pq_crypto 0.6.5 → 0.6.7

data/lib/pq_crypto/kem.rb

@@ -14,18 +14,24 @@ module PQCrypto
         keypair_from_seed: :native_ml_kem_512_keypair_from_seed,
         encapsulate: :native_ml_kem_512_encapsulate,
         decapsulate: :native_ml_kem_512_decapsulate,
+        check_public_key: :native_ml_kem_512_check_public_key,
+        check_secret_key: :native_ml_kem_512_check_secret_key,
       }.freeze,
       ml_kem_768: {
         keypair: :native_ml_kem_keypair,
         keypair_from_seed: :native_ml_kem_keypair_from_seed,
         encapsulate: :native_ml_kem_encapsulate,
         decapsulate: :native_ml_kem_decapsulate,
+        check_public_key: :native_ml_kem_check_public_key,
+        check_secret_key: :native_ml_kem_check_secret_key,
       }.freeze,
       ml_kem_1024: {
         keypair: :native_ml_kem_1024_keypair,
         keypair_from_seed: :native_ml_kem_1024_keypair_from_seed,
         encapsulate: :native_ml_kem_1024_encapsulate,
         decapsulate: :native_ml_kem_1024_decapsulate,
+        check_public_key: :native_ml_kem_1024_check_public_key,
+        check_secret_key: :native_ml_kem_1024_check_secret_key,
       }.freeze,
     }.freeze
 
@@ -68,12 +74,18 @@ module PQCrypto
         SecretKey.new(resolve_algorithm!(resolved_algorithm), bytes)
       end
 
-      def secret_key_from_pkcs8_der(der, passphrase: nil)
-        secret_key_from_decoded_pkcs8(*PKCS8.decode_der(der, passphrase: passphrase))
+      def secret_key_from_pkcs8_der(der, passphrase: nil, require_encrypted: false)
+        require_encrypted = Internal.strict_boolean!(require_encrypted, name: "require_encrypted")
+        secret_key_from_decoded_pkcs8(
+          *PKCS8.decode_der(der, passphrase: passphrase, require_encrypted: require_encrypted)
+        )
       end
 
-      def secret_key_from_pkcs8_pem(pem, passphrase: nil)
-        secret_key_from_decoded_pkcs8(*PKCS8.decode_pem(pem, passphrase: passphrase))
+      def secret_key_from_pkcs8_pem(pem, passphrase: nil, require_encrypted: false)
+        require_encrypted = Internal.strict_boolean!(require_encrypted, name: "require_encrypted")
+        secret_key_from_decoded_pkcs8(
+          *PKCS8.decode_pem(pem, passphrase: passphrase, require_encrypted: require_encrypted)
+        )
       end
 
       def public_key_from_spki_der(der, algorithm: nil)
@@ -121,6 +133,10 @@ module PQCrypto
         end
       end
 
+      def checkable?(algorithm)
+        NATIVE_DISPATCH.key?(algorithm) && NATIVE_DISPATCH.fetch(algorithm).key?(:check_public_key)
+      end
+
       def native_method_for(algorithm, operation)
         NATIVE_DISPATCH.fetch(resolve_algorithm!(algorithm)).fetch(operation)
       end
@@ -158,8 +174,19 @@ module PQCrypto
 
       def initialize(algorithm, bytes)
         @algorithm = algorithm
-        @bytes = Internal.binary_string(bytes)
+        @bytes = Internal.frozen_binary_string(bytes)
         validate_length!
+        validate_structure!
+      end
+
+      def valid?
+        if @algorithm == :ml_kem_768_x25519_xwing
+          mlkem_half = @bytes.byteslice(0, KEM.details(:ml_kem_768).fetch(:public_key_bytes))
+          return PQCrypto.__send__(:native_ml_kem_check_public_key, mlkem_half)
+        end
+        return true unless KEM.send(:checkable?, @algorithm)
+
+        PQCrypto.__send__(KEM.send(:native_method_for, @algorithm, :check_public_key), @bytes)
       end
 
