1
1
mirror of https://github.com/henrydcase/pqc.git synced 2024-11-23 16:08:59 +00:00
pqcrypto/crypto_sign/sphincs-haraka-128s-robust/aesni/thash_haraka_robust.c
Thom Wiggers a655ec8a9d SPHINCS+ optimized implementations (#253)
* Add state destroy to SHA2 API

* Include optimized SPHINCS+ implementations

I've generated new implementations from the sphincsplus repository.

* Don't destroy sha256ctx after finalize

* Attempt to shut up MSVC

* Make sure to drop errors in rmtree
2019-12-12 14:29:29 +01:00

95 lines
4.1 KiB
C

#include <stdint.h>
#include <string.h>
#include "address.h"
#include "hash_state.h"
#include "params.h"
#include "thash.h"
#include "haraka.h"
/**
* Takes an array of inblocks concatenated arrays of PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N bytes.
*/
static void PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash(
unsigned char *out, unsigned char *buf,
const unsigned char *in, unsigned int inblocks,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char *bitmask = buf + PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES;
unsigned char outbuf[32];
unsigned char buf_tmp[64];
unsigned int i;
(void)pub_seed; /* Suppress an 'unused parameter' warning. */
if (inblocks == 1) {
/* F function */
/* Since PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N may be smaller than 32, we need a temporary buffer. */
memset(buf_tmp, 0, 64);
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_addr_to_bytes(buf_tmp, addr);
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_haraka256(outbuf, buf_tmp, hash_state_seeded);
for (i = 0; i < inblocks * PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N; i++) {
buf_tmp[PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES + i] = in[i] ^ outbuf[i];
}
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_haraka512(outbuf, buf_tmp, hash_state_seeded);
memcpy(out, outbuf, PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N);
} else {
/* All other tweakable hashes*/
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_addr_to_bytes(buf, addr);
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_haraka_S(
bitmask, inblocks * PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N, buf, PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES, hash_state_seeded);
for (i = 0; i < inblocks * PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N; i++) {
buf[PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES + i] = in[i] ^ bitmask[i];
}
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_haraka_S(
out, PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N, buf, PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES + inblocks * PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N, hash_state_seeded);
}
}
/* The wrappers below ensure that we use fixed-size buffers on the stack */
void PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash_1(
unsigned char *out, const unsigned char *in,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char buf[PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES + 1 * PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N];
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash(
out, buf, in, 1, pub_seed, addr, hash_state_seeded);
}
void PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash_2(
unsigned char *out, const unsigned char *in,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char buf[PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES + 2 * PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N];
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash(
out, buf, in, 2, pub_seed, addr, hash_state_seeded);
}
void PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash_WOTS_LEN(
unsigned char *out, const unsigned char *in,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char buf[PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES + PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_WOTS_LEN * PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N];
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash(
out, buf, in, PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_WOTS_LEN, pub_seed, addr, hash_state_seeded);
}
void PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash_FORS_TREES(
unsigned char *out, const unsigned char *in,
const unsigned char *pub_seed, uint32_t addr[8],
const hash_state *hash_state_seeded) {
unsigned char buf[PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_ADDR_BYTES + PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_FORS_TREES * PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_N];
PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_thash(
out, buf, in, PQCLEAN_SPHINCSHARAKA128SROBUST_AESNI_FORS_TREES, pub_seed, addr, hash_state_seeded);
}