e56b2e5556
* fixes dynamic memory allocation test. previously a function called freeze() would trigger it
* this adds DilithiumII. Preprocessor conditionals still need to be removed
* fix ms Makefile
* fix MS compiler warnings
* clean-up
* remove preprocessor conditionals
* add dilithium3
* add dilithium4
* add duplicate consistency checks
* SHA2 state constants in common
* clean up symmetric.h
* Port SPHINCS+-SHA256 to sha256ctx struct
* Implement ctx struct for fips202
* Port Kyber{512,768,1024} to fips202 ctx struct
* Port NewHope to fips202 structs
* Port SPHINCS+-SHAKE256 to fips202 ctx structs
* Use opaque fips202 structs in MQDSS
* port dilithium to use fips202 ctx structs
* include -Wredundant-decls
* remove comment; format NTT constants
* reduce casts in power2round
36 lines
819 B
C
36 lines
819 B
C
#ifndef PARAMS_H
|
|
#define PARAMS_H
|
|
|
|
#define SEEDBYTES 32
|
|
#define CRHBYTES 48
|
|
#define N 256
|
|
#define Q 8380417
|
|
#define QBITS 23
|
|
#define ROOT_OF_UNITY 1753
|
|
#define D 14
|
|
#define GAMMA1 ((Q - 1)/16)
|
|
#define GAMMA2 (GAMMA1/2)
|
|
#define ALPHA (2*GAMMA2)
|
|
|
|
|
|
// DilithiumII parameters
|
|
#define K 4
|
|
#define L 3
|
|
#define ETA 6
|
|
#define SETABITS 4
|
|
#define BETA 325
|
|
#define OMEGA 80
|
|
|
|
|
|
#define POLT1_SIZE_PACKED ((N*(QBITS - D))/8)
|
|
#define POLT0_SIZE_PACKED ((N*D)/8)
|
|
#define POLETA_SIZE_PACKED ((N*SETABITS)/8)
|
|
#define POLZ_SIZE_PACKED ((N*(QBITS - 3))/8)
|
|
#define POLW1_SIZE_PACKED ((N*4)/8)
|
|
|
|
#define CRYPTO_PUBLICKEYBYTES (SEEDBYTES + K*POLT1_SIZE_PACKED)
|
|
#define CRYPTO_SECRETKEYBYTES (2*SEEDBYTES + (L + K)*POLETA_SIZE_PACKED + CRHBYTES + K*POLT0_SIZE_PACKED)
|
|
#define CRYPTO_BYTES (L*POLZ_SIZE_PACKED + (OMEGA + K) + (N/8 + 8))
|
|
|
|
#endif
|