@quantakrypto/sieve 0.4.1 → 0.4.3

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 quantakrypto / Dandelion Labs JSC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/categories/correctness.js.map

@@ -1 +1 @@
-{"version":3,"file":"correctness.js","sourceRoot":"","sources":["../../src/categories/correctness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAQvC,MAAM,CAAC,MAAM,WAAW,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IAC1E,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,2EAA2E;SACrF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,4EAA4E;IAC5E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,aAAa,IAAI,EAAE,EACvB,KAAK,IAAsB,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACpC,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EACJ,gDAAgD;wBAChD,WAAW,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;iBACvF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACV,GAAG,YAAY,kBAAkB;gBAC/B,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE;gBACvD,CAAC,CAAC,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAY,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC1B,UAAU,EAAE,CAAC;YACb,IAAI,UAAU,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,IAAI,UAAU,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CACT,IAAI,CACF,WAAW,EACX,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,oEAAoE,CACxG,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,aAAa;QACvB,MAAM;QACN,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,iBAAiB;YACpC,CAAC,CAAC,GAAG,UAAU,kBAAkB,OAAO,kBAAkB,GAAG,CAAC,UAAU,aAAa;KAC1F,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"correctness.js","sourceRoot":"","sources":["../../src/categories/correctness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAQvC,MAAM,CAAC,MAAM,WAAW,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IAC1E,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,2EAA2E;SACrF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,4EAA4E;IAC5E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,aAAa,IAAI,EAAE,EACvB,KAAK,IAAsB,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACpC,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EACJ,gDAAgD;wBAChD,WAAW,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;iBACvF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACV,GAAG,YAAY,kBAAkB;gBAC/B,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE;gBACvD,CAAC,CAAC,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAY,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC1B,UAAU,EAAE,CAAC;YACb,IAAI,UAAU,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,IAAI,UAAU,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CACT,IAAI,CACF,WAAW,EACX,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,oEAAoE,CACxG,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,aAAa;QACvB,MAAM;QACN,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,iBAAiB;YACpC,CAAC,CAAC,GAAG,UAAU,kBAAkB,OAAO,kBAAkB,GAAG,CAAC,UAAU,aAAa;KAC1F,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * Correctness category (ML-KEM).\n *\n * The fundamental KEM round-trip: for N independent key pairs,\n *   keygen -> encaps(pk) -> decaps(sk, ct)\n * must yield ss_encaps === ss_decaps. This needs no external vectors: it is a\n * self-consistency property every conforming implementation must satisfy.\n *\n * (ML-DSA correctness — sign then verify === true — lives in dsa.ts.)\n */\n\nimport { type Category, type CategoryResult, type Check, fail, pass, rollUp } from \"./types.js\";\nimport {\n  bytesEqual,\n  kemDecaps,\n  kemEncaps,\n  kemKeygen,\n  mapBounded,\n  requireKem,\n  UnexpectedResponse,\n} from \"./helpers.js\";\nimport { toB64 } from \"../protocol.js\";\n\n/** Outcome of one round-trip iteration. */\ntype Outcome =\n  | { kind: \"ok\" }\n  | { kind: \"mismatch\"; detail: string }\n  | { kind: \"error\"; detail: string };\n\nexport const correctness: Category = async (ctx): Promise<CategoryResult> => {\n  const checks: Check[] = [];\n\n  if (ctx.sizes.family !== \"ml-kem\") {\n    return {\n      category: \"correctness\",\n      status: \"skip\",\n      checks: [],\n      summary: \"correctness round-trip is defined for ML-KEM; see DSA category for ML-DSA\",\n    };\n  }\n\n  const km = requireKem(ctx.sizes);\n  const param = km.id;\n  let mismatches = 0;\n  let errored = 0;\n\n  // Iterations are mutually independent (each builds its own keypair), so run\n  // several chains concurrently bounded by pipelineDepth. The keygen→encaps→\n  // decaps steps WITHIN an iteration stay serial (they are dependent).\n  const outcomes = await mapBounded<Outcome>(\n    ctx.iterations,\n    ctx.pipelineDepth ?? 16,\n    async (): Promise<Outcome> => {\n      try {\n        const { pk, sk } = await kemKeygen(ctx.runner, param);\n        const { ct, ss: ssEncaps } = await kemEncaps(ctx.runner, param, toB64(pk));\n        const ssDecaps = await kemDecaps(ctx.runner, param, toB64(sk), toB64(ct));\n        if (!bytesEqual(ssEncaps, ssDecaps)) {\n          return {\n            kind: \"mismatch\",\n            detail:\n              `shared secrets differ: encaps ss != decaps ss ` +\n              `(encaps=${toB64(ssEncaps).slice(0, 12)}…, decaps=${toB64(ssDecaps).slice(0, 12)}…)`,\n          };\n        }\n        return { kind: \"ok\" };\n      } catch (err) {\n        const detail =\n          err instanceof UnexpectedResponse\n            ? `SUT returned an unexpected response: ${err.message}`\n            : `harness error: ${(err as Error).message}`;\n        return { kind: \"error\", detail };\n      }\n    },\n  );\n\n  for (let i = 0; i < outcomes.length; i++) {\n    const o = outcomes[i] as Outcome;\n    if (o.kind === \"mismatch\") {\n      mismatches++;\n      if (mismatches <= 3) checks.push(fail(`roundtrip[${i}]`, o.detail));\n    } else if (o.kind === \"error\") {\n      errored++;\n      if (errored <= 3) checks.push(fail(`roundtrip[${i}]`, o.detail));\n    }\n  }\n\n  if (mismatches === 0 && errored === 0) {\n    checks.push(\n      pass(\n        \"roundtrip\",\n        `${ctx.iterations}/${ctx.iterations} keygen→encaps→decaps round-trips produced matching shared secrets`,\n      ),\n    );\n  }\n\n  const status = rollUp(checks);\n  return {\n    category: \"correctness\",\n    status,\n    checks,\n    summary:\n      status === \"pass\"\n        ? `${ctx.iterations} round-trips OK`\n        : `${mismatches} mismatch(es), ${errored} error(s) over ${ctx.iterations} iterations`,\n  };\n};\n"]}

package/dist/categories/determinism.js.map

@@ -1 +1 @@
-{"version":3,"file":"determinism.js","sourceRoot":"","sources":["../../src/categories/determinism.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,MAAM,OAAO,GAAG,CAAC,CAAC;AAKlB,MAAM,CAAC,MAAM,WAAW,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IAC1E,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,0CAA0C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACvC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,aAAa,IAAI,EAAE,EACvB,KAAK,IAAsB,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YAExB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC/D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACV,GAAG,YAAY,kBAAkB;gBAC/B,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE;gBACvD,CAAC,CAAC,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAY,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC1B,gBAAgB,EAAE,CAAC;YACnB,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CACF,iBAAiB,CAAC,GAAG,EACrB,2DAA2D,OAAO,kBAAkB,CACrF,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CACT,IAAI,CACF,eAAe,EACf,mCAAmC,OAAO,oBAAoB,GAAG,CAAC,UAAU,cAAc,CAC3F,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,aAAa;QACvB,MAAM;QACN,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,6BAA6B,GAAG,CAAC,UAAU,cAAc;YAC3D,CAAC,CAAC,GAAG,gBAAgB,uBAAuB,OAAO,WAAW;KACnE,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"determinism.js","sourceRoot":"","sources":["../../src/categories/determinism.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,MAAM,OAAO,GAAG,CAAC,CAAC;AAKlB,MAAM,CAAC,MAAM,WAAW,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IAC1E,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,0CAA0C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACvC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,aAAa,IAAI,EAAE,EACvB,KAAK,IAAsB,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YAExB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC/D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACV,GAAG,YAAY,kBAAkB;gBAC/B,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE;gBACvD,CAAC,CAAC,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAY,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC1B,gBAAgB,EAAE,CAAC;YACnB,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CACF,iBAAiB,CAAC,GAAG,EACrB,2DAA2D,OAAO,kBAAkB,CACrF,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CACT,IAAI,CACF,eAAe,EACf,mCAAmC,OAAO,oBAAoB,GAAG,CAAC,UAAU,cAAc,CAC3F,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,aAAa;QACvB,MAAM;QACN,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,6BAA6B,GAAG,CAAC,UAAU,cAAc;YAC3D,CAAC,CAAC,GAAG,gBAAgB,uBAAuB,OAAO,WAAW;KACnE,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * Determinism category (ML-KEM).\n *\n * Decapsulation is a deterministic function of (sk, ct): calling decaps twice\n * with identical inputs must return identical shared secrets. A SUT that mixes\n * fresh randomness into decaps (a real-world implementation smell) fails here.\n *\n * This is a self-consistency property; no external vectors are required.\n */\n\nimport { type Category, type CategoryResult, type Check, fail, pass, rollUp } from \"./types.js\";\nimport {\n  bytesEqual,\n  kemDecaps,\n  kemEncaps,\n  kemKeygen,\n  mapBounded,\n  requireKem,\n  UnexpectedResponse,\n} from \"./helpers.js\";\nimport { toB64 } from \"../protocol.js\";\n\nconst REPEATS = 3;\n\n/** Outcome of one determinism iteration. */\ntype Outcome = { kind: \"ok\" } | { kind: \"unstable\" } | { kind: \"error\"; detail: string };\n\nexport const determinism: Category = async (ctx): Promise<CategoryResult> => {\n  const checks: Check[] = [];\n\n  if (ctx.sizes.family !== \"ml-kem\") {\n    return {\n      category: \"determinism\",\n      status: \"skip\",\n      checks: [],\n      summary: \"decaps-determinism is defined for ML-KEM\",\n    };\n  }\n\n  const param = requireKem(ctx.sizes).id;\n  let nondeterministic = 0;\n  let errored = 0;\n\n  // Iterations are independent → run concurrently (bounded). The REPEATS decaps\n  // calls within an iteration MUST stay serial: determinism is a property of\n  // repeated identical calls, so we issue them one after another on purpose.\n  const outcomes = await mapBounded<Outcome>(\n    ctx.iterations,\n    ctx.pipelineDepth ?? 16,\n    async (): Promise<Outcome> => {\n      try {\n        const { pk, sk } = await kemKeygen(ctx.runner, param);\n        const { ct } = await kemEncaps(ctx.runner, param, toB64(pk));\n        const skB64 = toB64(sk);\n        const ctB64 = toB64(ct);\n\n        const first = await kemDecaps(ctx.runner, param, skB64, ctB64);\n        for (let r = 1; r < REPEATS; r++) {\n          const again = await kemDecaps(ctx.runner, param, skB64, ctB64);\n          if (!bytesEqual(first, again)) return { kind: \"unstable\" };\n        }\n        return { kind: \"ok\" };\n      } catch (err) {\n        const detail =\n          err instanceof UnexpectedResponse\n            ? `SUT returned an unexpected response: ${err.message}`\n            : `harness error: ${(err as Error).message}`;\n        return { kind: \"error\", detail };\n      }\n    },\n  );\n\n  for (let i = 0; i < outcomes.length; i++) {\n    const o = outcomes[i] as Outcome;\n    if (o.kind === \"unstable\") {\n      nondeterministic++;\n      if (nondeterministic <= 3) {\n        checks.push(\n          fail(\n            `decaps-stable[${i}]`,\n            `decaps(sk, ct) returned different shared secrets across ${REPEATS} identical calls`,\n          ),\n        );\n      }\n    } else if (o.kind === \"error\") {\n      errored++;\n      if (errored <= 3) checks.push(fail(`decaps-stable[${i}]`, o.detail));\n    }\n  }\n\n  if (nondeterministic === 0 && errored === 0) {\n    checks.push(\n      pass(\n        \"decaps-stable\",\n        `decaps was deterministic across ${REPEATS} repeats for all ${ctx.iterations} ciphertexts`,\n      ),\n    );\n  }\n\n  const status = rollUp(checks);\n  return {\n    category: \"determinism\",\n    status,\n    checks,\n    summary:\n      status === \"pass\"\n        ? `decaps deterministic over ${ctx.iterations} ciphertexts`\n        : `${nondeterministic} non-deterministic, ${errored} error(s)`,\n  };\n};\n"]}

