@quantakrypto/sieve 0.1.0

package/dist/vectors.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Loader for OFFICIAL NIST ACVP Known-Answer-Test (KAT) vector files.
+ *
+ * HONESTY NOTE: Sieve ships NO cryptographic test vectors. It does not and must
+ * not fabricate expected pk/sk/ct/ss/sig bytes. This module only PARSES vector
+ * files that the user downloads from NIST and points Sieve at via --vectors.
+ * See vectors/README.md for where to obtain them and the file format.
+ *
+ * Supported input: the NIST ACVP-server JSON format for ML-KEM (keyGen,
+ * encapDecap) and ML-DSA (keyGen, sigGen, sigVer). The ACVP JSON encodes bytes
+ * as hex strings. We normalize the fields we need into a flat list of typed
+ * test cases. Anything we don't recognize is ignored (not invented).
+ *
+ * Uses only node:fs. No cryptography.
+ */
+import type { ParamSet } from "./sizes.js";
+/** A normalized ML-KEM keygen vector: seed -> (pk, sk). */
+export interface KemKeygenVector {
+    kind: "kem-keygen";
+    param: ParamSet;
+    /** Concatenated d||z seed (hex-decoded). */
+    seed?: Uint8Array;
+    pk: Uint8Array;
+    sk: Uint8Array;
+}
+/** A normalized ML-KEM encapsulation vector: (pk, coins) -> (ct, ss). */
+export interface KemEncapVector {
+    kind: "kem-encap";
+    param: ParamSet;
+    pk: Uint8Array;
+    /** Encapsulation coins/message m (hex-decoded), if present. */
+    coins?: Uint8Array;
+    ct: Uint8Array;
+    ss: Uint8Array;
+}
+/** A normalized ML-KEM decapsulation vector: (sk, ct) -> ss. */
+export interface KemDecapVector {
+    kind: "kem-decap";
+    param: ParamSet;
+    sk: Uint8Array;
+    ct: Uint8Array;
+    ss: Uint8Array;
+}
+/** A normalized ML-DSA signature-verification vector: (pk, msg, sig) -> ok. */
+export interface DsaVerifyVector {
+    kind: "dsa-verify";
+    param: ParamSet;
+    pk: Uint8Array;
+    msg: Uint8Array;
+    sig: Uint8Array;
+    expected: boolean;
+}
+/** Any normalized vector. */
+export type Vector = KemKeygenVector | KemEncapVector | KemDecapVector | DsaVerifyVector;
+/** Result of scanning a vectors directory. */
+export interface VectorSet {
+    vectors: Vector[];
+    /** Files that were read. */
+    files: string[];
+    /** Non-fatal parse notes (unrecognized files/groups). */
+    notes: string[];
+}
+/**
+ * Load and normalize all `*.json` ACVP vector files in `dir`.
+ *
+ * @throws if `dir` does not exist or contains no readable JSON files.
+ */
+export declare function loadVectors(dir: string): VectorSet;
+//# sourceMappingURL=vectors.d.ts.map

package/dist/vectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vectors.d.ts","sourceRoot":"","sources":["../src/vectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAU,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEnD,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,QAAQ,CAAC;IAChB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,EAAE,EAAE,UAAU,CAAC;IACf,EAAE,EAAE,UAAU,CAAC;CAChB;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,EAAE,EAAE,UAAU,CAAC;IACf,+DAA+D;IAC/D,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,EAAE,EAAE,UAAU,CAAC;IACf,EAAE,EAAE,UAAU,CAAC;CAChB;AAED,gEAAgE;AAChE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,EAAE,EAAE,UAAU,CAAC;IACf,EAAE,EAAE,UAAU,CAAC;IACf,EAAE,EAAE,UAAU,CAAC;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,QAAQ,CAAC;IAChB,EAAE,EAAE,UAAU,CAAC;IACf,GAAG,EAAE,UAAU,CAAC;IAChB,GAAG,EAAE,UAAU,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,6BAA6B;AAC7B,MAAM,MAAM,MAAM,GAAG,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,eAAe,CAAC;AAEzF,8CAA8C;AAC9C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,yDAAyD;IACzD,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAgJD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAgClD"}

package/dist/vectors.js

@@ -0,0 +1,198 @@
+/**
+ * Loader for OFFICIAL NIST ACVP Known-Answer-Test (KAT) vector files.
