github.com/katzenpost/sphincsplus commits | Ecosyste.ms: OpenCollective

Merge pull request #8 from bwesterb/master

Vectorized WOTS+ signing & verification by sorting chains

103f69373008d02303d0314851099fc1a5f48f5e authored over 4 years ago

gen_chains: use counting sort instead of qsort

d712f7f560ecb865137e7a689cfa0fcf08a443a6 authored over 4 years ago

[WIP] Vectorize jagged chains by sorting

Speeds up verification by ~25%.

218126df67c538e486c5836a4d8225c5731ef1d6 authored over 4 years ago

bugfix for w=256 in checksum

cb5f05282f469abc55721737ee810983f23fe5fa authored almost 5 years ago

Merge pull request #6 from thomwiggers/github-tests

Use GitHub workflows to test all implementations

32cc0d7a04963dd9a87bec78936e0f3fb4750164 authored about 5 years ago

Remove travis configuration

66699618eef53879b59776c854f4485342ada3e5 authored about 5 years ago

Also run PQCgenKAT_sign

808581b10c2ce4d9349f35bb8a10c4c54dcd05ea authored about 5 years ago

Also enable on PR and add badges

c794b7a34e88eada608fc33627512242198f6611 authored about 5 years ago

Add tests for AVX2/AESNI implementations

b529e0f5273b23a89bf00a420dd41b764f62086a authored about 5 years ago

Test all schemes using Github actions

0c78f040f7379ec310a0aee74359e4178e61bd37 authored about 5 years ago

Merge pull request #5 from thomwiggers/fix-thashx8-test

Initialize seed state in thashx8 test.

f61bd07a42f6689fad38ca5a3ec9578a66df245a authored about 5 years ago

Initialize seed state in thashx8 test.

When the state is left uninitialized, the test may fail.

f126bfee38977d6b74bf987edecef2fe3b765df6 authored about 5 years ago

Properly initialize hash functions during tests

As SHA2 now also operates on a precomputed state, these tests
would fail when the hash state is ...

3ef1d8f8a7b5177512dfc88c90e447c08593888b authored over 5 years ago

Merge pull request #4 from sphincs/fix_haraka_msghash

Only absorb root part of pk in haraka message hashing.

710715e44055f2f0bb992010ba016f33cb8d1a48 authored over 5 years ago

Only absorb root part of pk in haraka message hashing.

0208952716af0e023e91f2a64668ce125aa40090 authored over 5 years ago

Merge pull request #2 from sphincs/haraka_ct

Constant time implementation of Haraka

77755c94d0bc744478044d6efbb888dc13156441 authored almost 6 years ago

Remove dead code. Clean up comments.

c0d5abd9f76f4f769ec69954c2df6c6942c8ba8e authored almost 6 years ago

Add constant time implementation of Haraka256 and Haraka512.

Replaces the default implementation of Haraka with a
bitsliced implementation of the AES round f...

7efaf0692592949f6d13b278065bc6d977609782 authored almost 6 years ago

Add LDLIBS to all targets

This makes it easier to link in openssl for the NIST rng.c

492ec4f1f6d3b3dc4b435783bbaaf4e41cdb6f32 authored almost 6 years ago

Rely on POSIX clock when compiling as C99

b80b99edfa5ecc0cfb40dd2b4556c96eccbefcd0 authored almost 6 years ago

Make C99 explicit to prevent C90 errors on Travis

b7eff87bb9f7a97ca350ca9affa4a83ca389a64b authored almost 6 years ago

Implement detached signatures API

13c816924f77679d523381c72f5fbb4317ec6e09 authored almost 6 years ago

Use incremental hashing for message / randomness

This ensures we do not require a buffer with an empty prefix
in front of the message. This is a ...

a1be90a08fce4be0d4a05566803f0d4b578a1a80 authored almost 6 years ago

Add incremental haraka

5a1fe915e493ba0103a7dac3aa6e6ea5a8002e20 authored almost 6 years ago

Add incremental SHAKE256

d47385f5d9294ec417e6555c0353cfa07206ea1f authored almost 6 years ago

Prevent unnecessary MGF1 round for N=32

d33f355caae6b5ec3be3c2de0dafa66c22e4d8a8 authored almost 6 years ago

Update benchmark script to check thash variants

8ab8ab1794b5d48fdebe3e06e54bfb65446bd261 authored almost 6 years ago

Mention thash variants in README

53f0d96df4b7d474c25d11e54cdd1fcf399a70e3 authored almost 6 years ago

Precompute SHA256 state after absorbing pk.seed

2c8468d5c7cb9926a391e150196c932ec08981a9 authored almost 6 years ago

Replace OpenSSL's SHA2 with standalone

ac4e8c706880f2c175c38a82267a4dc4ccecd8ae authored almost 6 years ago

Compress address for SHA256

In some cases this decreases the number of compression calls, in
particular where the SHA2 paddi...

