grpc 1.69.0 → 1.70.1

data/third_party/boringssl-with-bazel/src/crypto/dilithium/internal.h

@@ -1,58 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_DILITHIUM_INTERNAL_H
-#define OPENSSL_HEADER_CRYPTO_DILITHIUM_INTERNAL_H
-
-#include <openssl/base.h>
-#include <openssl/experimental/dilithium.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// DILITHIUM_GENERATE_KEY_ENTROPY is the number of bytes of uniformly random
-// entropy necessary to generate a key pair.
-#define DILITHIUM_GENERATE_KEY_ENTROPY 32
-
-// DILITHIUM_SIGNATURE_RANDOMIZER_BYTES is the number of bytes of uniformly
-// random entropy necessary to generate a signature in randomized mode.
-#define DILITHIUM_SIGNATURE_RANDOMIZER_BYTES 32
-
-// DILITHIUM_generate_key_external_entropy generates a public/private key pair
-// using the given seed, writes the encoded public key to
-// |out_encoded_public_key| and sets |out_private_key| to the private key,
-// returning 1 on success and 0 on failure. Returns 1 on success and 0 on
-// failure.
-OPENSSL_EXPORT int DILITHIUM_generate_key_external_entropy(
-    uint8_t out_encoded_public_key[DILITHIUM_PUBLIC_KEY_BYTES],
-    struct DILITHIUM_private_key *out_private_key,
-    const uint8_t entropy[DILITHIUM_GENERATE_KEY_ENTROPY]);
-
-// DILITHIUM_sign_deterministic generates a signature for the message |msg| of
-// length |msg_len| using |private_key| following the deterministic algorithm,
-// and writes the encoded signature to |out_encoded_signature|. Returns 1 on
-// success and 0 on failure.
-OPENSSL_EXPORT int DILITHIUM_sign_deterministic(
-    uint8_t out_encoded_signature[DILITHIUM_SIGNATURE_BYTES],
-    const struct DILITHIUM_private_key *private_key, const uint8_t *msg,
-    size_t msg_len);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_DILITHIUM_INTERNAL_H

