@pinkparrot/qsafe-mayo-wasm 0.0.10 → 0.0.12

package/bridge/mayo1_bridge.c

@@ -1,26 +1,50 @@
-// mayo_bridge.c - WASM bridge for MAYO-1
+// mayo1_bridge.c - WASM bridge for MAYO-1
 #include "../mayo-c/src/mayo_1/api.h"
+#include <stdlib.h>
 #include <string.h>
 
 extern void randombytes_set_seed(const unsigned char *seed, size_t len);
 
-// Derives keypair deterministically from a 24-byte seed.
-// randombytes_inject.c will consume the seed on the first randombytes() call
-// made internally by crypto_sign_keypair — subsequent calls fall back to system entropy.
+static size_t          _max_msg_size = 0;
+static unsigned char  *_msg_buf      = NULL;
+static unsigned char  *_sig_buf      = NULL;
+static unsigned char  *_sk_buf       = NULL;
+static unsigned char  *_pk_buf       = NULL;
+static size_t          _sig_len      = 0; // written by sign(), read by JS
+
+int mayo_init_buffers(size_t max_msg_size) {
+    if (_msg_buf) return 0;
+    _max_msg_size = max_msg_size;
+    _msg_buf = (unsigned char *)malloc(max_msg_size);
+    _sig_buf = (unsigned char *)malloc(CRYPTO_BYTES);
+    _sk_buf  = (unsigned char *)malloc(CRYPTO_SECRETKEYBYTES);
+    _pk_buf  = (unsigned char *)malloc(CRYPTO_PUBLICKEYBYTES);
+    if (!_msg_buf || !_sig_buf || !_sk_buf || !_pk_buf) return 1;
+    return 0;
+}
+
+// Pointer accessors — called once at init by JS, then cached.
+unsigned char *get_msg_buf(void) { return _msg_buf; }
+unsigned char *get_sig_buf(void) { return _sig_buf; }
+unsigned char *get_sk_buf(void)  { return _sk_buf;  }
+unsigned char *get_pk_buf(void)  { return _pk_buf;  }
+size_t         get_sig_len(void) { return _sig_len; }
+
 int keypair_from_seed(const unsigned char *seed,
-                             unsigned char *cpk, unsigned char *csk) {
+                      unsigned char *cpk, unsigned char *csk) {
     randombytes_set_seed(seed, CRYPTO_SECRETKEYBYTES);
     return crypto_sign_keypair(cpk, csk);
 }
 
-int sign(const unsigned char *msg, size_t msglen,
-               const unsigned char *csk,
-               unsigned char *sig, size_t *siglen) {
-    return crypto_sign_signature(sig, siglen, msg, msglen, csk);
+// JS writes msg into _msg_buf, sk into _sk_buf before calling.
+// Result signature written into _sig_buf, length into _sig_len.
+int sign(size_t msglen) {
+    if (!_msg_buf || msglen > _max_msg_size) return 1;
+    return crypto_sign_signature(_sig_buf, &_sig_len, _msg_buf, msglen, _sk_buf);
 }
 
-int verify(const unsigned char *msg, size_t msglen,
-                 const unsigned char *sig,
-                 const unsigned char *cpk) {
-    return crypto_sign_verify(sig, CRYPTO_BYTES, msg, msglen, cpk);
+// JS writes msg into _msg_buf, sig into _sig_buf, pk into _pk_buf before calling.
+int verify(size_t msglen) {
+    if (!_msg_buf || msglen > _max_msg_size) return 1;
+    return crypto_sign_verify(_sig_buf, CRYPTO_BYTES, _msg_buf, msglen, _pk_buf);
 }

package/bridge/mayo2_bridge.c

@@ -1,26 +1,50 @@
-// mayo_bridge.c - WASM bridge for MAYO-2
+// mayo2_bridge.c - WASM bridge for MAYO-2
 #include "../mayo-c/src/mayo_2/api.h"
+#include <stdlib.h>
 #include <string.h>
 
 extern void randombytes_set_seed(const unsigned char *seed, size_t len);
 
