kris
/
xmss-KAT-generator
1
0
Форкнуть 0
Код Задачи 0 Pull Request'ы 0 Релизы 0 Вики Активность
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
121 коммит
1 ветка
488 KiB
 
 
Дерево: 0d019ddc9f
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из '0d019ddc9f'
${ noResults }
xmss-KAT-generator/params.c

497 строки
12 KiB
Исходник Вина История 

  1. #include <stdint.h>

  2. #include <string.h>

  3. 

  4. #include "params.h"

  5. #include "xmss_core.h"

  6. 

  7. int xmss_str_to_oid(uint32_t *oid, const char *s)

  8. {

  9.     if (!strcmp(s, "XMSS-SHA2_10_256")) {

  10.         *oid = 0x00000001;

  11.     }

  12.     else if (!strcmp(s, "XMSS-SHA2_16_256")) {

  13.         *oid = 0x00000002;

  14.     }

  15.     else if (!strcmp(s, "XMSS-SHA2_20_256")) {

  16.         *oid = 0x00000003;

  17.     }

  18.     else if (!strcmp(s, "XMSS-SHA2_10_512")) {

  19.         *oid = 0x00000004;

  20.     }

  21.     else if (!strcmp(s, "XMSS-SHA2_16_512")) {

  22.         *oid = 0x00000005;

  23.     }

  24.     else if (!strcmp(s, "XMSS-SHA2_20_512")) {

  25.         *oid = 0x00000006;

  26.     }

  27.     else if (!strcmp(s, "XMSS-SHAKE_10_256")) {

  28.         *oid = 0x00000007;

  29.     }

  30.     else if (!strcmp(s, "XMSS-SHAKE_16_256")) {

  31.         *oid = 0x00000008;

  32.     }

  33.     else if (!strcmp(s, "XMSS-SHAKE_20_256")) {

  34.         *oid = 0x00000009;

  35.     }

  36.     else if (!strcmp(s, "XMSS-SHAKE_10_512")) {

  37.         *oid = 0x0000000a;

  38.     }

  39.     else if (!strcmp(s, "XMSS-SHAKE_16_512")) {

  40.         *oid = 0x0000000b;

  41.     }

  42.     else if (!strcmp(s, "XMSS-SHAKE_20_512")) {

  43.         *oid = 0x0000000c;

  44.     }

  45.     else {

  46.         return -1;

  47.     }

  48.     return 0;

  49. }

  50. 

  51. int xmssmt_str_to_oid(uint32_t *oid, const char *s)

  52. {

  53.     if (!strcmp(s, "XMSSMT-SHA2_20/2_256")) {

  54.         *oid = 0x00000001;

  55.     }

  56.     else if (!strcmp(s, "XMSSMT-SHA2_20/4_256")) {

  57.         *oid = 0x00000002;

  58.     }

  59.     else if (!strcmp(s, "XMSSMT-SHA2_40/2_256")) {

  60.         *oid = 0x00000003;

  61.     }

  62.     else if (!strcmp(s, "XMSSMT-SHA2_40/4_256")) {

  63.         *oid = 0x00000004;

  64.     }

  65.     else if (!strcmp(s, "XMSSMT-SHA2_40/8_256")) {

  66.         *oid = 0x00000005;

  67.     }

  68.     else if (!strcmp(s, "XMSSMT-SHA2_60/3_256")) {

  69.         *oid = 0x00000006;

  70.     }

  71.     else if (!strcmp(s, "XMSSMT-SHA2_60/6_256")) {

  72.         *oid = 0x00000007;

  73.     }

  74.     else if (!strcmp(s, "XMSSMT-SHA2_60/12_256")) {

  75.         *oid = 0x00000008;

  76.     }

  77.     else if (!strcmp(s, "XMSSMT-SHA2_20/2_512")) {

  78.         *oid = 0x00000009;

  79.     }

  80.     else if (!strcmp(s, "XMSSMT-SHA2_20/4_512")) {

  81.         *oid = 0x0000000a;

  82.     }

  83.     else if (!strcmp(s, "XMSSMT-SHA2_40/2_512")) {

  84.         *oid = 0x0000000b;

  85.     }

  86.     else if (!strcmp(s, "XMSSMT-SHA2_40/4_512")) {

  87.         *oid = 0x0000000c;

  88.     }

  89.     else if (!strcmp(s, "XMSSMT-SHA2_40/8_512")) {

  90.         *oid = 0x0000000d;

  91.     }

  92.     else if (!strcmp(s, "XMSSMT-SHA2_60/3_512")) {

  93.         *oid = 0x0000000e;