data/third_party/boringssl-with-bazel/src/crypto/spx/address.c

@@ -1,101 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/base.h>
-
-#include <string.h>
-
-#include "../internal.h"
-#include "./address.h"
-#include "./spx_util.h"
-
-
-// Offsets of various fields in the address structure for SPHINCS+-SHA2-128s.
-
-// The byte used to specify the Merkle tree layer.
-#define SPX_OFFSET_LAYER 0
-
-// The start of the 8 byte field used to specify the tree.
-#define SPX_OFFSET_TREE 1
-
-// The byte used to specify the hash type (reason).
-#define SPX_OFFSET_TYPE 9
-
-// The high byte used to specify the key pair (which one-time signature).
-#define SPX_OFFSET_KP_ADDR2 12
-
-// The low byte used to specific the key pair.
-#define SPX_OFFSET_KP_ADDR1 13
-
-// The byte used to specify the chain address (which Winternitz chain).
-#define SPX_OFFSET_CHAIN_ADDR 17
-
-// The byte used to specify the hash address (where in the Winternitz chain).
-#define SPX_OFFSET_HASH_ADDR 21
-
-// The byte used to specify the height of this node in the FORS or Merkle tree.
-#define SPX_OFFSET_TREE_HGT 17
-
-// The start of the 4 byte field used to specify the node in the FORS or Merkle
-// tree.
-#define SPX_OFFSET_TREE_INDEX 18
-
-
-void spx_set_chain_addr(uint8_t addr[32], uint32_t chain) {
-  addr[SPX_OFFSET_CHAIN_ADDR] = (uint8_t)chain;
-}
-
-void spx_set_hash_addr(uint8_t addr[32], uint32_t hash) {
-  addr[SPX_OFFSET_HASH_ADDR] = (uint8_t)hash;
-}
-
-void spx_set_keypair_addr(uint8_t addr[32], uint32_t keypair) {
-  addr[SPX_OFFSET_KP_ADDR2] = (uint8_t)(keypair >> 8);
-  addr[SPX_OFFSET_KP_ADDR1] = (uint8_t)keypair;
-}
-
-void spx_copy_keypair_addr(uint8_t out[32], const uint8_t in[32]) {
-  memcpy(out, in, SPX_OFFSET_TREE + 8);
-  out[SPX_OFFSET_KP_ADDR2] = in[SPX_OFFSET_KP_ADDR2];
-  out[SPX_OFFSET_KP_ADDR1] = in[SPX_OFFSET_KP_ADDR1];
-}
-
-void spx_set_layer_addr(uint8_t addr[32], uint32_t layer) {
-  addr[SPX_OFFSET_LAYER] = (uint8_t)layer;
-}
-
-void spx_set_tree_addr(uint8_t addr[32], uint64_t tree) {
-  spx_uint64_to_len_bytes(&addr[SPX_OFFSET_TREE], 8, tree);
-}
-
-void spx_set_type(uint8_t addr[32], uint32_t type) {
-  // NIST draft relies on this setting parts of the address to 0, so we do it
-  // here to avoid confusion.
-  //
-  // The behavior here is only correct for the SHA2 instantiations.
-  memset(addr + 10, 0, 12);
-  addr[SPX_OFFSET_TYPE] = (uint8_t)type;
-}
-
-void spx_set_tree_height(uint8_t addr[32], uint32_t tree_height) {
-  addr[SPX_OFFSET_TREE_HGT] = (uint8_t)tree_height;
-}
-
-void spx_set_tree_index(uint8_t addr[32], uint32_t tree_index) {
-  CRYPTO_store_u32_be(&addr[SPX_OFFSET_TREE_INDEX], tree_index);
-}
-
-uint32_t spx_get_tree_index(uint8_t addr[32]) {
-  return CRYPTO_load_u32_be(addr + SPX_OFFSET_TREE_INDEX);
-}

data/third_party/boringssl-with-bazel/src/crypto/spx/address.h

@@ -1,50 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SPX_ADDRESS_H
-#define OPENSSL_HEADER_CRYPTO_SPX_ADDRESS_H
-
-#include <openssl/base.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-#define SPX_ADDR_TYPE_WOTS 0
-#define SPX_ADDR_TYPE_WOTSPK 1
-#define SPX_ADDR_TYPE_HASHTREE 2
-#define SPX_ADDR_TYPE_FORSTREE 3
-#define SPX_ADDR_TYPE_FORSPK 4
-#define SPX_ADDR_TYPE_WOTSPRF 5
-#define SPX_ADDR_TYPE_FORSPRF 6
-
-void spx_set_chain_addr(uint8_t addr[32], uint32_t chain);
-void spx_set_hash_addr(uint8_t addr[32], uint32_t hash);
-void spx_set_keypair_addr(uint8_t addr[32], uint32_t keypair);
-void spx_set_layer_addr(uint8_t addr[32], uint32_t layer);
-void spx_set_tree_addr(uint8_t addr[32], uint64_t tree);
-void spx_set_type(uint8_t addr[32], uint32_t type);
-void spx_set_tree_height(uint8_t addr[32], uint32_t tree_height);
-void spx_set_tree_index(uint8_t addr[32], uint32_t tree_index);
-void spx_copy_keypair_addr(uint8_t out[32], const uint8_t in[32]);
-
-uint32_t spx_get_tree_index(uint8_t addr[32]);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_SPX_ADDRESS_H

