grpc 1.68.1 → 1.71.0

data/third_party/boringssl-with-bazel/src/crypto/x509/x_req.c

@@ -1,116 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-#include <stdio.h>
-
-#include <openssl/asn1t.h>
-#include <openssl/thread.h>
-#include <openssl/x509.h>
-
-#include "internal.h"
-
-
-// X509_REQ_INFO is handled in an unusual way to get round invalid encodings.
-// Some broken certificate requests don't encode the attributes field if it
-// is empty. This is in violation of PKCS#10 but we need to tolerate it. We
-// do this by making the attributes field OPTIONAL then using the callback to
-// initialise it to an empty STACK. This means that the field will be
-// correctly encoded unless we NULL out the field.
-
-static int rinf_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
-                   void *exarg) {
-  X509_REQ_INFO *rinf = (X509_REQ_INFO *)*pval;
-
-  if (operation == ASN1_OP_NEW_POST) {
-    rinf->attributes = sk_X509_ATTRIBUTE_new_null();
-    if (!rinf->attributes) {
-      return 0;
-    }
-  }
-
-  if (operation == ASN1_OP_D2I_POST) {
-    // The only defined CSR version is v1(0). For compatibility, we also accept
-    // a hypothetical v3(2). Although not defined, older versions of certbot
-    // use it. See https://github.com/certbot/certbot/pull/9334.
-    long version = ASN1_INTEGER_get(rinf->version);
-    if (version != X509_REQ_VERSION_1 && version != 2) {
-      OPENSSL_PUT_ERROR(X509, X509_R_INVALID_VERSION);
-      return 0;
-    }
-  }
-
-  return 1;
-}
-
-ASN1_SEQUENCE_enc(X509_REQ_INFO, enc, rinf_cb) = {
-    ASN1_SIMPLE(X509_REQ_INFO, version, ASN1_INTEGER),
-    ASN1_SIMPLE(X509_REQ_INFO, subject, X509_NAME),
-    ASN1_SIMPLE(X509_REQ_INFO, pubkey, X509_PUBKEY),
-    // This isn't really OPTIONAL but it gets around invalid encodings.
-    ASN1_IMP_SET_OF_OPT(X509_REQ_INFO, attributes, X509_ATTRIBUTE, 0),
-} ASN1_SEQUENCE_END_enc(X509_REQ_INFO, X509_REQ_INFO)
-
-IMPLEMENT_ASN1_FUNCTIONS(X509_REQ_INFO)
-
-ASN1_SEQUENCE(X509_REQ) = {
-    ASN1_SIMPLE(X509_REQ, req_info, X509_REQ_INFO),
-    ASN1_SIMPLE(X509_REQ, sig_alg, X509_ALGOR),
-    ASN1_SIMPLE(X509_REQ, signature, ASN1_BIT_STRING),
-} ASN1_SEQUENCE_END(X509_REQ)
-
-IMPLEMENT_ASN1_FUNCTIONS(X509_REQ)
-
-IMPLEMENT_ASN1_DUP_FUNCTION(X509_REQ)

data/third_party/boringssl-with-bazel/src/crypto/x509/x_sig.c

@@ -1,93 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-#include <stdio.h>
-
-#include <openssl/asn1t.h>
-#include <openssl/x509.h>
-
-
-struct X509_sig_st {
-  X509_ALGOR *algor;
-  ASN1_OCTET_STRING *digest;
-} /* X509_SIG */;
-
-ASN1_SEQUENCE(X509_SIG) = {
-    ASN1_SIMPLE(X509_SIG, algor, X509_ALGOR),
-    ASN1_SIMPLE(X509_SIG, digest, ASN1_OCTET_STRING),
-} ASN1_SEQUENCE_END(X509_SIG)
-
-IMPLEMENT_ASN1_FUNCTIONS_const(X509_SIG)
-
-void X509_SIG_get0(const X509_SIG *sig, const X509_ALGOR **out_alg,
-                   const ASN1_OCTET_STRING **out_digest) {
-  if (out_alg != NULL) {
-    *out_alg = sig->algor;
-  }
-  if (out_digest != NULL) {
-    *out_digest = sig->digest;
-  }
-}
-
-void X509_SIG_getm(X509_SIG *sig, X509_ALGOR **out_alg,
-                   ASN1_OCTET_STRING **out_digest) {
-  if (out_alg != NULL) {
-    *out_alg = sig->algor;
-  }
-  if (out_digest != NULL) {
-    *out_digest = sig->digest;
-  }
-}