424c2cd98a2a108ff2005df7027e05e80dad8d38 authored almost 6 years ago

Implement LMS-style variant of thash

1fc323b074a023b22b910fb937d47b4bad629577 authored almost 6 years ago

Split thash out of hash.c

This does not functionally change anything, but is a step towards
different implementations of t...

c631ef55f4b4388dddb46c720eca68d41c64ec46 authored almost 6 years ago

Ensure PK.seed is in a separate SHA2 input block

This allows us to precompute the SHA2 state after absorbing PK.seed,
which saves an online compr...

be60f86d8a09e13be9837ad5836b0c8211b8e38c authored almost 6 years ago

Simplify haraka thash

This is equivalent, but requires less copying of data.

e18f99cb588cf5ed358b0fdbd35882e73be204e7 authored almost 6 years ago

Fix 64-bit subtree address check

It is not necessary to restrict the tree height to 64 bits;
it is sufficient (and necessary for ...

6702278530681c815d6537fb8f4f8b6f8bca4808 authored almost 6 years ago

Check subtree address field for 64-bit restriction

While the field supports 96 bits in the spec, the code only
supports 64 bits (as a consequence o...

e1202fe1d9947dc010451dec9f6cbf3d6419e1b7 authored almost 6 years ago

Fix bit order when interpreting FORS indices

This previously inverted the bit order within a byte, going
from most significant to least signi...

74b618d4b1311a9946170fbcb85d9bca06033460 authored about 6 years ago

Fix naming inconsistency

986734ffd295345fb40e613ff9cdd7edb0df1744 authored about 6 years ago

Expose signature and key sizes as API functions

This is useful when compiling a shared object that requires
runtime access to these values (as o...

d6af51bab4e00c594681846c80bef3a379823792 authored about 6 years ago

Added a crypto_sign_seed_keypair function

f059baef3dbe01d1f66ebb2bc46b13893d5d16d3 authored about 6 years ago

Rename hash_address.{c,h} to address.{c,h}

This conflicted with the naming scheme of hash_[function].{c,h}

0286a6ea00662042843a8dfc50cbe1e1e21abb34 authored about 6 years ago

Add link-time optimization flag

This is important in particular to allow inlining the utils functions
that convert between bytes...

93671b76b8cd76a890217eda0ae3aeb413413a5d authored over 6 years ago

fixing memory initialization; thanks to djb for debugging and providing the fix!

f3ba90bca172ab9ddd65923ca37e8680913f5be5 authored over 6 years ago

Remove key padding in SHA256 PRF

219d880b53049ce064a3f1fc3a857f536d48c832 authored over 6 years ago

Fix bug in SHA256-HMAC that ignored msg input to R

502c76513c8b0315c995685591769700dc238bd8 authored over 6 years ago

Test if smlen is sufficiently long, in sign_open

Thanks to @mjosaarinen for pointing this out

826bb0175cf7b1ba0b01ac75020b1bb649c7e2ab authored over 6 years ago

Merge branch 'sha256-avx2'

78771655a251986271a80f60bfdeef753e2b784d authored over 6 years ago

Merge branch 'haraka_parallel'

e3234ec8f90807be6b72b43db996183998cfb7d4 authored over 6 years ago

Merge branch 'sha256-avx2'

8566b6f0c3bd90534cd536460d2b8c3a6aa4d417 authored over 6 years ago

Optimization for sha256_update8x.

1d0c9b6affe7b1338eed2d7558aa04079a3ba8c3 authored over 6 years ago

Reorder benchmarks in order of interest

55f55a3d406c64dd57bddc60f8d583d62cf3d1b8 authored over 6 years ago

Add batch-benchmark script

77d5d2bc38dcbe2fdc4f61d74a68183da37ba70f authored over 6 years ago

benchmarks: format up to 100s instead of 10s

0164b98bea8124e52a10241c8e21615acc1f0df1 authored over 6 years ago

Make benchmarks more elaborate

d13f12d0c82497d3320b1c5e78dd7772c91e658c authored over 6 years ago

haraka: move x4-parallel headers to separate file

24e30999c980f08ac278b996b310e00f4f3cea64 authored over 6 years ago

sha256: replace outdated comment

0f8631fae22644af24003de0ea9be13437a396e6 authored over 6 years ago

Add missing files to Makefile.