data/third_party/boringssl-with-bazel/src/crypto/spx/fors.c

@@ -1,133 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/base.h>
-
-#include <string.h>
-
-#include "./address.h"
-#include "./fors.h"
-#include "./params.h"
-#include "./spx_util.h"
-#include "./thash.h"
-
-void spx_fors_sk_gen(uint8_t *fors_sk, uint32_t idx,
-                     const uint8_t sk_seed[SPX_N], const uint8_t pk_seed[SPX_N],
-                     uint8_t addr[32]) {
-  uint8_t sk_addr[32];
-  memcpy(sk_addr, addr, sizeof(sk_addr));
-
-  spx_set_type(sk_addr, SPX_ADDR_TYPE_FORSPRF);
-  spx_copy_keypair_addr(sk_addr, addr);
-  spx_set_tree_index(sk_addr, idx);
-  spx_thash_prf(fors_sk, pk_seed, sk_seed, sk_addr);
-}
-
-void spx_fors_treehash(uint8_t root_node[SPX_N], const uint8_t sk_seed[SPX_N],
-                       uint32_t i /*target node index*/,
-                       uint32_t z /*target node height*/,
-                       const uint8_t pk_seed[SPX_N], uint8_t addr[32]) {
-
-  BSSL_CHECK(z <= SPX_FORS_HEIGHT);
-  BSSL_CHECK(i < (uint32_t)(SPX_FORS_TREES * (1 << (SPX_FORS_HEIGHT - z))));
-
-  if (z == 0) {
-    uint8_t sk[SPX_N];
-    spx_set_tree_height(addr, 0);
-    spx_set_tree_index(addr, i);
-    spx_fors_sk_gen(sk, i, sk_seed, pk_seed, addr);
-    spx_thash_f(root_node, sk, pk_seed, addr);
-  } else {
-    // Stores left node and right node.
-    uint8_t nodes[2 * SPX_N];
-    spx_fors_treehash(nodes, sk_seed, 2 * i, z - 1, pk_seed, addr);
-    spx_fors_treehash(nodes + SPX_N, sk_seed, 2 * i + 1, z - 1, pk_seed, addr);
-    spx_set_tree_height(addr, z);
-    spx_set_tree_index(addr, i);
-    spx_thash_h(root_node, nodes, pk_seed, addr);
-  }
-}
-
-void spx_fors_sign(uint8_t *fors_sig, const uint8_t message[SPX_FORS_MSG_BYTES],
-                   const uint8_t sk_seed[SPX_N], const uint8_t pk_seed[SPX_N],
-                   uint8_t addr[32]) {
-  uint32_t indices[SPX_FORS_TREES];
-
-  // Derive FORS indices compatible with the NIST changes.
-  spx_base_b(indices, SPX_FORS_TREES, message, /*log2_b=*/SPX_FORS_HEIGHT);
-
-  for (size_t i = 0; i < SPX_FORS_TREES; ++i) {
-    spx_set_tree_height(addr, 0);
-    // Write the FORS secret key element to the correct position.
-    spx_fors_sk_gen(fors_sig + i * SPX_N * (SPX_FORS_HEIGHT + 1),
-                    i * (1 << SPX_FORS_HEIGHT) + indices[i], sk_seed, pk_seed,
-                    addr);
-    for (size_t j = 0; j < SPX_FORS_HEIGHT; ++j) {
-      size_t s = (indices[i] / (1 << j)) ^ 1;
-      // Write the FORS auth path element to the correct position.
-      spx_fors_treehash(fors_sig + SPX_N * (i * (SPX_FORS_HEIGHT + 1) + j + 1),
-                        sk_seed, i * (1ULL << (SPX_FORS_HEIGHT - j)) + s, j,
-                        pk_seed, addr);
-    }
-  }
-}
-
-void spx_fors_pk_from_sig(uint8_t *fors_pk,
-                          const uint8_t fors_sig[SPX_FORS_BYTES],
-                          const uint8_t message[SPX_FORS_MSG_BYTES],
-                          const uint8_t pk_seed[SPX_N], uint8_t addr[32]) {
-  uint32_t indices[SPX_FORS_TREES];
-  uint8_t tmp[2 * SPX_N];
-  uint8_t roots[SPX_FORS_TREES * SPX_N];
-
-  // Derive FORS indices compatible with the NIST changes.
-  spx_base_b(indices, SPX_FORS_TREES, message, /*log2_b=*/SPX_FORS_HEIGHT);
-
-  for (size_t i = 0; i < SPX_FORS_TREES; ++i) {
-    // Pointer to current sk and authentication path
-    const uint8_t *sk = fors_sig + i * SPX_N * (SPX_FORS_HEIGHT + 1);
-    const uint8_t *auth = fors_sig + i * SPX_N * (SPX_FORS_HEIGHT + 1) + SPX_N;
-    uint8_t nodes[2 * SPX_N];
-
-    spx_set_tree_height(addr, 0);
-    spx_set_tree_index(addr, (i * (1 << SPX_FORS_HEIGHT)) + indices[i]);
-
-    spx_thash_f(nodes, sk, pk_seed, addr);
-
-    for (size_t j = 0; j < SPX_FORS_HEIGHT; ++j) {
-      spx_set_tree_height(addr, j + 1);
-
-      // Even node
-      if (((indices[i] / (1 << j)) % 2) == 0) {
-        spx_set_tree_index(addr, spx_get_tree_index(addr) / 2);
-        memcpy(tmp, nodes, SPX_N);
-        memcpy(tmp + SPX_N, auth + j * SPX_N, SPX_N);
-        spx_thash_h(nodes + SPX_N, tmp, pk_seed, addr);
-      } else {
-        spx_set_tree_index(addr, (spx_get_tree_index(addr) - 1) / 2);
-        memcpy(tmp, auth + j * SPX_N, SPX_N);
-        memcpy(tmp + SPX_N, nodes, SPX_N);
-        spx_thash_h(nodes + SPX_N, tmp, pk_seed, addr);
-      }
-      memcpy(nodes, nodes + SPX_N, SPX_N);
-    }
-    memcpy(roots + i * SPX_N, nodes, SPX_N);
-  }
-
-  uint8_t forspk_addr[32];
-  memcpy(forspk_addr, addr, sizeof(forspk_addr));
-  spx_set_type(forspk_addr, SPX_ADDR_TYPE_FORSPK);
-  spx_copy_keypair_addr(forspk_addr, addr);
-  spx_thash_tk(fors_pk, roots, pk_seed, forspk_addr);
-}

