mirror of
https://github.com/henrydcase/pqc.git
synced 2024-11-23 16:08:59 +00:00
aa4611a4d1
This PR sacrifices passing some extra arguments to get rid of the global state. * Haraka needs state in all hash calls, this results in changes to the hash functions specified in `hash.h`. The extra pointers passed would not be necessary for SHA256 or SHAKE256. * SHAKE256 did not have global state, but uniformity in the implementations requires us to pass around the new state context anyway. Otherwise, @joostrijneveld's SPHINCS+ generator doesn't really work anymore). We introduce a new header file called `primitive.h` which defines the required state type for the generic functions. I did not go into replacing _all_ occurrences of state variables by the new `hash_state` macro.
91 lines
3.7 KiB
C
91 lines
3.7 KiB
C
#include <stdint.h>
|
|
#include <string.h>
|
|
|
|
#include "address.h"
|
|
#include "hash.h"
|
|
#include "params.h"
|
|
#include "utils.h"
|
|
|
|
#include "haraka.h"
|
|
|
|
void PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_initialize_hash_function(
|
|
hash_state *state_seeded,
|
|
const unsigned char *pub_seed, const unsigned char *sk_seed) {
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_tweak_constants(state_seeded, pub_seed, sk_seed, SPX_N);
|
|
}
|
|
|
|
/*
|
|
* Computes PRF(key, addr), given a secret key of SPX_N bytes and an address
|
|
*/
|
|
void PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_prf_addr(
|
|
unsigned char *out, const unsigned char *key, const uint32_t addr[8],
|
|
const hash_state *state_seeded) {
|
|
unsigned char buf[SPX_ADDR_BYTES];
|
|
/* Since SPX_N may be smaller than 32, we need a temporary buffer. */
|
|
unsigned char outbuf[32];
|
|
|
|
(void)key; /* Suppress an 'unused parameter' warning. */
|
|
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_addr_to_bytes(buf, addr);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka256_sk(outbuf, buf, state_seeded);
|
|
memcpy(out, outbuf, SPX_N);
|
|
}
|
|
|
|
/**
|
|
* Computes the message-dependent randomness R, using a secret seed and an
|
|
* optional randomization value as well as the message.
|
|
*/
|
|
void PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_gen_message_random(
|
|
unsigned char *R,
|
|
const unsigned char *sk_prf, const unsigned char *optrand,
|
|
const unsigned char *m, size_t mlen,
|
|
const hash_state *state_seeded) {
|
|
uint8_t s_inc[65];
|
|
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_init(s_inc);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_absorb(s_inc, sk_prf, SPX_N, state_seeded);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_absorb(s_inc, optrand, SPX_N, state_seeded);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_absorb(s_inc, m, mlen, state_seeded);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_finalize(s_inc);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_squeeze(R, SPX_N, s_inc, state_seeded);
|
|
}
|
|
|
|
/**
|
|
* Computes the message hash using R, the public key, and the message.
|
|
* Outputs the message digest and the index of the leaf. The index is split in
|
|
* the tree index and the leaf index, for convenient copying to an address.
|
|
*/
|
|
void PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_hash_message(
|
|
unsigned char *digest, uint64_t *tree, uint32_t *leaf_idx,
|
|
const unsigned char *R, const unsigned char *pk,
|
|
const unsigned char *m, size_t mlen,
|
|
const hash_state *state_seeded) {
|
|
#define SPX_TREE_BITS (SPX_TREE_HEIGHT * (SPX_D - 1))
|
|
#define SPX_TREE_BYTES ((SPX_TREE_BITS + 7) / 8)
|
|
#define SPX_LEAF_BITS SPX_TREE_HEIGHT
|
|
#define SPX_LEAF_BYTES ((SPX_LEAF_BITS + 7) / 8)
|
|
#define SPX_DGST_BYTES (SPX_FORS_MSG_BYTES + SPX_TREE_BYTES + SPX_LEAF_BYTES)
|
|
|
|
unsigned char buf[SPX_DGST_BYTES];
|
|
unsigned char *bufp = buf;
|
|
uint8_t s_inc[65];
|
|
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_init(s_inc);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_absorb(s_inc, R, SPX_N, state_seeded);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_absorb(s_inc, pk, SPX_PK_BYTES, state_seeded);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_absorb(s_inc, m, mlen, state_seeded);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_finalize(s_inc);
|
|
PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_haraka_S_inc_squeeze(buf, SPX_DGST_BYTES, s_inc, state_seeded);
|
|
|
|
memcpy(digest, bufp, SPX_FORS_MSG_BYTES);
|
|
bufp += SPX_FORS_MSG_BYTES;
|
|
|
|
*tree = PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_bytes_to_ull(bufp, SPX_TREE_BYTES);
|
|
*tree &= (~(uint64_t)0) >> (64 - SPX_TREE_BITS);
|
|
bufp += SPX_TREE_BYTES;
|
|
|
|
*leaf_idx = (uint32_t)PQCLEAN_SPHINCSHARAKA192SROBUST_CLEAN_bytes_to_ull(
|
|
bufp, SPX_LEAF_BYTES);
|
|
*leaf_idx &= (~(uint32_t)0) >> (32 - SPX_LEAF_BITS);
|
|
}
|