grpc 1.69.0 → 1.71.0

data/third_party/boringssl-with-bazel/src/crypto/rand_extra/forkunsafe.c

@@ -1,44 +0,0 @@
-/* Copyright (c) 2017, Google Inc.
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/rand.h>
-
-#include <stdlib.h>
-
-#include "../fipsmodule/rand/internal.h"
-#include "../internal.h"
-
-
-// g_buffering_enabled is one if fork-unsafe buffering has been enabled and zero
-// otherwise.
-static CRYPTO_atomic_u32 g_buffering_enabled = 0;
-
-#if !defined(OPENSSL_WINDOWS)
-void RAND_enable_fork_unsafe_buffering(int fd) {
-  // We no longer support setting the file-descriptor with this function.
-  if (fd != -1) {
-    abort();
-  }
-
-  CRYPTO_atomic_store_u32(&g_buffering_enabled, 1);
-}
-
-void RAND_disable_fork_unsafe_buffering(void) {
-  CRYPTO_atomic_store_u32(&g_buffering_enabled, 0);
-}
-#endif
-
-int rand_fork_unsafe_buffering_enabled(void) {
-  return CRYPTO_atomic_load_u32(&g_buffering_enabled) != 0;
-}

data/third_party/boringssl-with-bazel/src/crypto/rand_extra/ios.c

@@ -1,42 +0,0 @@
-/* Copyright (c) 2023, Google Inc.
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/rand.h>
-
-#include "../bcm_support.h"
-#include "sysrand_internal.h"
-
-#if defined(OPENSSL_RAND_IOS)
-#include <stdlib.h>
-
-#include <CommonCrypto/CommonRandom.h>
-
-void CRYPTO_init_sysrand(void) {}
-
-void CRYPTO_sysrand(uint8_t *out, size_t requested) {
-  if (CCRandomGenerateBytes(out, requested) != kCCSuccess) {
-    abort();
-  }
-}
-
-int CRYPTO_sysrand_if_available(uint8_t *buf, size_t len) {
-  CRYPTO_sysrand(buf, len);
-  return 1;
-}
-
-void CRYPTO_sysrand_for_seed(uint8_t *out, size_t requested) {
-  CRYPTO_sysrand(out, requested);
-}
-
-#endif  // OPENSSL_RAND_IOS

data/third_party/boringssl-with-bazel/src/crypto/rand_extra/sysrand_internal.h

@@ -1,37 +0,0 @@
-/* Copyright (c) 2024, Google Inc.
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SYSRAND_INTERNAL_H
-#define OPENSSL_HEADER_CRYPTO_SYSRAND_INTERNAL_H
-
-#include <openssl/base.h>
-
-#if defined(BORINGSSL_UNSAFE_DETERMINISTIC_MODE)
-#define OPENSSL_RAND_DETERMINISTIC
-#elif defined(OPENSSL_TRUSTY)
-#define OPENSSL_RAND_TRUSTY
-#elif defined(OPENSSL_WINDOWS)
-#define OPENSSL_RAND_WINDOWS
-#elif defined(OPENSSL_LINUX)
-#define OPENSSL_RAND_URANDOM
-#elif defined(OPENSSL_APPLE) && !defined(OPENSSL_MACOS)
-// Unlike macOS, iOS and similar hide away getentropy().
-#define OPENSSL_RAND_IOS
-#else
-// By default if you are integrating BoringSSL we expect you to
-// provide getentropy from the <unistd.h> header file.
-#define OPENSSL_RAND_GETENTROPY
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO__SYSRAND_INTERNAL_H