data/third_party/boringssl-with-bazel/src/crypto/spx/fors.h

@@ -1,54 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SPX_FORS_H
-#define OPENSSL_HEADER_CRYPTO_SPX_FORS_H
-
-#include <openssl/base.h>
-
-#include "./params.h"
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// Algorithm 13: Generate a FORS private key value.
-void spx_fors_sk_gen(uint8_t *fors_sk, uint32_t idx,
-                     const uint8_t sk_seed[SPX_N], const uint8_t pk_seed[SPX_N],
-                     uint8_t addr[32]);
-
-// Algorithm 14: Compute the root of a Merkle subtree of FORS public values.
-void spx_fors_treehash(uint8_t root_node[SPX_N], const uint8_t sk_seed[SPX_N],
-                       uint32_t i /*target node index*/,
-                       uint32_t z /*target node height*/,
-                       const uint8_t pk_seed[SPX_N], uint8_t addr[32]);
-
-// Algorithm 15: Generate a FORS signature.
-void spx_fors_sign(uint8_t *fors_sig, const uint8_t message[SPX_FORS_MSG_BYTES],
-                   const uint8_t sk_seed[SPX_N], const uint8_t pk_seed[SPX_N],
-                   uint8_t addr[32]);
-
-// Algorithm 16: Compute a FORS public key from a FORS signature.
-void spx_fors_pk_from_sig(uint8_t *fors_pk,
-                          const uint8_t fors_sig[SPX_FORS_BYTES],
-                          const uint8_t message[SPX_FORS_MSG_BYTES],
-                          const uint8_t pk_seed[SPX_N], uint8_t addr[32]);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_SPX_FORS_H