data/third_party/boringssl-with-bazel/src/crypto/x509/x_spki.c

@@ -1,79 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-// This module was send to me my Pat Richards <patr@x509.com> who wrote it.
-// It is under my Copyright with his permission.
-
-#include <openssl/asn1t.h>
-#include <openssl/x509.h>
-
-#include "internal.h"
-
-
-ASN1_SEQUENCE(NETSCAPE_SPKAC) = {
-    ASN1_SIMPLE(NETSCAPE_SPKAC, pubkey, X509_PUBKEY),
-    ASN1_SIMPLE(NETSCAPE_SPKAC, challenge, ASN1_IA5STRING),
-} ASN1_SEQUENCE_END(NETSCAPE_SPKAC)
-
-IMPLEMENT_ASN1_FUNCTIONS_const(NETSCAPE_SPKAC)
-
-ASN1_SEQUENCE(NETSCAPE_SPKI) = {
-    ASN1_SIMPLE(NETSCAPE_SPKI, spkac, NETSCAPE_SPKAC),
-    ASN1_SIMPLE(NETSCAPE_SPKI, sig_algor, X509_ALGOR),
-    ASN1_SIMPLE(NETSCAPE_SPKI, signature, ASN1_BIT_STRING),
-} ASN1_SEQUENCE_END(NETSCAPE_SPKI)
-
-IMPLEMENT_ASN1_FUNCTIONS_const(NETSCAPE_SPKI)

data/third_party/boringssl-with-bazel/src/crypto/x509/x_val.c

@@ -1,70 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-#include <stdio.h>
-
-#include <openssl/asn1t.h>
-#include <openssl/x509.h>
-
-#include "internal.h"
-
-
-ASN1_SEQUENCE(X509_VAL) = {
-    ASN1_SIMPLE(X509_VAL, notBefore, ASN1_TIME),
-    ASN1_SIMPLE(X509_VAL, notAfter, ASN1_TIME),
-} ASN1_SEQUENCE_END(X509_VAL)
-
-IMPLEMENT_ASN1_FUNCTIONS_const(X509_VAL)

data/third_party/boringssl-with-bazel/src/include/openssl/experimental/dilithium.h

