xmss-KAT-generator

Joost Rijneveld 998137622a Fix integer underflow when writing updated sk This caused secret key files to become close to MAXINT bytes, as the unsigned int that is the private key size would be subtracted from MAXINT when its negative was used as offset.		vor 7 Jahren
test	Fix integer underflow when writing updated sk	vor 7 Jahren
.gitignore	Add UI test files to create sample signatures	vor 7 Jahren
LICENSE	Simplify licensing using LICENSE file	vor 7 Jahren
Makefile	Document and simplify library usage	vor 7 Jahren
README.md	Document and simplify library usage	vor 7 Jahren
fips202.c	Clean up includes	vor 7 Jahren
fips202.h	Unify header guards	vor 7 Jahren
hash.c	Remove unnecessary endianness difference	vor 7 Jahren
hash.h	Remove unnecessary endianness difference	vor 7 Jahren
hash_address.c	Simplify licensing using LICENSE file	vor 7 Jahren
hash_address.h	Simplify licensing using LICENSE file	vor 7 Jahren
params.c	Add UI test files to create sample signatures	vor 7 Jahren
params.h	Unify header guards	vor 7 Jahren
randombytes.c	Refactor for more consistent style and readability	vor 7 Jahren
randombytes.h	Unify header guards	vor 7 Jahren
wots.c	Simplify licensing using LICENSE file	vor 7 Jahren
wots.h	Simplify licensing using LICENSE file	vor 7 Jahren
xmss.c	Revert to using runtime-only parameter struct	vor 7 Jahren
xmss.h	Refactor for more consistent style and readability	vor 7 Jahren
xmss_commons.c	Simplify licensing using LICENSE file	vor 7 Jahren
xmss_commons.h	Simplify licensing using LICENSE file	vor 7 Jahren
xmss_core.c	Simplify licensing using LICENSE file	vor 7 Jahren
xmss_core.h	Simplify licensing using LICENSE file	vor 7 Jahren
xmss_core_fast.c	Resolve comparison warnings	vor 7 Jahren
xmss_core_fast.h	Simplify licensing using LICENSE file	vor 7 Jahren

README.md

XMSS reference code

This repository contains the reference implementation that accompanies the Internet Draft “XMSS: Extended Hash-Based Signatures”, draft-irtf-cfrg-xmss-hash-based-signatures.

This reference implementation supports all parameter sets as defined in the Draft at run-time (specified by prefixing the public and private keys with a 32-bit oid). Implementations that want to use compile-time parameter sets can remove the struct xmss_params function parameter.

While the behavior of the code in this repository is supposed to be stable, the API is not yet fully complete. In particular, the wrapper for run-time parameters does not yet support the back-end functions that make use of BDS traversal (TODO). We will also add more extensive test functionality, making it easier to compare to other XMSS implementations (TODO).

When using the current code base, please be careful, expect changes and watch this document for further documentation.

Dependencies

For the SHA-2 hash functions (i.e. SHA-256 and SHA-512), we rely on OpenSSL. Make sure to install the OpenSSL development headers. On Debian-based systems, this is achieved by installing the OpenSSL development package libssl-dev.

License

This reference implementation was written by Andreas Hülsing and Joost Rijneveld. All included code is available under the CC0 1.0 Universal Public Domain Dedication.