  94.     }

  95.     else if (!strcmp(s, "XMSSMT-SHA2_60/6_512")) {

  96.         *oid = 0x0000000f;

  97.     }

  98.     else if (!strcmp(s, "XMSSMT-SHA2_60/12_512")) {

  99.         *oid = 0x00000010;

  100.     }

  101.     else if (!strcmp(s, "XMSSMT-SHAKE_20/2_256")) {

  102.         *oid = 0x00000011;

  103.     }

  104.     else if (!strcmp(s, "XMSSMT-SHAKE_20/4_256")) {

  105.         *oid = 0x00000012;

  106.     }

  107.     else if (!strcmp(s, "XMSSMT-SHAKE_40/2_256")) {

  108.         *oid = 0x00000013;

  109.     }

  110.     else if (!strcmp(s, "XMSSMT-SHAKE_40/4_256")) {

  111.         *oid = 0x00000014;

  112.     }

  113.     else if (!strcmp(s, "XMSSMT-SHAKE_40/8_256")) {

  114.         *oid = 0x00000015;

  115.     }

  116.     else if (!strcmp(s, "XMSSMT-SHAKE_60/3_256")) {

  117.         *oid = 0x00000016;

  118.     }

  119.     else if (!strcmp(s, "XMSSMT-SHAKE_60/6_256")) {

  120.         *oid = 0x00000017;

  121.     }

  122.     else if (!strcmp(s, "XMSSMT-SHAKE_60/12_256")) {

  123.         *oid = 0x00000018;

  124.     }

  125.     else if (!strcmp(s, "XMSSMT-SHAKE_20/2_512")) {

  126.         *oid = 0x00000019;

  127.     }

  128.     else if (!strcmp(s, "XMSSMT-SHAKE_20/4_512")) {

  129.         *oid = 0x0000001a;

  130.     }

  131.     else if (!strcmp(s, "XMSSMT-SHAKE_40/2_512")) {

  132.         *oid = 0x0000001b;

  133.     }

  134.     else if (!strcmp(s, "XMSSMT-SHAKE_40/4_512")) {

  135.         *oid = 0x0000001c;

  136.     }

  137.     else if (!strcmp(s, "XMSSMT-SHAKE_40/8_512")) {

  138.         *oid = 0x0000001d;

  139.     }

  140.     else if (!strcmp(s, "XMSSMT-SHAKE_60/3_512")) {

  141.         *oid = 0x0000001e;

  142.     }

  143.     else if (!strcmp(s, "XMSSMT-SHAKE_60/6_512")) {

  144.         *oid = 0x0000001f;

  145.     }

  146.     else if (!strcmp(s, "XMSSMT-SHAKE_60/12_512")) {

  147.         *oid = 0x00000020;

  148.     }

  149.     else {

  150.         return -1;

  151.     }

  152.     return 0;

  153. }

  154. 

  155. int xmss_parse_oid(xmss_params *params, const uint32_t oid)

  156. {

  157.     switch (oid) {

  158.         case 0x00000001:

  159.         case 0x00000002:

  160.         case 0x00000003:

  161.         case 0x00000004:

  162.         case 0x00000005:

  163.         case 0x00000006:

  164.             params->func = XMSS_SHA2;

  165.             break;

  166. 

  167.         case 0x00000007:

  168.         case 0x00000008:

  169.         case 0x00000009:

  170.         case 0x0000000a:

  171.         case 0x0000000b:

  172.         case 0x0000000c:

  173.             params->func = XMSS_SHAKE;

  174.             break;

  175. 

  176.         default:

  177.             return -1;

  178.     }

  179.     switch (oid) {

  180.         case 0x00000001:

  181.         case 0x00000002:

  182.         case 0x00000003:

  183. 

  184.         case 0x00000007:

  185.         case 0x00000008:

  186.         case 0x00000009:

  187.             params->n = 32;

  188.             break;

  189. 

  190.         case 0x00000004:

  191.         case 0x00000005:

  192.         case 0x00000006:

  193. 

  194.         case 0x0000000a:

  195.         case 0x0000000b:

  196.         case 0x0000000c:

  197.             params->n = 64;

  198.             break;

  199. 

  200.         default:

  201.             return -1;

  202.     }

  203.     switch (oid) {

  204.         case 0x00000001:

  205.         case 0x00000004:

  206.         case 0x00000007:

  207.         case 0x0000000a:

  208.             params->full_height = 10;

  209.             break;

  210. 

  211.         case 0x00000002:

  212.         case 0x00000005:

  213.         case 0x00000008:

  214.         case 0x0000000b:

  215.             params->full_height = 16;

  216.             break;

  217. 

