crypto/openssh/xmss_wots.c

38 wots_set_params(wots_params *params, int n, int w)
40   params->n = n;
41   params->w = w;
42   params->log_w = wots_log2(params->w);
43   params->len_1 = (CHAR_BIT * n) / params->log_w;
44   params->len_2 = (wots_log2(params->len_1 * (w - 1)) / params->log_w) + 1;
45   params->len = params->len_1 + params->len_2;
46   params->keysize = params->len * params->n;
54 static void expand_seed(unsigned char *outseeds, const unsigned char *inseed, const wots_params *params)
58   for(i = 0; i < params->len; i++){
60     prf((outseeds + (i*params->n)), ctr, inseed, params->n);
71 static void gen_chain(unsigned char *out, const unsigned char *in, unsigned int start, unsigned int steps, const wots_params *params, const unsigned char *pub_seed, uint32_t addr[8])
74   for (j = 0; j < params->n; j++)
77   for (i = start; i < (start+steps) && i < params->w; i++) {
79     hash_f(out, out, pub_seed, addr, params->n);
88 static void base_w(int *output, const int out_len, const unsigned char *input, const wots_params *params)
102     bits -= params->log_w;
103     output[out] = (total >> bits) & (params->w - 1);
108 void wots_pkgen(unsigned char *pk, const unsigned char *sk, const wots_params *params, const unsigned char *pub_seed, uint32_t addr[8])
111   expand_seed(pk, sk, params);
112   for (i=0; i < params->len; i++) {
114     gen_chain(pk+i*params->n, pk+i*params->n, 0, params->w-1, params, pub_seed, addr);
119 int wots_sign(unsigned char *sig, const unsigned char *msg, const unsigned char *sk, const wots_params *params, const unsigned char *pub_seed, uint32_t addr[8])
121   //int basew[params->len];
124   int *basew = calloc(params->len, sizeof(int));
128   base_w(basew, params->len_1, msg, params);
130   for (i=0; i < params->len_1; i++) {
131     csum += params->w - 1 - basew[i];
134   csum = csum << (8 - ((params->len_2 * params->log_w) % 8));
136   int len_2_bytes = ((params->len_2 * params->log_w) + 7) / 8;
141   int csum_basew[params->len_2];
142   base_w(csum_basew, params->len_2, csum_bytes, params);
144   for (i = 0; i < params->len_2; i++) {
145     basew[params->len_1 + i] = csum_basew[i];
148   expand_seed(sig, sk, params);
150   for (i = 0; i < params->len; i++) {
152     gen_chain(sig+i*params->n, sig+i*params->n, 0, basew[i], params, pub_seed, addr);
158 int wots_pkFromSig(unsigned char *pk, const unsigned char *sig, const unsigned char *msg, const wots_params *params, const unsigned char *pub_seed, uint32_t addr[8])
162   int *basew = calloc(params->len, sizeof(int));
166   base_w(basew, params->len_1, msg, params);
168   for (i=0; i < params->len_1; i++) {
169     csum += params->w - 1 - basew[i];
172   csum = csum << (8 - ((params->len_2 * params->log_w) % 8));
174   int len_2_bytes = ((params->len_2 * params->log_w) + 7) / 8;
179   int csum_basew[params->len_2];
180   base_w(csum_basew, params->len_2, csum_bytes, params);
182   for (i = 0; i < params->len_2; i++) {
183     basew[params->len_1 + i] = csum_basew[i];
185   for (i=0; i < params->len; i++) {
187     gen_chain(pk+i*params->n, sig+i*params->n, basew[i], params->w-1-basew[i], params, pub_seed, addr);