grpc 1.70.1 → 1.71.0

data/third_party/boringssl-with-bazel/src/crypto/mlkem/internal.h

@@ -1,90 +0,0 @@
-/* Copyright 2023 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_MLKEM_INTERNAL_H
-#define OPENSSL_HEADER_CRYPTO_MLKEM_INTERNAL_H
-
-#include <openssl/base.h>
-#include <openssl/mlkem.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// MLKEM_ENCAP_ENTROPY is the number of bytes of uniformly random entropy
-// necessary to encapsulate a secret. The entropy will be leaked to the
-// decapsulating party.
-#define MLKEM_ENCAP_ENTROPY 32
-
-// MLKEM768_generate_key_external_seed is a deterministic function to create a
-// pair of ML-KEM-768 keys, using the supplied seed. The seed needs to be
-// uniformly random. This function is should only be used for tests, regular
-// callers should use the non-deterministic |MLKEM768_generate_key| directly.
-OPENSSL_EXPORT void MLKEM768_generate_key_external_seed(
-    uint8_t out_encoded_public_key[MLKEM768_PUBLIC_KEY_BYTES],
-    struct MLKEM768_private_key *out_private_key,
-    const uint8_t seed[MLKEM_SEED_BYTES]);
-
-// MLKEM768_encap_external_entropy behaves like |MLKEM768_encap|, but uses
-// |MLKEM_ENCAP_ENTROPY| bytes of |entropy| for randomization. The decapsulating
-// side will be able to recover |entropy| in full. This function should only be
-// used for tests, regular callers should use the non-deterministic
-// |MLKEM768_encap| directly.
-OPENSSL_EXPORT void MLKEM768_encap_external_entropy(
-    uint8_t out_ciphertext[MLKEM768_CIPHERTEXT_BYTES],
-    uint8_t out_shared_secret[MLKEM_SHARED_SECRET_BYTES],
-    const struct MLKEM768_public_key *public_key,
-    const uint8_t entropy[MLKEM_ENCAP_ENTROPY]);
-
-// MLKEM768_marshal_private_key serializes |private_key| to |out| in the
-// NIST format for ML-KEM-768 private keys. It returns one on success or
-// zero on allocation error. (Note that one can also save just the seed value
-// produced by |MLKEM768_generate_key|, which is significantly smaller.)
-OPENSSL_EXPORT int MLKEM768_marshal_private_key(
-    CBB *out, const struct MLKEM768_private_key *private_key);
-
-// MLKEM1024_generate_key_external_seed is a deterministic function to create a
-// pair of ML-KEM-1024 keys, using the supplied seed. The seed needs to be
-// uniformly random. This function is should only be used for tests, regular
-// callers should use the non-deterministic |MLKEM1024_generate_key| directly.
-OPENSSL_EXPORT void MLKEM1024_generate_key_external_seed(
-    uint8_t out_encoded_public_key[MLKEM1024_PUBLIC_KEY_BYTES],
-    struct MLKEM1024_private_key *out_private_key,
-    const uint8_t seed[MLKEM_SEED_BYTES]);
-
-// MLKEM1024_encap_external_entropy behaves like |MLKEM1024_encap|, but uses
-// |MLKEM_ENCAP_ENTROPY| bytes of |entropy| for randomization. The
-// decapsulating side will be able to recover |entropy| in full. This function
-// should only be used for tests, regular callers should use the
-// non-deterministic |MLKEM1024_encap| directly.
-OPENSSL_EXPORT void MLKEM1024_encap_external_entropy(
-    uint8_t out_ciphertext[MLKEM1024_CIPHERTEXT_BYTES],
-    uint8_t out_shared_secret[MLKEM_SHARED_SECRET_BYTES],
-    const struct MLKEM1024_public_key *public_key,
-    const uint8_t entropy[MLKEM_ENCAP_ENTROPY]);
-
-// MLKEM1024_marshal_private_key serializes |private_key| to |out| in the
-// NIST format for ML-KEM-1024 private keys. It returns one on success or
-// zero on allocation error. (Note that one can also save just the seed value
-// produced by |MLKEM1024_generate_key|, which is significantly smaller.)
-OPENSSL_EXPORT int MLKEM1024_marshal_private_key(
-    CBB *out, const struct MLKEM1024_private_key *private_key);
-
-
-#if defined(__cplusplus)
-}
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_MLKEM_INTERNAL_H