data/third_party/boringssl-with-bazel/src/crypto/rand_extra/trusty.c

@@ -1,46 +0,0 @@
-/* Copyright (c) 2023, Google Inc.
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/rand.h>
-
-#include "../bcm_support.h"
-#include "sysrand_internal.h"
-
-#if defined(OPENSSL_RAND_TRUSTY)
-#include <stdint.h>
-#include <stdlib.h>
-
-#include <sys/types.h>
-#include <uapi/err.h>
-
-#include <lib/rng/trusty_rng.h>
-
-void CRYPTO_init_sysrand(void) {}
-
-void CRYPTO_sysrand(uint8_t *out, size_t requested) {
-  if (trusty_rng_hw_rand(out, requested) != NO_ERROR) {
-    abort();
-  }
-}
-
-int CRYPTO_sysrand_if_available(uint8_t *buf, size_t len) {
-  CRYPTO_sysrand(buf, len);
-  return 1;
-}
-
-void CRYPTO_sysrand_for_seed(uint8_t *out, size_t requested) {
-  CRYPTO_sysrand(out, requested);
-}
-
-#endif  // OPENSSL_RAND_TRUSTY

data/third_party/boringssl-with-bazel/src/crypto/rc4/rc4.c

@@ -1,98 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-#include <openssl/rc4.h>
-
-
-void RC4(RC4_KEY *key, size_t len, const uint8_t *in, uint8_t *out) {
-  uint32_t x = key->x;
-  uint32_t y = key->y;
-  uint32_t *d = key->data;
-
-  for (size_t i = 0; i < len; i++) {
-    x = (x + 1) & 0xff;
-    uint32_t tx = d[x];
-    y = (tx + y) & 0xff;
-    uint32_t ty = d[y];
-    d[x] = ty;
-    d[y] = tx;
-    out[i] = d[(tx + ty) & 0xff] ^ in[i];
-  }
-
-  key->x = x;
-  key->y = y;
-}
-
-void RC4_set_key(RC4_KEY *rc4key, unsigned len, const uint8_t *key) {
-  uint32_t *d = &rc4key->data[0];
-  rc4key->x = 0;
-  rc4key->y = 0;
-
-  for (unsigned i = 0; i < 256; i++) {
-    d[i] = i;
-  }
-
-  unsigned id1 = 0, id2 = 0;
-  for (unsigned i = 0; i < 256; i++) {
-    uint32_t tmp = d[i];
-    id2 = (key[id1] + tmp + id2) & 0xff;
-    if (++id1 == len) {
-      id1 = 0;
-    }
-    d[i] = d[id2];
-    d[id2] = tmp;
-  }
-}

data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/internal.h

@@ -1,79 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-
-#ifndef OPENSSL_HEADER_RSA_EXTRA_INTERNAL_H
-#define OPENSSL_HEADER_RSA_EXTRA_INTERNAL_H
-
-#include <openssl/base.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-int RSA_padding_check_PKCS1_OAEP_mgf1(uint8_t *out, size_t *out_len,
-                                      size_t max_out, const uint8_t *from,
-                                      size_t from_len, const uint8_t *param,
-                                      size_t param_len, const EVP_MD *md,
-                                      const EVP_MD *mgf1md);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_RSA_EXTRA_INTERNAL_H

data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_print.c

@@ -1,22 +0,0 @@
-/*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
- *
- * Licensed under the OpenSSL license (the "License").  You may not use
- * this file except in compliance with the License.  You can obtain a copy
- * in the file LICENSE in the source distribution or at
- * https://www.openssl.org/source/license.html
- */
-
-#include <openssl/rsa.h>
-
-#include <openssl/evp.h>
-
-
-int RSA_print(BIO *bio, const RSA *rsa, int indent) {
-  EVP_PKEY *pkey = EVP_PKEY_new();
-  int ret = pkey != NULL &&
-            EVP_PKEY_set1_RSA(pkey, (RSA *)rsa) &&
-            EVP_PKEY_print_private(bio, pkey, indent, NULL);
-  EVP_PKEY_free(pkey);
-  return ret;
-}

