pqc/crypto_sign/sphincs-shake256-256s-robust/clean/thash_shake256_robust.c
Thom Wiggers a655ec8a9d SPHINCS+ optimized implementations (#253)
* Add state destroy to SHA2 API

* Include optimized SPHINCS+ implementations

I've generated new implementations from the sphincsplus repository.

* Don't destroy sha256ctx after finalize

* Attempt to shut up MSVC

* Make sure to drop errors in rmtree
2019-12-12 14:29:29 +01:00

82 lines
3.7 KiB
C

#include <stdint.h>
#include <string.h>
#include "address.h"
#include "params.h"
#include "thash.h"
#include "fips202.h"
/**
* Takes an array of inblocks concatenated arrays of PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N bytes.
*/
static void PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash(
unsigned char *out, unsigned char *buf,
const unsigned char *in, unsigned int inblocks,
const unsigned char *pub_seed, uint32_t addr[8]) {
unsigned char *bitmask = buf + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_ADDR_BYTES;
unsigned int i;
memcpy(buf, pub_seed, PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N);
PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_addr_to_bytes(buf + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N, addr);
shake256(bitmask, inblocks * PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N, buf, PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_ADDR_BYTES);
for (i = 0; i < inblocks * PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N; i++) {
buf[PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_ADDR_BYTES + i] = in[i] ^ bitmask[i];
}
shake256(out, PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N, buf, PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_ADDR_BYTES + inblocks * PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N);
}
/* The wrappers below ensure that we use fixed-size buffers on the stack */
void PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash_1(
unsigned char *out, const unsigned char *in,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char buf[PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_ADDR_BYTES + 1 * PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N];
PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash(
out, buf, in, 1, pub_seed, addr);
(void)hash_state_seeded; /* Avoid unused parameter warning. */
}
void PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash_2(
unsigned char *out, const unsigned char *in,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char buf[PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_ADDR_BYTES + 2 * PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N];
PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash(
out, buf, in, 2, pub_seed, addr);
(void)hash_state_seeded; /* Avoid unused parameter warning. */
}
void PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash_WOTS_LEN(
unsigned char *out, const unsigned char *in,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char buf[PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_ADDR_BYTES + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_WOTS_LEN * PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N];
PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash(
out, buf, in, PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_WOTS_LEN, pub_seed, addr);
(void)hash_state_seeded; /* Avoid unused parameter warning. */
}
void PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash_FORS_TREES(
unsigned char *out, const unsigned char *in,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char buf[PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_ADDR_BYTES + PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_FORS_TREES * PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_N];
PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_thash(
out, buf, in, PQCLEAN_SPHINCSSHAKE256256SROBUST_CLEAN_FORS_TREES, pub_seed, addr);
(void)hash_state_seeded; /* Avoid unused parameter warning. */
}