  218.         case 0x00000003:

  219.         case 0x00000006:

  220.         case 0x00000009:

  221.         case 0x0000000c:

  222.             params->full_height = 20;

  223. 

  224.             break;

  225.         default:

  226.             return -1;

  227.     }

  228. 

  229.     params->d = 1;

  230.     params->wots_w = 16;

  231. 

  232.     // TODO figure out sensible and legal values for this based on the above

  233.     params->bds_k = 0;

  234. 

  235.     return xmss_xmssmt_initialize_params(params);

  236. }

  237. 

  238. int xmssmt_parse_oid(xmss_params *params, const uint32_t oid)

  239. {

  240.     switch (oid) {

  241.         case 0x00000001:

  242.         case 0x00000002:

  243.         case 0x00000003:

  244.         case 0x00000004:

  245.         case 0x00000005:

  246.         case 0x00000006:

  247.         case 0x00000007:

  248.         case 0x00000008:

  249.         case 0x00000009:

  250.         case 0x0000000a:

  251.         case 0x0000000b:

  252.         case 0x0000000c:

  253.         case 0x0000000d:

  254.         case 0x0000000e:

  255.         case 0x0000000f:

  256.         case 0x00000010:

  257.             params->func = XMSS_SHA2;

  258.             break;

  259. 

  260.         case 0x00000011:

  261.         case 0x00000012:

  262.         case 0x00000013:

  263.         case 0x00000014:

  264.         case 0x00000015:

  265.         case 0x00000016:

  266.         case 0x00000017:

  267.         case 0x00000018:

  268.         case 0x00000019:

  269.         case 0x0000001a:

  270.         case 0x0000001b:

  271.         case 0x0000001c:

  272.         case 0x0000001e:

  273.         case 0x0000001d:

  274.         case 0x0000001f:

  275.         case 0x00000020:

  276.             params->func = XMSS_SHAKE;

  277.             break;

  278. 

  279.         default:

  280.             return -1;

  281.     }

  282.     switch (oid) {

  283.         case 0x00000001:

  284.         case 0x00000002:

  285.         case 0x00000003:

  286.         case 0x00000004:

  287.         case 0x00000005:

  288.         case 0x00000006:

  289.         case 0x00000007:

  290.         case 0x00000008:

  291. 

  292.         case 0x00000011:

  293.         case 0x00000012:

  294.         case 0x00000013:

  295.         case 0x00000014:

  296.         case 0x00000015:

  297.         case 0x00000016:

  298.         case 0x00000017:

  299.         case 0x00000018:

  300.             params->n = 32;

  301.             break;

  302. 

  303.         case 0x00000009:

  304.         case 0x0000000a:

  305.         case 0x0000000b:

  306.         case 0x0000000c:

  307.         case 0x0000000d:

  308.         case 0x0000000e:

  309.         case 0x0000000f:

  310.         case 0x00000010:

  311. 

  312.         case 0x00000019:

  313.         case 0x0000001a:

  314.         case 0x0000001b:

  315.         case 0x0000001c:

  316.         case 0x0000001d:

  317.         case 0x0000001e:

  318.         case 0x0000001f:

  319.         case 0x00000020:

  320.             params->n = 64;

  321.             break;

  322. 

  323.         default:

  324.             return -1;

  325.     }

  326.     switch (oid) {

  327.         case 0x00000001:

  328.         case 0x00000002:

  329. 

  330.         case 0x00000009:

  331.         case 0x0000000a:

  332. 

  333.         case 0x00000011:

  334.         case 0x00000012:

  335. 

  336.         case 0x00000019:

  337.         case 0x0000001a:

  338.             params->full_height = 20;

  339.             break;

  340. 

  341.         case 0x00000003:

  342.         case 0x00000004:

  343.         case 0x00000005:

  344. 

  345.         case 0x0000000b:

  346.         case 0x0000000c:

  347.         case 0x0000000d:

  348. 

  349.         case 0x00000013:

  350.         case 0x00000014:

  351.         case 0x00000015:

  352. 

  353.         case 0x0000001b:

  354.         case 0x0000001c:

  355.         case 0x0000001d:

  356.             params->full_height = 40;

  357.             break;

  358. 

  359.         case 0x00000006:

  360.         case 0x00000007:

  361.         case 0x00000008:

  362. 

  363.         case 0x0000000e:

  364.         case 0x0000000f:

  365.         case 0x00000010:

  366. 

  367.         case 0x00000016:

  368.         case 0x00000017:

  369.         case 0x00000018:

  370. 

