kpqc 0.1.0 → 0.2.0

data/vendor/SMAUG-T/src/indcpa.c

@@ -19,7 +19,7 @@
  *              - uint8_t *seed: pointer to input seed (of length
  * SMAUGT_DELTA_BYTES)
  *
- * Specification: Implements Algorithm 5, ExpandR.
+ * Specification: Implements @[KS X 123456, Algorithm 5, ExpandR]
  **************************************************/
 void expand_r(polyvec *r, const uint8_t *seed) {
     unsigned int i;
@@ -49,7 +49,7 @@ void expand_r(polyvec *r, const uint8_t *seed) {
  *              private key
  *              - uint8_t seed[SMAUGT_CRYPTO_BYTES]: pointer to input seed
  *
- * Specification: Implements Algorithm 25, SMAUGT-T.PKE.KeyGen.
+ * Specification: Implements @[KS X 123456, Algorithm 25, SMAUGT-T.PKE.KeyGen]
  **************************************************/
 void indcpa_keypair(uint8_t pk[SMAUGT_PUBLICKEY_BYTES],
                     uint8_t sk[SMAUGT_PKE_SECRETKEY_BYTES],
@@ -94,7 +94,7 @@ void indcpa_keypair(uint8_t pk[SMAUGT_PUBLICKEY_BYTES],
  *              message
  *              - const uint8_t seed[SMAUGT_DELTA_BYTES]: pointer to input seed
  *
- * Specification: Implements Algorithm 26, SMAUGT-T.PKE.Enc.
+ * Specification: Implements @[KS X 123456, Algorithm 26, SMAUGT-T.PKE.Enc]
  **************************************************/
 void indcpa_enc(uint8_t ctxt[SMAUGT_CIPHERTEXT_BYTES],
                 const uint8_t pk[SMAUGT_PUBLICKEY_BYTES],
@@ -110,7 +110,7 @@ void indcpa_enc(uint8_t ctxt[SMAUGT_CIPHERTEXT_BYTES],
     memset(&r, 0, sizeof(polyvec));
 
     if (seed == NULL)
-        { if (randombytes(seed_r, SMAUGT_DELTA_BYTES) != 0) return; }
+        randombytes(seed_r, SMAUGT_DELTA_BYTES);
     else
         cmov(seed_r, seed, SMAUGT_DELTA_BYTES, 1);
     expand_r(&r, seed_r);
@@ -139,7 +139,7 @@ void indcpa_enc(uint8_t ctxt[SMAUGT_CIPHERTEXT_BYTES],
  *              - const uint8_t ctxt[SMAUGT_CIPHERTEXT_BYTES]: pointer to input
  *              ciphertext
  *
- * Specification: Implements Algorithm 28, SMAUGT-T.PKE.Dec.
+ * Specification: Implements @[KS X 123456, Algorithm 28, SMAUGT-T.PKE.Dec]
  **************************************************/
 void indcpa_dec(uint8_t mu[SMAUGT_MSG_BYTES],
                 const uint8_t sk[SMAUGT_PKE_SECRETKEY_BYTES],

data/vendor/SMAUG-T/src/kem.c

@@ -1,4 +1,3 @@
-/* kpqc-py: propagate OS entropy failures (2026-09-06). */
 // SPDX-License-Identifier: MIT
 
