xmss-KAT-generator

Andreas 171ccbd26f fixed two minor points in handling the maximum signature value		vor 3 Jahren
test	fixed two minor points in handling the maximum signature value	vor 3 Jahren
ui	Fix OID parsing	vor 6 Jahren
.gitignore	Clean up tests	vor 7 Jahren
.travis.yml	Add TravisCI configuration	vor 7 Jahren
LICENSE	Simplify licensing using LICENSE file	vor 7 Jahren
Makefile	Ensure that sign deletes key after 2^h signatures and returns -2	vor 3 Jahren
README.md	Add note on deploying reference code	vor 5 Jahren
fips202.c	Clean up includes	vor 7 Jahren
fips202.h	Perform various reformatting / renaming	vor 7 Jahren
hash.c	Fix prefix space for hash_message wrt padding_len	vor 4 Jahren
hash.h	Improved key generation	vor 4 Jahren
hash_address.c	Make addr type switching not zero out remainder	vor 7 Jahren
hash_address.h	Rename parameters for readability and consistency	vor 7 Jahren
params.c	Add NIST Special Publication 800-208 parameter sets	vor 4 Jahren
params.h	Add NIST Special Publication 800-208 parameter sets	vor 4 Jahren
randombytes.c	Refactor for more consistent style and readability	vor 7 Jahren
randombytes.h	Perform various reformatting / renaming	vor 7 Jahren
utils.c	Move ull-byte-conversions to separate utils file	vor 7 Jahren
utils.h	Move ull-byte-conversions to separate utils file	vor 7 Jahren
wots.c	Improved key generation	vor 4 Jahren
wots.h	Fix typo in WOTS comments: n-byte messages, not m	vor 7 Jahren
xmss.c	Store OID in bigendian notation in pk and sk	vor 6 Jahren
xmss.h	Perform various reformatting / renaming	vor 7 Jahren
xmss_commons.c	Fix prefix space for hash_message wrt padding_len	vor 4 Jahren
xmss_commons.h	Improved key generation	vor 4 Jahren
xmss_core.c	fixed two minor points in handling the maximum signature value	vor 3 Jahren
xmss_core.h	Unify keypair and seed_keypair	vor 4 Jahren
xmss_core_fast.c	fixed two minor points in handling the maximum signature value	vor 3 Jahren

README.md

XMSS reference code

This repository contains the reference implementation that accompanies RFC 8391: “XMSS: eXtended Merkle Signature Scheme”.

This reference implementation supports all parameter sets as defined in the RFC at run-time (specified by prefixing the public and private keys with a 32-bit oid). Implementations that want to use compile-time parameter sets can remove the struct xmss_params function parameter, and globally replace the use of its attributes by compile-time constants.

Please note that this reference implementation is intended for cross-validation and experimenting. Deploying cryptographic code in practice requires careful consideration of the specific deployment scenario and relevant threat model. This holds perhaps doubly so for stateful signature schemes such as XMSS.

When using the current code base, please be careful, expect changes and watch this document for further documentation. In particular, xmss_core_fast.c is long due for a serious clean-up. While this will not change its public API or output, it may affect the storage format of the BDS state (i.e. part of the secret key).

Dependencies

For the SHA-2 hash functions (i.e. SHA-256 and SHA-512), we rely on OpenSSL. Make sure to install the OpenSSL development headers. On Debian-based systems, this is achieved by installing the OpenSSL development package libssl-dev.

License

This reference implementation was written by Andreas Hülsing and Joost Rijneveld. All included code is available under the CC0 1.0 Universal Public Domain Dedication.