       def to_bytes
@@ -219,6 +246,10 @@ module PQCrypto
         expected = KEM.details(@algorithm).fetch(:public_key_bytes)
         raise InvalidKeyError, "Invalid KEM public key length" unless @bytes.bytesize == expected
       end
+
+      def validate_structure!
+        raise InvalidKeyError, "Invalid #{@algorithm} public key: FIPS 203 modulus check failed" unless valid?
+      end
     end
 
     class SecretKey
@@ -230,6 +261,13 @@ module PQCrypto
         @seed = seed.nil? ? nil : Internal.binary_string(seed)
         validate_length!
         validate_seed_length! if @seed
+        validate_structure!
+      end
+
+      def valid?
+        return true unless KEM.send(:checkable?, @algorithm)
+
+        PQCrypto.__send__(KEM.send(:native_method_for, @algorithm, :check_secret_key), @bytes)
       end
 
       def self.from_seed(algorithm, seed)
@@ -298,6 +336,10 @@ module PQCrypto
         raise InvalidKeyError, "Invalid KEM secret key length" unless @bytes.bytesize == expected
       end
 
+      def validate_structure!
+        raise InvalidKeyError, "Invalid #{@algorithm} secret key: FIPS 203 hash check failed" unless valid?
+      end
+
       def pkcs8_material(format)
         case format
         when :expanded

data/lib/pq_crypto/key.rb

@@ -17,22 +17,24 @@ module PQCrypto
         end
       end
 
-      def from_pem(pem, passphrase: nil)
+      def from_pem(pem, passphrase: nil, require_encrypted: false)
+        require_encrypted = Internal.strict_boolean!(require_encrypted, name: "require_encrypted")
         text = String(pem)
         if text.include?(SPKI::PEM_BEGIN)
           public_key_from_spki_pem(text)
         elsif text.include?(PKCS8::PEM_BEGIN) || text.include?(PKCS8::ENCRYPTED_PEM_BEGIN)
-          secret_key_from_pkcs8_pem(text, passphrase: passphrase)
+          secret_key_from_pkcs8_pem(text, passphrase: passphrase, require_encrypted: require_encrypted)
         else
           raise SerializationError, "Unsupported PEM label for PQCrypto::Key.from_pem"
         end
       end
 
-      def from_der(der, passphrase: nil)
+      def from_der(der, passphrase: nil, require_encrypted: false)
+        require_encrypted = Internal.strict_boolean!(require_encrypted, name: "require_encrypted")
         public_key_from_spki_der(der)
       rescue SerializationError => spki_error
         begin
-          secret_key_from_pkcs8_der(der, passphrase: passphrase)
+          secret_key_from_pkcs8_der(der, passphrase: passphrase, require_encrypted: require_encrypted)
         rescue SerializationError => pkcs8_error
           raise SerializationError,
                 "Unable to decode DER as SPKI or PKCS#8 (SPKI: #{spki_error.message}; PKCS#8: #{pkcs8_error.message})"
@@ -56,12 +58,16 @@ module PQCrypto
         public_key_from_algorithm_and_bytes(algorithm, bytes)
       end
 
-      def secret_key_from_pkcs8_pem(pem, passphrase: nil)
-        secret_key_from_decoded_pkcs8(*PKCS8.decode_pem(pem, passphrase: passphrase))
+      def secret_key_from_pkcs8_pem(pem, passphrase: nil, require_encrypted: false)
+        secret_key_from_decoded_pkcs8(
+          *PKCS8.decode_pem(pem, passphrase: passphrase, require_encrypted: require_encrypted)
+        )
       end
 
-      def secret_key_from_pkcs8_der(der, passphrase: nil)
-        secret_key_from_decoded_pkcs8(*PKCS8.decode_der(der, passphrase: passphrase))
+      def secret_key_from_pkcs8_der(der, passphrase: nil, require_encrypted: false)
+        secret_key_from_decoded_pkcs8(
+          *PKCS8.decode_der(der, passphrase: passphrase, require_encrypted: require_encrypted)
+        )
       end
 
       def secret_key_from_decoded_pkcs8(algorithm, format, material)