@@ -1,129 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_DILITHIUM_H
-#define OPENSSL_HEADER_DILITHIUM_H
-
-#include <openssl/base.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-#if defined(OPENSSL_UNSTABLE_EXPERIMENTAL_DILITHIUM)
-// The ML-DSA spec has now been standardized and ML-DSA is available in
-// BoringSSL.  This code should no longer be used. It was intended for
-// short-lived experiments and must not have been deployed anywhere durable.  If
-// you were using this you need to use the <openssl/mldsa.h> instead. This
-// header and code will be removed from BoringSSL soon.
-
-// Dilithium3.
-
-// DILITHIUM_private_key contains a Dilithium3 private key. The contents of this
-// object should never leave the address space since the format is unstable.
-struct DILITHIUM_private_key {
-  union {
-    uint8_t bytes[32 + 32 + 64 + 256 * 4 * (5 + 6 + 6)];
-    uint32_t alignment;
-  } opaque;
-};
-
-// DILITHIUM_public_key contains a Dilithium3 public key. The contents of this
-// object should never leave the address space since the format is unstable.
-struct DILITHIUM_public_key {
-  union {
-    uint8_t bytes[32 + 64 + 256 * 4 * 6];
-    uint32_t alignment;
-  } opaque;
-};
-
-// DILITHIUM_PRIVATE_KEY_BYTES is the number of bytes in an encoded Dilithium3
-// private key.
-#define DILITHIUM_PRIVATE_KEY_BYTES 4032
-
-// DILITHIUM_PUBLIC_KEY_BYTES is the number of bytes in an encoded Dilithium3
-// public key.
-#define DILITHIUM_PUBLIC_KEY_BYTES 1952
-
-// DILITHIUM_SIGNATURE_BYTES is the number of bytes in an encoded Dilithium3
-// signature.
-#define DILITHIUM_SIGNATURE_BYTES 3309
-
-// DILITHIUM_generate_key generates a random public/private key pair, writes the
-// encoded public key to |out_encoded_public_key| and sets |out_private_key| to
-// the private key. Returns 1 on success and 0 on failure.
-OPENSSL_EXPORT OPENSSL_DEPRECATED int DILITHIUM_generate_key(
-    uint8_t out_encoded_public_key[DILITHIUM_PUBLIC_KEY_BYTES],
-    struct DILITHIUM_private_key *out_private_key);
-
-// DILITHIUM_public_from_private sets |*out_public_key| to the public key that
-// corresponds to |private_key|. Returns 1 on success and 0 on failure.
-OPENSSL_EXPORT OPENSSL_DEPRECATED int DILITHIUM_public_from_private(
-    struct DILITHIUM_public_key *out_public_key,
-    const struct DILITHIUM_private_key *private_key);
-
-// DILITHIUM_sign generates a signature for the message |msg| of length
-// |msg_len| using |private_key| following the randomized algorithm, and writes
-// the encoded signature to |out_encoded_signature|. Returns 1 on success and 0
-// on failure.
-OPENSSL_EXPORT OPENSSL_DEPRECATED int DILITHIUM_sign(
-    uint8_t out_encoded_signature[DILITHIUM_SIGNATURE_BYTES],
-    const struct DILITHIUM_private_key *private_key, const uint8_t *msg,
-    size_t msg_len);
-
-// DILITHIUM_verify verifies that |encoded_signature| constitutes a valid
-// signature for the message |msg| of length |msg_len| using |public_key|.
-OPENSSL_EXPORT OPENSSL_DEPRECATED int DILITHIUM_verify(
-    const struct DILITHIUM_public_key *public_key,
-    const uint8_t encoded_signature[DILITHIUM_SIGNATURE_BYTES],
-    const uint8_t *msg, size_t msg_len);
-
-
-// Serialisation of keys.
-
-// DILITHIUM_marshal_public_key serializes |public_key| to |out| in the standard
-// format for Dilithium public keys. It returns one on success or zero on
-// allocation error.
-OPENSSL_EXPORT OPENSSL_DEPRECATED int DILITHIUM_marshal_public_key(
-    CBB *out, const struct DILITHIUM_public_key *public_key);
-
-// DILITHIUM_parse_public_key parses a public key, in the format generated by
-// |DILITHIUM_marshal_public_key|, from |in| and writes the result to
-// |out_public_key|. It returns one on success or zero on parse error or if
-// there are trailing bytes in |in|.
-OPENSSL_EXPORT OPENSSL_DEPRECATED int DILITHIUM_parse_public_key(
-    struct DILITHIUM_public_key *public_key, CBS *in);
-
-// DILITHIUM_marshal_private_key serializes |private_key| to |out| in the
-// standard format for Dilithium private keys. It returns one on success or zero
-// on allocation error.
-OPENSSL_EXPORT OPENSSL_DEPRECATED int DILITHIUM_marshal_private_key(
-    CBB *out, const struct DILITHIUM_private_key *private_key);
-
-// DILITHIUM_parse_private_key parses a private key, in the format generated by
-// |DILITHIUM_marshal_private_key|, from |in| and writes the result to
-// |out_private_key|. It returns one on success or zero on parse error or if
-// there are trailing bytes in |in|.
-OPENSSL_EXPORT OPENSSL_DEPRECATED int DILITHIUM_parse_private_key(
-    struct DILITHIUM_private_key *private_key, CBS *in);
-
-#endif  // OPENSSL_UNSTABLE_EXPERIMENTAL_DILITHIUM
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_DILITHIUM_H