 #include "api.h"
@@ -25,7 +24,8 @@
  *
  * Return: 0 on success, 1 on failure
  *
- * Specification: Implements Algorithm 33, SMAUG-T.KEM.EncapInternal.
+ * Specification: Implements @[KS X 123456, Algorithm 33,
+ * SMAUG-T.KEM.EncapInternal]
  **************************************************/
 int crypto_kem_keypair_internal(uint8_t *pk, uint8_t *sk,
                                 uint8_t d[SMAUGT_T_BYTES],
@@ -51,7 +51,7 @@ int crypto_kem_keypair_internal(uint8_t *pk, uint8_t *sk,
  *
  * Return: 0 on success, 1 on failure
  *
- * Specification: Implements Algorithm 30, SMAUG-T.KEM.KeyGen.
+ * Specification: Implements @[KS X 123456, Algorithm 30, SMAUG-T.KEM.KeyGen]
  **************************************************/
 int crypto_kem_keypair(uint8_t *pk, uint8_t *sk) {
     int ret = 0;
@@ -81,7 +81,8 @@ int crypto_kem_keypair(uint8_t *pk, uint8_t *sk) {
  *
  * Return: 0 on success, 1 on failure
  *
- * Specification: Implements Algorithm 34, SMAUG-T.KEM.EncapInternal.
+ * Specification: Implements @[KS X 123456, Algorithm 34,
+ * SMAUG-T.KEM.EncapInternal]
  **************************************************/
 int crypto_kem_enc_internal(uint8_t *ctxt, uint8_t *ss, const uint8_t *pk,
                             const uint8_t *mu) {
@@ -111,7 +112,7 @@ int crypto_kem_enc_internal(uint8_t *ctxt, uint8_t *ss, const uint8_t *pk,
  *
  * Return: 0 on success, 1 on failure
  *
- * Specification: Implements Algorithm 31, SMAUG-T.KEM.Encap.
+ * Specification: Implements @[KS X 123456, Algorithm 31, SMAUG-T.KEM.Encap]
  **************************************************/
 int crypto_kem_enc(uint8_t *ctxt, uint8_t *ss, const uint8_t *pk) {
     int ret = 0;
@@ -136,7 +137,8 @@ int crypto_kem_enc(uint8_t *ctxt, uint8_t *ss, const uint8_t *pk) {
  *
  * Return: 0 on success, 1 on failure
  *
- * Specification: Implements Algorithm 35, SMAUG-T.KEM.DecapInternal.
+ * Specification: Implements @[KS X 123456, Algorithm 35,
+ * SMAUG-T.KEM.DecapInternal]
  **************************************************/
 int crypto_kem_dec_internal(uint8_t *ss, const uint8_t *ctxt,
                             const uint8_t *sk) {
@@ -185,7 +187,7 @@ int crypto_kem_dec_internal(uint8_t *ss, const uint8_t *ctxt,
  *
  * Return: 0 on success, 1 on failure
  *
- * Specification: Implements Algorithm 32, SMAUG-T.KEM.Decap.
+ * Specification: Implements @[KS X 123456, Algorithm 32, SMAUG-T.KEM.Decap]
  **************************************************/
 int crypto_kem_dec(uint8_t *ss, const uint8_t *ctxt, const uint8_t *sk) {
     int ret = 0;

data/vendor/SMAUG-T/src/key.c

@@ -18,7 +18,7 @@
  * Arguments:   - polyvec A[SMAUGT_K]: pointer to output matrix A
  *              - const uint8_t seed[SMAUGT_PKSEED_BYTES]: pointer to input seed
  *
- * Specification: Implements Algorithm 1, ExpandA.
+ * Specification: Implements @[KS X 123456, Algorithm 1, ExpandA]
  **************************************************/
 void expand_A(polyvec A[SMAUGT_K], const uint8_t seed[SMAUGT_PKSEED_BYTES]) {
     unsigned int i, j;
@@ -65,7 +65,7 @@ void expand_b(polyvec *b, const polyvec A[SMAUGT_K], const polyvec *s,
  *              - const uint8_t seed[SMAUGT_CRYPTO_BYTES]: pointer to input seed
  *              of s(x)
  *
- * Specification: Implements Algorithm 2, ExpandS.
+ * Specification: Implements @[KS X 123456, Algorithm 2, ExpandS]
  **************************************************/
 void expand_s(secret_key *sk, const uint8_t seed[SMAUGT_CRYPTO_BYTES]) {
     unsigned int i, j;