data/lib/pq_crypto/pkcs8.rb

@@ -70,10 +70,16 @@ module PQCrypto
         der = encode_der(algorithm, secret_material, format: format, passphrase: passphrase, iterations: iterations)
         pkcs8_native { PQCrypto.__send__(:native_pkcs8_der_to_pem, der, !passphrase.nil?) }
       end
-
-      def decode_der(der, passphrase: nil)
+      def decode_der(der, passphrase: nil, require_encrypted: false)
+        require_encrypted = Internal.strict_boolean!(require_encrypted, name: "require_encrypted")
         input = Internal.binary_string(der)
-        return decode_encrypted_der(input, passphrase: passphrase) if encrypted_der?(input)
+        encrypted = encrypted_der?(input)
+
+        if require_encrypted && !encrypted
+          raise SerializationError, "PKCS#8 input is not encrypted, but require_encrypted: true was requested"
+        end
+
+        return decode_encrypted_der(input, passphrase: passphrase) if encrypted
 
         oid, choice_der = private_key_info_from_der(input)
         algorithm = AlgorithmRegistry.by_standard_oid(oid)
@@ -83,15 +89,17 @@ module PQCrypto
         PrivateKeyChoice.validate_secret_key_algorithm!(algorithm, entry)
         PrivateKeyChoice.decode(algorithm, Internal.binary_string(choice_der))
       rescue ArgumentError => e
+        raise if e.message.start_with?("require_encrypted")
         raise SerializationError, e.message
       ensure
         Internal.safe_wipe(choice_der) if defined?(choice_der)
       end
 
-      def decode_pem(pem, passphrase: nil)
+      def decode_pem(pem, passphrase: nil, require_encrypted: false)
+        require_encrypted = Internal.strict_boolean!(require_encrypted, name: "require_encrypted")
         _encrypted, der = pkcs8_native { PQCrypto.__send__(:native_pkcs8_pem_to_der, String(pem)) }
         begin
-          decode_der(der, passphrase: passphrase)
+          decode_der(der, passphrase: passphrase, require_encrypted: require_encrypted)
         ensure
           Internal.safe_wipe(der)
         end

data/lib/pq_crypto/signature.rb

@@ -14,18 +14,21 @@ module PQCrypto
         sign: :native_ml_dsa_44_sign,
         verify: :native_ml_dsa_44_verify,
         keypair_from_seed: :native_ml_dsa_44_keypair_from_seed,
+        check_secret_key: :native_ml_dsa_44_check_secret_key,
       }.freeze,
       ml_dsa_65: {
         keypair: :native_sign_keypair,
         sign: :native_sign,
         verify: :native_verify,
         keypair_from_seed: :native_ml_dsa_keypair_from_seed,
+        check_secret_key: :native_ml_dsa_check_secret_key,
       }.freeze,
       ml_dsa_87: {
         keypair: :native_ml_dsa_87_keypair,
         sign: :native_ml_dsa_87_sign,
         verify: :native_ml_dsa_87_verify,
         keypair_from_seed: :native_ml_dsa_87_keypair_from_seed,
+        check_secret_key: :native_ml_dsa_87_check_secret_key,
       }.freeze,
     }.freeze
 
@@ -33,7 +36,8 @@ module PQCrypto
       def generate(algorithm = CANONICAL_ALGORITHM)
         algorithm = resolve_algorithm!(algorithm)
         public_key, secret_key = PQCrypto.__send__(native_method_for(algorithm, :keypair))
-        Keypair.new(PublicKey.new(algorithm, public_key), SecretKey.new(algorithm, secret_key))
+        Keypair.new(PublicKey.new(algorithm, public_key),
+                    SecretKey.new(algorithm, secret_key, freshly_generated: true))
       end
 
       def public_key_from_bytes(algorithm, bytes)
@@ -86,12 +90,18 @@ module PQCrypto
         PublicKey.new(resolve_algorithm!(resolved_algorithm), bytes)
       end
 
-      def secret_key_from_pkcs8_der(der, passphrase: nil)
-        secret_key_from_decoded_pkcs8(*PKCS8.decode_der(der, passphrase: passphrase))
+      def secret_key_from_pkcs8_der(der, passphrase: nil, require_encrypted: false)
+        require_encrypted = Internal.strict_boolean!(require_encrypted, name: "require_encrypted")
+        secret_key_from_decoded_pkcs8(
+          *PKCS8.decode_der(der, passphrase: passphrase, require_encrypted: require_encrypted)
+        )
       end
 
