kris
/
xmss-KAT-generator
1
0
派生 0
代码 工单 0 合并请求 0 版本发布 0 百科 动态
您最多选择25个主题 主题必须以字母或数字开头，可以包含连字符 (-)，并且长度不得超过35个字符
126 提交
1 分支
488 KiB
 
 
目录树: 3e28db2362
分支列表 标签列表
${ item.name }
创建分支 ${ searchTerm }
从 '3e28db2362'
${ noResults }
xmss-KAT-generator/params.c

501 行
12 KiB
原始文件 Blame 文件历史 

  1. #include <stdint.h>

  2. #include <string.h>

  3. 

  4. #include "params.h"

  5. #include "xmss_core.h"

  6. 

  7. int xmss_str_to_oid(uint32_t *oid, const char *s)

  8. {

  9.     if (!strcmp(s, "XMSS-SHA2_10_256")) {

  10.         *oid = 0x00000001;

  11.     }

  12.     else if (!strcmp(s, "XMSS-SHA2_16_256")) {

  13.         *oid = 0x00000002;

  14.     }

  15.     else if (!strcmp(s, "XMSS-SHA2_20_256")) {

  16.         *oid = 0x00000003;

  17.     }

  18.     else if (!strcmp(s, "XMSS-SHA2_10_512")) {

  19.         *oid = 0x00000004;

  20.     }

  21.     else if (!strcmp(s, "XMSS-SHA2_16_512")) {

  22.         *oid = 0x00000005;

  23.     }

  24.     else if (!strcmp(s, "XMSS-SHA2_20_512")) {

  25.         *oid = 0x00000006;

  26.     }

  27.     else if (!strcmp(s, "XMSS-SHAKE_10_256")) {

  28.         *oid = 0x00000007;

  29.     }

  30.     else if (!strcmp(s, "XMSS-SHAKE_16_256")) {

  31.         *oid = 0x00000008;

  32.     }

  33.     else if (!strcmp(s, "XMSS-SHAKE_20_256")) {

  34.         *oid = 0x00000009;

  35.     }

  36.     else if (!strcmp(s, "XMSS-SHAKE_10_512")) {

  37.         *oid = 0x0000000a;

  38.     }

  39.     else if (!strcmp(s, "XMSS-SHAKE_16_512")) {

  40.         *oid = 0x0000000b;

  41.     }

  42.     else if (!strcmp(s, "XMSS-SHAKE_20_512")) {

  43.         *oid = 0x0000000c;

  44.     }

  45.     else {

  46.         return -1;

  47.     }

  48.     return 0;

  49. }

  50. 

  51. int xmssmt_str_to_oid(uint32_t *oid, const char *s)

  52. {

  53.     if (!strcmp(s, "XMSSMT-SHA2_20/2_256")) {

  54.         *oid = 0x00000001;

  55.     }

  56.     else if (!strcmp(s, "XMSSMT-SHA2_20/4_256")) {

  57.         *oid = 0x00000002;

  58.     }

  59.     else if (!strcmp(s, "XMSSMT-SHA2_40/2_256")) {

  60.         *oid = 0x00000003;

  61.     }

  62.     else if (!strcmp(s, "XMSSMT-SHA2_40/4_256")) {

  63.         *oid = 0x00000004;

  64.     }

  65.     else if (!strcmp(s, "XMSSMT-SHA2_40/8_256")) {

  66.         *oid = 0x00000005;

  67.     }

  68.     else if (!strcmp(s, "XMSSMT-SHA2_60/3_256")) {

  69.         *oid = 0x00000006;

  70.     }

  71.     else if (!strcmp(s, "XMSSMT-SHA2_60/6_256")) {

  72.         *oid = 0x00000007;

  73.     }

  74.     else if (!strcmp(s, "XMSSMT-SHA2_60/12_256")) {

  75.         *oid = 0x00000008;

  76.     }

  77.     else if (!strcmp(s, "XMSSMT-SHA2_20/2_512")) {

  78.         *oid = 0x00000009;

  79.     }

  80.     else if (!strcmp(s, "XMSSMT-SHA2_20/4_512")) {

  81.         *oid = 0x0000000a;

  82.     }

  83.     else if (!strcmp(s, "XMSSMT-SHA2_40/2_512")) {

  84.         *oid = 0x0000000b;

  85.     }

  86.     else if (!strcmp(s, "XMSSMT-SHA2_40/4_512")) {

  87.         *oid = 0x0000000c;

  88.     }

  89.     else if (!strcmp(s, "XMSSMT-SHA2_40/8_512")) {

  90.         *oid = 0x0000000d;

  91.     }

  92.     else if (!strcmp(s, "XMSSMT-SHA2_60/3_512")) {

  93.         *oid = 0x0000000e;