data/third_party/boringssl-with-bazel/src/crypto/spx/merkle.c

@@ -1,150 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/base.h>
-
-#include <string.h>
-
-#include "./address.h"
-#include "./merkle.h"
-#include "./params.h"
-#include "./thash.h"
-#include "./wots.h"
-
-void spx_treehash(uint8_t out_pk[SPX_N], const uint8_t sk_seed[SPX_N],
-                  uint32_t i /*target node index*/,
-                  uint32_t z /*target node height*/,
-                  const uint8_t pk_seed[SPX_N], uint8_t addr[32]) {
-  BSSL_CHECK(z <= SPX_TREE_HEIGHT);
-  BSSL_CHECK(i < (uint32_t)(1 << (SPX_TREE_HEIGHT - z)));
-
-  if (z == 0) {
-    spx_set_type(addr, SPX_ADDR_TYPE_WOTS);
-    spx_set_keypair_addr(addr, i);
-    spx_wots_pk_gen(out_pk, sk_seed, pk_seed, addr);
-  } else {
-    // Stores left node and right node.
-    uint8_t nodes[2 * SPX_N];
-    spx_treehash(nodes, sk_seed, 2 * i, z - 1, pk_seed, addr);
-    spx_treehash(nodes + SPX_N, sk_seed, 2 * i + 1, z - 1, pk_seed, addr);
-    spx_set_type(addr, SPX_ADDR_TYPE_HASHTREE);
-    spx_set_tree_height(addr, z);
-    spx_set_tree_index(addr, i);
-    spx_thash_h(out_pk, nodes, pk_seed, addr);
-  }
-}
-
-void spx_xmss_sign(uint8_t *sig, const uint8_t msg[SPX_N], unsigned int idx,
-                   const uint8_t sk_seed[SPX_N], const uint8_t pk_seed[SPX_N],
-                   uint8_t addr[32]) {
-  // Build authentication path
-  for (size_t j = 0; j < SPX_TREE_HEIGHT; ++j) {
-    unsigned int k = (idx >> j) ^ 1;
-    spx_treehash(sig + SPX_WOTS_BYTES + j * SPX_N, sk_seed, k, j, pk_seed,
-                 addr);
-  }
-
-  // Compute WOTS+ signature
-  spx_set_type(addr, SPX_ADDR_TYPE_WOTS);
-  spx_set_keypair_addr(addr, idx);
-  spx_wots_sign(sig, msg, sk_seed, pk_seed, addr);
-}
-
-void spx_xmss_pk_from_sig(uint8_t *root, const uint8_t *xmss_sig,
-                          unsigned int idx, const uint8_t msg[SPX_N],
-                          const uint8_t pk_seed[SPX_N], uint8_t addr[32]) {
-  // Stores node[0] and node[1] from Algorithm 10
-  uint8_t node[2 * SPX_N];
-  uint8_t tmp[2 * SPX_N];
-  spx_set_type(addr, SPX_ADDR_TYPE_WOTS);
-  spx_set_keypair_addr(addr, idx);
-  spx_wots_pk_from_sig(node, xmss_sig, msg, pk_seed, addr);
-
-  const uint8_t *auth = xmss_sig + SPX_WOTS_BYTES;
-
-  spx_set_type(addr, SPX_ADDR_TYPE_HASHTREE);
-  spx_set_tree_index(addr, idx);
-  for (size_t k = 0; k < SPX_TREE_HEIGHT; ++k) {
-    spx_set_tree_height(addr, k + 1);
-    // Is even