data/third_party/boringssl-with-bazel/src/crypto/rand_extra/forkunsafe.cc

@@ -1,44 +0,0 @@
-/* Copyright 2017 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/rand.h>
-
-#include <stdlib.h>
-
-#include "../fipsmodule/rand/internal.h"
-#include "../internal.h"
-
-
-// g_buffering_enabled is one if fork-unsafe buffering has been enabled and zero
-// otherwise.
-static CRYPTO_atomic_u32 g_buffering_enabled;
-
-#if !defined(OPENSSL_WINDOWS)
-void RAND_enable_fork_unsafe_buffering(int fd) {
-  // We no longer support setting the file-descriptor with this function.
-  if (fd != -1) {
-    abort();
-  }
-
-  CRYPTO_atomic_store_u32(&g_buffering_enabled, 1);
-}
-
-void RAND_disable_fork_unsafe_buffering(void) {
-  CRYPTO_atomic_store_u32(&g_buffering_enabled, 0);
-}
-#endif
-
-int rand_fork_unsafe_buffering_enabled(void) {
-  return CRYPTO_atomic_load_u32(&g_buffering_enabled) != 0;
-}

data/third_party/boringssl-with-bazel/src/crypto/rand_extra/ios.cc

@@ -1,42 +0,0 @@
-/* Copyright 2023 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/rand.h>
-
-#include "../bcm_support.h"
-#include "sysrand_internal.h"
-
-#if defined(OPENSSL_RAND_IOS)
-#include <stdlib.h>
-
-#include <CommonCrypto/CommonRandom.h>
-
-void CRYPTO_init_sysrand(void) {}
-
-void CRYPTO_sysrand(uint8_t *out, size_t requested) {
-  if (CCRandomGenerateBytes(out, requested) != kCCSuccess) {
-    abort();
-  }
-}
-
-int CRYPTO_sysrand_if_available(uint8_t *buf, size_t len) {
-  CRYPTO_sysrand(buf, len);
-  return 1;
-}
-
-void CRYPTO_sysrand_for_seed(uint8_t *out, size_t requested) {
-  CRYPTO_sysrand(out, requested);
-}
-
-#endif  // OPENSSL_RAND_IOS

data/third_party/boringssl-with-bazel/src/crypto/rand_extra/sysrand_internal.h

@@ -1,37 +0,0 @@
-/* Copyright 2024 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SYSRAND_INTERNAL_H
-#define OPENSSL_HEADER_CRYPTO_SYSRAND_INTERNAL_H
-
-#include <openssl/base.h>
-
-#if defined(BORINGSSL_UNSAFE_DETERMINISTIC_MODE)
-#define OPENSSL_RAND_DETERMINISTIC
-#elif defined(OPENSSL_TRUSTY)
-#define OPENSSL_RAND_TRUSTY
-#elif defined(OPENSSL_WINDOWS)
-#define OPENSSL_RAND_WINDOWS
-#elif defined(OPENSSL_LINUX)
-#define OPENSSL_RAND_URANDOM
-#elif defined(OPENSSL_APPLE) && !defined(OPENSSL_MACOS)
-// Unlike macOS, iOS and similar hide away getentropy().
-#define OPENSSL_RAND_IOS
-#else
-// By default if you are integrating BoringSSL we expect you to
-// provide getentropy from the <unistd.h> header file.
-#define OPENSSL_RAND_GETENTROPY
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO__SYSRAND_INTERNAL_H

data/third_party/boringssl-with-bazel/src/crypto/rand_extra/trusty.cc

@@ -1,46 +0,0 @@
-/* Copyright 2023 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/rand.h>
-
-#include "../bcm_support.h"
-#include "sysrand_internal.h"
-
-#if defined(OPENSSL_RAND_TRUSTY)
-#include <stdint.h>
-#include <stdlib.h>
-
-#include <sys/types.h>
-#include <uapi/err.h>
-
-#include <lib/rng/trusty_rng.h>
-
-void CRYPTO_init_sysrand(void) {}
-
-void CRYPTO_sysrand(uint8_t *out, size_t requested) {
-  if (trusty_rng_hw_rand(out, requested) != NO_ERROR) {
-    abort();
-  }
-}
-
-int CRYPTO_sysrand_if_available(uint8_t *buf, size_t len) {
-  CRYPTO_sysrand(buf, len);
-  return 1;
-}
-
-void CRYPTO_sysrand_for_seed(uint8_t *out, size_t requested) {
-  CRYPTO_sysrand(out, requested);
-}
-
-#endif  // OPENSSL_RAND_TRUSTY

data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/internal.h

@@ -1,79 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-
-#ifndef OPENSSL_HEADER_RSA_EXTRA_INTERNAL_H
-#define OPENSSL_HEADER_RSA_EXTRA_INTERNAL_H
-
-#include <openssl/base.h>
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-int RSA_padding_check_PKCS1_OAEP_mgf1(uint8_t *out, size_t *out_len,
-                                      size_t max_out, const uint8_t *from,
-                                      size_t from_len, const uint8_t *param,
-                                      size_t param_len, const EVP_MD *md,
-                                      const EVP_MD *mgf1md);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_RSA_EXTRA_INTERNAL_H