  94.     }

  95.     else if (!strcmp(s, "XMSSMT-SHA2_60/6_512")) {

  96.         *oid = 0x0000000f;

  97.     }

  98.     else if (!strcmp(s, "XMSSMT-SHA2_60/12_512")) {

  99.         *oid = 0x00000010;

  100.     }

  101.     else if (!strcmp(s, "XMSSMT-SHAKE_20/2_256")) {

  102.         *oid = 0x00000011;

  103.     }

  104.     else if (!strcmp(s, "XMSSMT-SHAKE_20/4_256")) {

  105.         *oid = 0x00000012;

  106.     }

  107.     else if (!strcmp(s, "XMSSMT-SHAKE_40/2_256")) {

  108.         *oid = 0x00000013;

  109.     }

  110.     else if (!strcmp(s, "XMSSMT-SHAKE_40/4_256")) {

  111.         *oid = 0x00000014;

  112.     }

  113.     else if (!strcmp(s, "XMSSMT-SHAKE_40/8_256")) {

  114.         *oid = 0x00000015;

  115.     }

  116.     else if (!strcmp(s, "XMSSMT-SHAKE_60/3_256")) {

  117.         *oid = 0x00000016;

  118.     }

  119.     else if (!strcmp(s, "XMSSMT-SHAKE_60/6_256")) {

  120.         *oid = 0x00000017;

  121.     }

  122.     else if (!strcmp(s, "XMSSMT-SHAKE_60/12_256")) {

  123.         *oid = 0x00000018;

  124.     }

  125.     else if (!strcmp(s, "XMSSMT-SHAKE_20/2_512")) {

  126.         *oid = 0x00000019;

  127.     }

  128.     else if (!strcmp(s, "XMSSMT-SHAKE_20/4_512")) {

  129.         *oid = 0x0000001a;

  130.     }

  131.     else if (!strcmp(s, "XMSSMT-SHAKE_40/2_512")) {

  132.         *oid = 0x0000001b;

  133.     }

  134.     else if (!strcmp(s, "XMSSMT-SHAKE_40/4_512")) {

  135.         *oid = 0x0000001c;

  136.     }

  137.     else if (!strcmp(s, "XMSSMT-SHAKE_40/8_512")) {

  138.         *oid = 0x0000001d;

  139.     }

  140.     else if (!strcmp(s, "XMSSMT-SHAKE_60/3_512")) {

  141.         *oid = 0x0000001e;

  142.     }

  143.     else if (!strcmp(s, "XMSSMT-SHAKE_60/6_512")) {

  144.         *oid = 0x0000001f;

  145.     }

  146.     else if (!strcmp(s, "XMSSMT-SHAKE_60/12_512")) {

  147.         *oid = 0x00000020;

  148.     }

  149.     else {

  150.         return -1;

  151.     }

  152.     return 0;

  153. }

  154. 

  155. int xmss_parse_oid(xmss_params *params, const uint32_t oid)

  156. {

  157.     switch (oid) {

  158.         case 0x00000001:

  159.         case 0x00000002:

  160.         case 0x00000003:

  161.         case 0x00000004:

  162.         case 0x00000005:

  163.         case 0x00000006:

  164.             params->func = XMSS_SHA2;

  165.             break;

  166. 

  167.         case 0x00000007:

  168.         case 0x00000008:

  169.         case 0x00000009:

  170.         case 0x0000000a:

  171.         case 0x0000000b:

  172.         case 0x0000000c:

  173.             params->func = XMSS_SHAKE;

  174.             break;

  175. 

  176.         default:

  177.             return -1;

  178.     }

  179.     switch (oid) {

  180.         case 0x00000001:

  181.         case 0x00000002:

  182.         case 0x00000003:

  183. 

  184.         case 0x00000007:

  185.         case 0x00000008:

  186.         case 0x00000009:

  187.             params->n = 32;

  188.             params->padding_len = 32;

  189.             break;

  190. 

  191.         case 0x00000004:

  192.         case 0x00000005:

  193.         case 0x00000006:

  194. 

  195.         case 0x0000000a:

  196.         case 0x0000000b:

  197.         case 0x0000000c:

  198.             params->n = 64;

  199.             params->padding_len = 64;

  200.             break;

  201. 

  202.         default:

  203.             return -1;

  204.     }

  205.     switch (oid) {

  206.         case 0x00000001:

  207.         case 0x00000004:

  208.         case 0x00000007:

  209.         case 0x0000000a:

  210.             params->full_height = 10;

  211.             break;

  212. 