+ *
+ * HONESTY NOTE: Sieve ships NO cryptographic test vectors. It does not and must
+ * not fabricate expected pk/sk/ct/ss/sig bytes. This module only PARSES vector
+ * files that the user downloads from NIST and points Sieve at via --vectors.
+ * See vectors/README.md for where to obtain them and the file format.
+ *
+ * Supported input: the NIST ACVP-server JSON format for ML-KEM (keyGen,
+ * encapDecap) and ML-DSA (keyGen, sigGen, sigVer). The ACVP JSON encodes bytes
+ * as hex strings. We normalize the fields we need into a flat list of typed
+ * test cases. Anything we don't recognize is ignored (not invented).
+ *
+ * Uses only node:fs. No cryptography.
+ */
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+function hexToBytes(hex) {
+    const clean = hex.trim();
+    if (clean.length === 0)
+        return new Uint8Array(0);
+    if (clean.length % 2 !== 0 || /[^0-9a-fA-F]/.test(clean)) {
+        throw new Error(`invalid hex string (len ${clean.length})`);
+    }
+    const out = new Uint8Array(clean.length / 2);
+    for (let i = 0; i < out.length; i++) {
+        out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+/** Map an ACVP parameterSet string to our canonical ParamSet, or undefined. */
+function normParam(family, raw) {
+    if (typeof raw !== "string")
+        return undefined;
+    const s = raw.toLowerCase().replace(/_/g, "-");
+    // ACVP uses e.g. "ML-KEM-768", "ML-DSA-65".
+    const candidates = {
+        "ml-kem-512": "ml-kem-512",
+        "ml-kem-768": "ml-kem-768",
+        "ml-kem-1024": "ml-kem-1024",
+        "ml-dsa-44": "ml-dsa-44",
+        "ml-dsa-65": "ml-dsa-65",
+        "ml-dsa-87": "ml-dsa-87",
+    };
+    const hit = candidates[s];
+    if (hit && hit.startsWith(family))
+        return hit;
+    return undefined;
+}
+function asArray(v) {
+    return Array.isArray(v) ? v : [];
+}
+function asObj(v) {
+    return typeof v === "object" && v !== null ? v : {};
+}
+function str(v) {
+    return typeof v === "string" ? v : undefined;
+}
+/**
+ * Parse one ACVP test-vectors JSON document into normalized vectors.
+ * The ACVP shape is: { algorithm, mode, testGroups: [{ parameterSet, tests:[...] }] }.
+ */
+function parseAcvpDocument(doc, notes, file) {
+    const root = asObj(doc);
+    const algorithm = str(root["algorithm"])?.toUpperCase() ?? "";
+    const mode = str(root["mode"])?.toLowerCase() ?? "";
+    const out = [];
+    const family = algorithm.includes("KEM")
+        ? "ml-kem"
+        : algorithm.includes("DSA")
+            ? "ml-dsa"
+            : undefined;
+    if (family === undefined) {
+        notes.push(`${file}: unrecognized algorithm "${algorithm}", skipped`);
+        return out;
+    }
+    for (const groupRaw of asArray(root["testGroups"])) {
+        const group = asObj(groupRaw);
+        const param = normParam(family, group["parameterSet"]);
+        if (param === undefined) {
+            notes.push(`${file}: skipped group with parameterSet=${String(group["parameterSet"])}`);
+            continue;
+        }
+        const fn = str(group["function"])?.toLowerCase(); // encapDecap: "encapsulation"/"decapsulation"
+        for (const testRaw of asArray(group["tests"])) {
+            const t = asObj(testRaw);
+            try {
+                if (family === "ml-kem") {
+                    if (mode.includes("keygen")) {
+                        const d = str(t["d"]);
+                        const z = str(t["z"]);
+                        const seedHex = str(t["seed"]) ?? (d && z ? d + z : undefined);
+                        out.push({
+                            kind: "kem-keygen",
+                            param,
+                            ...(seedHex ? { seed: hexToBytes(seedHex) } : {}),
+                            pk: hexToBytes(reqHex(t, "ek", "pk")),
+                            sk: hexToBytes(reqHex(t, "dk", "sk")),
+                        });
+                    }
+                    else if (mode.includes("encapdecap") || mode.includes("encap")) {
+                        // function may distinguish encapsulation vs decapsulation cases.