data/vendor/SMAUG-T/src/pack.c

@@ -13,7 +13,7 @@
  * Arguments:   - uint8_t *output: pointer to output byte array
  *              - const public_key *pk: pointer to input public key
  *
- * Specification: Implements Algorithm 14, PackEncK.
+ * Specification: Implements @[KS X 123456, Algorithm 14, PackEncK]
  **************************************************/
 void pack_enck(uint8_t *output, const public_key *pk) {
     memcpy(output, pk->seed, sizeof(uint8_t) * SMAUGT_PKSEED_BYTES);
@@ -28,7 +28,7 @@ void pack_enck(uint8_t *output, const public_key *pk) {
  * Arguments:   - public_key *pk: pointer to output public key
  *              - const uint8_t *input: pointer to input byte array
  *
- * Specification: Implements Algorithm 15, UnpackEncK.
+ * Specification: Implements @[KS X 123456, Algorithm 15, UnpackEncK]
  **************************************************/
 void unpack_enck(public_key *pk, const uint8_t *input) {
     memcpy(pk->seed, input, SMAUGT_PKSEED_BYTES);
@@ -44,7 +44,7 @@ void unpack_enck(public_key *pk, const uint8_t *input) {
  * Arguments:   - uint8_t *output: pointer to output byte array
  *              - const secret_key *sk: pointer to input private key
  *
- * Specification: Implements Algorithm 16, PackDecK.
+ * Specification: Implements @[KS X 123456, Algorithm 16, PackDecK]
  **************************************************/
 void pack_deck(uint8_t *output, const secret_key *sk) {
     for (size_t i = 0; i < SMAUGT_K; ++i)
@@ -59,7 +59,7 @@ void pack_deck(uint8_t *output, const secret_key *sk) {
  * Arguments:   - secret_key *sk: pointer to output private key
  *              - const uint8_t *input: pointer to input byte array
  *
- * Specification: Implements Algorithm 17, UnpackDecK.
+ * Specification: Implements @[KS X 123456, Algorithm 17, UnpackDecK]
  **************************************************/
 void unpack_deck(secret_key *sk, const uint8_t *input) {
     for (size_t i = 0; i < SMAUGT_K; ++i)
@@ -74,7 +74,7 @@ void unpack_deck(secret_key *sk, const uint8_t *input) {
  * Arguments:   - uint8_t *bytes: pointer to output bytes
  *              - const poly *s: pointer to input poly in Sn
  *
- * Specification: Implements Algorithm 18, PackSPoly.
+ * Specification: Implements @[KS X 123456, Algorithm 18, PackSPoly]
  **************************************************/
 void pack_s_poly(uint8_t *bytes, const poly *s) {
     unsigned int i;
@@ -96,7 +96,7 @@ void pack_s_poly(uint8_t *bytes, const poly *s) {
  * Arguments:   - poly *s: pointer to output poly in Sn
  *              - const uint8_t *bytes: pointer to input bytes
  *
- * Specification: Implements Algorithm 19, UnpackSPoly.
+ * Specification: Implements @[KS X 123456, Algorithm 19, UnpackSPoly]
  **************************************************/
 void unpack_s_poly(poly *s, const uint8_t *bytes) {
     unsigned int i;
@@ -123,7 +123,7 @@ void unpack_s_poly(poly *s, const uint8_t *bytes) {
  * Arguments:   - uint8_t *output: pointer to output byte array
  *              - const ciphertext *ctxt: pointer to input ciphertext
  *
- * Specification: Implements Algorithm 20, PackCT.
+ * Specification: Implements @[KS X 123456, Algorithm 20, PackCT]
  * **************************************************/
 void pack_ct(uint8_t *output, const ciphertext *ctxt) {
     pack_ring_p_vec(output, &(ctxt->c1));
@@ -138,7 +138,7 @@ void pack_ct(uint8_t *output, const ciphertext *ctxt) {
  * Arguments:   - ciphertext *ctxt: pointer to output ciphertext
  *              - const uint8_t *input: pointer to input byte array
  *
- * Specification: Implements Algorithm 21, UnpackCT.
+ * Specification: Implements @[KS X 123456, Algorithm 21, UnpackCT]
  **************************************************/
 void unpack_ct(ciphertext *ctxt, const uint8_t *input) {
     unpack_ring_p_vec(&(ctxt->c1), input);