data/third_party/boringssl-with-bazel/src/crypto/spx/address.c

@@ -1,101 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/base.h>
-
-#include <string.h>
-
-#include "../internal.h"
-#include "./address.h"
-#include "./spx_util.h"
-
-
-// Offsets of various fields in the address structure for SPHINCS+-SHA2-128s.
-
-// The byte used to specify the Merkle tree layer.
-#define SPX_OFFSET_LAYER 0
-
-// The start of the 8 byte field used to specify the tree.
-#define SPX_OFFSET_TREE 1
-
-// The byte used to specify the hash type (reason).
-#define SPX_OFFSET_TYPE 9
-
-// The high byte used to specify the key pair (which one-time signature).
-#define SPX_OFFSET_KP_ADDR2 12
-
-// The low byte used to specific the key pair.
-#define SPX_OFFSET_KP_ADDR1 13
-
-// The byte used to specify the chain address (which Winternitz chain).
-#define SPX_OFFSET_CHAIN_ADDR 17
-
-// The byte used to specify the hash address (where in the Winternitz chain).
-#define SPX_OFFSET_HASH_ADDR 21
-
-// The byte used to specify the height of this node in the FORS or Merkle tree.
-#define SPX_OFFSET_TREE_HGT 17
-
-// The start of the 4 byte field used to specify the node in the FORS or Merkle
-// tree.
-#define SPX_OFFSET_TREE_INDEX 18
-
-
-void spx_set_chain_addr(uint8_t addr[32], uint32_t chain) {
-  addr[SPX_OFFSET_CHAIN_ADDR] = (uint8_t)chain;
-}
-
-void spx_set_hash_addr(uint8_t addr[32], uint32_t hash) {
-  addr[SPX_OFFSET_HASH_ADDR] = (uint8_t)hash;
-}
-
-void spx_set_keypair_addr(uint8_t addr[32], uint32_t keypair) {
-  addr[SPX_OFFSET_KP_ADDR2] = (uint8_t)(keypair >> 8);
-  addr[SPX_OFFSET_KP_ADDR1] = (uint8_t)keypair;
-}
-
-void spx_copy_keypair_addr(uint8_t out[32], const uint8_t in[32]) {
-  memcpy(out, in, SPX_OFFSET_TREE + 8);
-  out[SPX_OFFSET_KP_ADDR2] = in[SPX_OFFSET_KP_ADDR2];
-  out[SPX_OFFSET_KP_ADDR1] = in[SPX_OFFSET_KP_ADDR1];
-}
-
-void spx_set_layer_addr(uint8_t addr[32], uint32_t layer) {
-  addr[SPX_OFFSET_LAYER] = (uint8_t)layer;
-}
-
-void spx_set_tree_addr(uint8_t addr[32], uint64_t tree) {
-  spx_uint64_to_len_bytes(&addr[SPX_OFFSET_TREE], 8, tree);
-}
-
-void spx_set_type(uint8_t addr[32], uint32_t type) {
-  // NIST draft relies on this setting parts of the address to 0, so we do it
-  // here to avoid confusion.
-  //
-  // The behavior here is only correct for the SHA2 instantiations.
-  memset(addr + 10, 0, 12);
-  addr[SPX_OFFSET_TYPE] = (uint8_t)type;
-}
-
-void spx_set_tree_height(uint8_t addr[32], uint32_t tree_height) {
-  addr[SPX_OFFSET_TREE_HGT] = (uint8_t)tree_height;
-}
-
-void spx_set_tree_index(uint8_t addr[32], uint32_t tree_index) {
-  CRYPTO_store_u32_be(&addr[SPX_OFFSET_TREE_INDEX], tree_index);
-}
-
-uint32_t spx_get_tree_index(uint8_t addr[32]) {
-  return CRYPTO_load_u32_be(addr + SPX_OFFSET_TREE_INDEX);
-}