  371.         case 0x0000001e:

  372.         case 0x0000001f:

  373.         case 0x00000020:

  374.             params->full_height = 60;

  375.             break;

  376. 

  377.         default:

  378.             return -1;

  379.     }

  380.     switch (oid) {

  381.         case 0x00000001:

  382.         case 0x00000003:

  383.         case 0x00000009:

  384.         case 0x0000000b:

  385.         case 0x00000011:

  386.         case 0x00000013:

  387.         case 0x00000019:

  388.         case 0x0000001b:

  389.             params->d = 2;

  390.             break;

  391. 

  392.         case 0x00000002:

  393.         case 0x00000004:

  394.         case 0x0000000a:

  395.         case 0x0000000c:

  396.         case 0x00000012:

  397.         case 0x00000014:

  398.         case 0x0000001a:

  399.         case 0x0000001c:

  400.             params->d = 4;

  401.             break;

  402. 

  403.         case 0x00000005:

  404.         case 0x0000000d:

  405.         case 0x00000015:

  406.         case 0x0000001d:

  407.             params->d = 8;

  408.             break;

  409. 

  410.         case 0x00000006:

  411.         case 0x0000000e:

  412.         case 0x00000016:

  413.         case 0x0000001e:

  414.             params->d = 3;

  415.             break;

  416. 

  417.         case 0x00000007:

  418.         case 0x0000000f:

  419.         case 0x00000017:

  420.         case 0x0000001f:

  421.             params->d = 6;

  422.             break;

  423. 

  424.         case 0x00000008:

  425.         case 0x00000010:

  426.         case 0x00000018:

  427.         case 0x00000020:

  428.             params->d = 12;

  429.             break;

  430. 

  431.         default:

  432.             return -1;

  433.     }

  434. 

  435.     params->wots_w = 16;

  436. 

  437.     // TODO figure out sensible and legal values for this based on the above

  438.     params->bds_k = 0;

  439. 

  440.     return xmss_xmssmt_initialize_params(params);

  441. }

  442. 

  443. /**

  444.  * Given a params struct where the following properties have been initialized;

  445.  *  - full_height; the height of the complete (hyper)tree

  446.  *  - n; the number of bytes of hash function output

  447.  *  - d; the number of layers (d > 1 implies XMSSMT)

  448.  *  - func; one of {XMSS_SHA2, XMSS_SHAKE}

  449.  *  - wots_w; the Winternitz parameter

  450.  *  - optionally, bds_k; the BDS traversal trade-off parameter,

  451.  * this function initializes the remainder of the params structure.

  452.  */

  453. int xmss_xmssmt_initialize_params(xmss_params *params)

  454. {

  455.     params->tree_height = params->full_height  / params->d;

  456.     if (params->wots_w == 4) {

  457.         params->wots_log_w = 2;

  458.         params->wots_len1 = 8 * params->n / params->wots_log_w;

  459.         /* len_2 = floor(log(len_1 * (w - 1)) / log(w)) + 1 */

  460.         params->wots_len2 = 5;

  461.     }

  462.     else if (params->wots_w == 16) {

  463.         params->wots_log_w = 4;

  464.         params->wots_len1 = 8 * params->n / params->wots_log_w;

  465.         /* len_2 = floor(log(len_1 * (w - 1)) / log(w)) + 1 */

  466.         params->wots_len2 = 3;

  467.     }

  468.     else if (params->wots_w == 256) {

  469.         params->wots_log_w = 8;

  470.         params->wots_len1 = 8 * params->n / params->wots_log_w;

  471.         /* len_2 = floor(log(len_1 * (w - 1)) / log(w)) + 1 */

  472.         params->wots_len2 = 2;

  473.     }

  474.     else {

  475.         return -1;

  476.     }

  477.     params->wots_len = params->wots_len1 + params->wots_len2;

  478.     params->wots_sig_bytes = params->wots_len * params->n;

  479. 

  480.     if (params->d == 1) {  // Assume this is XMSS, not XMSS^MT

  481.         /* In XMSS, always use fixed 4 bytes for index_bytes */

  482.         params->index_bytes = 4;

  483.     }

  484.     else {

  485.         /* In XMSS^MT, round index_bytes up to nearest byte. */

  486.         params->index_bytes = (params->full_height + 7) / 8;

  487.     }

  488.     params->sig_bytes = (params->index_bytes + params->n

  489.                          + params->d * params->wots_sig_bytes

  490.                          + params->full_height * params->n);

  491. 

  492.     params->pk_bytes = 2 * params->n;

  493.     params->sk_bytes = xmss_xmssmt_core_sk_bytes(params);

  494. 

  495.     return 0;

  496. }