  213.         case 0x00000002:

  214.         case 0x00000005:

  215.         case 0x00000008:

  216.         case 0x0000000b:

  217.             params->full_height = 16;

  218.             break;

  219. 

  220.         case 0x00000003:

  221.         case 0x00000006:

  222.         case 0x00000009:

  223.         case 0x0000000c:

  224.             params->full_height = 20;

  225. 

  226.             break;

  227.         default:

  228.             return -1;

  229.     }

  230. 

  231.     params->d = 1;

  232.     params->wots_w = 16;

  233. 

  234.     // TODO figure out sensible and legal values for this based on the above

  235.     params->bds_k = 0;

  236. 

  237.     return xmss_xmssmt_initialize_params(params);

  238. }

  239. 

  240. int xmssmt_parse_oid(xmss_params *params, const uint32_t oid)

  241. {

  242.     switch (oid) {

  243.         case 0x00000001:

  244.         case 0x00000002:

  245.         case 0x00000003:

  246.         case 0x00000004:

  247.         case 0x00000005:

  248.         case 0x00000006:

  249.         case 0x00000007:

  250.         case 0x00000008:

  251.         case 0x00000009:

  252.         case 0x0000000a:

  253.         case 0x0000000b:

  254.         case 0x0000000c:

  255.         case 0x0000000d:

  256.         case 0x0000000e:

  257.         case 0x0000000f:

  258.         case 0x00000010:

  259.             params->func = XMSS_SHA2;

  260.             break;

  261. 

  262.         case 0x00000011:

  263.         case 0x00000012:

  264.         case 0x00000013:

  265.         case 0x00000014:

  266.         case 0x00000015:

  267.         case 0x00000016:

  268.         case 0x00000017:

  269.         case 0x00000018:

  270.         case 0x00000019:

  271.         case 0x0000001a:

  272.         case 0x0000001b:

  273.         case 0x0000001c:

  274.         case 0x0000001e:

  275.         case 0x0000001d:

  276.         case 0x0000001f:

  277.         case 0x00000020:

  278.             params->func = XMSS_SHAKE;

  279.             break;

  280. 

  281.         default:

  282.             return -1;

  283.     }

  284.     switch (oid) {

  285.         case 0x00000001:

  286.         case 0x00000002:

  287.         case 0x00000003:

  288.         case 0x00000004:

  289.         case 0x00000005:

  290.         case 0x00000006:

  291.         case 0x00000007:

  292.         case 0x00000008:

  293. 

  294.         case 0x00000011:

  295.         case 0x00000012:

  296.         case 0x00000013:

  297.         case 0x00000014:

  298.         case 0x00000015:

  299.         case 0x00000016:

  300.         case 0x00000017:

  301.         case 0x00000018:

  302.             params->n = 32;

  303.             params->padding_len = 32;

  304.             break;

  305. 

  306.         case 0x00000009:

  307.         case 0x0000000a:

  308.         case 0x0000000b:

  309.         case 0x0000000c:

  310.         case 0x0000000d:

  311.         case 0x0000000e:

  312.         case 0x0000000f:

  313.         case 0x00000010:

  314. 

  315.         case 0x00000019:

  316.         case 0x0000001a:

  317.         case 0x0000001b:

  318.         case 0x0000001c:

  319.         case 0x0000001d:

  320.         case 0x0000001e:

  321.         case 0x0000001f:

  322.         case 0x00000020:

  323.             params->n = 64;

  324.             params->padding_len = 64;

  325.             break;

  326. 

  327.         default:

  328.             return -1;

  329.     }

  330.     switch (oid) {

  331.         case 0x00000001:

  332.         case 0x00000002:

  333. 

  334.         case 0x00000009:

  335.         case 0x0000000a:

  336. 

  337.         case 0x00000011:

  338.         case 0x00000012:

  339. 

  340.         case 0x00000019:

  341.         case 0x0000001a:

  342.             params->full_height = 20;

  343.             break;

  344. 

  345.         case 0x00000003:

  346.         case 0x00000004:

  347.         case 0x00000005:

  348. 

  349.         case 0x0000000b:

  350.         case 0x0000000c:

  351.         case 0x0000000d:

  352. 

  353.         case 0x00000013:

  354.         case 0x00000014:

  355.         case 0x00000015:

  356. 

  357.         case 0x0000001b:

  358.         case 0x0000001c:

  359.         case 0x0000001d:

  360.             params->full_height = 40;

  361.             break;

  362. 

  363.         case 0x00000006:

  364.         case 0x00000007:

  365.         case 0x00000008:

  366. 

  367.         case 0x0000000e:

  368.         case 0x0000000f:

  369.         case 0x00000010:

  370. 

  371.         case 0x00000016:

  372.         case 0x00000017:

  373.         case 0x00000018:

  374. 

