126 righe
2.8 KiB
C
126 righe
2.8 KiB
C
/*
|
|
* Generate intermediate test vectors useful to test implementations.
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdint.h>
|
|
#include <string.h>
|
|
|
|
#include "../wots.h"
|
|
#include "../randombytes.h"
|
|
#include "../params.h"
|
|
#include "../fips202.h"
|
|
#include "../utils.h"
|
|
#include "../xmss_commons.h"
|
|
#include "../xmss_core.h"
|
|
|
|
void print_hex(unsigned char *buf, int len) {
|
|
for (int i = 0; i < len; i++) {
|
|
printf("%x%x", buf[i] / 16, buf[i] & 15);
|
|
}
|
|
}
|
|
|
|
void print_hash(unsigned char *buf, int len) {
|
|
unsigned char tmp[10];
|
|
shake128(tmp, 10, buf, len);
|
|
print_hex(tmp, 10);
|
|
}
|
|
|
|
void vectors_xmss(uint32_t oid, int mt) {
|
|
xmss_params params;
|
|
|
|
if (mt) {
|
|
xmssmt_parse_oid(¶ms, oid);
|
|
} else {
|
|
xmss_parse_oid(¶ms, oid);
|
|
}
|
|
|
|
unsigned char seed[params.n * 3];
|
|
unsigned char pk[params.pk_bytes];
|
|
unsigned char sk[params.sk_bytes];
|
|
unsigned char msg[1] = {37};
|
|
unsigned char sm[params.sig_bytes + 1];
|
|
unsigned long long smlen = 0;
|
|
|
|
for (unsigned int i = 0; i < 3*params.n; i++) {
|
|
seed[i] = i;
|
|
}
|
|
|
|
xmssmt_core_seed_keypair(¶ms, pk, sk, seed);
|
|
|
|
ull_to_bytes(sk, params.index_bytes, 1 << (params.full_height - 1));
|
|
|
|
if (mt) {
|
|
xmssmt_core_sign(¶ms, sk, sm, &smlen, msg, 1);
|
|
} else {
|
|
xmss_core_sign(¶ms, sk, sm, &smlen, msg, 1);
|
|
}
|
|
|
|
if (mt) {
|
|
printf("XMSSMT ");
|
|
} else {
|
|
printf("XMSS ");
|
|
}
|
|
printf("%d ", oid);
|
|
print_hash(pk, params.pk_bytes);
|
|
printf(" ");
|
|
print_hash(sm, params.sig_bytes);
|
|
printf("\n");
|
|
}
|
|
|
|
void vectors_wots(uint32_t oid) {
|
|
xmss_params params;
|
|
|
|
xmss_parse_oid(¶ms, oid);
|
|
|
|
unsigned char sk_seed[params.n];
|
|
unsigned char pub_seed[params.n];
|
|
|
|
unsigned char pk[params.wots_sig_bytes];
|
|
unsigned char leaf[params.n];
|
|
|
|
unsigned char sig[params.wots_sig_bytes];
|
|
unsigned char m[params.n];
|
|
uint32_t addr[8] = {0};
|
|
uint32_t addr2[8] = {0};
|
|
|
|
for (unsigned int i = 0; i < 8; i++) {
|
|
addr[i] = 500000000*i;
|
|
addr2[i] = 400000000*i;
|
|
}
|
|
|
|
for (unsigned int i = 0; i < params.n; i++) {
|
|
m[i] = 3*i;
|
|
pub_seed[i] = 2*i;
|
|
sk_seed[i] = i;
|
|
}
|
|
|
|
wots_pkgen(¶ms, pk, sk_seed, pub_seed, addr);
|
|
wots_sign(¶ms, sig, m, sk_seed, pub_seed, addr);
|
|
|
|
printf("WOTS+ %d ", oid);
|
|
print_hash(pk, params.wots_sig_bytes);
|
|
printf(" ");
|
|
print_hash(sig, params.wots_sig_bytes);
|
|
printf(" ");
|
|
|
|
// Note that this garbles pk
|
|
gen_leaf_wots(¶ms, leaf, sk_seed, pub_seed, addr, addr2);
|
|
print_hash(leaf, params.n);
|
|
|
|
printf("\n");
|
|
}
|
|
|
|
int main() {
|
|
for (uint32_t oid = 1; oid <= 0x15; oid += 3) {
|
|
vectors_wots(oid);
|
|
}
|
|
for (uint32_t oid = 2; oid <= 56; oid += 8) {
|
|
vectors_xmss(oid, 1);
|
|
}
|
|
for (uint32_t oid = 1; oid <= 0x15; oid += 3) {
|
|
vectors_xmss(oid, 0);
|
|
}
|
|
}
|
|
|