pq_crypto 0.4.2 → 0.5.1

data/ext/pqcrypto/vendor/pqclean/common/fips202.h

@@ -1,166 +0,0 @@
-#ifndef FIPS202_H
-#define FIPS202_H
-
-#include <stddef.h>
-#include <stdint.h>
-
-#define SHAKE128_RATE 168
-#define SHAKE256_RATE 136
-#define SHA3_256_RATE 136
-#define SHA3_384_RATE 104
-#define SHA3_512_RATE 72
-
-#define PQC_SHAKEINCCTX_BYTES (sizeof(uint64_t)*26)
-#define PQC_SHAKECTX_BYTES (sizeof(uint64_t)*25)
-
-// Context for incremental API
-typedef struct {
-    uint64_t *ctx;
-} shake128incctx;
-
-// Context for non-incremental API
-typedef struct {
-    uint64_t *ctx;
-} shake128ctx;
-
-// Context for incremental API
-typedef struct {
-    uint64_t *ctx;
-} shake256incctx;
-
-// Context for non-incremental API
-typedef struct {
-    uint64_t *ctx;
-} shake256ctx;
-
-// Context for incremental API
-typedef struct {
-    uint64_t *ctx;
-} sha3_256incctx;
-
-// Context for incremental API
-typedef struct {
-    uint64_t *ctx;
-} sha3_384incctx;
-
-// Context for incremental API
-typedef struct {
-    uint64_t *ctx;
-} sha3_512incctx;
-
-/* Initialize the state and absorb the provided input.
- *
- * This function does not support being called multiple times
- * with the same state.
- */
-void shake128_absorb(shake128ctx *state, const uint8_t *input, size_t inlen);
-/* Squeeze output out of the sponge.
- *
- * Supports being called multiple times
- */
-void shake128_squeezeblocks(uint8_t *output, size_t nblocks, shake128ctx *state);
-/* Free the state */
-void shake128_ctx_release(shake128ctx *state);
-/* Copy the state. */
-void shake128_ctx_clone(shake128ctx *dest, const shake128ctx *src);
-
-/* Initialize incremental hashing API */
-void shake128_inc_init(shake128incctx *state);
-/* Absorb more information into the XOF.
- *
- * Can be called multiple times.
- */
-void shake128_inc_absorb(shake128incctx *state, const uint8_t *input, size_t inlen);
-/* Finalize the XOF for squeezing */
-void shake128_inc_finalize(shake128incctx *state);
-/* Squeeze output out of the sponge.
- *
- * Supports being called multiple times
- */
-void shake128_inc_squeeze(uint8_t *output, size_t outlen, shake128incctx *state);
-/* Copy the context of the SHAKE128 XOF */
-void shake128_inc_ctx_clone(shake128incctx *dest, const shake128incctx *src);
-/* Free the context of the SHAKE128 XOF */
-void shake128_inc_ctx_release(shake128incctx *state);
-
-/* Initialize the state and absorb the provided input.
- *
- * This function does not support being called multiple times
- * with the same state.
- */
-void shake256_absorb(shake256ctx *state, const uint8_t *input, size_t inlen);
-/* Squeeze output out of the sponge.
- *
- * Supports being called multiple times
- */
-void shake256_squeezeblocks(uint8_t *output, size_t nblocks, shake256ctx *state);
-/* Free the context held by this XOF */
-void shake256_ctx_release(shake256ctx *state);
-/* Copy the context held by this XOF */
-void shake256_ctx_clone(shake256ctx *dest, const shake256ctx *src);
-
-/* Initialize incremental hashing API */
-void shake256_inc_init(shake256incctx *state);
-void shake256_inc_absorb(shake256incctx *state, const uint8_t *input, size_t inlen);
-/* Prepares for squeeze phase */
-void shake256_inc_finalize(shake256incctx *state);
-/* Squeeze output out of the sponge.