-      def secret_key_from_pkcs8_pem(pem, passphrase: nil)
-        secret_key_from_decoded_pkcs8(*PKCS8.decode_pem(pem, passphrase: passphrase))
+      def secret_key_from_pkcs8_pem(pem, passphrase: nil, require_encrypted: false)
+        require_encrypted = Internal.strict_boolean!(require_encrypted, name: "require_encrypted")
+        secret_key_from_decoded_pkcs8(
+          *PKCS8.decode_pem(pem, passphrase: passphrase, require_encrypted: require_encrypted)
+        )
       end
 
       def details(algorithm)
@@ -118,7 +128,7 @@ module PQCrypto
           SecretKey.new(algorithm, material)
         when :seed
           _public_key, expanded = PQCrypto.__send__(native_method_for(algorithm, :keypair_from_seed), material)
-          SecretKey.new(algorithm, expanded, seed: material)
+          SecretKey.new(algorithm, expanded, seed: material, freshly_generated: true)
         when :both
           _seed, expanded = material
           SecretKey.new(algorithm, expanded, seed: _seed)
@@ -133,6 +143,10 @@ module PQCrypto
         NATIVE_DISPATCH.fetch(resolve_algorithm!(algorithm)).fetch(operation)
       end
 
+      def secret_key_checkable?(algorithm)
+        NATIVE_DISPATCH.key?(algorithm) && NATIVE_DISPATCH.fetch(algorithm).key?(:check_secret_key)
+      end
+
       def validate_algorithm_match!(expected_algorithm, actual_algorithm)
         expected = resolve_algorithm!(expected_algorithm)
         return if expected == actual_algorithm
@@ -264,7 +278,7 @@ module PQCrypto
 
       def initialize(algorithm, bytes)
         @algorithm = algorithm
-        @bytes = Internal.binary_string(bytes)
+        @bytes = Internal.frozen_binary_string(bytes)
         validate_length!
       end
 
@@ -343,18 +357,25 @@ module PQCrypto
     class SecretKey
       attr_reader :algorithm
 
-      def initialize(algorithm, bytes, seed: nil)
+      def initialize(algorithm, bytes, seed: nil, freshly_generated: false)
         @algorithm = algorithm
         @bytes = Internal.binary_string(bytes)
         @seed = seed.nil? ? nil : Internal.binary_string(seed)
         validate_length!
         validate_seed_length! if @seed
+        validate_structure! unless freshly_generated
+      end
+
+      def valid?
+        return true unless Signature.send(:secret_key_checkable?, @algorithm)
+
+        PQCrypto.__send__(Signature.send(:native_method_for, @algorithm, :check_secret_key), @bytes)
       end
 
       def self.from_seed(algorithm, seed)
         seed_bytes = Internal.binary_string(seed)
         _public_key, expanded = PQCrypto.__send__(Signature.send(:native_method_for, algorithm, :keypair_from_seed), seed_bytes)
-        new(algorithm, expanded, seed: seed_bytes)
+        new(algorithm, expanded, seed: seed_bytes, freshly_generated: true)
       rescue ArgumentError => e
         raise InvalidKeyError, e.message
       end
@@ -424,6 +445,10 @@ module PQCrypto
         raise InvalidKeyError, "Invalid signature secret key length" unless @bytes.bytesize == expected
       end
 
+      def validate_structure!
+        raise InvalidKeyError, "Invalid #{@algorithm} secret key: ML-DSA structure check failed" unless valid?
+      end
+
       def pkcs8_material(format)
         case format
         when :expanded

data/lib/pq_crypto/spki.rb

@@ -26,7 +26,7 @@ module PQCrypto
           ]),
           OpenSSL::ASN1::BitString.new(bytes),
         ]).to_der.b
-      rescue OpenSSL::ASN1::ASN1Error => e
+      rescue OpenSSL::OpenSSLError, TypeError => e
         raise SerializationError, e.message
       end
 