-// Derives keypair deterministically from a 24-byte seed.
-// randombytes_inject.c will consume the seed on the first randombytes() call
-// made internally by crypto_sign_keypair — subsequent calls fall back to system entropy.
+static size_t          _max_msg_size = 0;
+static unsigned char  *_msg_buf      = NULL;
+static unsigned char  *_sig_buf      = NULL;
+static unsigned char  *_sk_buf       = NULL;
+static unsigned char  *_pk_buf       = NULL;
+static size_t          _sig_len      = 0; // written by sign(), read by JS
+
+int mayo_init_buffers(size_t max_msg_size) {
+    if (_msg_buf) return 0;
+    _max_msg_size = max_msg_size;
+    _msg_buf = (unsigned char *)malloc(max_msg_size);
+    _sig_buf = (unsigned char *)malloc(CRYPTO_BYTES);
+    _sk_buf  = (unsigned char *)malloc(CRYPTO_SECRETKEYBYTES);
+    _pk_buf  = (unsigned char *)malloc(CRYPTO_PUBLICKEYBYTES);
+    if (!_msg_buf || !_sig_buf || !_sk_buf || !_pk_buf) return 1;
+    return 0;
+}
+
+// Pointer accessors — called once at init by JS, then cached.
+unsigned char *get_msg_buf(void) { return _msg_buf; }
+unsigned char *get_sig_buf(void) { return _sig_buf; }
+unsigned char *get_sk_buf(void)  { return _sk_buf;  }
+unsigned char *get_pk_buf(void)  { return _pk_buf;  }
+size_t         get_sig_len(void) { return _sig_len; }
+
 int keypair_from_seed(const unsigned char *seed,
                       unsigned char *cpk, unsigned char *csk) {
     randombytes_set_seed(seed, CRYPTO_SECRETKEYBYTES);
     return crypto_sign_keypair(cpk, csk);
 }
 
-int sign(const unsigned char *msg, size_t msglen,
-         const unsigned char *csk,
-         unsigned char *sig, size_t *siglen) {
-    return crypto_sign_signature(sig, siglen, msg, msglen, csk);
+// JS writes msg into _msg_buf, sk into _sk_buf before calling.
+// Result signature written into _sig_buf, length into _sig_len.
+int sign(size_t msglen) {
+    if (!_msg_buf || msglen > _max_msg_size) return 1;
+    return crypto_sign_signature(_sig_buf, &_sig_len, _msg_buf, msglen, _sk_buf);
 }
 
-int verify(const unsigned char *msg, size_t msglen,
-           const unsigned char *sig,
-           const unsigned char *cpk) {
-    return crypto_sign_verify(sig, CRYPTO_BYTES, msg, msglen, cpk);
+// JS writes msg into _msg_buf, sig into _sig_buf, pk into _pk_buf before calling.
+int verify(size_t msglen) {
+    if (!_msg_buf || msglen > _max_msg_size) return 1;
+    return crypto_sign_verify(_sig_buf, CRYPTO_BYTES, _msg_buf, msglen, _pk_buf);
 }

package/build_mayo1.ps1

@@ -21,12 +21,14 @@ emcc `
   -I ./mayo-c/src/generic `
   -I ./mayo-c/src/mayo_1 `
   -DENABLE_PARAMS_DYNAMIC `
-  -Oz `
+  -msimd128 `
+  -O3 `
   -flto `
   -o ./dist/mayo1.cjs `
   -s WASM=1 `
-  -s "EXPORTED_FUNCTIONS=['_keypair_from_seed','_sign','_verify','_malloc','_free']" `
-  -s "EXPORTED_RUNTIME_METHODS=['ccall','cwrap','HEAPU8']" `
+  -s "EXPORTED_FUNCTIONS=['_mayo_init_buffers','_keypair_from_seed','_sign','_verify','_malloc','_free','_get_msg_buf','_get_sig_buf','_get_sk_buf','_get_pk_buf','_get_sig_len']" `
+  -s "EXPORTED_RUNTIME_METHODS=['HEAPU8']" `
+  -s FILESYSTEM=0 `
   -s MODULARIZE=1 `
   -s EXPORT_NAME="Mayo1Module" `
   -s SINGLE_FILE=1 `

package/build_mayo2.ps1

@@ -21,12 +21,13 @@ emcc `
   -I ./mayo-c/src/generic `
   -I ./mayo-c/src/mayo_2 `
   -DENABLE_PARAMS_DYNAMIC `
-  -Oz `
+  -O3 `
   -flto `
   -o ./dist/mayo2.cjs `
   -s WASM=1 `
-  -s "EXPORTED_FUNCTIONS=['_keypair_from_seed','_sign','_verify','_malloc','_free']" `
-  -s "EXPORTED_RUNTIME_METHODS=['ccall','cwrap','HEAPU8']" `
+  -s "EXPORTED_FUNCTIONS=['_mayo_init_buffers','_keypair_from_seed','_sign','_verify','_malloc','_free','_get_msg_buf','_get_sig_buf','_get_sk_buf','_get_pk_buf','_get_sig_len']" `
+  -s "EXPORTED_RUNTIME_METHODS=['HEAPU8']" `
+  -s FILESYSTEM=0 `
   -s MODULARIZE=1 `
   -s EXPORT_NAME="Mayo2Module" `
   -s SINGLE_FILE=1 `