Go to file
Bas Westerbaan 27f2f6eb45 Add test/vectors to generate intermediate test vectors
Helpful to test other implementations.

Used for instance for go-xmssmt.

Issue #5
2020-05-24 17:56:45 +02:00
test Add test/vectors to generate intermediate test vectors 2020-05-24 17:56:45 +02:00
ui Fix OID parsing 2018-02-15 17:45:19 -05:00
.gitignore Clean up tests 2017-10-26 18:06:15 +02:00
.travis.yml Add TravisCI configuration 2017-10-31 17:32:05 +01:00
fips202.c Clean up includes 2017-10-19 17:38:26 +02:00
fips202.h Perform various reformatting / renaming 2017-10-23 14:10:39 +02:00
hash_address.c Make addr type switching not zero out remainder 2017-11-01 16:49:52 +01:00
hash_address.h Rename parameters for readability and consistency 2017-10-24 17:51:56 +02:00
hash.c Add NIST Special Publication 800-208 parameter sets 2020-05-18 08:16:02 -04:00
hash.h Improved key generation 2020-04-30 12:43:36 -04:00
LICENSE Simplify licensing using LICENSE file 2017-10-19 17:38:34 +02:00
Makefile Add test/vectors to generate intermediate test vectors 2020-05-24 17:56:45 +02:00
params.c Add NIST Special Publication 800-208 parameter sets 2020-05-18 08:16:02 -04:00
params.h Add NIST Special Publication 800-208 parameter sets 2020-05-18 08:16:02 -04:00
randombytes.c Refactor for more consistent style and readability 2017-08-03 17:39:37 +02:00
randombytes.h Perform various reformatting / renaming 2017-10-23 14:10:39 +02:00
README.md Add note on deploying reference code 2019-04-24 17:52:39 +02:00
utils.c Move ull-byte-conversions to separate utils file 2017-11-01 14:59:33 +01:00
utils.h Move ull-byte-conversions to separate utils file 2017-11-01 14:59:33 +01:00
wots.c Improved key generation 2020-04-30 12:43:36 -04:00
wots.h Fix typo in WOTS comments: n-byte messages, not m 2017-11-01 13:35:58 +01:00
xmss_commons.c Improved key generation 2020-04-30 12:43:36 -04:00
xmss_commons.h Improved key generation 2020-04-30 12:43:36 -04:00
xmss_core_fast.c Improved key generation 2020-04-30 12:43:36 -04:00
xmss_core.c Add test/vectors to generate intermediate test vectors 2020-05-24 17:56:45 +02:00
xmss_core.h Add test/vectors to generate intermediate test vectors 2020-05-24 17:56:45 +02:00
xmss.c Store OID in bigendian notation in pk and sk 2018-01-30 08:42:22 +00:00
xmss.h Perform various reformatting / renaming 2017-10-23 14:10:39 +02:00

XMSS reference code Build Status

This repository contains the reference implementation that accompanies RFC 8391: "XMSS: eXtended Merkle Signature Scheme".

This reference implementation supports all parameter sets as defined in the RFC at run-time (specified by prefixing the public and private keys with a 32-bit oid). Implementations that want to use compile-time parameter sets can remove the struct xmss_params function parameter, and globally replace the use of its attributes by compile-time constants.

Please note that this reference implementation is intended for cross-validation and experimenting. Deploying cryptographic code in practice requires careful consideration of the specific deployment scenario and relevant threat model. This holds perhaps doubly so for stateful signature schemes such as XMSS.

When using the current code base, please be careful, expect changes and watch this document for further documentation. In particular, xmss_core_fast.c is long due for a serious clean-up. While this will not change its public API or output, it may affect the storage format of the BDS state (i.e. part of the secret key).

Dependencies

For the SHA-2 hash functions (i.e. SHA-256 and SHA-512), we rely on OpenSSL. Make sure to install the OpenSSL development headers. On Debian-based systems, this is achieved by installing the OpenSSL development package libssl-dev.

License

This reference implementation was written by Andreas Hülsing and Joost Rijneveld. All included code is available under the CC0 1.0 Universal Public Domain Dedication.