data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_extra.cc

@@ -1,17 +0,0 @@
-/* Copyright 2024 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include <openssl/rsa.h>
-
-void RSA_blinding_off(RSA *rsa) {}

data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/rsa_print.cc

@@ -1,22 +0,0 @@
-/*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
- *
- * Licensed under the OpenSSL license (the "License").  You may not use
- * this file except in compliance with the License.  You can obtain a copy
- * in the file LICENSE in the source distribution or at
- * https://www.openssl.org/source/license.html
- */
-
-#include <openssl/rsa.h>
-
-#include <openssl/evp.h>
-
-
-int RSA_print(BIO *bio, const RSA *rsa, int indent) {
-  EVP_PKEY *pkey = EVP_PKEY_new();
-  int ret = pkey != NULL &&
-            EVP_PKEY_set1_RSA(pkey, (RSA *)rsa) &&
-            EVP_PKEY_print_private(bio, pkey, indent, NULL);
-  EVP_PKEY_free(pkey);
-  return ret;
-}

data/third_party/boringssl-with-bazel/src/crypto/slhdsa/fors.h

@@ -1,58 +0,0 @@
-/* Copyright 2024 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SLHDSA_FORS_H
-#define OPENSSL_HEADER_CRYPTO_SLHDSA_FORS_H
-
-#include "./params.h"
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// Implements Algorithm 14: fors_skGen function (page 29)
-void slhdsa_fors_sk_gen(uint8_t fors_sk[SLHDSA_SHA2_128S_N], uint32_t idx,
-                        const uint8_t sk_seed[SLHDSA_SHA2_128S_N],
-                        const uint8_t pk_seed[SLHDSA_SHA2_128S_N],
-                        uint8_t addr[32]);
-
-// Implements Algorithm 15: fors_node function (page 30)
-void slhdsa_fors_treehash(uint8_t root_node[SLHDSA_SHA2_128S_N],
-                          const uint8_t sk_seed[SLHDSA_SHA2_128S_N],
-                          uint32_t i /*target node index*/,
-                          uint32_t z /*target node height*/,
-                          const uint8_t pk_seed[SLHDSA_SHA2_128S_N],
-                          uint8_t addr[32]);
-
-// Implements Algorithm 16: fors_sign function (page 31)
-void slhdsa_fors_sign(uint8_t fors_sig[SLHDSA_SHA2_128S_FORS_BYTES],
-                      const uint8_t message[SLHDSA_SHA2_128S_FORS_MSG_BYTES],
-                      const uint8_t sk_seed[SLHDSA_SHA2_128S_N],
-                      const uint8_t pk_seed[SLHDSA_SHA2_128S_N],
-                      uint8_t addr[32]);
-
-// Implements Algorithm 17: fors_pkFromSig function (page 32)
-void slhdsa_fors_pk_from_sig(
-    uint8_t fors_pk[SLHDSA_SHA2_128S_N],
-    const uint8_t fors_sig[SLHDSA_SHA2_128S_FORS_BYTES],
-    const uint8_t message[SLHDSA_SHA2_128S_FORS_MSG_BYTES],
-    const uint8_t pk_seed[SLHDSA_SHA2_128S_N], uint8_t addr[32]);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_SLHDSA_FORS_H