-    if (((idx >> k) & 1) == 0) {
-      spx_set_tree_index(addr, spx_get_tree_index(addr) >> 1);
-      memcpy(tmp, node, SPX_N);
-      memcpy(tmp + SPX_N, auth + k * SPX_N, SPX_N);
-      spx_thash_h(node + SPX_N, tmp, pk_seed, addr);
-    } else {
-      spx_set_tree_index(addr, (spx_get_tree_index(addr) - 1) >> 1);
-      memcpy(tmp, auth + k * SPX_N, SPX_N);
-      memcpy(tmp + SPX_N, node, SPX_N);
-      spx_thash_h(node + SPX_N, tmp, pk_seed, addr);
-    }
-    memcpy(node, node + SPX_N, SPX_N);
-  }
-  memcpy(root, node, SPX_N);
-}
-
-void spx_ht_sign(uint8_t *sig, const uint8_t message[SPX_N], uint64_t idx_tree,
-                 uint32_t idx_leaf, const uint8_t sk_seed[SPX_N],
-                 const uint8_t pk_seed[SPX_N]) {
-  uint8_t addr[32] = {0};
-  spx_set_tree_addr(addr, idx_tree);
-
-  // Layer 0
-  uint8_t sig_tmp[SPX_XMSS_BYTES];
-  spx_xmss_sign(sig_tmp, message, idx_leaf, sk_seed, pk_seed, addr);
-  memcpy(sig, sig_tmp, sizeof(sig_tmp));
-
-  uint8_t root[SPX_N];
-  spx_xmss_pk_from_sig(root, sig_tmp, idx_leaf, message, pk_seed, addr);
-
-  // All other layers
-  for (size_t j = 1; j < SPX_D; ++j) {
-    idx_leaf = idx_tree % (1 << SPX_TREE_HEIGHT);
-    idx_tree = idx_tree >> SPX_TREE_HEIGHT;
-    spx_set_layer_addr(addr, j);
-    spx_set_tree_addr(addr, idx_tree);
-    spx_xmss_sign(sig_tmp, root, idx_leaf, sk_seed, pk_seed, addr);
-    memcpy(sig + j * SPX_XMSS_BYTES, sig_tmp, sizeof(sig_tmp));
-
-    if (j < (SPX_D - 1)) {
-      spx_xmss_pk_from_sig(root, sig_tmp, idx_leaf, root, pk_seed, addr);
-    }
-  }
-}
-
-int spx_ht_verify(const uint8_t sig[SPX_D * SPX_XMSS_BYTES],
-                  const uint8_t message[SPX_N], uint64_t idx_tree,
-                  uint32_t idx_leaf, const uint8_t pk_root[SPX_N],
-                  const uint8_t pk_seed[SPX_N]) {
-  uint8_t addr[32] = {0};
-  spx_set_tree_addr(addr, idx_tree);
-
-  uint8_t sig_tmp[SPX_XMSS_BYTES];
-  memcpy(sig_tmp, sig, sizeof(sig_tmp));
-
-  uint8_t node[SPX_N];
-  spx_xmss_pk_from_sig(node, sig_tmp, idx_leaf, message, pk_seed, addr);
-
-  for (size_t j = 1; j < SPX_D; ++j) {
-    idx_leaf = idx_tree % (1 << SPX_TREE_HEIGHT);
-    idx_tree = idx_tree >> SPX_TREE_HEIGHT;
-    spx_set_layer_addr(addr, j);
-    spx_set_tree_addr(addr, idx_tree);
-    // Get jth XMSS signature
-    memcpy(sig_tmp, sig + j * SPX_XMSS_BYTES, sizeof(sig_tmp));
-
-    spx_xmss_pk_from_sig(node, sig_tmp, idx_leaf, node, pk_seed, addr);
-  }
-  return memcmp(node, pk_root, SPX_N) == 0;
-}