+                        if (fn === "decapsulation" || ("dk" in t && "c" in t)) {
+                            out.push({
+                                kind: "kem-decap",
+                                param,
+                                sk: hexToBytes(reqHex(t, "dk", "sk")),
+                                ct: hexToBytes(reqHex(t, "c", "ct")),
+                                ss: hexToBytes(reqHex(t, "k", "ss")),
+                            });
+                        }
+                        else {
+                            const m = str(t["m"]);
+                            out.push({
+                                kind: "kem-encap",
+                                param,
+                                pk: hexToBytes(reqHex(t, "ek", "pk")),
+                                ...(m ? { coins: hexToBytes(m) } : {}),
+                                ct: hexToBytes(reqHex(t, "c", "ct")),
+                                ss: hexToBytes(reqHex(t, "k", "ss")),
+                            });
+                        }
+                    }
+                    else {
+                        notes.push(`${file}: unrecognized ML-KEM mode "${mode}"`);
+                    }
+                }
+                else {
+                    // ML-DSA: we can robustly check sigVer cases (no nonce dependence).
+                    if (mode.includes("sigver") || ("signature" in t && "pk" in t)) {
+                        const expected = t["testPassed"];
+                        out.push({
+                            kind: "dsa-verify",
+                            param,
+                            pk: hexToBytes(reqHex(t, "pk", "ek")),
+                            msg: hexToBytes(reqHex(t, "message", "msg")),
+                            sig: hexToBytes(reqHex(t, "signature", "sig")),
+                            expected: typeof expected === "boolean" ? expected : true,
+                        });
+                    }
+                    else {
+                        notes.push(`${file}: ML-DSA mode "${mode}" not used for KAT (sign is nonce-dependent)`);
+                    }
+                }
+            }
+            catch (err) {
+                notes.push(`${file}: skipped a test case: ${err.message}`);
+            }
+        }
+    }
+    return out;
+}
+/** Read the first present hex field among `keys`, else throw. */
+function reqHex(t, ...keys) {
+    for (const k of keys) {
+        const v = str(t[k]);
+        if (v !== undefined)
+            return v;
+    }
+    throw new Error(`missing field (any of: ${keys.join(", ")})`);
+}
+/**
+ * Load and normalize all `*.json` ACVP vector files in `dir`.
+ *
+ * @throws if `dir` does not exist or contains no readable JSON files.
+ */
+export function loadVectors(dir) {
+    const st = statSync(dir); // throws ENOENT if missing
+    if (!st.isDirectory()) {
+        throw new Error(`--vectors path is not a directory: ${dir}`);
+    }
+    const entries = readdirSync(dir).filter((f) => f.toLowerCase().endsWith(".json"));
+    if (entries.length === 0) {
+        throw new Error(`no .json vector files found in ${dir}`);
+    }
+    const vectors = [];
+    const files = [];
+    const notes = [];
+    for (const name of entries) {
+        const path = join(dir, name);
+        let doc;
+        try {
+            doc = JSON.parse(readFileSync(path, "utf8"));
+        }
+        catch (err) {
+            notes.push(`${name}: not valid JSON (${err.message})`);
+            continue;
+        }
+        files.push(name);
+        // ACVP test-vector files may be a single object or an array of prompts.