data/third_party/boringssl-with-bazel/src/include/openssl/experimental/spx.h

@@ -1,90 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_SPX_H
-#define OPENSSL_HEADER_SPX_H
-
-#include <openssl/base.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-#if defined(OPENSSL_UNSTABLE_EXPERIMENTAL_SPX)
-// This header implements experimental, draft versions of not-yet-standardized
-// primitives. When the standard is complete, these functions will be removed
-// and replaced with the final, incompatible standard version. They are
-// available now for short-lived experiments, but must not be deployed anywhere
-// durable, such as a long-lived key store. To use these functions define
-// OPENSSL_UNSTABLE_EXPERIMENTAL_SPX
-
-// SPX_N is the number of bytes in the hash output
-#define SPX_N 16
-
-// SPX_PUBLIC_KEY_BYTES is the nNumber of bytes in the public key of
-// SPHINCS+-SHA2-128s
-#define SPX_PUBLIC_KEY_BYTES 32
-
-// SPX_SECRET_KEY_BYTES is the number of bytes in the private key of
-// SPHINCS+-SHA2-128s
-#define SPX_SECRET_KEY_BYTES 64
-
-// SPX_SIGNATURE_BYTES is the number of bytes in a signature of
-// SPHINCS+-SHA2-128s
-#define SPX_SIGNATURE_BYTES 7856
-
-// SPX_generate_key generates a SPHINCS+-SHA2-128s key pair and writes the
-// result to |out_public_key| and |out_secret_key|.
-// Private key: SK.seed || SK.prf || PK.seed || PK.root
-// Public key: PK.seed || PK.root
-OPENSSL_EXPORT void SPX_generate_key(
-    uint8_t out_public_key[SPX_PUBLIC_KEY_BYTES],
-    uint8_t out_secret_key[SPX_SECRET_KEY_BYTES]);
-
-// SPX_generate_key_from_seed generates a SPHINCS+-SHA2-128s key pair from a
-// 48-byte seed and writes the result to |out_public_key| and |out_secret_key|.
-// Secret key: SK.seed || SK.prf || PK.seed || PK.root
-// Public key: PK.seed || PK.root
-OPENSSL_EXPORT void SPX_generate_key_from_seed(
-    uint8_t out_public_key[SPX_PUBLIC_KEY_BYTES],
-    uint8_t out_secret_key[SPX_SECRET_KEY_BYTES],
-    const uint8_t seed[3 * SPX_N]);
-
-// SPX_sign generates a SPHINCS+-SHA2-128s signature over |msg| or length
-// |msg_len| using |secret_key| and writes the output to |out_signature|.
-//
-// if |randomized| is 0, deterministic signing is performed, otherwise,
-// non-deterministic signing is performed.
-OPENSSL_EXPORT void SPX_sign(
-    uint8_t out_snignature[SPX_SIGNATURE_BYTES],
-    const uint8_t secret_key[SPX_SECRET_KEY_BYTES], const uint8_t *msg,
-    size_t msg_len, int randomized);
-
-// SPX_verify verifies a SPHINCS+-SHA2-128s signature in |signature| over |msg|
-// or length |msg_len| using |public_key|. 1 is returned if the signature
-// matches, 0 otherwise.
-OPENSSL_EXPORT int SPX_verify(
-    const uint8_t signature[SPX_SIGNATURE_BYTES],
-    const uint8_t public_key[SPX_SECRET_KEY_BYTES], const uint8_t *msg,
-    size_t msg_len);
-
-#endif //OPENSSL_UNSTABLE_EXPERIMENTAL_SPX
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_SPX_H