package/dist/categories/dsa.js.map

@@ -1 +1 @@
-{"version":3,"file":"dsa.js","sourceRoot":"","sources":["../../src/categories/dsa.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,CAAC,MAAM,GAAG,GAAa,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC"}
+{"version":3,"file":"dsa.js","sourceRoot":"","sources":["../../src/categories/dsa.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,CAAC,MAAM,GAAG,GAAa,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC","sourcesContent":["/**\n * ML-DSA self-consistency category (FIPS 204).\n *\n * Thin binding over the shared signature driver in signature.ts. ML-DSA and\n * SLH-DSA present the same black-box surface (keygen / sign / verify), so the\n * driver is shared; this category fixes the family to \"ml-dsa\". It covers:\n *   - pk/sk/sig size conformance for ml-dsa-44/65/87,\n *   - sign→verify correctness round-trips,\n *   - verify rejects a tampered signature and a wrong message,\n *   - a deterministic-vs-hedged signing advisory probe,\n *   - wrong-length verify inputs rejected with a defined error (AF-05).\n *\n * Exact-value KAT (sigVer vectors) is handled separately by the kat category.\n */\n\nimport type { Category } from \"./types.js\";\nimport { makeSignatureCategory } from \"./signature.js\";\n\nexport const dsa: Category = makeSignatureCategory(\"dsa\", \"ml-dsa\");\n"]}

package/dist/categories/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/categories/helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAiB,MAAM,gBAAgB,CAAC;AAIxD,qDAAqD;AACrD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB;IAFlB,YACE,OAAe,EACC,QAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,aAAQ,GAAR,QAAQ,CAAU;QAGlC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAe,EACf,IAAa;IAEb,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,QAAQ;QAChB,KAAK;QACL,EAAE,EAAE,QAAQ;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAe,EACf,KAAa,EACb,KAAc;IAEd,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,QAAQ;QAChB,KAAK;QACL,EAAE,EAAE,QAAQ;QACZ,EAAE,EAAE,KAAK;QACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAe,EACf,KAAa,EACb,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,KAAe,EACf,KAAa,EACb,KAAa;IAEb,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,KAAe,EAAE,KAAa;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,SAAS,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,GAAI,GAAG,CAAC,GAAG,CAAY,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,CAAqB;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,CAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAa,EACb,KAAa,EACb,IAA+B;IAE/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,UAA6B,CAAC;IAElC,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO;YACnB,IAAI,CAAC;gBACH,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,KAAK,SAAS;oBAAE,UAAU,GAAG,GAAY,CAAC;gBACxD,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,UAAU,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/categories/helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAiB,MAAM,gBAAgB,CAAC;AAIxD,qDAAqD;AACrD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB;IAFlB,YACE,OAAe,EACC,QAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,aAAQ,GAAR,QAAQ,CAAU;QAGlC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAe,EACf,IAAa;IAEb,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,QAAQ;QAChB,KAAK;QACL,EAAE,EAAE,QAAQ;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAe,EACf,KAAa,EACb,KAAc;IAEd,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,QAAQ;QAChB,KAAK;QACL,EAAE,EAAE,QAAQ;QACZ,EAAE,EAAE,KAAK;QACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAe,EACf,KAAa,EACb,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,KAAe,EACf,KAAa,EACb,KAAa;IAEb,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,KAAe,EAAE,KAAa;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,SAAS,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,GAAI,GAAG,CAAC,GAAG,CAAY,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,CAAqB;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,CAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAa,EACb,KAAa,EACb,IAA+B;IAE/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,UAA6B,CAAC;IAElC,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO;YACnB,IAAI,CAAC;gBACH,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,KAAK,SAAS;oBAAE,UAAU,GAAG,GAAY,CAAC;gBACxD,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,UAAU,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["/**\n * Helpers shared by the test categories: typed request wrappers that drive a\n * Runner, plus small byte utilities. No cryptography — these just move bytes.\n */\n\nimport { fromB64, type Response } from \"../protocol.js\";\nimport type { Runner } from \"../runner.js\";\nimport type { KemSizes, ParamSet } from \"../sizes.js\";\n\n/** A response we expected to succeed but did not. */\nexport class UnexpectedResponse extends Error {\n  constructor(\n    message: string,\n    public readonly response: Response,\n  ) {\n    super(message);\n    this.name = \"UnexpectedResponse\";\n  }\n}\n\n/** ML-KEM keygen, returning decoded pk/sk bytes. Throws on error/wrong shape. */\nexport async function kemKeygen(\n  runner: Runner,\n  param: ParamSet,\n  seed?: string,\n): Promise<{ pk: Uint8Array; sk: Uint8Array }> {\n  const resp = await runner.send({\n    family: \"ml-kem\",\n    param,\n    op: \"keygen\",\n    ...(seed ? { seed } : {}),\n  });\n  if (resp.ok !== true || !(\"pk\" in resp) || !(\"sk\" in resp)) {\n    throw new UnexpectedResponse(\"expected keygen pk/sk result\", resp);\n  }\n  return { pk: fromB64(resp.pk), sk: fromB64(resp.sk) };\n}\n\n/** ML-KEM encapsulate, returning decoded ct/ss. Throws on error/wrong shape. */\nexport async function kemEncaps(\n  runner: Runner,\n  param: ParamSet,\n  pkB64: string,\n  coins?: string,\n): Promise<{ ct: Uint8Array; ss: Uint8Array }> {\n  const resp = await runner.send({\n    family: \"ml-kem\",\n    param,\n    op: \"encaps\",\n    pk: pkB64,\n    ...(coins ? { coins } : {}),\n  });\n  if (resp.ok !== true || !(\"ct\" in resp) || !(\"ss\" in resp)) {\n    throw new UnexpectedResponse(\"expected encaps ct/ss result\", resp);\n  }\n  return { ct: fromB64(resp.ct), ss: fromB64(resp.ss) };\n}\n\n/** ML-KEM decapsulate, returning decoded ss. Throws on error/wrong shape. */\nexport async function kemDecaps(\n  runner: Runner,\n  param: ParamSet,\n  skB64: string,\n  ctB64: string,\n): Promise<Uint8Array> {\n  const resp = await runner.send({ family: \"ml-kem\", param, op: \"decaps\", sk: skB64, ct: ctB64 });\n  if (resp.ok !== true || !(\"ss\" in resp)) {\n    throw new UnexpectedResponse(\"expected decaps ss result\", resp);\n  }\n  return fromB64(resp.ss);\n}\n\n/** Raw decaps that returns the full response (used by categories that expect errors). */\nexport function kemDecapsRaw(\n  runner: Runner,\n  param: ParamSet,\n  skB64: string,\n  ctB64: string,\n): Promise<Response> {\n  return runner.send({ family: \"ml-kem\", param, op: \"decaps\", sk: skB64, ct: ctB64 });\n}\n\n/** Raw encaps returning the full response (for error-path tests). */\nexport function kemEncapsRaw(runner: Runner, param: ParamSet, pkB64: string): Promise<Response> {\n  return runner.send({ family: \"ml-kem\", param, op: \"encaps\", pk: pkB64 });\n}\n\n/** Constant-ish byte equality (length then content). Not security-critical. */\nexport function bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.length !== b.length) return false;\n  for (let i = 0; i < a.length; i++) {\n    if (a[i] !== b[i]) return false;\n  }\n  return true;\n}\n\n/** Base64 of `n` bytes, all zero — a deterministic wrong-but-valid blob. */\nexport function zerosB64(n: number): string {\n  return Buffer.alloc(n).toString(\"base64\");\n}\n\n/** Flip one bit in a base64 blob, returning new base64. Used to corrupt ct. */\nexport function flipBitB64(b64: string, byteIndex = 0, bit = 0): string {\n  const buf = Buffer.from(b64, \"base64\");\n  if (buf.length === 0) return b64;\n  const idx = byteIndex % buf.length;\n  buf[idx] = (buf[idx] as number) ^ (1 << (bit & 7));\n  return buf.toString(\"base64\");\n}\n\n/** Assert a value is a KEM size record (narrowing). */\nexport function requireKem(s: { family: string }): KemSizes {\n  if (s.family !== \"ml-kem\") {\n    throw new Error(`expected an ML-KEM parameter set, got ${s.family}`);\n  }\n  return s as KemSizes;\n}\n\n/**\n * Run `task(i)` for i in [0, count) with at most `limit` running concurrently,\n * returning results in index order. Used by categories whose ITERATIONS are\n * mutually independent (each builds its own keypair), so several iteration\n * chains can be in flight against the id-correlated SUT at once. Dependent\n * steps WITHIN a single iteration remain serial inside `task`.\n *\n * `limit <= 1` degrades to strictly serial execution. See\n * docs/audits/performance.md §7.1.\n */\nexport async function mapBounded<T>(\n  count: number,\n  limit: number,\n  task: (i: number) => Promise<T>,\n): Promise<T[]> {\n  const n = Math.max(0, count);\n  const cap = Math.max(1, Math.floor(limit));\n  const out: T[] = new Array(n);\n  let next = 0;\n  let firstError: Error | undefined;\n\n  const worker = async (): Promise<void> => {\n    while (firstError === undefined) {\n      const i = next++;\n      if (i >= n) return;\n      try {\n        out[i] = await task(i);\n      } catch (err) {\n        if (firstError === undefined) firstError = err as Error;\n        return;\n      }\n    }\n  };\n\n  const workers: Promise<void>[] = [];\n  for (let w = 0; w < Math.min(cap, n); w++) workers.push(worker());\n  await Promise.all(workers);\n  if (firstError !== undefined) throw firstError;\n  return out;\n}\n"]}