@@ -63,6 +63,8 @@ module PQCrypto
         end
 
         [algorithm, bytes]
+      rescue OpenSSL::OpenSSLError, TypeError => e
+        raise SerializationError, e.message
       end
 
       def decode_pem(pem)
@@ -74,7 +76,7 @@ module PQCrypto
 
       def decode_asn1(der)
         OpenSSL::ASN1.decode(der)
-      rescue OpenSSL::ASN1::ASN1Error => e
+      rescue OpenSSL::OpenSSLError, TypeError => e
         raise SerializationError, e.message
       end
 

data/lib/pq_crypto/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PQCrypto
-  VERSION = "0.6.5"
+  VERSION = "0.6.7"
 end

data/lib/pq_crypto.rb

@@ -65,6 +65,15 @@ module PQCrypto
       ml_kem_1024_keypair_from_seed
       ml_kem_1024_encapsulate
       ml_kem_1024_decapsulate
+      ml_kem_check_public_key
+      ml_kem_check_secret_key
+      ml_kem_512_check_public_key
+      ml_kem_512_check_secret_key
+      ml_kem_1024_check_public_key
+      ml_kem_1024_check_secret_key
+      ml_dsa_check_secret_key
+      ml_dsa_44_check_secret_key
+      ml_dsa_87_check_secret_key
       hybrid_kem_keypair
       hybrid_kem_encapsulate
       hybrid_kem_expand_secret_key

data/script/vendor_libs.rb

@@ -13,17 +13,17 @@ MANIFEST_PATH = File.join(VENDOR_DIR, ".vendored")
 PINS = {
   mlkem: {
     repo: "https://github.com/pq-code-package/mlkem-native.git",
-    ref: "v1.3.0",
-    commit: "398050c877ff4353c96305c6434b63528accfc37",
-    tree_sha256: "3cd7af93cde256f73ce5ffde3ac3accd31e4361616e275f1bf1c39d462c2149e",
+    ref: "v2.0.0",
+    commit: "d1b2fe782888bdb761a50336012923180be7f502",
+    tree_sha256: "18bfa9ea4e2232bdf56f8ec374b62d10e50b99a30cb08aafc18d0b97e00cd06f",
     target: "mlkem-native",
     source_dir: "mlkem"
   },
   mldsa: {
     repo: "https://github.com/pq-code-package/mldsa-native.git",
-    ref: "v1.0.0-beta2",
-    commit: "9b0ee84f4cf399043eca59eca4e5f8531ca1d61b",
-    tree_sha256: "2887f59926c18a877e8c5a5e30727e84497c357032093d00d7135aedf53f011e",
+    ref: "v2.0.0",
+    commit: "834a90d5e846ffa1e1611bd24e160bb2e9b86d35",
+    tree_sha256: "25b3c3949d2ed37d1ad5d4722c8476d13deb2a0bb945f12444f463378d69375d",
     target: "mldsa-native",
     source_dir: "mldsa"
   }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pq_crypto
 version: !ruby/object:Gem::Version
-  version: 0.6.5
+  version: 0.6.7
 platform: ruby
 authors:
 - Roman Haydarov
@@ -82,6 +82,7 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/LICENSE
 - ext/pqcrypto/vendor/mldsa-native/META.yml
 - ext/pqcrypto/vendor/mldsa-native/README.md
+- ext/pqcrypto/vendor/mldsa-native/RELEASE.md
 - ext/pqcrypto/vendor/mldsa-native/SECURITY.md
 - ext/pqcrypto/vendor/mldsa-native/mldsa/README.md
 - ext/pqcrypto/vendor/mldsa-native/mldsa/mldsa_native.c
@@ -90,6 +91,7 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/mldsa/mldsa_native_config.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/cbmc.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/common.h
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/context.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/ct.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/ct.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/debug.c
@@ -119,9 +121,9 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/fips202_native_armv81m.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccak_f1600_x4_mve.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccak_f1600_x4_mve.c
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccak_f1600_x4_state_extract_bytes_mve.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccak_f1600_x4_state_xor_bytes_mve.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccakf1600_round_constants.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/state_extract_bytes_x4_mve.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/state_xor_bytes_x4_mve.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/auto.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/x86_64/keccak_f1600_x4_avx2.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/x86_64/src/fips202_native_x86_64.h
@@ -130,24 +132,24 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/meta.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/aarch64_zetas.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/arith_native_aarch64.h
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/intt_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mld_polyvecl_pointwise_acc_montgomery_l4_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mld_polyvecl_pointwise_acc_montgomery_l5_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mld_polyvecl_pointwise_acc_montgomery_l7_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/ntt_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/pointwise_montgomery_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_caddq_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_chknorm_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_decompose_32_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_decompose_88_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_use_hint_32_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_use_hint_88_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/polyz_unpack_17_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/polyz_unpack_19_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_intt_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_ntt_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_pointwise_montgomery_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_caddq_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_chknorm_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_decompose_32_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_decompose_88_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_use_hint_32_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_use_hint_88_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyvecl_pointwise_acc_montgomery_l4_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyvecl_pointwise_acc_montgomery_l5_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyvecl_pointwise_acc_montgomery_l7_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyz_unpack_17_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyz_unpack_19_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_rej_uniform_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_rej_uniform_eta2_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_rej_uniform_eta4_aarch64_asm.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/polyz_unpack_table.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_eta2_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_eta4_aarch64_asm.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_eta_table.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_table.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/api.h
@@ -156,24 +158,24 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/arith_native_x86_64.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/consts.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/consts.h
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/intt_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/ntt_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/nttunpack_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/pointwise_acc_l4_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/pointwise_acc_l5_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/pointwise_acc_l7_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/pointwise_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_caddq_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_chknorm_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_decompose_32_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_decompose_88_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_use_hint_32_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_use_hint_88_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/polyz_unpack_17_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/polyz_unpack_19_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/rej_uniform_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/rej_uniform_eta2_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/rej_uniform_eta4_avx2.c
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_intt_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_ntt_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_nttunpack_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_pointwise_acc_l4_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_pointwise_acc_l5_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_pointwise_acc_l7_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_pointwise_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_caddq_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_chknorm_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_decompose_32_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_decompose_88_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_use_hint_32_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_use_hint_88_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_polyz_unpack_17_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_polyz_unpack_19_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_rej_uniform_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_rej_uniform_eta2_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_rej_uniform_eta4_avx2_asm.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/rej_uniform_table.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/packing.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/packing.h

