#include #include #include "address.h" #include "hash_state.h" #include "params.h" #include "thash.h" #include "haraka.h" /** * Takes an array of inblocks concatenated arrays of PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N bytes. */ static void PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash( unsigned char *out, unsigned char *buf, const unsigned char *in, unsigned int inblocks, const unsigned char *pub_seed, uint32_t addr[8], const hash_state *hash_state_seeded) { unsigned char *bitmask = buf + PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES; unsigned char outbuf[32]; unsigned char buf_tmp[64]; unsigned int i; (void)pub_seed; /* Suppress an 'unused parameter' warning. */ if (inblocks == 1) { /* F function */ /* Since PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N may be smaller than 32, we need a temporary buffer. */ memset(buf_tmp, 0, 64); PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_addr_to_bytes(buf_tmp, addr); PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_haraka256(outbuf, buf_tmp, hash_state_seeded); for (i = 0; i < inblocks * PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N; i++) { buf_tmp[PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES + i] = in[i] ^ outbuf[i]; } PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_haraka512(outbuf, buf_tmp, hash_state_seeded); memcpy(out, outbuf, PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N); } else { /* All other tweakable hashes*/ PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_addr_to_bytes(buf, addr); PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_haraka_S( bitmask, inblocks * PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N, buf, PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES, hash_state_seeded); for (i = 0; i < inblocks * PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N; i++) { buf[PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES + i] = in[i] ^ bitmask[i]; } PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_haraka_S( out, PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N, buf, PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES + inblocks * PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N, hash_state_seeded); } } /* The wrappers below ensure that we use fixed-size buffers on the stack */ void PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash_1( unsigned char *out, const unsigned char *in, const unsigned char *pub_seed, uint32_t addr[8], const hash_state *hash_state_seeded) { unsigned char buf[PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES + 1 * PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N]; PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash( out, buf, in, 1, pub_seed, addr, hash_state_seeded); } void PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash_2( unsigned char *out, const unsigned char *in, const unsigned char *pub_seed, uint32_t addr[8], const hash_state *hash_state_seeded) { unsigned char buf[PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES + 2 * PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N]; PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash( out, buf, in, 2, pub_seed, addr, hash_state_seeded); } void PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash_WOTS_LEN( unsigned char *out, const unsigned char *in, const unsigned char *pub_seed, uint32_t addr[8], const hash_state *hash_state_seeded) { unsigned char buf[PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES + PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_WOTS_LEN * PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N]; PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash( out, buf, in, PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_WOTS_LEN, pub_seed, addr, hash_state_seeded); } void PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash_FORS_TREES( unsigned char *out, const unsigned char *in, const unsigned char *pub_seed, uint32_t addr[8], const hash_state *hash_state_seeded) { unsigned char buf[PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_ADDR_BYTES + PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_FORS_TREES * PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_N]; PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_thash( out, buf, in, PQCLEAN_SPHINCSHARAKA128FROBUST_AESNI_FORS_TREES, pub_seed, addr, hash_state_seeded); }