package/dist/categories/implicit-rejection.js.map

@@ -1 +1 @@
-{"version":3,"file":"implicit-rejection.js","sourceRoot":"","sources":["../../src/categories/implicit-rejection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAIL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,UAAU,EACV,UAAU,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,SAAS,EACT,UAAU,EACV,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,GAAG,GAAG,OAAgB,CAAC;AAC7B,MAAM,OAAO,GAAG,CAAC,CAAC;AAElB,MAAM,CAAC,MAAM,iBAAiB,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IAChF,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,oBAAoB;YAC9B,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,0CAA0C,EAAE,GAAG,CAAC,CAAC;YAChF,OAAO,EAAE,sBAAsB;SAChC,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC;IAE9B,yEAAyE;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAExE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,SAAS,EAAE,CAAC;YAEZ,yCAAyC;YACzC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACpE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CACT,IAAI,CACF,YAAY,CAAC,GAAG,EAChB,qEAAqE;oBACnE,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK;oBAC5E,mDAAmD,EACrD,GAAG,CACJ,CACF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,OAAO,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAElC,sBAAsB;YACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,IAAI,CACF,UAAU,CAAC,GAAG,EACd,wCAAwC,QAAQ,CAAC,MAAM,oBAAoB,KAAK,EAAE,EAClF,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAED,+CAA+C;YAC/C,IAAI,MAAM,GAAG,IAAI,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAClE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACjC,MAAM,GAAG,KAAK,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,aAAa,EAAE,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,IAAI,CACF,iBAAiB,CAAC,GAAG,EACrB,mDAAmD,OAAO,6BAA6B,EACvF,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,IAAI,CACF,uBAAuB,CAAC,GAAG,EAC3B,8DAA8D;oBAC5D,6BAA6B,EAC/B,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACV,GAAG,YAAY,kBAAkB;gBAC/B,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE;gBACvD,CAAC,CAAC,6CAA8C,GAAa,CAAC,OAAO,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,IAAI,CACF,oBAAoB,EACpB,GAAG,OAAO,IAAI,SAAS,8CAA8C;YACnE,kEAAkE,EACpE,GAAG,CACJ,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,oBAAoB;QAC9B,MAAM;QACN,QAAQ,EAAE,GAAG;QACb,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,SAAS,sDAAsD;YACpE,CAAC,CAAC,oDAAoD,OAAO,QAAQ,OAAO,QAAQ,aAAa,YAAY,OAAO,OAAO,SAAS,GAAG;KAC5I,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"implicit-rejection.js","sourceRoot":"","sources":["../../src/categories/implicit-rejection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAIL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,UAAU,EACV,UAAU,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,SAAS,EACT,UAAU,EACV,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,GAAG,GAAG,OAAgB,CAAC;AAC7B,MAAM,OAAO,GAAG,CAAC,CAAC;AAElB,MAAM,CAAC,MAAM,iBAAiB,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IAChF,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,oBAAoB;YAC9B,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,0CAA0C,EAAE,GAAG,CAAC,CAAC;YAChF,OAAO,EAAE,sBAAsB;SAChC,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC;IAE9B,yEAAyE;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAExE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,SAAS,EAAE,CAAC;YAEZ,yCAAyC;YACzC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACpE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CACT,IAAI,CACF,YAAY,CAAC,GAAG,EAChB,qEAAqE;oBACnE,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK;oBAC5E,mDAAmD,EACrD,GAAG,CACJ,CACF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,OAAO,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAElC,sBAAsB;YACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,IAAI,CACF,UAAU,CAAC,GAAG,EACd,wCAAwC,QAAQ,CAAC,MAAM,oBAAoB,KAAK,EAAE,EAClF,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAED,+CAA+C;YAC/C,IAAI,MAAM,GAAG,IAAI,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAClE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACjC,MAAM,GAAG,KAAK,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,aAAa,EAAE,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,IAAI,CACF,iBAAiB,CAAC,GAAG,EACrB,mDAAmD,OAAO,6BAA6B,EACvF,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,IAAI,CACF,uBAAuB,CAAC,GAAG,EAC3B,8DAA8D;oBAC5D,6BAA6B,EAC/B,GAAG,CACJ,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACV,GAAG,YAAY,kBAAkB;gBAC/B,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE;gBACvD,CAAC,CAAC,6CAA8C,GAAa,CAAC,OAAO,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,IAAI,CACF,oBAAoB,EACpB,GAAG,OAAO,IAAI,SAAS,8CAA8C;YACnE,kEAAkE,EACpE,GAAG,CACJ,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,oBAAoB;QAC9B,MAAM;QACN,QAAQ,EAAE,GAAG;QACb,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,SAAS,sDAAsD;YACpE,CAAC,CAAC,oDAAoD,OAAO,QAAQ,OAAO,QAAQ,aAAa,YAAY,OAAO,OAAO,SAAS,GAAG;KAC5I,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * Implicit-rejection category — AF-02 family (ML-KEM).\n *\n * ML-KEM uses the Fujisaki-Okamoto transform with *implicit rejection*: when\n * decapsulation receives a ciphertext that does not re-encrypt to itself, it\n * MUST NOT signal an error. Instead it derives a pseudo-random shared secret\n * from the secret key and the (rejected) ciphertext — a deterministic value\n * that an attacker cannot distinguish from a real one without the key.\n *\n * Concretely, for a corrupted ciphertext ct', a conforming SUT must:\n *   1. NOT return an error or crash (it returns ok with an `ss`);\n *   2. return a shared secret of the correct length;\n *   3. be deterministic: decaps(sk, ct') is stable across repeated calls;\n *   4. return a value that differs from the honest decaps(sk, ct).\n *\n * We make NO exact-value assertions — the implicit-rejection secret is\n * implementation-internal and we never fabricate it. We only assert the\n * observable structural properties above.\n *\n * Common AF-02 bugs this catches:\n *   - returning an error/throwing on bad ct (leaks validity — Kyber's whole\n *     point is to avoid this),\n *   - returning a zero/constant ss (the \"reject\" secret isn't keyed),\n *   - returning the honest ss anyway (no integrity check),\n *   - non-deterministic reject secret.\n */\n\nimport {\n  type Category,\n  type CategoryResult,\n  type Check,\n  fail,\n  pass,\n  rollUp,\n  skip,\n} from \"./types.js\";\nimport {\n  bytesEqual,\n  flipBitB64,\n  kemDecaps,\n  kemDecapsRaw,\n  kemEncaps,\n  kemKeygen,\n  requireKem,\n  UnexpectedResponse,\n} from \"./helpers.js\";\nimport { fromB64, toB64 } from \"../protocol.js\";\n\nconst BUG = \"AF-02\" as const;\nconst REPEATS = 3;\n\nexport const implicitRejection: Category = async (ctx): Promise<CategoryResult> => {\n  const checks: Check[] = [];\n\n  if (ctx.sizes.family !== \"ml-kem\") {\n    return {\n      category: \"implicit-rejection\",\n      status: \"skip\",\n      bugClass: BUG,\n      checks: [skip(\"applicability\", \"implicit rejection is an ML-KEM property\", BUG)],\n      summary: \"skipped (not ML-KEM)\",\n    };\n  }\n\n  const km = requireKem(ctx.sizes);\n  const param = km.id;\n  const ssLen = km.sharedSecret;\n\n  // Iterate over several fresh keys, corrupting one bit of each honest ct.\n  const trials = Math.max(1, Math.min(ctx.iterations, 16));\n  let noError = 0;\n  let goodLen = 0;\n  let deterministic = 0;\n  let differs = 0;\n  let attempted = 0;\n\n  for (let i = 0; i < trials; i++) {\n    try {\n      const { pk, sk } = await kemKeygen(ctx.runner, param);\n      const skB64 = toB64(sk);\n      const { ct } = await kemEncaps(ctx.runner, param, toB64(pk));\n      const honestCtB64 = toB64(ct);\n      const honestSs = await kemDecaps(ctx.runner, param, skB64, honestCtB64);\n\n      // Corrupt a different byte/bit each iteration so we exercise variety.\n      const badCtB64 = flipBitB64(honestCtB64, i % ct.length, i % 8);\n      attempted++;\n\n      // (1) must NOT error and must NOT crash.\n      const resp = await kemDecapsRaw(ctx.runner, param, skB64, badCtB64);\n      if (resp.ok !== true || !(\"ss\" in resp)) {\n        checks.push(\n          fail(\n            `no-error[${i}]`,\n            `decaps of a corrupted ciphertext returned an error/non-ss response ` +\n              `(${resp.ok === false ? `${resp.code}: ${resp.message}` : \"no ss field\"}); ` +\n              `ML-KEM must implicitly reject, not signal failure`,\n            BUG,\n          ),\n        );\n        continue;\n      }\n      noError++;\n      const rejectSs = fromB64(resp.ss);\n\n      // (2) correct length.\n      if (rejectSs.length === ssLen) {\n        goodLen++;\n      } else {\n        checks.push(\n          fail(\n            `length[${i}]`,\n            `implicit-rejection shared secret was ${rejectSs.length} bytes, expected ${ssLen}`,\n            BUG,\n          ),\n        );\n      }\n\n      // (3) deterministic for the same corrupted ct.\n      let stable = true;\n      for (let r = 1; r < REPEATS; r++) {\n        const again = await kemDecaps(ctx.runner, param, skB64, badCtB64);\n        if (!bytesEqual(rejectSs, again)) {\n          stable = false;\n          break;\n        }\n      }\n      if (stable) {\n        deterministic++;\n      } else {\n        checks.push(\n          fail(\n            `deterministic[${i}]`,\n            `implicit-rejection secret was not stable across ${REPEATS} identical corrupted decaps`,\n            BUG,\n          ),\n        );\n      }\n\n      // (4) differs from the honest shared secret.\n      if (!bytesEqual(rejectSs, honestSs)) {\n        differs++;\n      } else {\n        checks.push(\n          fail(\n            `differs-from-honest[${i}]`,\n            `implicit-rejection secret equals the honest shared secret — ` +\n              `corruption was not detected`,\n            BUG,\n          ),\n        );\n      }\n    } catch (err) {\n      const detail =\n        err instanceof UnexpectedResponse\n          ? `SUT returned an unexpected response: ${err.message}`\n          : `harness error (possible crash on bad ct): ${(err as Error).message}`;\n      checks.push(fail(`trial[${i}]`, detail, BUG));\n    }\n  }\n\n  if (attempted > 0 && checks.length === 0) {\n    checks.push(\n      pass(\n        \"implicit-rejection\",\n        `${noError}/${attempted} corrupted ciphertexts implicitly rejected: ` +\n          `no error, correct length, deterministic, distinct from honest ss`,\n        BUG,\n      ),\n    );\n  }\n\n  const status = rollUp(checks);\n  return {\n    category: \"implicit-rejection\",\n    status,\n    bugClass: BUG,\n    checks,\n    summary:\n      status === \"pass\"\n        ? `${attempted} corrupted ciphertexts handled by implicit rejection`\n        : `implicit-rejection violations detected (no-error:${noError} len:${goodLen} det:${deterministic} differs:${differs} of ${attempted})`,\n  };\n};\n"]}