+        const docs = Array.isArray(doc) ? doc : [doc];
+        for (const d of docs) {
+            vectors.push(...parseAcvpDocument(d, notes, name));
+        }
+    }
+    return { vectors, files, notes };
+}
+//# sourceMappingURL=vectors.js.map

package/dist/vectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vectors.js","sourceRoot":"","sources":["../src/vectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwDjC,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,SAAS,SAAS,CAAC,MAAc,EAAE,GAAY;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/C,4CAA4C;IAC5C,MAAM,UAAU,GAA6B;QAC3C,YAAY,EAAE,YAAY;QAC1B,YAAY,EAAE,YAAY;QAC1B,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,WAAW;KACzB,CAAC;IACF,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC;AACD,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AACD,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,GAAY,EAAE,KAAe,EAAE,IAAY;IACpE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,MAAM,MAAM,GAAuB,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1D,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,6BAA6B,SAAS,YAAY,CAAC,CAAC;QACtE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,qCAAqC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;YACxF,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,8CAA8C;QAEhG,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;wBACtB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;wBACtB,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;wBAC/D,GAAG,CAAC,IAAI,CAAC;4BACP,IAAI,EAAE,YAAY;4BAClB,KAAK;4BACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACjD,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;4BACrC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;yBACtC,CAAC,CAAC;oBACL,CAAC;yBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACjE,iEAAiE;wBACjE,IAAI,EAAE,KAAK,eAAe,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;4BACtD,GAAG,CAAC,IAAI,CAAC;gCACP,IAAI,EAAE,WAAW;gCACjB,KAAK;gCACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gCACrC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gCACpC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;6BACrC,CAAC,CAAC;wBACL,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;4BACtB,GAAG,CAAC,IAAI,CAAC;gCACP,IAAI,EAAE,WAAW;gCACjB,KAAK;gCACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gCACrC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACtC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gCACpC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;6BACrC,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,+BAA+B,IAAI,GAAG,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,oEAAoE;oBACpE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;wBAC/D,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;wBACjC,GAAG,CAAC,IAAI,CAAC;4BACP,IAAI,EAAE,YAAY;4BAClB,KAAK;4BACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;4BACrC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;4BAC5C,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;4BAC9C,QAAQ,EAAE,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;yBAC1D,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,kBAAkB,IAAI,8CAA8C,CAAC,CAAC;oBAC1F,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,SAAS,MAAM,CAAC,CAA0B,EAAE,GAAG,IAAc;IAC3D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B;IACrD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,qBAAsB,GAAa,CAAC,OAAO,GAAG,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,wEAAwE;QACxE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@quantakrypto/sieve",
+  "version": "0.1.0",
+  "description": "Sieve — conformance battery for ML-KEM / ML-DSA implementations. Drives any implementation over a simple stdin/stdout JSON protocol. Zero runtime dependencies.",
+  "license": "Apache-2.0",
+  "author": "Dandelion Labs <hello@dandelionlabs.io> (https://dandelionlabs.io)",
+  "homepage": "https://github.com/dandelionlabs-io/qproof-tools/tree/main/packages/sieve#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dandelionlabs-io/qproof-tools.git",
+    "directory": "packages/sieve"
+  },
+  "bugs": {
+    "url": "https://github.com/dandelionlabs-io/qproof-tools/issues"
+  },
+  "type": "module",
+  "bin": {
+    "sieve": "./dist/cli.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "vectors",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "test": "node --import tsx --test test/*.test.ts"
+  }
+}

package/vectors/README.md

@@ -0,0 +1,83 @@
+# Official KAT / ACVP vectors
+
+**Sieve ships no cryptographic test vectors.** This directory is where *you*
+place official NIST vector files so the `kat` category can run exact-value
+checks. Without `--vectors <dir>`, the `kat` category is **SKIPPED** — Sieve
+will not invent expected values.