metadata

@@ -1,43 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kpqc
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - osuolfou
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-09-09 00:00:00.000000000 Z
-dependencies:
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '12.3'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '12.3'
-- !ruby/object:Gem::Dependency
-  name: minitest
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '5.10'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '5.10'
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
 description: Synchronous Ruby bindings for the bundled AIMer and HAETAE signature
   schemes and NTRU+ and SMAUG-T key-encapsulation mechanisms.
 email:
@@ -62,6 +33,7 @@ extensions:
 - ext/kpqc/timer/extconf.rb
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - Gemfile
 - LICENSE
 - README.md
@@ -82,6 +54,7 @@ files:
 - ext/kpqc/ntruplus768/extconf.rb
 - ext/kpqc/ntruplus864/extconf.rb
 - ext/kpqc/randombytes.c
+- ext/kpqc/secure_clear.c
 - ext/kpqc/smaugt128/extconf.rb
 - ext/kpqc/smaugt192/extconf.rb
 - ext/kpqc/smaugt256/extconf.rb
@@ -119,9 +92,8 @@ files:
 - test/kat_test.rb
 - test/test_helper.rb
 - vendor/AIMer/LICENSE
-- vendor/AIMer/aim2.c
-- vendor/AIMer/aim2.h
-- vendor/AIMer/aim2_constant.h
+- vendor/AIMer/aim3.c
+- vendor/AIMer/aim3.h
 - vendor/AIMer/api.h
 - vendor/AIMer/common/crypto_declassify.h
 - vendor/AIMer/common/fips202.c
@@ -131,6 +103,8 @@ files:
 - vendor/AIMer/field128.c
 - vendor/AIMer/field192.c
 - vendor/AIMer/field256.c
+- vendor/AIMer/field_common.c
+- vendor/AIMer/field_internal.h
 - vendor/AIMer/hash.c
 - vendor/AIMer/hash.h
 - vendor/AIMer/params.h
@@ -193,6 +167,7 @@ files:
 - vendor/NTRUplus/NTRU+1152/randombytes.h
 - vendor/NTRUplus/NTRU+1152/symmetric.c
 - vendor/NTRUplus/NTRU+1152/symmetric.h
+- vendor/NTRUplus/NTRU+1152/util.h
 - vendor/NTRUplus/NTRU+768/api.h
 - vendor/NTRUplus/NTRU+768/fips202/fips202.c
 - vendor/NTRUplus/NTRU+768/fips202/fips202.h
@@ -205,6 +180,7 @@ files:
 - vendor/NTRUplus/NTRU+768/randombytes.h
 - vendor/NTRUplus/NTRU+768/symmetric.c
 - vendor/NTRUplus/NTRU+768/symmetric.h
+- vendor/NTRUplus/NTRU+768/util.h
 - vendor/NTRUplus/NTRU+864/api.h
 - vendor/NTRUplus/NTRU+864/fips202/fips202.c
 - vendor/NTRUplus/NTRU+864/fips202/fips202.h
@@ -217,6 +193,7 @@ files:
 - vendor/NTRUplus/NTRU+864/randombytes.h
 - vendor/NTRUplus/NTRU+864/symmetric.c
 - vendor/NTRUplus/NTRU+864/symmetric.h
+- vendor/NTRUplus/NTRU+864/util.h
 - vendor/SMAUG-T/LICENSE
 - vendor/SMAUG-T/include/api.h
 - vendor/SMAUG-T/include/cbd.h
@@ -250,15 +227,14 @@ files:
 - vendor/SMAUG-T/src/poly.c
 - vendor/SMAUG-T/src/toomcook.c
 - vendor/SMAUG-T/src/verify.c
-- vendor/SOURCES.json
-homepage: https://github.com/osuolfou/kpqc-rb
+homepage: https://github.com/KpqC/kpqc-ruby
 licenses:
 - MIT
 metadata:
-  source_code_uri: https://github.com/osuolfou/kpqc-rb
-  bug_tracker_uri: https://github.com/osuolfou/kpqc-rb/issues
+  source_code_uri: https://github.com/KpqC/kpqc-ruby
+  bug_tracker_uri: https://github.com/KpqC/kpqc-ruby/issues
+  changelog_uri: https://github.com/KpqC/kpqc-ruby/blob/main/CHANGELOG.md
   rubygems_mfa_required: 'true'
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -273,8 +249,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3.1
-signing_key: 
+rubygems_version: 4.0.20
 specification_version: 4
 summary: Ruby APIs for AIMer, HAETAE, NTRU+, and SMAUG-T.
 test_files: []