package/dist/categories/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/categories/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,cAAc,YAAY,CAAC;AAW3B,4CAA4C;AAC5C,MAAM,CAAC,MAAM,UAAU,GAAkC;IACvD,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE;IAC5E,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE;IAC5E,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,iBAAiB,EAAE;IACzF,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;IAChE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE;IAC1E,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;IAC5D,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE;IACpE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;IACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;CACpE,CAAC;AAEF,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,aAAsB;IAClE,OAAO,UAAU,CAAC,MAAM,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;QAC3C,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,aAAa,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/categories/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,cAAc,YAAY,CAAC;AAW3B,4CAA4C;AAC5C,MAAM,CAAC,MAAM,UAAU,GAAkC;IACvD,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE;IAC5E,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE;IAC5E,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,iBAAiB,EAAE;IACzF,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;IAChE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE;IAC1E,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;IAC5D,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE;IACpE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;IACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;CACpE,CAAC;AAEF,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,aAAsB;IAClE,OAAO,UAAU,CAAC,MAAM,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;QAC3C,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,aAAa,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC","sourcesContent":["/**\n * Category registry. Each entry is selected by family so the runner only\n * executes categories relevant to the parameter set under test.\n */\n\nimport type { Category } from \"./types.js\";\nimport type { Family } from \"../sizes.js\";\n\nimport { correctness } from \"./correctness.js\";\nimport { determinism } from \"./determinism.js\";\nimport { implicitRejection } from \"./implicit-rejection.js\";\nimport { sizes } from \"./sizes.js\";\nimport { robustness } from \"./robustness.js\";\nimport { dsa } from \"./dsa.js\";\nimport { slhDsa } from \"./slh-dsa.js\";\nimport { kat } from \"./kat.js\";\nimport { timing } from \"./timing.js\";\n\nexport * from \"./types.js\";\n\n/** A named, family-scoped category. */\nexport interface RegisteredCategory {\n  name: string;\n  family: Family | \"any\";\n  /** Whether the category runs by default (timing is opt-in). */\n  defaultOn: boolean;\n  run: Category;\n}\n\n/** The full catalog, in execution order. */\nexport const CATEGORIES: readonly RegisteredCategory[] = [\n  { name: \"correctness\", family: \"ml-kem\", defaultOn: true, run: correctness },\n  { name: \"determinism\", family: \"ml-kem\", defaultOn: true, run: determinism },\n  { name: \"implicit-rejection\", family: \"ml-kem\", defaultOn: true, run: implicitRejection },\n  { name: \"sizes\", family: \"ml-kem\", defaultOn: true, run: sizes },\n  { name: \"robustness\", family: \"ml-kem\", defaultOn: true, run: robustness },\n  { name: \"dsa\", family: \"ml-dsa\", defaultOn: true, run: dsa },\n  { name: \"slh-dsa\", family: \"slh-dsa\", defaultOn: true, run: slhDsa },\n  { name: \"kat\", family: \"any\", defaultOn: true, run: kat },\n  { name: \"timing\", family: \"ml-kem\", defaultOn: false, run: timing },\n];\n\n/** Categories applicable to a family (plus family-agnostic ones). */\nexport function categoriesFor(family: Family, includeTiming: boolean): RegisteredCategory[] {\n  return CATEGORIES.filter(\n    (c) =>\n      (c.family === family || c.family === \"any\") &&\n      (c.defaultOn || (c.name === \"timing\" && includeTiming)),\n  );\n}\n\nexport { correctness, determinism, implicitRejection, sizes, robustness, dsa, slhDsa, kat, timing };\n"]}

package/dist/categories/kat.js.map

@@ -1 +1 @@
-{"version":3,"file":"kat.js","sourceRoot":"","sources":["../../src/categories/kat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAIL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAe,MAAM,eAAe,CAAC;AAEzD,MAAM,CAAC,MAAM,GAAG,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IAClE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM;YACd,MAAM,EAAE;gBACN,IAAI,CACF,SAAS,EACT,wEAAwE;oBACtE,2EAA2E,CAC9E;aACF;YACD,OAAO,EAAE,wCAAwC;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,MAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM;YACd,MAAM,EAAE;gBACN,IAAI,CAAC,MAAM,EAAE,+BAA+B,GAAG,CAAC,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC;aACzF;YACD,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,0DAA0D;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CACF,YAAY,EACZ,UAAU,MAAM,CAAC,OAAO,CAAC,MAAM,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,YAAY;YAC/E,gBAAgB,KAAK,EAAE,CAC1B,CACF,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,+BAA+B,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,GAAG,EAAE,CAAC;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC;gBACV,yDAAyD;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK,kCAAkC,CAAC,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,OAAO,IAAI,KAAK,qBAAqB;YAC1C,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,mBAAmB;KAC7E,CAAC;AACJ,CAAC,CAAC;AAOF,KAAK,UAAU,WAAW,CACxB,GAAyC,EACzC,CAAS;IAET,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAEtB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;aACpB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3D,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,gEAAgE;iBACzE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,IAAI,IAAI;gBACjB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;gBACrC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACnF,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,CAAC,CAAC,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3D,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,uEAAuE;iBAChF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,IAAI,IAAI;gBACjB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;gBACrC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QAC5E,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aAChB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;YAC3D,CAAC;YACD,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACvC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE;gBACpC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;QAC5E,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;gBACjB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;aAClB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;YAC1E,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ;gBAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,KAAK,mBAAmB,EAAE;gBAChE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,IAAI,CAAC,KAAK,cAAc,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"kat.js","sourceRoot":"","sources":["../../src/categories/kat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAIL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAe,MAAM,eAAe,CAAC;AAEzD,MAAM,CAAC,MAAM,GAAG,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IAClE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM;YACd,MAAM,EAAE;gBACN,IAAI,CACF,SAAS,EACT,wEAAwE;oBACtE,2EAA2E,CAC9E;aACF;YACD,OAAO,EAAE,wCAAwC;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,MAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM;YACd,MAAM,EAAE;gBACN,IAAI,CAAC,MAAM,EAAE,+BAA+B,GAAG,CAAC,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC;aACzF;YACD,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,0DAA0D;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CACF,YAAY,EACZ,UAAU,MAAM,CAAC,OAAO,CAAC,MAAM,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,YAAY;YAC/E,gBAAgB,KAAK,EAAE,CAC1B,CACF,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,+BAA+B,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,GAAG,EAAE,CAAC;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC;gBACV,yDAAyD;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK,kCAAkC,CAAC,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,OAAO,IAAI,KAAK,qBAAqB;YAC1C,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,mBAAmB;KAC7E,CAAC;AACJ,CAAC,CAAC;AAOF,KAAK,UAAU,WAAW,CACxB,GAAyC,EACzC,CAAS;IAET,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAEtB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;aACpB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3D,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,gEAAgE;iBACzE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,IAAI,IAAI;gBACjB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;gBACrC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACnF,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,CAAC,CAAC,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3D,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,uEAAuE;iBAChF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,IAAI,IAAI;gBACjB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE;gBACrC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QAC5E,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aAChB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;YAC3D,CAAC;YACD,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACvC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE;gBACpC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;QAC5E,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;gBACjB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;aAClB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;YAC1E,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ;gBAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,KAAK,mBAAmB,EAAE;gBAChE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,IAAI,CAAC,KAAK,cAAc,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * KAT category — Known-Answer Tests against OFFICIAL NIST ACVP vectors.\n *\n * This category is SKIPPED unless the user supplies `--vectors <dir>` with real\n * ACVP files. Sieve never fabricates expected values; if no vectors are\n * present, every check is a `skip` with a clear message pointing at\n * vectors/README.md.\n *\n * What we check when vectors ARE present:\n *   - kem-keygen: if a seed is given, deterministic keygen must reproduce the\n *     expected pk/sk exactly. (Skipped if the SUT can't do seeded keygen.)\n *   - kem-encap: if coins are given, deterministic encaps must reproduce ct/ss.\n *   - kem-decap: decaps(sk, ct) must equal the expected ss exactly.\n *   - dsa-verify: verify(pk, msg, sig) must equal the expected verdict.\n *\n * These ARE exact-value assertions — but the expected bytes come from the\n * user's NIST files, not from Sieve.\n */\n\nimport {\n  type Category,\n  type CategoryResult,\n  type Check,\n  fail,\n  pass,\n  rollUp,\n  skip,\n} from \"./types.js\";\nimport { bytesEqual } from \"./helpers.js\";\nimport { fromB64, toB64 } from \"../protocol.js\";\nimport { loadVectors, type Vector } from \"../vectors.js\";\n\nexport const kat: Category = async (ctx): Promise<CategoryResult> => {\n  if (!ctx.vectorsDir) {\n    return {\n      category: \"kat\",\n      status: \"skip\",\n      checks: [\n        skip(\n          \"vectors\",\n          \"no --vectors <dir> supplied; Sieve ships no test vectors and will not \" +\n            \"fabricate them. See vectors/README.md to obtain official NIST ACVP files.\",\n        ),\n      ],\n      summary: \"skipped — no official vectors provided\",\n    };\n  }\n\n  const checks: Check[] = [];\n  let loaded: ReturnType<typeof loadVectors>;\n  try {\n    loaded = loadVectors(ctx.vectorsDir);\n  } catch (err) {\n    return {\n      category: \"kat\",\n      status: \"fail\",\n      checks: [\n        fail(\"load\", `could not load vectors from ${ctx.vectorsDir}: ${(err as Error).message}`),\n      ],\n      summary: \"vector load failed\",\n    };\n  }\n\n  for (const note of loaded.notes.slice(0, 10)) {\n    checks.push(skip(\"note\", note));\n  }\n\n  // Only run vectors matching the parameter set under test.\n  const param = ctx.sizes.id;\n  const relevant = loaded.vectors.filter((v) => v.param === param);\n  if (relevant.length === 0) {\n    checks.push(\n      skip(\n        \"applicable\",\n        `loaded ${loaded.vectors.length} vector(s) from ${loaded.files.length} file(s), ` +\n          `but none for ${param}`,\n      ),\n    );\n    const status = rollUp(checks);\n    return { category: \"kat\", status, checks, summary: `no ${param} vectors among supplied files` };\n  }\n\n  let okCount = 0;\n  let idx = 0;\n  for (const v of relevant) {\n    idx++;\n    try {\n      const result = await checkVector(ctx, v);\n      if (result.ok) {\n        okCount++;\n        // Keep the report compact: don't push a pass per vector.\n      } else {\n        checks.push(fail(`${v.kind}[${idx}]`, result.detail, undefined));\n      }\n    } catch (err) {\n      checks.push(fail(`${v.kind}[${idx}]`, `harness error: ${(err as Error).message}`));\n    }\n  }\n\n  if (okCount > 0) {\n    checks.push(\n      pass(\"kat\", `${okCount}/${relevant.length} ${param} vectors matched expected values`),\n    );\n  }\n\n  const status = rollUp(checks);\n  return {\n    category: \"kat\",\n    status,\n    checks,\n    summary:\n      status === \"pass\"\n        ? `${okCount} ${param} KAT vectors passed`\n        : `${checks.filter((c) => c.status === \"fail\").length} KAT mismatch(es)`,\n  };\n};\n\ninterface VectorResult {\n  ok: boolean;\n  detail: string;\n}\n\nasync function checkVector(\n  ctx: import(\"./types.js\").CategoryContext,\n  v: Vector,\n): Promise<VectorResult> {\n  const { runner } = ctx;\n  const param = v.param;\n\n  switch (v.kind) {\n    case \"kem-keygen\": {\n      if (!v.seed) return { ok: true, detail: \"no seed; skipped\" };\n      const resp = await runner.send({\n        family: \"ml-kem\",\n        param,\n        op: \"keygen\",\n        seed: toB64(v.seed),\n      });\n      if (resp.ok !== true || !(\"pk\" in resp) || !(\"sk\" in resp)) {\n        return {\n          ok: false,\n          detail: \"seeded keygen did not return pk/sk (SUT may not support seeds)\",\n        };\n      }\n      const pkOk = bytesEqual(fromB64(resp.pk), v.pk);\n      const skOk = bytesEqual(fromB64(resp.sk), v.sk);\n      return pkOk && skOk\n        ? { ok: true, detail: \"pk/sk match\" }\n        : { ok: false, detail: `seeded keygen mismatch (pkOk=${pkOk}, skOk=${skOk})` };\n    }\n    case \"kem-encap\": {\n      if (!v.coins) return { ok: true, detail: \"no coins; skipped\" };\n      const resp = await runner.send({\n        family: \"ml-kem\",\n        param,\n        op: \"encaps\",\n        pk: toB64(v.pk),\n        coins: toB64(v.coins),\n      });\n      if (resp.ok !== true || !(\"ct\" in resp) || !(\"ss\" in resp)) {\n        return {\n          ok: false,\n          detail: \"deterministic encaps did not return ct/ss (SUT may not support coins)\",\n        };\n      }\n      const ctOk = bytesEqual(fromB64(resp.ct), v.ct);\n      const ssOk = bytesEqual(fromB64(resp.ss), v.ss);\n      return ctOk && ssOk\n        ? { ok: true, detail: \"ct/ss match\" }\n        : { ok: false, detail: `encaps mismatch (ctOk=${ctOk}, ssOk=${ssOk})` };\n    }\n    case \"kem-decap\": {\n      const resp = await runner.send({\n        family: \"ml-kem\",\n        param,\n        op: \"decaps\",\n        sk: toB64(v.sk),\n        ct: toB64(v.ct),\n      });\n      if (resp.ok !== true || !(\"ss\" in resp)) {\n        return { ok: false, detail: \"decaps did not return ss\" };\n      }\n      return bytesEqual(fromB64(resp.ss), v.ss)\n        ? { ok: true, detail: \"ss matches\" }\n        : { ok: false, detail: \"decaps shared secret does not match expected\" };\n    }\n    case \"dsa-verify\": {\n      const resp = await runner.send({\n        family: \"ml-dsa\",\n        param,\n        op: \"verify\",\n        pk: toB64(v.pk),\n        msg: toB64(v.msg),\n        sig: toB64(v.sig),\n      });\n      if (resp.ok !== true || !(\"valid\" in resp)) {\n        return { ok: false, detail: \"verify did not return a 'valid' verdict\" };\n      }\n      return resp.valid === v.expected\n        ? { ok: true, detail: `verdict ${resp.valid} matches expected` }\n        : { ok: false, detail: `verify returned ${resp.valid}, expected ${v.expected}` };\n    }\n  }\n}\n"]}