data/third_party/boringssl-with-bazel/src/crypto/slhdsa/internal.h

@@ -1,63 +0,0 @@
-/* Copyright 2024 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SLHDSA_INTERNAL_H
-#define OPENSSL_HEADER_CRYPTO_SLHDSA_INTERNAL_H
-
-#include <openssl/slhdsa.h>
-
-#include "params.h"
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// SLHDSA_SHA2_128S_generate_key_from_seed generates an SLH-DSA-SHA2-128s key
-// pair from a 48-byte seed and writes the result to |out_public_key| and
-// |out_secret_key|.
-OPENSSL_EXPORT void SLHDSA_SHA2_128S_generate_key_from_seed(
-    uint8_t out_public_key[SLHDSA_SHA2_128S_PUBLIC_KEY_BYTES],
-    uint8_t out_secret_key[SLHDSA_SHA2_128S_PRIVATE_KEY_BYTES],
-    const uint8_t seed[3 * SLHDSA_SHA2_128S_N]);
-
-// SLHDSA_SHA2_128S_sign_internal acts like |SLHDSA_SHA2_128S_sign| but
-// accepts an explicit entropy input, which can be PK.seed (bytes 32..48 of
-// the private key) to generate deterministic signatures. It also takes the
-// input message in three parts so that the "internal" version of the signing
-// function, from section 9.2, can be implemented. The |header| argument may be
-// NULL to omit it.
-OPENSSL_EXPORT void SLHDSA_SHA2_128S_sign_internal(
-    uint8_t out_signature[SLHDSA_SHA2_128S_SIGNATURE_BYTES],
-    const uint8_t secret_key[SLHDSA_SHA2_128S_PRIVATE_KEY_BYTES],
-    const uint8_t header[SLHDSA_M_PRIME_HEADER_LEN], const uint8_t *context,
-    size_t context_len, const uint8_t *msg, size_t msg_len,
-    const uint8_t entropy[SLHDSA_SHA2_128S_N]);
-
-// SLHDSA_SHA2_128S_verify_internal acts like |SLHDSA_SHA2_128S_verify| but
-// takes the input message in three parts so that the "internal" version of the
-// verification function, from section 9.3, can be implemented. The |header|
-// argument may be NULL to omit it.
-OPENSSL_EXPORT int SLHDSA_SHA2_128S_verify_internal(
-    const uint8_t *signature, size_t signature_len,
-    const uint8_t public_key[SLHDSA_SHA2_128S_PUBLIC_KEY_BYTES],
-    const uint8_t header[SLHDSA_M_PRIME_HEADER_LEN], const uint8_t *context,
-    size_t context_len, const uint8_t *msg, size_t msg_len);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_SLHDSA_INTERNAL_H

data/third_party/boringssl-with-bazel/src/crypto/slhdsa/merkle.h

@@ -1,70 +0,0 @@
-/* Copyright 2024 The BoringSSL Authors
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#ifndef OPENSSL_HEADER_CRYPTO_SLHDSA_MERKLE_H
-#define OPENSSL_HEADER_CRYPTO_SLHDSA_MERKLE_H
-
-#include <openssl/base.h>
-
-#include <sys/types.h>
-
-#include "./params.h"
-
-#if defined(__cplusplus)
-extern "C" {
-#endif
-
-
-// Implements Algorithm 9: xmss_node function (page 23)
-void slhdsa_treehash(uint8_t out_pk[SLHDSA_SHA2_128S_N],
-                     const uint8_t sk_seed[SLHDSA_SHA2_128S_N],
-                     uint32_t i /*target node index*/,
-                     uint32_t z /*target node height*/,
-                     const uint8_t pk_seed[SLHDSA_SHA2_128S_N],
-                     uint8_t addr[32]);
-
-// Implements Algorithm 10: xmss_sign function (page 24)
-void slhdsa_xmss_sign(uint8_t sig[SLHDSA_SHA2_128S_XMSS_BYTES],
-                      const uint8_t msg[SLHDSA_SHA2_128S_N], unsigned int idx,
-                      const uint8_t sk_seed[SLHDSA_SHA2_128S_N],
-                      const uint8_t pk_seed[SLHDSA_SHA2_128S_N],
-                      uint8_t addr[32]);
-
-// Implements Algorithm 11: xmss_pkFromSig function (page 25)
-void slhdsa_xmss_pk_from_sig(
-    uint8_t root[SLHDSA_SHA2_128S_N],
-    const uint8_t xmss_sig[SLHDSA_SHA2_128S_XMSS_BYTES], unsigned int idx,
-    const uint8_t msg[SLHDSA_SHA2_128S_N],
-    const uint8_t pk_seed[SLHDSA_SHA2_128S_N], uint8_t addr[32]);
-
-// Implements Algorithm 12: ht_sign function (page 27)
-void slhdsa_ht_sign(
-    uint8_t sig[SLHDSA_SHA2_128S_D * SLHDSA_SHA2_128S_XMSS_BYTES],
-    const uint8_t message[SLHDSA_SHA2_128S_N], uint64_t idx_tree,
-    uint32_t idx_leaf, const uint8_t sk_seed[SLHDSA_SHA2_128S_N],
-    const uint8_t pk_seed[SLHDSA_SHA2_128S_N]);
-
-// Implements Algorithm 13: ht_verify function (page 28)
-int slhdsa_ht_verify(
-    const uint8_t sig[SLHDSA_SHA2_128S_D * SLHDSA_SHA2_128S_XMSS_BYTES],
-    const uint8_t message[SLHDSA_SHA2_128S_N], uint64_t idx_tree,
-    uint32_t idx_leaf, const uint8_t pk_root[SLHDSA_SHA2_128S_N],
-    const uint8_t pk_seed[SLHDSA_SHA2_128S_N]);
-
-
-#if defined(__cplusplus)
-}  // extern C
-#endif
-
-#endif  // OPENSSL_HEADER_CRYPTO_SLHDSA_MERKLE_H