data/third_party/boringssl-with-bazel/src/crypto/spx/address.h

@@ -1,50 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SPX_ADDRESS_H
-#define OPENSSL_HEADER_CRYPTO_SPX_ADDRESS_H
-
-#include <openssl/base.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-#define SPX_ADDR_TYPE_WOTS 0
-#define SPX_ADDR_TYPE_WOTSPK 1
-#define SPX_ADDR_TYPE_HASHTREE 2
-#define SPX_ADDR_TYPE_FORSTREE 3
-#define SPX_ADDR_TYPE_FORSPK 4
-#define SPX_ADDR_TYPE_WOTSPRF 5
-#define SPX_ADDR_TYPE_FORSPRF 6
-
-void spx_set_chain_addr(uint8_t addr[32], uint32_t chain);
-void spx_set_hash_addr(uint8_t addr[32], uint32_t hash);
-void spx_set_keypair_addr(uint8_t addr[32], uint32_t keypair);
-void spx_set_layer_addr(uint8_t addr[32], uint32_t layer);
-void spx_set_tree_addr(uint8_t addr[32], uint64_t tree);
-void spx_set_type(uint8_t addr[32], uint32_t type);
-void spx_set_tree_height(uint8_t addr[32], uint32_t tree_height);
-void spx_set_tree_index(uint8_t addr[32], uint32_t tree_index);
-void spx_copy_keypair_addr(uint8_t out[32], const uint8_t in[32]);
-
-uint32_t spx_get_tree_index(uint8_t addr[32]);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_SPX_ADDRESS_H