package/dist/categories/robustness.js.map

@@ -1 +1 @@
-{"version":3,"file":"robustness.js","sourceRoot":"","sources":["../../src/categories/robustness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ;AAElC,MAAM,CAAC,MAAM,UAAU,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IACzE,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,2CAA2C;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IACpB,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE9D,MAAM,MAAM,GAA0D;QACpE;YACE,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;SAC9E;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC;SAC9F;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;SACvF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACjD,EAAE,EAAE,EAAE;aACP,CAAC;SACL;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,EAAE;gBACN,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnD,CAAC;SACL;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACjD,EAAE,EAAE,WAAW;aAChB,CAAC;SACL;KACF,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,uEAAuE,CAAC,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,wCAAyC,GAAa,CAAC,OAAO,EAAE,CAAC,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChE,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,MAAM;QACN,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,8CAA8C;YAChE,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,oCAAoC;KACrE,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"robustness.js","sourceRoot":"","sources":["../../src/categories/robustness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ;AAElC,MAAM,CAAC,MAAM,UAAU,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IACzE,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,2CAA2C;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IACpB,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE9D,MAAM,MAAM,GAA0D;QACpE;YACE,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;SAC9E;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC;SAC9F;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;SACvF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACjD,EAAE,EAAE,EAAE;aACP,CAAC;SACL;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,EAAE;gBACN,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnD,CAAC;SACL;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,QAAQ;gBAChB,KAAK;gBACL,EAAE,EAAE,QAAQ;gBACZ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACjD,EAAE,EAAE,WAAW;aAChB,CAAC;SACL;KACF,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,uEAAuE,CAAC,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,wCAAyC,GAAa,CAAC,OAAO,EAAE,CAAC,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChE,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,MAAM;QACN,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,8CAA8C;YAChE,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,oCAAoC;KACrE,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * Robustness category (ML-KEM).\n *\n * Feed deliberately malformed inputs and require a *defined error* response —\n * never a crash, hang, or silent success:\n *   - empty pk/ct/sk,\n *   - non-base64 garbage in a byte field,\n *   - an oversized blob (e.g. 1 MiB) where a key/ct is expected.\n *\n * This overlaps with the size category but targets structural malformation\n * rather than off-by-N lengths. Together they map to the AF-05 family.\n */\n\nimport { type Category, type CategoryResult, type Check, fail, pass, rollUp } from \"./types.js\";\nimport { requireKem } from \"./helpers.js\";\nimport type { Response } from \"../protocol.js\";\n\nconst OVERSIZE = 1 << 20; // 1 MiB\n\nexport const robustness: Category = async (ctx): Promise<CategoryResult> => {\n  const checks: Check[] = [];\n\n  if (ctx.sizes.family !== \"ml-kem\") {\n    return {\n      category: \"robustness\",\n      status: \"skip\",\n      checks: [],\n      summary: \"robustness probes currently target ML-KEM\",\n    };\n  }\n\n  const km = requireKem(ctx.sizes);\n  const param = km.id;\n  const oversizeB64 = Buffer.alloc(OVERSIZE).toString(\"base64\");\n\n  const probes: Array<{ name: string; run: () => Promise<Response> }> = [\n    {\n      name: \"encaps-empty-pk\",\n      run: () => ctx.runner.send({ family: \"ml-kem\", param, op: \"encaps\", pk: \"\" }),\n    },\n    {\n      name: \"encaps-garbage-pk\",\n      run: () => ctx.runner.send({ family: \"ml-kem\", param, op: \"encaps\", pk: \"!!!not base64!!!\" }),\n    },\n    {\n      name: \"encaps-oversize-pk\",\n      run: () => ctx.runner.send({ family: \"ml-kem\", param, op: \"encaps\", pk: oversizeB64 }),\n    },\n    {\n      name: \"decaps-empty-ct\",\n      run: () =>\n        ctx.runner.send({\n          family: \"ml-kem\",\n          param,\n          op: \"decaps\",\n          sk: Buffer.alloc(km.secretKey).toString(\"base64\"),\n          ct: \"\",\n        }),\n    },\n    {\n      name: \"decaps-empty-sk\",\n      run: () =>\n        ctx.runner.send({\n          family: \"ml-kem\",\n          param,\n          op: \"decaps\",\n          sk: \"\",\n          ct: Buffer.alloc(km.ciphertext).toString(\"base64\"),\n        }),\n    },\n    {\n      name: \"decaps-oversize-ct\",\n      run: () =>\n        ctx.runner.send({\n          family: \"ml-kem\",\n          param,\n          op: \"decaps\",\n          sk: Buffer.alloc(km.secretKey).toString(\"base64\"),\n          ct: oversizeB64,\n        }),\n    },\n  ];\n\n  for (const probe of probes) {\n    try {\n      const resp = await probe.run();\n      if (resp.ok === false) {\n        checks.push(pass(probe.name, `defined error: ${resp.code} (${resp.message})`));\n      } else {\n        checks.push(\n          fail(probe.name, \"SUT returned a success result for malformed input instead of an error\"),\n        );\n      }\n    } catch (err) {\n      checks.push(\n        fail(probe.name, `SUT crashed/hung on malformed input: ${(err as Error).message}`),\n      );\n    }\n  }\n\n  const status = rollUp(checks);\n  const failed = checks.filter((c) => c.status === \"fail\").length;\n  return {\n    category: \"robustness\",\n    status,\n    checks,\n    summary:\n      status === \"pass\"\n        ? `${probes.length} malformed-input probes all rejected cleanly`\n        : `${failed}/${probes.length} malformed-input probes mishandled`,\n  };\n};\n"]}