- *
- * Supports being called multiple times
- */
-void shake256_inc_squeeze(uint8_t *output, size_t outlen, shake256incctx *state);
-/* Copy the state */
-void shake256_inc_ctx_clone(shake256incctx *dest, const shake256incctx *src);
-/* Free the state */
-void shake256_inc_ctx_release(shake256incctx *state);
-
-/* One-stop SHAKE128 call */
-void shake128(uint8_t *output, size_t outlen,
-              const uint8_t *input, size_t inlen);
-
-/* One-stop SHAKE256 call */
-void shake256(uint8_t *output, size_t outlen,
-              const uint8_t *input, size_t inlen);
-
-/* Initialize the incremental hashing state */
-void sha3_256_inc_init(sha3_256incctx *state);
-/* Absorb blocks into SHA3 */
-void sha3_256_inc_absorb(sha3_256incctx *state, const uint8_t *input, size_t inlen);
-/* Obtain the output of the function and free `state` */
-void sha3_256_inc_finalize(uint8_t *output, sha3_256incctx *state);
-/* Copy the context */
-void sha3_256_inc_ctx_clone(sha3_256incctx *dest, const sha3_256incctx *src);
-/* Release the state, don't use if `_finalize` has been used */
-void sha3_256_inc_ctx_release(sha3_256incctx *state);
-
-void sha3_256(uint8_t *output, const uint8_t *input, size_t inlen);
-
-/* Initialize the incremental hashing state */
-void sha3_384_inc_init(sha3_384incctx *state);
-/* Absorb blocks into SHA3 */
-void sha3_384_inc_absorb(sha3_384incctx *state, const uint8_t *input, size_t inlen);
-/* Obtain the output of the function and free `state` */
-void sha3_384_inc_finalize(uint8_t *output, sha3_384incctx *state);
-/* Copy the context */
-void sha3_384_inc_ctx_clone(sha3_384incctx *dest, const sha3_384incctx *src);
-/* Release the state, don't use if `_finalize` has been used */
-void sha3_384_inc_ctx_release(sha3_384incctx *state);
-
-/* One-stop SHA3-384 shop */
-void sha3_384(uint8_t *output, const uint8_t *input, size_t inlen);
-
-/* Initialize the incremental hashing state */
-void sha3_512_inc_init(sha3_512incctx *state);
-/* Absorb blocks into SHA3 */
-void sha3_512_inc_absorb(sha3_512incctx *state, const uint8_t *input, size_t inlen);
-/* Obtain the output of the function and free `state` */
-void sha3_512_inc_finalize(uint8_t *output, sha3_512incctx *state);
-/* Copy the context */
-void sha3_512_inc_ctx_clone(sha3_512incctx *dest, const sha3_512incctx *src);
-/* Release the state, don't use if `_finalize` has been used */
-void sha3_512_inc_ctx_release(sha3_512incctx *state);
-
-/* One-stop SHA3-512 shop */
-void sha3_512(uint8_t *output, const uint8_t *input, size_t inlen);
-
-#endif

data/ext/pqcrypto/vendor/pqclean/common/keccak2x/feat.S

@@ -1,168 +0,0 @@
-
-/*
-MIT License
-
-Copyright (c) 2020 Bas Westerbaan
-Copyright (c) 2023: Hanno Becker, Vincent Hwang, Matthias J. Kannwischer, Bo-Yin Yang, and Shang-Yi Yang
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-*/
-
-#if (__APPLE__ && __ARM_FEATURE_CRYPTO) || (__ARM_FEATURE_SHA3)
-
-.macro round
-    // Execute theta, but without xoring into the state yet.
-    // Compute parities p[i] = a[i] ^ a[5+i] ^ ... ^ a[20+i].
-    eor3 v25.16b, v0.16b, v5.16b, v10.16b
-    eor3 v26.16b, v1.16b, v6.16b, v11.16b
-    eor3 v27.16b, v2.16b, v7.16b, v12.16b
-    eor3 v28.16b, v3.16b, v8.16b, v13.16b
-    eor3 v29.16b, v4.16b, v9.16b, v14.16b
-
-    eor3 v25.16b, v25.16b, v15.16b, v20.16b
-    eor3 v26.16b, v26.16b, v16.16b, v21.16b
-    eor3 v27.16b, v27.16b, v17.16b, v22.16b
-    eor3 v28.16b, v28.16b, v18.16b, v23.16b
-    eor3 v29.16b, v29.16b, v19.16b, v24.16b
-
-    rax1 v30.2d, v29.2d, v26.2d // d[0] = rotl(p[1], 1) ^ p[4]
-    rax1 v29.2d, v27.2d, v29.2d // d[3] = rotl(p[4], 1) ^ p[2]
-    rax1 v27.2d, v25.2d, v27.2d // d[1] = rotl(p[2], 1) ^ p[0]
-    rax1 v25.2d, v28.2d, v25.2d // d[4] = rotl(p[0], 1) ^ p[3]
-    rax1 v28.2d, v26.2d, v28.2d // d[2] = rotl(p[3], 1) ^ p[1]
-
-    // Xor parities from step theta into the state at the same time
-    // as executing rho and pi.