126291636882876104922799009bf45cc0bf17bc authored over 6 years ago

Update Makefile.

f3e9b19ac30ae3080f1bec54c5fd0d600fbdf7d3 authored over 6 years ago

Add optimized implementation of SHA256.

62c02d24b8ed997b56c56a23b048e9de0a7bdace authored over 6 years ago

Add optimized implementation for Haraka using 4x parallel hashing.

9203a287522e985dc2e50e039c4ad6caa371f4ca authored over 6 years ago

Add a unit test for 4x parallel thash

9beb27613e1530b08b1be4cbc5b8c658d4010776 authored over 6 years ago

Add dummy 8-way parallel SHA2 variant

This prepares for 8-way parallel SHA2, but does not actually
add the 8-way parallel hashing core.

b062cd8033db6a108cd12cd5156fd9ed453536d3 authored over 6 years ago

avx2: parallelize WOTS pk gen and FORS signing

c0b0f7a2658d4de9b7808fb93b91db574a32c4a6 authored over 6 years ago

Rename for consistency

dde2d42c0f7c82e6d6a85704c6dbd253ffac4f97 authored over 6 years ago

Simply Makefiles

d09f1a30027fa8e9effa3cd0b305286bee5b6e0d authored almost 7 years ago

Revert "Remove unnecessary -lcrypto from haraka-aesni"

This reverts commit a73528517d395262c45ac87162aa60a35174479f.

Turns out it's necessary for rng....

9dc0ce83d168f5a7f31d5c709b8105428df9d22e authored almost 7 years ago

Remove unnecessary -lcrypto from haraka-aesni

a73528517d395262c45ac87162aa60a35174479f authored almost 7 years ago

Add explicit benchmark Makefile target

1efe08582fe264d965015c043e14ee651b923570 authored almost 7 years ago

Add optimization compiler flag

059bcecf0aae87d7654b3b2f8ec0e20f94c7b4f5 authored almost 7 years ago

Clarify that aesni implementation targest haraka

735b65f772c89feb49525eed39b8013cc356209f authored almost 7 years ago

Add table with overview of parameters

f59bb5b18e60876fc073dec18683c1912790180e authored almost 7 years ago

Add Travis CI

5451ec898a8521d48860f67b7139635f355b291e authored almost 7 years ago

Add basic README file

9b042547a9f705792597e4a622f208a429a342bb authored almost 7 years ago

Add params.h for all specified parameter sets

b4b4b43e230fa6682ec7fdd53c1c9c571992f263 authored almost 7 years ago

Add CC0 Public Domain dedication

5727120140961e0e27dfc7ac5348ee9ff14fd607 authored almost 7 years ago

Fix comment

922c664085f3ca837e793daf0baed419d19df25f authored almost 7 years ago

Replace TRUNCSTORE by intrinsics

e9327bbe298444a8de2aefb338e4b8d6ccab7640 authored almost 7 years ago

Fix failing verification when sm and m overlap

20a79df93f454dff32ed52c24dbcbdf33d9847c1 authored almost 7 years ago

Fix excessively long FORS message digest

This addresses the bug that was pointed out to us by Dorian Amiet;
it also affects the index sel...

2768b6f181960e15d59da3e12b96ad51dd181f2f authored almost 7 years ago

Fix sponge buffer in aesni code as well

d0985492f54cbfcc3a179fdc00a4faa9f13b0452 authored about 7 years ago

Shrink unnecessarily large sponge buffer

The values from r to 64 (resp 200) would never be used anyway.

e3df56b8096d25905e84ad4d1e1e1b666142c052 authored about 7 years ago

Fix a -Wpedantic warning in clang

7d8479f9564a2510c3428929be9c6598b105a9e0 authored about 7 years ago

Fix buffer overflow in Haraka thash when N < 32

8a9e88de9a03f52197cb9919def678a2c875d300 authored about 7 years ago

Add SPHINCS+ code as submitted to NIST

cd7761776c4fd9192bed9764b619d76ee2eb4297 authored about 7 years ago