package/dist/categories/signature.js.map

@@ -1 +1 @@
-{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/categories/signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAKL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAuC,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAsC,MAAM,aAAa,CAAC;AAEnF,MAAM,QAAQ,GAAG,OAAgB,CAAC;AAElC;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAuB;IACzE,OAAO,KAAK,EAAE,GAAG,EAA2B,EAAE;QAC5C,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,GAAG,IAAI,6BAA6B,MAAM,iBAAiB;aACrE,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,MAAuB,EACvB,CAAiB,EACjB,GAAoB;IAEpB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;IACnB,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE1C,mDAAmD;IACnD,IAAI,KAAa,CAAC;IAClB,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,8BAA8B,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QACd,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS;YACvB,CAAC,CAAC,IAAI,CACF,WAAW,EACX,oBAAoB,EAAE,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,GAAG,EAC/D,QAAQ,CACT;YACH,CAAC,CAAC,IAAI,CACF,WAAW,EACX,oBAAoB,EAAE,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,EAAE,EAC9D,QAAQ,CACT,CACN,CAAC;QACF,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS;YACvB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,GAAG,EAAE,QAAQ,CAAC;YACzF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAC3F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAChC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAC3E,GAAG,CAAC,aAAa,IAAI,EAAE,CACxB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAa,CAAC;QAChC,QAAQ,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;YAC/B,QAAQ,EAAE,CAAC;QACb,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CACT,IAAI,CACF,cAAc,CAAC,GAAG,EAClB,aAAa,GAAG,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,EAAE,EACxD,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,4EAA4E;YAC5E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CACtD;gBACE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;gBAC7E,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE;gBAClF,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE;aACnF,EACD,GAAG,CAAC,aAAa,IAAI,EAAE,CACxB,CAAC;YAEF,IAAI,OAAO,CAAC,IAAgB,CAAC,EAAE,CAAC;gBAC9B,UAAU,EAAE,CAAC;YACf,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAkB,CAAC,EAAE,CAAC;gBACjC,eAAe,EAAE,CAAC;YACpB,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAkB,CAAC,EAAE,CAAC;gBACjC,eAAe,EAAE,CAAC;YACpB,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,UAAU,IAAI,QAAQ,sBAAsB,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,YAAY,EAAE,GAAG,eAAe,IAAI,QAAQ,qCAAqC,CAAC,CACxF,CAAC;QACJ,CAAC;QACD,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,YAAY,EAAE,GAAG,eAAe,IAAI,QAAQ,uCAAuC,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CACF,YAAY,EACZ,OAAO,QAAQ,gCAAgC,CAAC,CAAC,SAAS,QAAQ,EAClE,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAEjE,4EAA4E;IAC5E,MAAM,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAC3D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACd,MAAM;QACN,KAAK;QACL,EAAE,EAAE,QAAQ;QACZ,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAC7B,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;KAC3B,CAAC,CACH,CAAC;IACF,MAAM,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAC3D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACd,MAAM;QACN,KAAK;QACL,EAAE,EAAE,QAAQ;QACZ,EAAE,EAAE,KAAK;QACT,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;KAC/B,CAAC,CACH,CAAC;IAEF,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,OAAO,CAAC,IAAc;IAC7B,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAe,EACf,GAAoB,EACpB,MAAuB,EACvB,KAAe,EACf,KAAa,EACb,KAAa;IAEb,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;IAC9F,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CACtC;YACE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;YAC9D,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;SAC/D;QACD,yEAAyE;QACzE,yCAAyC;QACzC,CAAC,CACF,CAAC;QACF,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,uDAAuD,CAAC,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;QACtC,MAAM,CAAC,IAAI,CACT,IAAI,CACF,cAAc,EACd,aAAa;YACX,CAAC,CAAC,wFAAwF;YAC1F,CAAC,CAAC,+EAA+E,CACpF,CACF,CAAC;QACF,kDAAkD;QAClD,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CACxC;YACE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;YAC5E,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;SAC7E,EACD,CAAC,CACF,CAAC;QACF,IAAI,OAAO,CAAC,EAAc,CAAC,IAAI,OAAO,CAAC,EAAc,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,yCAAyC,CAAC,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,+CAA+C,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,MAAe,EAAE,KAAc;IACzD,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM;QACN,MAAM,EAAE,GAAG;QACX,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,IAAI,qCAAqC;YAC9C,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,IAAI,IAAI,WAAW;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAe,EACf,IAAY,EACZ,EAA2B;IAE3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACnD,oEAAoE;YACpE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mDAAmD,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EAAE,4DAA4D,EAAE,QAAQ,CAAC,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,IAAI,CACF,IAAI,EACJ,kDAAmD,GAAa,CAAC,OAAO,EAAE,EAC1E,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,wBAAwB;QAClD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/categories/signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAKL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAuC,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAsC,MAAM,aAAa,CAAC;AAEnF,MAAM,QAAQ,GAAG,OAAgB,CAAC;AAElC;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAuB;IACzE,OAAO,KAAK,EAAE,GAAG,EAA2B,EAAE;QAC5C,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,GAAG,IAAI,6BAA6B,MAAM,iBAAiB;aACrE,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,MAAuB,EACvB,CAAiB,EACjB,GAAoB;IAEpB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;IACnB,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE1C,mDAAmD;IACnD,IAAI,KAAa,CAAC;IAClB,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,8BAA8B,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QACd,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS;YACvB,CAAC,CAAC,IAAI,CACF,WAAW,EACX,oBAAoB,EAAE,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,GAAG,EAC/D,QAAQ,CACT;YACH,CAAC,CAAC,IAAI,CACF,WAAW,EACX,oBAAoB,EAAE,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,EAAE,EAC9D,QAAQ,CACT,CACN,CAAC;QACF,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS;YACvB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,GAAG,EAAE,QAAQ,CAAC;YACzF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAC3F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAChC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAC3E,GAAG,CAAC,aAAa,IAAI,EAAE,CACxB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAa,CAAC;QAChC,QAAQ,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;YAC/B,QAAQ,EAAE,CAAC;QACb,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CACT,IAAI,CACF,cAAc,CAAC,GAAG,EAClB,aAAa,GAAG,CAAC,MAAM,oBAAoB,CAAC,CAAC,SAAS,EAAE,EACxD,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,4EAA4E;YAC5E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CACtD;gBACE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;gBAC7E,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE;gBAClF,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE;aACnF,EACD,GAAG,CAAC,aAAa,IAAI,EAAE,CACxB,CAAC;YAEF,IAAI,OAAO,CAAC,IAAgB,CAAC,EAAE,CAAC;gBAC9B,UAAU,EAAE,CAAC;YACf,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAkB,CAAC,EAAE,CAAC;gBACjC,eAAe,EAAE,CAAC;YACpB,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAkB,CAAC,EAAE,CAAC;gBACjC,eAAe,EAAE,CAAC;YACpB,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,UAAU,IAAI,QAAQ,sBAAsB,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,YAAY,EAAE,GAAG,eAAe,IAAI,QAAQ,qCAAqC,CAAC,CACxF,CAAC;QACJ,CAAC;QACD,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,YAAY,EAAE,GAAG,eAAe,IAAI,QAAQ,uCAAuC,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CACF,YAAY,EACZ,OAAO,QAAQ,gCAAgC,CAAC,CAAC,SAAS,QAAQ,EAClE,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAEjE,4EAA4E;IAC5E,MAAM,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAC3D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACd,MAAM;QACN,KAAK;QACL,EAAE,EAAE,QAAQ;QACZ,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAC7B,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;KAC3B,CAAC,CACH,CAAC;IACF,MAAM,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAC3D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACd,MAAM;QACN,KAAK;QACL,EAAE,EAAE,QAAQ;QACZ,EAAE,EAAE,KAAK;QACT,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;KAC/B,CAAC,CACH,CAAC;IAEF,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,OAAO,CAAC,IAAc;IAC7B,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAe,EACf,GAAoB,EACpB,MAAuB,EACvB,KAAe,EACf,KAAa,EACb,KAAa;IAEb,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;IAC9F,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CACtC;YACE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;YAC9D,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;SAC/D;QACD,yEAAyE;QACzE,yCAAyC;QACzC,CAAC,CACF,CAAC;QACF,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,uDAAuD,CAAC,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;QACtC,MAAM,CAAC,IAAI,CACT,IAAI,CACF,cAAc,EACd,aAAa;YACX,CAAC,CAAC,wFAAwF;YAC1F,CAAC,CAAC,+EAA+E,CACpF,CACF,CAAC;QACF,kDAAkD;QAClD,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CACxC;YACE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;YAC5E,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,QAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;SAC7E,EACD,CAAC,CACF,CAAC;QACF,IAAI,OAAO,CAAC,EAAc,CAAC,IAAI,OAAO,CAAC,EAAc,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,yCAAyC,CAAC,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,+CAA+C,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,MAAe,EAAE,KAAc;IACzD,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM;QACN,MAAM,EAAE,GAAG;QACX,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,GAAG,IAAI,qCAAqC;YAC9C,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,IAAI,IAAI,WAAW;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAe,EACf,IAAY,EACZ,EAA2B;IAE3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACnD,oEAAoE;YACpE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mDAAmD,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EAAE,4DAA4D,EAAE,QAAQ,CAAC,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,IAAI,CACF,IAAI,EACJ,kDAAmD,GAAa,CAAC,OAAO,EAAE,EAC1E,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,wBAAwB;QAClD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["/**\n * Generic signature self-consistency category (FIPS 204 ML-DSA, FIPS 205\n * SLH-DSA).\n *\n * Both schemes expose the same black-box surface — keygen, sign, verify — so a\n * single driver covers them. Signing is randomized (hedged) by default, so we\n * cannot assert exact signature bytes without official vectors; but several\n * properties hold for any conforming implementation and need no external data:\n *\n *   - sizes:            pk/sk lengths match the parameter set; signature length\n *                       matches the fixed encoding.\n *   - sign-then-verify: verify(pk, msg, sign(sk, msg)) === true, over N msgs.\n *   - tamper-message:   verify(pk, msg', sig) === false when msg' != msg.