data/third_party/boringssl-with-bazel/src/crypto/spx/fors.c

@@ -1,133 +0,0 @@
-/* Copyright (c) 2023, Google LLC
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/base.h>
-
-#include <string.h>
-
-#include "./address.h"
-#include "./fors.h"
-#include "./params.h"
-#include "./spx_util.h"
-#include "./thash.h"
-
-void spx_fors_sk_gen(uint8_t *fors_sk, uint32_t idx,
-                     const uint8_t sk_seed[SPX_N], const uint8_t pk_seed[SPX_N],
-                     uint8_t addr[32]) {
-  uint8_t sk_addr[32];
-  memcpy(sk_addr, addr, sizeof(sk_addr));
-
-  spx_set_type(sk_addr, SPX_ADDR_TYPE_FORSPRF);
-  spx_copy_keypair_addr(sk_addr, addr);
-  spx_set_tree_index(sk_addr, idx);
-  spx_thash_prf(fors_sk, pk_seed, sk_seed, sk_addr);
-}
-
-void spx_fors_treehash(uint8_t root_node[SPX_N], const uint8_t sk_seed[SPX_N],
-                       uint32_t i /*target node index*/,
-                       uint32_t z /*target node height*/,
-                       const uint8_t pk_seed[SPX_N], uint8_t addr[32]) {
-
-  BSSL_CHECK(z <= SPX_FORS_HEIGHT);
-  BSSL_CHECK(i < (uint32_t)(SPX_FORS_TREES * (1 << (SPX_FORS_HEIGHT - z))));
-
-  if (z == 0) {
-    uint8_t sk[SPX_N];
-    spx_set_tree_height(addr, 0);
-    spx_set_tree_index(addr, i);
-    spx_fors_sk_gen(sk, i, sk_seed, pk_seed, addr);
-    spx_thash_f(root_node, sk, pk_seed, addr);
-  } else {
-    // Stores left node and right node.
-    uint8_t nodes[2 * SPX_N];
-    spx_fors_treehash(nodes, sk_seed, 2 * i, z - 1, pk_seed, addr);
-    spx_fors_treehash(nodes + SPX_N, sk_seed, 2 * i + 1, z - 1, pk_seed, addr);
-    spx_set_tree_height(addr, z);
-    spx_set_tree_index(addr, i);
-    spx_thash_h(root_node, nodes, pk_seed, addr);
-  }
-}
-
-void spx_fors_sign(uint8_t *fors_sig, const uint8_t message[SPX_FORS_MSG_BYTES],
-                   const uint8_t sk_seed[SPX_N], const uint8_t pk_seed[SPX_N],
-                   uint8_t addr[32]) {
-  uint32_t indices[SPX_FORS_TREES];
-
-  // Derive FORS indices compatible with the NIST changes.
-  spx_base_b(indices, SPX_FORS_TREES, message, /*log2_b=*/SPX_FORS_HEIGHT);
-
-  for (size_t i = 0; i < SPX_FORS_TREES; ++i) {
-    spx_set_tree_height(addr, 0);
-    // Write the FORS secret key element to the correct position.
-    spx_fors_sk_gen(fors_sig + i * SPX_N * (SPX_FORS_HEIGHT + 1),
-                    i * (1 << SPX_FORS_HEIGHT) + indices[i], sk_seed, pk_seed,
-                    addr);
-    for (size_t j = 0; j < SPX_FORS_HEIGHT; ++j) {
-      size_t s = (indices[i] / (1 << j)) ^ 1;
-      // Write the FORS auth path element to the correct position.
-      spx_fors_treehash(fors_sig + SPX_N * (i * (SPX_FORS_HEIGHT + 1) + j + 1),
-                        sk_seed, i * (1ULL << (SPX_FORS_HEIGHT - j)) + s, j,
-                        pk_seed, addr);
-    }
-  }
-}
-
-void spx_fors_pk_from_sig(uint8_t *fors_pk,
-                          const uint8_t fors_sig[SPX_FORS_BYTES],
-                          const uint8_t message[SPX_FORS_MSG_BYTES],
-                          const uint8_t pk_seed[SPX_N], uint8_t addr[32]) {
-  uint32_t indices[SPX_FORS_TREES];
-  uint8_t tmp[2 * SPX_N];
-  uint8_t roots[SPX_FORS_TREES * SPX_N];
-
-  // Derive FORS indices compatible with the NIST changes.
-  spx_base_b(indices, SPX_FORS_TREES, message, /*log2_b=*/SPX_FORS_HEIGHT);
-
-  for (size_t i = 0; i < SPX_FORS_TREES; ++i) {
-    // Pointer to current sk and authentication path
-    const uint8_t *sk = fors_sig + i * SPX_N * (SPX_FORS_HEIGHT + 1);
-    const uint8_t *auth = fors_sig + i * SPX_N * (SPX_FORS_HEIGHT + 1) + SPX_N;
-    uint8_t nodes[2 * SPX_N];
-
-    spx_set_tree_height(addr, 0);
-    spx_set_tree_index(addr, (i * (1 << SPX_FORS_HEIGHT)) + indices[i]);
-
-    spx_thash_f(nodes, sk, pk_seed, addr);
-
-    for (size_t j = 0; j < SPX_FORS_HEIGHT; ++j) {
-      spx_set_tree_height(addr, j + 1);
-
-      // Even node
-      if (((indices[i] / (1 << j)) % 2) == 0) {
-        spx_set_tree_index(addr, spx_get_tree_index(addr) / 2);
-        memcpy(tmp, nodes, SPX_N);
-        memcpy(tmp + SPX_N, auth + j * SPX_N, SPX_N);
-        spx_thash_h(nodes + SPX_N, tmp, pk_seed, addr);
-      } else {
-        spx_set_tree_index(addr, (spx_get_tree_index(addr) - 1) / 2);
-        memcpy(tmp, auth + j * SPX_N, SPX_N);
-        memcpy(tmp + SPX_N, nodes, SPX_N);
-        spx_thash_h(nodes + SPX_N, tmp, pk_seed, addr);
-      }
-      memcpy(nodes, nodes + SPX_N, SPX_N);
-    }
-    memcpy(roots + i * SPX_N, nodes, SPX_N);
-  }
-
-  uint8_t forspk_addr[32];
-  memcpy(forspk_addr, addr, sizeof(forspk_addr));
-  spx_set_type(forspk_addr, SPX_ADDR_TYPE_FORSPK);
-  spx_copy_keypair_addr(forspk_addr, addr);
-  spx_thash_tk(fors_pk, roots, pk_seed, forspk_addr);
-}