data/third_party/boringssl-with-bazel/src/crypto/spx/merkle.h

@@ -1,61 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SPX_MERKLE_H
-#define OPENSSL_HEADER_CRYPTO_SPX_MERKLE_H
-
-#include <openssl/base.h>
-
-#include <sys/types.h>
-
-#include "./params.h"
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// Algorithm 8: Compute the root of a Merkle subtree of WOTS+ public keys.
-void spx_treehash(uint8_t out_pk[SPX_N], const uint8_t sk_seed[SPX_N],
-                  uint32_t i /*target node index*/,
-                  uint32_t z /*target node height*/,
-                  const uint8_t pk_seed[SPX_N], uint8_t addr[32]);
-
-// Algorithm 9: Generate an XMSS signature.
-void spx_xmss_sign(uint8_t *sig, const uint8_t msg[SPX_N], unsigned int idx,
-                   const uint8_t sk_seed[SPX_N], const uint8_t pk_seed[SPX_N],
-                   uint8_t addr[32]);
-
-// Algorithm 10: Compute an XMSS public key from an XMSS signature.
-void spx_xmss_pk_from_sig(uint8_t *root, const uint8_t *xmss_sig,
-                          unsigned int idx, const uint8_t msg[SPX_N],
-                          const uint8_t pk_seed[SPX_N], uint8_t addr[32]);
-
-// Algorithm 11: Generate a hypertree signature.
-void spx_ht_sign(uint8_t *sig, const uint8_t message[SPX_N], uint64_t idx_tree,
-                 uint32_t idx_leaf, const uint8_t sk_seed[SPX_N],
-                 const uint8_t pk_seed[SPX_N]);
-
-// Algorithm 12: Verify a hypertree signature.
-int spx_ht_verify(const uint8_t sig[SPX_D * SPX_XMSS_BYTES],
-                  const uint8_t message[SPX_N], uint64_t idx_tree,
-                  uint32_t idx_leaf, const uint8_t pk_root[SPX_N],
-                  const uint8_t pk_seed[SPX_N]);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_SPX_MERKLE_H

data/third_party/boringssl-with-bazel/src/crypto/spx/params.h

@@ -1,71 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SPX_PARAMS_H
-#define OPENSSL_HEADER_CRYPTO_SPX_PARAMS_H
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// Output length of the hash function.
-#define SPX_N 16
-// Total height of the tree structure.
-#define SPX_FULL_HEIGHT 63
-// Number of subtree layers.
-#define SPX_D 7
-// Height of the trees on each layer
-#define SPX_TREE_HEIGHT 9
-// Height of each individual FORS tree.
-#define SPX_FORS_HEIGHT 12
-// Total number of FORS tree used.
-#define SPX_FORS_TREES 14
-// Size of a FORS signature
-#define SPX_FORS_BYTES ((SPX_FORS_HEIGHT + 1) * SPX_FORS_TREES * SPX_N)
-
-// Winternitz parameter and derived values
-#define SPX_WOTS_W 16
-#define SPX_WOTS_LOG_W 4
-#define SPX_WOTS_LEN1 32
-#define SPX_WOTS_LEN2 3
-#define SPX_WOTS_LEN 35
-#define SPX_WOTS_BYTES (SPX_N * SPX_WOTS_LEN)
-
-// XMSS sizes
-#define SPX_XMSS_BYTES (SPX_WOTS_BYTES + (SPX_N * SPX_TREE_HEIGHT))
-
-// Size of the message digest (NOTE: This is only correct for the SHA256 params
-// here)
-#define SPX_DIGEST_SIZE                                                      \
-  (((SPX_FORS_TREES * SPX_FORS_HEIGHT) / 8) +                                \
-   (((SPX_FULL_HEIGHT - SPX_TREE_HEIGHT) / 8) + 1) + (SPX_TREE_HEIGHT / 8) + \
-   1)
-
-// Compressed address size when using SHA256
-#define SPX_SHA256_ADDR_BYTES 22
-
-// Size of the FORS message hash
-#define SPX_FORS_MSG_BYTES ((SPX_FORS_HEIGHT * SPX_FORS_TREES + 7) / 8)
-#define SPX_TREE_BITS (SPX_TREE_HEIGHT * (SPX_D - 1))
-#define SPX_TREE_BYTES ((SPX_TREE_BITS + 7) / 8)
-#define SPX_LEAF_BITS SPX_TREE_HEIGHT
-#define SPX_LEAF_BYTES ((SPX_LEAF_BITS + 7) / 8)
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_SPX_PARAMS_H