\n *   - tamper-signature: verify(pk, msg, flip-a-bit(sig)) === false.\n *   - wrong-length verify input is rejected with a defined error (AF-05).\n *   - signing-mode (advisory): detect whether sign(sk, msg) is deterministic or\n *     hedged by signing one fixed message twice and comparing. BOTH are valid;\n *     this never fails — it only surfaces the observed behavior.\n *\n * Exact-value KAT (sigVer vectors) is handled separately by the kat category.\n */\n\nimport {\n  type Category,\n  type CategoryContext,\n  type CategoryResult,\n  type Check,\n  fail,\n  pass,\n  rollUp,\n  skip,\n} from \"./types.js\";\nimport { flipBitB64, zerosB64 } from \"./helpers.js\";\nimport { fromB64, toB64, type Response, type SignatureFamily } from \"../protocol.js\";\nimport { asSignatureSizes, type ParamSet, type SignatureSizes } from \"../sizes.js\";\n\nconst BUG_SIZE = \"AF-05\" as const;\n\n/**\n * Build a signature category bound to a family. The same logic drives ML-DSA\n * and SLH-DSA; only the family tag on the wire requests differs.\n */\nexport function makeSignatureCategory(name: string, family: SignatureFamily): Category {\n  return async (ctx): Promise<CategoryResult> => {\n    const d = asSignatureSizes(ctx.sizes);\n    if (!d || d.family !== family) {\n      return {\n        category: name,\n        status: \"skip\",\n        checks: [],\n        summary: `${name} category applies only to ${family} parameter sets`,\n      };\n    }\n    return runSignature(name, family, d, ctx);\n  };\n}\n\nasync function runSignature(\n  name: string,\n  family: SignatureFamily,\n  d: SignatureSizes,\n  ctx: CategoryContext,\n): Promise<CategoryResult> {\n  const param = d.id;\n  const checks: Check[] = [];\n  const msgs = makeMessages(ctx.iterations);\n\n  // Keygen once; reuse the key pair across messages.\n  let pkB64: string;\n  let skB64: string;\n  try {\n    const kg = await ctx.runner.send({ family, param, op: \"keygen\" });\n    if (kg.ok !== true || !(\"pk\" in kg) || !(\"sk\" in kg)) {\n      return wrap(name, checks, [fail(\"keygen\", `${family} keygen did not return pk/sk`)]);\n    }\n    pkB64 = kg.pk;\n    skB64 = kg.sk;\n    const pk = fromB64(pkB64);\n    const sk = fromB64(skB64);\n    checks.push(\n      pk.length === d.publicKey\n        ? pass(\n            \"pk-length\",\n            `verification key ${pk.length} bytes (expected ${d.publicKey})`,\n            BUG_SIZE,\n          )\n        : fail(\n            \"pk-length\",\n            `verification key ${pk.length} bytes, expected ${d.publicKey}`,\n            BUG_SIZE,\n          ),\n    );\n    checks.push(\n      sk.length === d.secretKey\n        ? pass(\"sk-length\", `signing key ${sk.length} bytes (expected ${d.secretKey})`, BUG_SIZE)\n        : fail(\"sk-length\", `signing key ${sk.length} bytes, expected ${d.secretKey}`, BUG_SIZE),\n    );\n  } catch (err) {\n    return wrap(name, checks, [fail(\"keygen\", `harness error: ${(err as Error).message}`)]);\n  }\n\n  // --- Round-trips. Each message's sign is independent, so we PIPELINE the\n  // sign requests (bounded concurrency), then process verdicts. Verify probes\n  // for a given message are independent across messages too. ----------------\n  let signed: Response[];\n  try {\n    signed = await ctx.runner.sendMany(\n      msgs.map((msg) => ({ family, param, op: \"sign\" as const, sk: skB64, msg })),\n      ctx.pipelineDepth ?? 16,\n    );\n  } catch (err) {\n    return wrap(name, checks, [fail(\"sign\", `harness error: ${(err as Error).message}`)]);\n  }\n\n  let goodVerify = 0;\n  let tamperMsgCaught = 0;\n  let tamperSigCaught = 0;\n  let sigLenOk = 0;\n  let attempts = 0;\n\n  for (let i = 0; i < msgs.length; i++) {\n    const msgB64 = msgs[i] as string;\n    const s = signed[i] as Response;\n    attempts++;\n    if (s.ok !== true || !(\"sig\" in s)) {\n      checks.push(fail(`sign[${i}]`, \"sign did not return a signature\"));\n      continue;\n    }\n    const sigB64 = s.sig;\n    const sig = fromB64(sigB64);\n    if (sig.length === d.signature) {\n      sigLenOk++;\n    } else if (i < 3) {\n      checks.push(\n        fail(\n          `sig-length[${i}]`,\n          `signature ${sig.length} bytes, expected ${d.signature}`,\n          BUG_SIZE,\n        ),\n      );\n    }\n\n    try {\n      // The three verify probes for this message are independent → pipeline them.\n      const tamperedMsg = flipBitB64(msgB64.length > 0 ? msgB64 : toB64(new Uint8Array([0])), 0, 1);\n      const tamperedSig = flipBitB64(sigB64, sig.length >> 1, 3);\n      const [good, badMsg, badSig] = await ctx.runner.sendMany(\n        [\n          { family, param, op: \"verify\" as const, pk: pkB64, msg: msgB64, sig: sigB64 },\n          { family, param, op: \"verify\" as const, pk: pkB64, msg: tamperedMsg, sig: sigB64 },\n          { family, param, op: \"verify\" as const, pk: pkB64, msg: msgB64, sig: tamperedSig },\n        ],\n        ctx.pipelineDepth ?? 16,\n      );\n\n      if (verdict(good as Response)) {\n        goodVerify++;\n      } else if (i < 3) {\n        checks.push(fail(`verify[${i}]`, \"a freshly produced signature failed to verify\"));\n      }\n      if (!verdict(badMsg as Response)) {\n        tamperMsgCaught++;\n      } else if (i < 3) {\n        checks.push(fail(`tamper-msg[${i}]`, \"signature verified against a different message\"));\n      }\n      if (!verdict(badSig as Response)) {\n        tamperSigCaught++;\n      } else if (i < 3) {\n        checks.push(fail(`tamper-sig[${i}]`, \"a bit-flipped signature still verified\"));\n      }\n    } catch (err) {\n      checks.push(fail(`verify[${i}]`, `harness error: ${(err as Error).message}`));\n    }\n  }\n\n  if (attempts > 0) {\n    if (goodVerify === attempts) {\n      checks.push(pass(\"sign-verify\", `${goodVerify}/${attempts} signatures verified`));\n    }\n    if (tamperMsgCaught === attempts) {\n      checks.push(\n        pass(\"tamper-msg\", `${tamperMsgCaught}/${attempts} altered-message forgeries rejected`),\n      );\n    }\n    if (tamperSigCaught === attempts) {\n      checks.push(\n        pass(\"tamper-sig\", `${tamperSigCaught}/${attempts} altered-signature forgeries rejected`),\n      );\n    }\n    if (sigLenOk === attempts) {\n      checks.push(\n        pass(\n          \"sig-length\",\n          `all ${sigLenOk} signatures had the expected ${d.signature} bytes`,\n          BUG_SIZE,\n        ),\n      );\n    }\n  }\n\n  // --- Advisory: deterministic vs hedged signing ---------------------------\n  await probeSigningMode(checks, ctx, family, param, skB64, pkB64);\n\n  // --- Negative: wrong-length verify inputs must be rejected cleanly -------\n  await expectVerifyReject(checks, \"verify-pk-too-short\", () =>\n    ctx.runner.send({\n      family,\n      param,\n      op: \"verify\",\n      pk: zerosB64(d.publicKey - 1),\n      msg: toB64(new Uint8Array([1, 2, 3])),\n      sig: zerosB64(d.signature),\n    }),\n  );\n  await expectVerifyReject(checks, \"verify-sig-too-long\", () =>\n    ctx.runner.send({\n      family,\n      param,\n      op: \"verify\",\n      pk: pkB64,\n      msg: toB64(new Uint8Array([1, 2, 3])),\n      sig: zerosB64(d.signature + 1),\n    }),\n  );\n\n  return wrap(name, checks, []);\n}\n\nfunction verdict(resp: Response): boolean {\n  if (resp.ok !== true || !(\"valid\" in resp)) {\n    throw new Error(\"verify did not return a 'valid' verdict\");\n  }\n  return resp.valid;\n}\n\n/**\n * Advisory probe: sign one fixed message twice and report whether the SUT is\n * deterministic (identical signatures) or hedged (differing signatures). BOTH\n * are FIPS-conforming, so this NEVER fails — it records a `skip`-status note (so\n * it cannot affect the verdict) describing the observed behavior. We also\n * confirm both signatures verify, which IS asserted.\n */\nasync function probeSigningMode(\n  checks: Check[],\n  ctx: CategoryContext,\n  family: SignatureFamily,\n  param: ParamSet,\n  skB64: string,\n  pkB64: string,\n): Promise<void> {\n  const msgB64 = toB64(new Uint8Array([0x73, 0x69, 0x67, 0x6d, 0x6f, 0x64, 0x65])); // \"sigmode\"\n  try {\n    const [a, b] = await ctx.runner.sendMany(\n      [\n        { family, param, op: \"sign\" as const, sk: skB64, msg: msgB64 },\n        { family, param, op: \"sign\" as const, sk: skB64, msg: msgB64 },\n      ],\n      // Keep these two strictly ordered/serial-equivalent is unnecessary; they\n      // are independent. A depth of 2 is fine.\n      2,\n    );\n    if (a.ok !== true || !(\"sig\" in a) || b.ok !== true || !(\"sig\" in b)) {\n      checks.push(skip(\"signing-mode\", \"could not obtain two signatures to compare (advisory)\"));\n      return;\n    }\n    const deterministic = a.sig === b.sig;\n    checks.push(\n      skip(\n        \"signing-mode\",\n        deterministic\n          ? \"advisory: sign(sk, msg) is DETERMINISTIC (identical signatures for a repeated message)\"\n          : \"advisory: sign(sk, msg) is HEDGED/randomized (signatures differ across calls)\",\n      ),\n    );\n    // Both must still verify — this part IS asserted.\n    const [va, vb] = await ctx.runner.sendMany(\n      [\n        { family, param, op: \"verify\" as const, pk: pkB64, msg: msgB64, sig: a.sig },\n        { family, param, op: \"verify\" as const, pk: pkB64, msg: msgB64, sig: b.sig },\n      ],\n      2,\n    );\n    if (verdict(va as Response) && verdict(vb as Response)) {\n      checks.push(pass(\"signing-mode-verify\", \"both repeated-message signatures verify\"));\n    } else {\n      checks.push(fail(\"signing-mode-verify\", \"a repeated-message signature failed to verify\"));\n    }\n  } catch (err) {\n    checks.push(skip(\"signing-mode\", `advisory probe could not run: ${(err as Error).message}`));\n  }\n}\n\nfunction wrap(name: string, checks: Check[], extra: Check[]): CategoryResult {\n  const all = [...checks, ...extra];\n  const status = rollUp(all);\n  return {\n    category: name,\n    status,\n    checks: all,\n    summary:\n      status === \"pass\"\n        ? `${name} sign/verify self-consistency holds`\n        : `${all.filter((c) => c.status === \"fail\").length} ${name} issue(s)`,\n  };\n}\n\nasync function expectVerifyReject(\n  checks: Check[],\n  name: string,\n  op: () => Promise<Response>,\n): Promise<void> {\n  try {\n    const resp = await op();\n    if (resp.ok === false) {\n      checks.push(pass(name, `rejected with defined error: ${resp.code}`, BUG_SIZE));\n    } else if (\"valid\" in resp && resp.valid === false) {\n      // Returning a false verdict for malformed input is also acceptable.\n      checks.push(pass(name, \"wrong-length input verified as false (acceptable)\", BUG_SIZE));\n    } else {\n      checks.push(\n        fail(name, \"SUT accepted a wrong-length verify input and verified true\", BUG_SIZE),\n      );\n    }\n  } catch (err) {\n    checks.push(\n      fail(\n        name,\n        `SUT crashed/hung on wrong-length verify input: ${(err as Error).message}`,\n        BUG_SIZE,\n      ),\n    );\n  }\n}\n\n/** Deterministic, varied messages of assorted lengths (incl. empty). */\nfunction makeMessages(n: number): string[] {\n  const out: string[] = [];\n  const count = Math.max(1, Math.min(n, 16));\n  for (let i = 0; i < count; i++) {\n    const len = (i * 7) % 33; // 0..32 varying lengths\n    const bytes = new Uint8Array(len);\n    for (let j = 0; j < len; j++) bytes[j] = (i * 31 + j * 17) & 0xff;\n    out.push(toB64(bytes));\n  }\n  return out;\n}\n"]}