data/vendor/AIMer/aim2.c

@@ -1,163 +0,0 @@
-// SPDX-License-Identifier: MIT
-
-#include "aim2.h"
-#include "field.h"
-#include "hash.h"
-#include "params.h"
-#include <stddef.h>
-#include <stdint.h>
-
-static void generate_matrices_L_and_U(
-  gf matrix_L[AIM2_NUM_INPUT_SBOX][AIM2_NUM_BITS_FIELD],
-  gf matrix_U[AIM2_NUM_INPUT_SBOX][AIM2_NUM_BITS_FIELD],
-  gf vector_b,
-  const uint8_t iv[AIM2_IV_SIZE])
-{
-  uint8_t buf[AIM2_NUM_BYTES_FIELD];
-  uint64_t ormask, lmask, umask;
-  hash_instance ctx;
-  gf temp = {0,};
-
-  // initialize hash
-  hash_init(&ctx);
-  hash_update(&ctx, iv, AIM2_IV_SIZE);
-  hash_final(&ctx);
-
-  for (size_t ell = 0; ell < AIM2_NUM_INPUT_SBOX; ell++)
-  {
-    for (size_t row = 0; row < AIM2_NUM_BITS_FIELD; row++)
-    {
-      hash_squeeze(&ctx, buf, AIM2_NUM_BYTES_FIELD);
-      gf_from_bytes(temp, buf);
-
-      ormask = ((uint64_t)1) << (row % 64);
-      lmask = ((uint64_t)-1) << (row % 64);
-      umask = ~lmask;
-
-      size_t inter = row / 64;
-      size_t col_word;
-      for (col_word = 0; col_word < inter; col_word++)
-      {
-        // L is zero, U is full
-        matrix_L[ell][row][col_word] = 0;
-        matrix_U[ell][row][col_word] = temp[col_word];
-      }
-      matrix_L[ell][row][inter] = (temp[inter] & lmask) | ormask;
-      matrix_U[ell][row][inter] = (temp[inter] & umask) | ormask;
-      for (col_word = inter + 1; col_word < AIM2_NUM_WORDS_FIELD; col_word++)
-      {
-        // L is full, U is zero
-        matrix_L[ell][row][col_word] = temp[col_word];
-        matrix_U[ell][row][col_word] = 0;
-      }
-    }
-  }
-
-  hash_squeeze(&ctx, (uint8_t *)vector_b, AIM2_NUM_BYTES_FIELD);
-  hash_ctx_release(&ctx);
-}
-
-void aim2_generate_linear(gf matrix_A[AIM2_NUM_INPUT_SBOX][AIM2_NUM_BITS_FIELD],
-                          gf vector_b,
-                          const uint8_t iv[AIM2_IV_SIZE])
-{
-  gf matrix_L[AIM2_NUM_INPUT_SBOX][AIM2_NUM_BITS_FIELD];
-  gf matrix_U[AIM2_NUM_INPUT_SBOX][AIM2_NUM_BITS_FIELD];
-
-  generate_matrices_L_and_U(matrix_L, matrix_U, vector_b, iv);
-
-  for (size_t ell = 0; ell < AIM2_NUM_INPUT_SBOX; ell++)
-  {
-    for (size_t i = 0; i < AIM2_NUM_BITS_FIELD; i++)
-    {
-      gf_mat_vec_mul(matrix_A[ell][i], matrix_U[ell][i],
-                     (const gf *)matrix_L[ell]);
-    }
-  }
-}
-
-void aim2(uint8_t ct[AIM2_NUM_BYTES_FIELD],
-          const uint8_t pt[AIM2_NUM_BYTES_FIELD],
-          const uint8_t iv[AIM2_IV_SIZE])
-{
-  gf matrix_L[AIM2_NUM_INPUT_SBOX][AIM2_NUM_BITS_FIELD];
-  gf matrix_U[AIM2_NUM_INPUT_SBOX][AIM2_NUM_BITS_FIELD];
-  gf vector_b = {0,};
-
-  gf state[AIM2_NUM_INPUT_SBOX];
-  gf pt_gf = {0,}, ct_gf = {0,};
-  gf_from_bytes(pt_gf, pt);
-
-  // generate random matrix
-  generate_matrices_L_and_U(matrix_L, matrix_U, vector_b, iv);
-
-  for (size_t i = 0; i < AIMER_L; i++)
-  {
-    // linear component: constant addition
-    gf_add(state[i], pt_gf, aim2_constants[i]);
-
-    // non-linear component: inverse Mersenne S-box
-    gf_exp(state[i], state[i], aim2_sbox_exponents[i]);
-
-    // linear component: affine layer
-    gf_mat_vec_mul(state[i], state[i], (const gf *)matrix_U[i]);
-    gf_mat_vec_mul(state[i], state[i], (const gf *)matrix_L[i]);
-  }
-
-  for (size_t i = 1; i < AIMER_L; i++)
-  {
-    gf_add(state[0], state[0], state[i]);
-  }
-  gf_add(state[0], state[0], vector_b);
-
-  // non-linear component: Mersenne S-box
-  gf_exp(state[0], state[0], aim2_sbox_exponents[AIMER_L]);
-
-  // linear component: feed-forward
-  gf_add(ct_gf, state[0], pt_gf);
-
-  gf_to_bytes(ct, ct_gf);
-}
-
-void aim2_sbox_outputs(gf sbox_outputs[AIM2_NUM_INPUT_SBOX], const gf pt)
-{
-  for (size_t i = 0; i < AIMER_L; i ++)
-  {
-    // linear component: constant addition
-    gf_add(sbox_outputs[i], pt, aim2_constants[i]);
-
-    // non-linear component: inverse Mersenne S-box
-    gf_exp(sbox_outputs[i], sbox_outputs[i], aim2_sbox_exponents[i]);
-  }
-}
-
-void aim2_mpc(mult_chk_t *mult_chk,
-              const gf matrix_A[AIMER_L][AIM2_NUM_BITS_FIELD],
-              const gf ct_gf)
-{
-  // pt + c = t ^ {2 ^ e - 1}
-  // --> t ^ {2 ^ e} + t * c = t * pt
-  // --> z = x * pt
-  for (size_t ell = 0; ell < AIMER_L; ell++)
-  {
-    gf_sqr(mult_chk->z_shares[ell], mult_chk->x_shares[ell]);
-    for (size_t i = 1; i < aim2_exponents[ell]; i++)
-    {
-      gf_sqr(mult_chk->z_shares[ell], mult_chk->z_shares[ell]);
-    }
-    gf_mul_add(mult_chk->z_shares[ell], mult_chk->x_shares[ell],
-               aim2_constants[ell]);
-    gf_mat_vec_mul_add(mult_chk->x_shares[AIMER_L],
-                       mult_chk->x_shares[ell], matrix_A[ell]);
-  }
-
-  // x ^ {2 ^ e - 1} = pt + ct
-  // --> x ^ {2 ^ e} + x * ct = x * pt
-  // --> z = x * pt
-  gf_sqr(mult_chk->z_shares[AIMER_L], mult_chk->x_shares[AIMER_L]);
-  for (size_t i = 1; i < aim2_exponents[AIMER_L]; i++)
-  {
-    gf_sqr(mult_chk->z_shares[AIMER_L], mult_chk->z_shares[AIMER_L]);
-  }
-  gf_mul_add(mult_chk->z_shares[AIMER_L], mult_chk->x_shares[AIMER_L], ct_gf);
-}