  375.         case 0x0000001e:

  376.         case 0x0000001f:

  377.         case 0x00000020:

  378.             params->full_height = 60;

  379.             break;

  380. 

  381.         default:

  382.             return -1;

  383.     }

  384.     switch (oid) {

  385.         case 0x00000001:

  386.         case 0x00000003:

  387.         case 0x00000009:

  388.         case 0x0000000b:

  389.         case 0x00000011:

  390.         case 0x00000013:

  391.         case 0x00000019:

  392.         case 0x0000001b:

  393.             params->d = 2;

  394.             break;

  395. 

  396.         case 0x00000002:

  397.         case 0x00000004:

  398.         case 0x0000000a:

  399.         case 0x0000000c:

  400.         case 0x00000012:

  401.         case 0x00000014:

  402.         case 0x0000001a:

  403.         case 0x0000001c:

  404.             params->d = 4;

  405.             break;

  406. 

  407.         case 0x00000005:

  408.         case 0x0000000d:

  409.         case 0x00000015:

  410.         case 0x0000001d:

  411.             params->d = 8;

  412.             break;

  413. 

  414.         case 0x00000006:

  415.         case 0x0000000e:

  416.         case 0x00000016:

  417.         case 0x0000001e:

  418.             params->d = 3;

  419.             break;

  420. 

  421.         case 0x00000007:

  422.         case 0x0000000f:

  423.         case 0x00000017:

  424.         case 0x0000001f:

  425.             params->d = 6;

  426.             break;

  427. 

  428.         case 0x00000008:

  429.         case 0x00000010:

  430.         case 0x00000018:

  431.         case 0x00000020:

  432.             params->d = 12;

  433.             break;

  434. 

  435.         default:

  436.             return -1;

  437.     }

  438. 

  439.     params->wots_w = 16;

  440. 

  441.     // TODO figure out sensible and legal values for this based on the above

  442.     params->bds_k = 0;

  443. 

  444.     return xmss_xmssmt_initialize_params(params);

  445. }

  446. 

  447. /**

  448.  * Given a params struct where the following properties have been initialized;

  449.  *  - full_height; the height of the complete (hyper)tree

  450.  *  - n; the number of bytes of hash function output

  451.  *  - d; the number of layers (d > 1 implies XMSSMT)

  452.  *  - func; one of {XMSS_SHA2, XMSS_SHAKE}

  453.  *  - wots_w; the Winternitz parameter

  454.  *  - optionally, bds_k; the BDS traversal trade-off parameter,

  455.  * this function initializes the remainder of the params structure.

  456.  */

  457. int xmss_xmssmt_initialize_params(xmss_params *params)

  458. {

  459.     params->tree_height = params->full_height  / params->d;

  460.     if (params->wots_w == 4) {

  461.         params->wots_log_w = 2;

  462.         params->wots_len1 = 8 * params->n / params->wots_log_w;

  463.         /* len_2 = floor(log(len_1 * (w - 1)) / log(w)) + 1 */

  464.         params->wots_len2 = 5;

  465.     }

  466.     else if (params->wots_w == 16) {

  467.         params->wots_log_w = 4;

  468.         params->wots_len1 = 8 * params->n / params->wots_log_w;

  469.         /* len_2 = floor(log(len_1 * (w - 1)) / log(w)) + 1 */

  470.         params->wots_len2 = 3;

  471.     }

  472.     else if (params->wots_w == 256) {

  473.         params->wots_log_w = 8;

  474.         params->wots_len1 = 8 * params->n / params->wots_log_w;

  475.         /* len_2 = floor(log(len_1 * (w - 1)) / log(w)) + 1 */

  476.         params->wots_len2 = 2;

  477.     }

  478.     else {

  479.         return -1;

  480.     }

  481.     params->wots_len = params->wots_len1 + params->wots_len2;

  482.     params->wots_sig_bytes = params->wots_len * params->n;

  483. 

  484.     if (params->d == 1) {  // Assume this is XMSS, not XMSS^MT

  485.         /* In XMSS, always use fixed 4 bytes for index_bytes */

  486.         params->index_bytes = 4;

  487.     }

  488.     else {

  489.         /* In XMSS^MT, round index_bytes up to nearest byte. */

  490.         params->index_bytes = (params->full_height + 7) / 8;

  491.     }

  492.     params->sig_bytes = (params->index_bytes + params->n

  493.                          + params->d * params->wots_sig_bytes

  494.                          + params->full_height * params->n);

  495. 

  496.     params->pk_bytes = 2 * params->n;

  497.     params->sk_bytes = xmss_xmssmt_core_sk_bytes(params);

  498. 

  499.     return 0;

  500. }