65a6a63e08
* Put AES ctx on the heap This forces people to use the ``ctx_release`` functions, because otherwise there will be leaks * Put fips202 on the heap * Add much more docs for fips202.h * fixup! Put fips202 on the heap * Put SHA2 on the heap-supporting API * Fix clang-tidy warnings * Fix unreachable free() in falcon * Fix McEliece8192128f-sse GNU Makefile
83 lines
4.0 KiB
C
83 lines
4.0 KiB
C
#include <stdint.h>
|
|
#include <string.h>
|
|
|
|
#include "address.h"
|
|
#include "params.h"
|
|
#include "thash.h"
|
|
|
|
#include "sha2.h"
|
|
#include "sha256.h"
|
|
|
|
/**
|
|
* Takes an array of inblocks concatenated arrays of PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N bytes.
|
|
*/
|
|
static void PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash(
|
|
unsigned char *out, unsigned char *buf,
|
|
const unsigned char *in, unsigned int inblocks,
|
|
const unsigned char *pub_seed, uint32_t addr[8],
|
|
const sha256ctx *hash_state_seeded) {
|
|
|
|
unsigned char outbuf[PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_OUTPUT_BYTES];
|
|
unsigned char *bitmask = buf + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_ADDR_BYTES + 4;
|
|
sha256ctx sha2_state;
|
|
unsigned int i;
|
|
|
|
memcpy(buf, pub_seed, PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N);
|
|
PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_compress_address(buf + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N, addr);
|
|
/* MGF1 requires us to have 4 extra bytes in 'buf' */
|
|
PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_mgf1(bitmask, inblocks * PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N, buf, PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_ADDR_BYTES);
|
|
|
|
/* Retrieve precomputed state containing pub_seed */
|
|
sha256_inc_ctx_clone(&sha2_state, hash_state_seeded);
|
|
|
|
for (i = 0; i < inblocks * PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N; i++) {
|
|
buf[PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_ADDR_BYTES + i] = in[i] ^ bitmask[i];
|
|
}
|
|
|
|
sha256_inc_finalize(outbuf, &sha2_state, buf + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N,
|
|
PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_ADDR_BYTES + inblocks * PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N);
|
|
memcpy(out, outbuf, PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N);
|
|
}
|
|
|
|
/* The wrappers below ensure that we use fixed-size buffers on the stack */
|
|
|
|
void PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash_1(
|
|
unsigned char *out, const unsigned char *in,
|
|
const unsigned char *pub_seed, uint32_t addr[8],
|
|
const sha256ctx *hash_state_seeded) {
|
|
|
|
unsigned char buf[PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_ADDR_BYTES + 4 + 1 * PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N];
|
|
PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash(
|
|
out, buf, in, 1, pub_seed, addr, hash_state_seeded);
|
|
}
|
|
|
|
void PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash_2(
|
|
unsigned char *out, const unsigned char *in,
|
|
const unsigned char *pub_seed, uint32_t addr[8],
|
|
const sha256ctx *hash_state_seeded) {
|
|
|
|
unsigned char buf[PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_ADDR_BYTES + 4 + 2 * PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N];
|
|
PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash(
|
|
out, buf, in, 2, pub_seed, addr, hash_state_seeded);
|
|
}
|
|
|
|
void PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash_WOTS_LEN(
|
|
unsigned char *out, const unsigned char *in,
|
|
const unsigned char *pub_seed, uint32_t addr[8],
|
|
const sha256ctx *hash_state_seeded) {
|
|
|
|
unsigned char buf[PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_ADDR_BYTES + 4 + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_WOTS_LEN * PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N];
|
|
PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash(
|
|
out, buf, in, PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_WOTS_LEN, pub_seed, addr, hash_state_seeded);
|
|
}
|
|
|
|
void PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash_FORS_TREES(
|
|
unsigned char *out, const unsigned char *in,
|
|
const unsigned char *pub_seed, uint32_t addr[8],
|
|
const sha256ctx *hash_state_seeded) {
|
|
|
|
unsigned char buf[PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_SHA256_ADDR_BYTES + 4 + PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_FORS_TREES * PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_N];
|
|
PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_thash(
|
|
out, buf, in, PQCLEAN_SPHINCSSHA256256FROBUST_CLEAN_FORS_TREES, pub_seed, addr, hash_state_seeded);
|
|
}
|