data/vendor/AIMer/aim2.h

@@ -1,36 +0,0 @@
-// SPDX-License-Identifier: MIT
-
-#ifndef AIM2_H
-#define AIM2_H
-
-#include "aim2_constant.h"
-#include "field.h"
-#include "params.h"
-#include <stdint.h>
-
-typedef struct mult_chk_t
-{
-  gf pt_share;
-  gf x_shares[AIMER_L + 1];
-  gf z_shares[AIMER_L + 1];
-} mult_chk_t;
-
-#define aim2_generate_linear AIMER_NAMESPACE(aim2_generate_linear)
-void aim2_generate_linear(gf matrix_A[AIM2_NUM_INPUT_SBOX][AIM2_NUM_BITS_FIELD],
-                          gf vector_b,
-                          const uint8_t iv[AIM2_IV_SIZE]);
-
-#define aim2_sbox_outputs AIMER_NAMESPACE(aim2_sbox_outputs)
-void aim2_sbox_outputs(gf sbox_outputs[AIM2_NUM_INPUT_SBOX], const gf pt);
-
-#define aim2 AIMER_NAMESPACE(aim2)
-void aim2(uint8_t ct[AIM2_NUM_BYTES_FIELD],
-          const uint8_t pt[AIM2_NUM_BYTES_FIELD],
-          const uint8_t iv[AIM2_IV_SIZE]);
-
-#define aim2_mpc AIMER_NAMESPACE(aim2_mpc)
-void aim2_mpc(mult_chk_t *mult_chk,
-              const gf matrix_A[AIMER_L][AIM2_NUM_BITS_FIELD],
-              const gf ct_gf);
-
-#endif // AIM2_H