-    eor v0.16b, v0.16b, v30.16b
-    mov v31.16b, v1.16b
-    xar v1.2d, v6.2d, v27.2d, 20
-    xar v6.2d, v9.2d, v25.2d, 44
-    xar v9.2d, v22.2d, v28.2d, 3
-    xar v22.2d, v14.2d, v25.2d, 25
-    xar v14.2d, v20.2d, v30.2d, 46
-    xar v20.2d, v2.2d, v28.2d, 2
-    xar v2.2d, v12.2d, v28.2d, 21
-    xar v12.2d, v13.2d, v29.2d, 39
-    xar v13.2d, v19.2d, v25.2d, 56
-    xar v19.2d, v23.2d, v29.2d, 8
-    xar v23.2d, v15.2d, v30.2d, 23
-    xar v15.2d, v4.2d, v25.2d, 37
-    xar v4.2d, v24.2d, v25.2d, 50
-    xar v24.2d, v21.2d, v27.2d, 62
-    xar v21.2d, v8.2d, v29.2d, 9
-    xar v8.2d, v16.2d, v27.2d, 19
-    xar v16.2d, v5.2d, v30.2d, 28
-    xar v5.2d, v3.2d, v29.2d, 36
-    xar v3.2d, v18.2d, v29.2d, 43
-    xar v18.2d, v17.2d, v28.2d, 49
-    xar v17.2d, v11.2d, v27.2d, 54
-    xar v11.2d, v7.2d, v28.2d, 58
-    xar v7.2d, v10.2d, v30.2d, 61
-    xar v10.2d, v31.2d, v27.2d, 63
-
-    // Chi
-    bcax v25.16b, v0.16b, v2.16b, v1.16b
-    bcax v26.16b, v1.16b, v3.16b, v2.16b
-    bcax v2.16b, v2.16b, v4.16b, v3.16b
-    bcax v3.16b, v3.16b, v0.16b, v4.16b
-    bcax v4.16b, v4.16b, v1.16b, v0.16b
-    mov v0.16b, v25.16b
-    mov v1.16b, v26.16b
-
-    bcax v25.16b, v5.16b, v7.16b, v6.16b
-    bcax v26.16b, v6.16b, v8.16b, v7.16b
-    bcax v7.16b, v7.16b, v9.16b, v8.16b
-    bcax v8.16b, v8.16b, v5.16b, v9.16b
-    bcax v9.16b, v9.16b, v6.16b, v5.16b
-    mov v5.16b, v25.16b
-    mov v6.16b, v26.16b
-
-    bcax v25.16b, v10.16b, v12.16b, v11.16b
-    bcax v26.16b, v11.16b, v13.16b, v12.16b
-    bcax v12.16b, v12.16b, v14.16b, v13.16b
-    bcax v13.16b, v13.16b, v10.16b, v14.16b
-    bcax v14.16b, v14.16b, v11.16b, v10.16b
-    mov v10.16b, v25.16b
-    mov v11.16b, v26.16b
-
-    bcax v25.16b, v15.16b, v17.16b, v16.16b
-    bcax v26.16b, v16.16b, v18.16b, v17.16b
-    bcax v17.16b, v17.16b, v19.16b, v18.16b
-    bcax v18.16b, v18.16b, v15.16b, v19.16b
-    bcax v19.16b, v19.16b, v16.16b, v15.16b
-    mov v15.16b, v25.16b
-    mov v16.16b, v26.16b
-
-    bcax v25.16b, v20.16b, v22.16b, v21.16b
-    bcax v26.16b, v21.16b, v23.16b, v22.16b
-    bcax v22.16b, v22.16b, v24.16b, v23.16b
-    bcax v23.16b, v23.16b, v20.16b, v24.16b
-    bcax v24.16b, v24.16b, v21.16b, v20.16b
-    mov v20.16b, v25.16b
-    mov v21.16b, v26.16b
-
-    // iota
-    ld1r {v25.2d}, [x1], #8
-    eor v0.16b, v0.16b, v25.16b
-.endm
-
-.align 4
-.global f1600x2
-.global _f1600x2
-f1600x2:
-_f1600x2:
-    stp d8,  d9,  [sp,#-16]!
-    stp d10, d11, [sp,#-16]!
-    stp d12, d13, [sp,#-16]!
-    stp d14, d15, [sp,#-16]!
-
-    mov x2, x0
-    mov x3, #24
-
-    ld1 {v0.2d, v1.2d, v2.2d, v3.2d},  [x0], #64
-    ld1 {v4.2d, v5.2d, v6.2d, v7.2d},  [x0], #64
-    ld1 {v8.2d, v9.2d, v10.2d, v11.2d}, [x0], #64
-    ld1 {v12.2d, v13.2d, v14.2d, v15.2d}, [x0], #64
-    ld1 {v16.2d, v17.2d, v18.2d, v19.2d}, [x0], #64
-    ld1 {v20.2d, v21.2d, v22.2d, v23.2d}, [x0], #64
-    ld1 {v24.2d}, [x0]
-
-loop:
-    round
-
-    subs x3, x3, #1
-    cbnz x3, loop
-
-    mov x0, x2
-    st1 {v0.2d, v1.2d, v2.2d, v3.2d},  [x0], #64
-    st1 {v4.2d, v5.2d, v6.2d, v7.2d},  [x0], #64
-    st1 {v8.2d, v9.2d, v10.2d, v11.2d}, [x0], #64
-    st1 {v12.2d, v13.2d, v14.2d, v15.2d}, [x0], #64
-    st1 {v16.2d, v17.2d, v18.2d, v19.2d}, [x0], #64
-    st1 {v20.2d, v21.2d, v22.2d, v23.2d}, [x0], #64
-    st1 {v24.2d}, [x0]
-
-    ldp d14, d15, [sp], #16
-    ldp d12, d13, [sp], #16
-    ldp d10, d11, [sp], #16
-    ldp d8,  d9,  [sp], #16
-
-    ret lr
-
-#endif