mirror of
https://github.com/henrydcase/pqc.git
synced 2024-11-23 16:08:59 +00:00
82 lines
2.3 KiB
C
82 lines
2.3 KiB
C
#ifndef SPX_PARAMS_H
|
|
#define SPX_PARAMS_H
|
|
|
|
/* Hash output length in bytes. */
|
|
#define SPX_N 16
|
|
/* Height of the hypertree. */
|
|
#define SPX_FULL_HEIGHT 60
|
|
/* Number of subtree layer. */
|
|
#define SPX_D 20
|
|
/* FORS tree dimensions. */
|
|
#define SPX_FORS_HEIGHT 9
|
|
#define SPX_FORS_TREES 30
|
|
/* Winternitz parameter, */
|
|
#define SPX_WOTS_W 16
|
|
|
|
/* The hash function is defined by linking a different hash.c file, as opposed
|
|
to setting a #define constant. */
|
|
|
|
/* For clarity */
|
|
#define SPX_ADDR_BYTES 32
|
|
|
|
/* WOTS parameters. */
|
|
#if SPX_WOTS_W == 256
|
|
#define SPX_WOTS_LOGW 8
|
|
#elif SPX_WOTS_W == 16
|
|
#define SPX_WOTS_LOGW 4
|
|
#else
|
|
#error SPX_WOTS_W assumed 16 or 256
|
|
#endif
|
|
|
|
#define SPX_WOTS_LEN1 (8 * SPX_N / SPX_WOTS_LOGW)
|
|
|
|
/* SPX_WOTS_LEN2 is floor(log(len_1 * (w - 1)) / log(w)) + 1; we precompute */
|
|
#if SPX_WOTS_W == 256
|
|
#if SPX_N <= 1
|
|
#define SPX_WOTS_LEN2 1
|
|
#elif SPX_N <= 256
|
|
#define SPX_WOTS_LEN2 2
|
|
#else
|
|
#error Did not precompute SPX_WOTS_LEN2 for n outside {2, .., 256}
|
|
#endif
|
|
#elif SPX_WOTS_W == 16
|
|
#if SPX_N <= 8
|
|
#define SPX_WOTS_LEN2 2
|
|
#elif SPX_N <= 136
|
|
#define SPX_WOTS_LEN2 3
|
|
#elif SPX_N <= 256
|
|
#define SPX_WOTS_LEN2 4
|
|
#else
|
|
#error Did not precompute SPX_WOTS_LEN2 for n outside {2, .., 256}
|
|
#endif
|
|
#endif
|
|
|
|
#define SPX_WOTS_LEN (SPX_WOTS_LEN1 + SPX_WOTS_LEN2)
|
|
#define SPX_WOTS_BYTES (SPX_WOTS_LEN * SPX_N)
|
|
#define SPX_WOTS_PK_BYTES SPX_WOTS_BYTES
|
|
|
|
/* Subtree size. */
|
|
#define SPX_TREE_HEIGHT (SPX_FULL_HEIGHT / SPX_D)
|
|
|
|
#if SPX_TREE_HEIGHT * SPX_D != SPX_FULL_HEIGHT
|
|
#error SPX_D should always divide SPX_FULL_HEIGHT
|
|
#endif
|
|
|
|
/* FORS parameters. */
|
|
#define SPX_FORS_MSG_BYTES ((SPX_FORS_HEIGHT * SPX_FORS_TREES + 7) / 8)
|
|
#define SPX_FORS_BYTES ((SPX_FORS_HEIGHT + 1) * SPX_FORS_TREES * SPX_N)
|
|
#define SPX_FORS_PK_BYTES SPX_N
|
|
|
|
/* Resulting SPX sizes. */
|
|
#define SPX_BYTES (SPX_N + SPX_FORS_BYTES + SPX_D * SPX_WOTS_BYTES +\
|
|
SPX_FULL_HEIGHT * SPX_N)
|
|
#define SPX_PK_BYTES (2 * SPX_N)
|
|
#define SPX_SK_BYTES (2 * SPX_N + SPX_PK_BYTES)
|
|
|
|
/* Optionally, signing can be made non-deterministic using optrand.
|
|
This can help counter side-channel attacks that would benefit from
|
|
getting a large number of traces when the signer uses the same nodes. */
|
|
#define SPX_OPTRAND_BYTES 32
|
|
|
|
#endif
|