-
Notifications
You must be signed in to change notification settings - Fork 148
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add ML-DSA (FIPS204) The final version of FIPS204 has released. Changes: * Update to final FIPS 204 standard. * Remove old mode API and hook Dilithium and ML-DSA into generic signature API. * Expose support for randomized ML-DSA mode. (It is not exposed in the generic signature API.) * Remove old AES variants of Dilithium. * ML-DSA test against reference implementation. * Fix one bug in key derivation. * dilithium: remove unused AES code * mldsa: add ACVP test vectors * Remove superfluous space * Update ml-dsa documentation * Remove dead code * Avoid to export unsafeSignInternal. * Update command for golangci-lint.
- Loading branch information
Showing
133 changed files
with
4,557 additions
and
3,774 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,111 +1,31 @@ | ||
| //go:generate go run gen.go | ||
|
|
||
| // dilithium implements the CRYSTALS-Dilithium signature schemes | ||
| // Deprecated. This package implements Dilithium, an early proposal | ||
| // for what is now ML-DSA (FIPS 204). An implementation of ML-DSA | ||
| // can be found in sign/mldsa. | ||
| // | ||
| // Dilithium implements the CRYSTALS-Dilithium signature schemes | ||
| // as submitted to round3 of the NIST PQC competition and described in | ||
| // | ||
| // https://pq-crystals.org/dilithium/data/dilithium-specification-round3-20210208.pdf | ||
| // | ||
| // Each of the eight different modes of Dilithium is implemented by a | ||
| // Each of the three different modes of Dilithium is implemented by a | ||
| // subpackage. For instance, Dilithium2 (the recommended mode) | ||
| // can be found in | ||
| // | ||
| // github.com/cloudflare/circl/sign/dilithium/mode2 | ||
| // | ||
| // If your choice for mode is fixed compile-time, use the subpackages. | ||
| // This package provides a convenient wrapper around all of the subpackages | ||
| // so one can be chosen at runtime. | ||
| // To choose a scheme at runtime, use the generic signatures API under | ||
| // | ||
| // github.com/cloudflare/circl/sign/schemes | ||
| // | ||
| // The authors of Dilithium recommend to combine it with a "pre-quantum" | ||
| // signature scheme. The packages | ||
| // The packages | ||
| // | ||
| // github.com/cloudflare/circl/sign/eddilithium2 | ||
| // github.com/cloudflare/circl/sign/eddilithium3 | ||
| // | ||
| // implement such hybrids of Dilithium2 with Ed25519 respectively and | ||
| // implement hybrids of Dilithium2 with Ed25519 respectively and | ||
| // Dilithium3 with Ed448. These packages are a drop in replacements for the | ||
| // mode subpackages of this package. | ||
| package dilithium | ||
|
|
||
| import ( | ||
| "crypto" | ||
| "io" | ||
| ) | ||
|
|
||
| // PublicKey is a Dilithium public key. | ||
| // | ||
| // The structure contains values precomputed during unpacking/key generation | ||
| // and is therefore significantly larger than a packed public key. | ||
| type PublicKey interface { | ||
| // Packs public key | ||
| Bytes() []byte | ||
| } | ||
|
|
||
| // PrivateKey is a Dilithium private key. | ||
| // | ||
| // The structure contains values precomputed during unpacking/key generation | ||
| // and is therefore significantly larger than a packed private key. | ||
| type PrivateKey interface { | ||
| // Packs private key | ||
| Bytes() []byte | ||
|
|
||
| crypto.Signer | ||
| } | ||
|
|
||
| // Mode is a certain configuration of the Dilithium signature scheme. | ||
| type Mode interface { | ||
| // GenerateKey generates a public/private key pair using entropy from rand. | ||
| // If rand is nil, crypto/rand.Reader will be used. | ||
| GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) | ||
|
|
||
| // NewKeyFromSeed derives a public/private key pair using the given seed. | ||
| // Panics if len(seed) != SeedSize() | ||
| NewKeyFromSeed(seed []byte) (PublicKey, PrivateKey) | ||
|
|
||
| // Sign signs the given message and returns the signature. | ||
| // It will panic if sk has not been generated for this mode. | ||
| Sign(sk PrivateKey, msg []byte) []byte | ||
|
|
||
| // Verify checks whether the given signature by pk on msg is valid. | ||
| // It will panic if pk is of the wrong mode. | ||
| Verify(pk PublicKey, msg []byte, signature []byte) bool | ||
|
|
||
| // Unpacks a public key. Panics if the buffer is not of PublicKeySize() | ||
| // length. Precomputes values to speed up subsequent calls to Verify. | ||
| PublicKeyFromBytes([]byte) PublicKey | ||
|
|
||
| // Unpacks a private key. Panics if the buffer is not | ||
| // of PrivateKeySize() length. Precomputes values to speed up subsequent | ||
| // calls to Sign(To). | ||
| PrivateKeyFromBytes([]byte) PrivateKey | ||
|
|
||
| // SeedSize returns the size of the seed for NewKeyFromSeed | ||
| SeedSize() int | ||
|
|
||
| // PublicKeySize returns the size of a packed PublicKey | ||
| PublicKeySize() int | ||
|
|
||
| // PrivateKeySize returns the size of a packed PrivateKey | ||
| PrivateKeySize() int | ||
|
|
||
| // SignatureSize returns the size of a signature | ||
| SignatureSize() int | ||
|
|
||
| // Name returns the name of this mode | ||
| Name() string | ||
| } | ||
|
|
||
| var modes = make(map[string]Mode) | ||
|
|
||
| // ModeNames returns the list of supported modes. | ||
| func ModeNames() []string { | ||
| names := []string{} | ||
| for name := range modes { | ||
| names = append(names, name) | ||
| } | ||
| return names | ||
| } | ||
|
|
||
| // ModeByName returns the mode with the given name or nil when not supported. | ||
| func ModeByName(name string) Mode { | ||
| return modes[name] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
Oops, something went wrong.