_sign(
|
|
unsigned char *sig, unsigned char *pk,
|
|
const unsigned char *m,
|
|
const unsigned char *sk_seed, const unsigned char *pub_seed,
|
|
const uint32_t fors_addr[8], hash_state *state_seeded);
|
|
|
|
/**
|
|
* Derives the FORS public key from a signature.
|
|
* This can be used for verification by comparing to a known public key, or to
|
|
* subsequently verify a signature on the derived public key. The latter is the
|
|
* typical use-case when used as an FTS below an OTS in a hypertree.
|
|
* Assumes m contains at least SPX_FORS_HEIGHT * SPX_FORS_TREES bits.
|
|
*/
|
|
void PQCLEAN_SPHINCSHARAKA256SROBUST_CLEAN_fors_pk_from_sig(
|
|
unsigned char *pk,
|
|
const unsigned char *sig, const unsigned char *m,
|
|
const unsigned char *pub_seed, const uint32_t fors_addr[8],
|
|
hash_state *state_seeded);
|
|
|
|
#endif
|