data/ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_chknorm_avx2.c

@@ -1,52 +0,0 @@
-/*
- * Copyright (c) The mldsa-native project authors
- * SPDX-License-Identifier: Apache-2.0 OR ISC OR MIT
- */
-
-/* References
- * ==========
- *
- * - [REF_AVX2]
- *   CRYSTALS-Dilithium optimized AVX2 implementation
- *   Bai, Ducas, Kiltz, Lepoint, Lyubashevsky, Schwabe, Seiler, Stehlé
- *   https://github.com/pq-crystals/dilithium/tree/master/avx2
- */
-
-/*
- * This file is derived from the public domain
- * AVX2 Dilithium implementation @[REF_AVX2].
- */
-
-#include "../../../common.h"
-
-#if defined(MLD_ARITH_BACKEND_X86_64_DEFAULT) && \
-    !defined(MLD_CONFIG_MULTILEVEL_NO_SHARED)
-
-#include <immintrin.h>
-#include "arith_native_x86_64.h"
-
-int mld_poly_chknorm_avx2(const int32_t *a, int32_t B)
-{
-  unsigned int i;
-  __m256i f, t;
-  const __m256i bound = _mm256_set1_epi32(B - 1);
-
-  t = _mm256_setzero_si256();
-  for (i = 0; i < MLDSA_N / 8; i++)
-  {
-    f = _mm256_load_si256((const __m256i *)&a[8 * i]);
-    f = _mm256_abs_epi32(f);
-    f = _mm256_cmpgt_epi32(f, bound);
-    t = _mm256_or_si256(t, f);
-  }
-
-  return 1 - _mm256_testz_si256(t, t);
-}
-
-#else /* MLD_ARITH_BACKEND_X86_64_DEFAULT && !MLD_CONFIG_MULTILEVEL_NO_SHARED \
-       */
-
-MLD_EMPTY_CU(avx2_poly_chknorm)
-
-#endif /* !(MLD_ARITH_BACKEND_X86_64_DEFAULT && \
-          !MLD_CONFIG_MULTILEVEL_NO_SHARED) */