+
+## Where to get them
+
+Use the **NIST ACVP (Automated Cryptographic Validation Protocol) test
+vectors**, which cover ML-KEM (FIPS 203) and ML-DSA (FIPS 204):
+
+- **ACVP test vectors (recommended):**
+  <https://github.com/usnistgov/ACVP-Server> — under
+  `gen-val/json-files/`, e.g. `ML-KEM-encapDecap-FIPS203/`,
+  `ML-KEM-keyGen-FIPS203/`, `ML-DSA-sigVer-FIPS204/`,
+  `ML-DSA-keyGen-FIPS204/`. Each folder contains an
+  `internalProjection.json` / `prompt.json` / `expectedResults.json` set.
+- **ACVTS demo / production** servers publish the same format.
+- The **CAVP** program pages link to the current vector packages:
+  <https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program>.
+
+Always verify you downloaded vectors from an authoritative NIST source. Do not
+trust vectors of unknown provenance for conformance claims.
+
+## How to use them
+
+1. Download the relevant ACVP JSON files for your parameter set.
+2. Drop the `*.json` files into a directory (this one, or any path).
+3. Run Sieve with `--vectors`:
+
+   ```bash
+   sieve --impl "node ./my-impl.js" --param ml-kem-768 --vectors ./vectors
+   ```
+
+Only vectors whose `parameterSet` matches `--param` are used; the rest are
+ignored (and noted).
+
+## Expected file format
+
+The loader (`src/vectors.ts`) parses the **standard NIST ACVP test-vector
+JSON**. The relevant shape is:
+
+```jsonc
+{
+  "algorithm": "ML-KEM",          // or "ML-DSA"
+  "mode": "encapDecap",           // or "keyGen", "sigVer", ...
+  "testGroups": [
+    {
+      "parameterSet": "ML-KEM-768",
+      "function": "decapsulation", // for encapDecap groups
+      "tests": [
+        { "dk": "<hex>", "c": "<hex>", "k": "<hex>" }   // sk, ct, ss
+      ]
+    }
+  ]
+}
+```
+
+Bytes are **hex** strings in ACVP. The loader normalizes the fields it
+recognizes into typed cases:
+
+| ACVP `mode` / fields                | Sieve check        | What is asserted |
+|-------------------------------------|--------------------|------------------|
+| `keyGen` with `d`+`z` (or `seed`), `ek`, `dk` | `kem-keygen` | seeded keygen reproduces `pk`/`sk` (skipped if the SUT can't seed) |
+| `encapDecap` (encapsulation), `ek`, `m`, `c`, `k` | `kem-encap` | with `coins=m`, deterministic encaps reproduces `ct`/`ss` (skipped if no coins support) |
+| `encapDecap` (decapsulation), `dk`, `c`, `k` | `kem-decap` | `decaps(sk, ct)` equals expected `ss` |
+| `sigVer`, `pk`, `message`, `signature`, `testPassed` | `dsa-verify` | `verify(pk, msg, sig)` equals `testPassed` |
+
+> **Note on ML-DSA signing.** ML-DSA `sign` is randomized (hedged), so signature
+> bytes are not reproducible without the exact private randomness. Sieve
+> therefore uses ACVP **sigVer** vectors (verification verdicts) for ML-DSA KAT,
+> not sigGen, and exercises sign/verify self-consistency separately in the `dsa`
+> category.
+
+Unrecognized files, algorithms, or fields are recorded as non-fatal notes and
+skipped — Sieve never fabricates a value to fill a gap.
+
+## `.gitkeep`
+
+This directory is intentionally tracked (so `files` in `package.json` can ship
+this README) but contains no vectors. Add your own; do not commit
+redistributed NIST files unless their license permits it.