data/vendor/AIMer/aim2_constant.h

@@ -1,74 +0,0 @@
-// SPDX-License-Identifier: MIT
-
-#ifndef AIM2_CONSTANT_H
-#define AIM2_CONSTANT_H
-
-#include "field.h"
-#include "params.h"
-#include <stdint.h>
-
-#if SECURITY_BITS == 128
-static const gf aim2_constants[AIM2_NUM_INPUT_SBOX] =
-{
-  {0x13198a2e03707344, 0x243f6a8885a308d3},
-  {0x082efa98ec4e6c89, 0xa4093822299f31d0},
-};
-
-static const uint64_t
-aim2_sbox_exponents[AIM2_NUM_INPUT_SBOX + 1][AIM2_NUM_WORDS_FIELD] =
-{
-  {0x6b6b6d6dadadb5b5, 0xb6b6d6d6dadb5b5b},
-  {0x6d6db6d6db6b6db5, 0xb6db5b6dadb6dadb},
-  {7, 0}
-};
-
-static const size_t aim2_exponents[AIM2_NUM_INPUT_SBOX + 1] =
-{
-  49, 91, 3
-};
-
-#elif SECURITY_BITS == 192
-static const gf aim2_constants[AIM2_NUM_INPUT_SBOX] =
-{
-  {0xc0ac29b7c97c50dd, 0xbe5466cf34e90c6c, 0x452821e638d01377},
-  {0xd1310ba698dfb5ac, 0x9216d5d98979fb1b, 0x3f84d5b5b5470917}
-};
-
-static const uint64_t
-aim2_sbox_exponents[AIM2_NUM_INPUT_SBOX + 1][AIM2_NUM_WORDS_FIELD] =
-{
-  {0xd6ad6b56b5ab5ad5, 0x6ad6b56b5ab5ad5a, 0xad6b56b5ab5ad5ad},
-  {0x7776eeeeeeeeeeed, 0xbbbbbbbb77777777, 0xddddddddddddbbbb},
-  {31, 0, 0}
-};
-
-static const size_t aim2_exponents[AIM2_NUM_INPUT_SBOX + 1] =
-{
-  17, 47, 5
-};
-
-#else
-static const gf aim2_constants[AIM2_NUM_INPUT_SBOX] =
-{
-  {0x24a19947b3916cf7,0xba7c9045f12c7f99,0xb8e1afed6a267e96,0x2ffd72dbd01adfb7},
-  {0x0d95748f728eb658,0xa458fea3f4933d7e,0x636920d871574e69,0x0801f2e2858efc16},
-  {0xc5d1b023286085f0,0x9c30d5392af26013,0x7b54a41dc25a59b5,0x718bcd5882154aee}
-};
-
-static const uint64_t
-aim2_sbox_exponents[AIM2_NUM_INPUT_SBOX + 1][AIM2_NUM_WORDS_FIELD] =
-{
-  {0xdadb5b6b6d6dadb5,0x6b6d6dadb5b6b6d6,0xadb5b6b6d6dadb5b,0xb6d6dadb5b6b6d6d},
-  {0x1112224444889111,0x8891112224444889,0x4448889112222444,0x2224448889112222},
-  {0xeddbb76eddbb76ed,0x76eddbb76eddbb76,0xbb76eddbb76eddbb,0xddbb76eddbb76edd},
-  {7, 0, 0, 0}
-};
-
-static const size_t aim2_exponents[AIM2_NUM_INPUT_SBOX + 1] =
-{
-  11, 141, 7, 3
-};
-
-#endif
-
-#endif // AIM2_CONSTANT_H