3134fafd91
The defined-parameters branch should be the new leading branch, as it supersedes master. This merge is performed using --strategy ours as there are numerous conflicting changes regarding the different ways in which SHA3 was added. The master branch is considered to not contain anything of value that is not contained in the defined-parameters branch. Prior to merging, the defined-parameters branch was rebased to prevent the cherry-picked commits from showing up twice. |
||
|---|---|---|
| test | ||
| .gitignore | ||
| fips202.c | ||
| fips202.h | ||
| hash_address.c | ||
| hash_address.h | ||
| hash.c | ||
| hash.h | ||
| Makefile | ||
| params_runtime.c | ||
| params_runtime.h | ||
| params.h.py | ||
| randombytes.c | ||
| randombytes.h | ||
| README.md | ||
| wots.c | ||
| wots.h | ||
| xmss_commons.c | ||
| xmss_commons.h | ||
| xmss_core_fast.c | ||
| xmss_core_fast.h | ||
| xmss_core.c | ||
| xmss_core.h | ||
| xmss.c | ||
| xmss.h | ||
| zerobytes.c | ||
| zerobytes.h | ||
XMSS reference code
This repository contains the reference implementation that accompanies the Internet Draft "XMSS: Extended Hash-Based Signatures", draft-irtf-cfrg-xmss-hash-based-signatures.
This reference implementation supports all parameter sets as defined in the Draft at run-time (specified by prefixing the public and private keys with a 32-bit oid), but also allows for compile-time parameters when directly using the internal *_core* functions.
While the behavior of the code in this repository is supposed to be stable, the API is not yet fully complete. In particular, the wrapper for run-time parameters does not yet support the back-end functions that make use of BDS traversal (TODO). We will also add more extensive test functionality, making it easier to compare to other XMSS implementations (TODO).
When using the current code base, please be careful, expect changes and watch this document for further documentation.