package/dist/categories/sizes.js.map

@@ -1 +1 @@
-{"version":3,"file":"sizes.js","sourceRoot":"","sources":["../../src/categories/sizes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,QAAQ,GACT,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,MAAM,GAAG,GAAG,OAAgB,CAAC;AAE7B,MAAM,CAAC,MAAM,KAAK,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IACpE,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,iDAAiD;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IAEpB,6EAA6E;IAC7E,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QAElB,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,SAAS;YACxB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,SAAS,GAAG,EAAE,GAAG,CAAC;YACvF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CACzF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,SAAS;YACxB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,SAAS,GAAG,EAAE,GAAG,CAAC;YACvF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CACzF,CAAC;QAEF,uBAAuB;QACvB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,UAAU;gBACzB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,UAAU,GAAG,EAAE,GAAG,CAAC;gBACxF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,CAC1F,CAAC;YACF,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,YAAY;gBAC3B,CAAC,CAAC,IAAI,CACF,WAAW,EACX,oBAAoB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,YAAY,GAAG,EACnE,GAAG,CACJ;gBACH,CAAC,CAAC,IAAI,CACF,WAAW,EACX,oBAAoB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,YAAY,EAAE,EAClE,GAAG,CACJ,CACN,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,oDAAoD,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GACV,GAAG,YAAY,kBAAkB;YAC/B,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE;YACvD,CAAC,CAAC,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACjD,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,8EAA8E;IAC9E,qCAAqC;IACrC,MAAM,YAAY,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CACrD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CACpD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAC5D,CAAC;IAEF,sEAAsE;IACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,YAAY,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CACrD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CACtE,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CACpD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CACtE,CAAC;IAEF,sEAAsE;IACtE,MAAM,YAAY,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CACrD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CACrF,CAAC;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,YAAY,CAAC,MAAM,EAAE,8BAA8B,EAAE,GAAG,EAAE,CAC9D,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CACrD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CACT,IAAI,CACF,8BAA8B,EAC9B,0EAA0E,EAC1E,GAAG,CACJ,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,MAAM;QACN,QAAQ,EAAE,GAAG;QACb,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,4DAA4D;YAC9D,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,uBAAuB;KACjF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACpB,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,mBAAmB;QAClC,GAAG,CAAC,CAAC,CAAC,GAAI,GAAG,CAAC,CAAC,CAAY,GAAG,IAAI,CAAC,CAAC,yCAAyC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,MAAe,EACf,IAAY,EACZ,EAAoD;IAEpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EAAE,iEAAiE,EAAE,GAAG,CAAC,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,IAAI,CACF,IAAI,EACJ,iFAAiF;YAC/E,GAAI,GAAa,CAAC,OAAO,EAAE,EAC7B,GAAG,CACJ,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"sizes.js","sourceRoot":"","sources":["../../src/categories/sizes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,QAAQ,GACT,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,MAAM,GAAG,GAAG,OAAgB,CAAC;AAE7B,MAAM,CAAC,MAAM,KAAK,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IACpE,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,iDAAiD;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IAEpB,6EAA6E;IAC7E,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QAElB,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,SAAS;YACxB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,SAAS,GAAG,EAAE,GAAG,CAAC;YACvF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CACzF,CAAC;QACF,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,SAAS;YACxB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,SAAS,GAAG,EAAE,GAAG,CAAC;YACvF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CACzF,CAAC;QAEF,uBAAuB;QACvB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,UAAU;gBACzB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,UAAU,GAAG,EAAE,GAAG,CAAC;gBACxF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,CAC1F,CAAC;YACF,MAAM,CAAC,IAAI,CACT,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,YAAY;gBAC3B,CAAC,CAAC,IAAI,CACF,WAAW,EACX,oBAAoB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,YAAY,GAAG,EACnE,GAAG,CACJ;gBACH,CAAC,CAAC,IAAI,CACF,WAAW,EACX,oBAAoB,EAAE,CAAC,MAAM,oBAAoB,EAAE,CAAC,YAAY,EAAE,EAClE,GAAG,CACJ,CACN,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,oDAAoD,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GACV,GAAG,YAAY,kBAAkB;YAC/B,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE;YACvD,CAAC,CAAC,kBAAmB,GAAa,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACjD,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,8EAA8E;IAC9E,qCAAqC;IACrC,MAAM,YAAY,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CACrD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CACpD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAC5D,CAAC;IAEF,sEAAsE;IACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,YAAY,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CACrD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CACtE,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,CACpD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CACtE,CAAC;IAEF,sEAAsE;IACtE,MAAM,YAAY,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,CACrD,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CACrF,CAAC;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,YAAY,CAAC,MAAM,EAAE,8BAA8B,EAAE,GAAG,EAAE,CAC9D,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CACrD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CACT,IAAI,CACF,8BAA8B,EAC9B,0EAA0E,EAC1E,GAAG,CACJ,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,MAAM;QACN,QAAQ,EAAE,GAAG;QACb,MAAM;QACN,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,4DAA4D;YAC9D,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,uBAAuB;KACjF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACpB,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,mBAAmB;QAClC,GAAG,CAAC,CAAC,CAAC,GAAI,GAAG,CAAC,CAAC,CAAY,GAAG,IAAI,CAAC,CAAC,yCAAyC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,MAAe,EACf,IAAY,EACZ,EAAoD;IAEpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,IAAI,EAAE,iEAAiE,EAAE,GAAG,CAAC,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,IAAI,CACF,IAAI,EACJ,iFAAiF;YAC/E,GAAI,GAAa,CAAC,OAAO,EAAE,EAC7B,GAAG,CACJ,CACF,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["/**\n * Sizes/format category — AF-05 family (ML-KEM).\n *\n * Two complementary checks:\n *\n *   A. Positive — emitted artifacts have the standardized byte lengths.\n *      keygen pk/sk, encaps ct/ss, decaps ss must match the parameter set's\n *      sizes from the public size table (the only constants we trust).\n *\n *   B. Negative — the SUT rejects wrong-length inputs with a *defined error*,\n *      not a crash and not a silent success. We feed:\n *        - a too-short and too-long public key to encaps,\n *        - a too-short and too-long ciphertext to decaps,\n *        - a too-short secret key to decaps.\n *      Each must yield a protocol `error` response (ok:false) OR be otherwise\n *      cleanly handled; accepting it and returning a normal result is a fail.\n *\n * AF-05 is size/format confusion: an implementation that doesn't length-check\n * its inputs can read out of bounds or accept malformed material.\n */\n\nimport { type Category, type CategoryResult, type Check, fail, pass, rollUp } from \"./types.js\";\nimport {\n  kemDecapsRaw,\n  kemEncapsRaw,\n  kemKeygen,\n  requireKem,\n  UnexpectedResponse,\n  zerosB64,\n} from \"./helpers.js\";\nimport { toB64 } from \"../protocol.js\";\n\nconst BUG = \"AF-05\" as const;\n\nexport const sizes: Category = async (ctx): Promise<CategoryResult> => {\n  const checks: Check[] = [];\n\n  if (ctx.sizes.family !== \"ml-kem\") {\n    return {\n      category: \"sizes\",\n      status: \"skip\",\n      bugClass: BUG,\n      checks: [],\n      summary: \"size checks for ML-DSA live in the dsa category\",\n    };\n  }\n\n  const km = requireKem(ctx.sizes);\n  const param = km.id;\n\n  // --- A. Positive: emitted lengths -----------------------------------------\n  let pkB64: string;\n  try {\n    const { pk, sk } = await kemKeygen(ctx.runner, param);\n    pkB64 = toB64(pk);\n\n    checks.push(\n      pk.length === km.publicKey\n        ? pass(\"pk-length\", `public key is ${pk.length} bytes (expected ${km.publicKey})`, BUG)\n        : fail(\"pk-length\", `public key is ${pk.length} bytes, expected ${km.publicKey}`, BUG),\n    );\n    checks.push(\n      sk.length === km.secretKey\n        ? pass(\"sk-length\", `secret key is ${sk.length} bytes (expected ${km.secretKey})`, BUG)\n        : fail(\"sk-length\", `secret key is ${sk.length} bytes, expected ${km.secretKey}`, BUG),\n    );\n\n    // encaps ct/ss lengths\n    const enc = await ctx.runner.send({ family: \"ml-kem\", param, op: \"encaps\", pk: pkB64 });\n    if (enc.ok === true && \"ct\" in enc && \"ss\" in enc) {\n      const ct = Buffer.from(enc.ct, \"base64\");\n      const ss = Buffer.from(enc.ss, \"base64\");\n      checks.push(\n        ct.length === km.ciphertext\n          ? pass(\"ct-length\", `ciphertext is ${ct.length} bytes (expected ${km.ciphertext})`, BUG)\n          : fail(\"ct-length\", `ciphertext is ${ct.length} bytes, expected ${km.ciphertext}`, BUG),\n      );\n      checks.push(\n        ss.length === km.sharedSecret\n          ? pass(\n              \"ss-length\",\n              `shared secret is ${ss.length} bytes (expected ${km.sharedSecret})`,\n              BUG,\n            )\n          : fail(\n              \"ss-length\",\n              `shared secret is ${ss.length} bytes, expected ${km.sharedSecret}`,\n              BUG,\n            ),\n      );\n    } else {\n      checks.push(fail(\"encaps-shape\", \"encaps did not return ct/ss for a valid public key\", BUG));\n    }\n  } catch (err) {\n    const detail =\n      err instanceof UnexpectedResponse\n        ? `SUT returned an unexpected response: ${err.message}`\n        : `harness error: ${(err as Error).message}`;\n    checks.push(fail(\"positive-sizes\", detail, BUG));\n    pkB64 = \"\";\n  }\n\n  // --- B. Negative: wrong-length inputs must be rejected cleanly -------------\n  // Wrong-length public key to encaps.\n  await expectReject(checks, \"encaps-pk-too-short\", () =>\n    kemEncapsRaw(ctx.runner, param, zerosB64(km.publicKey - 1)),\n  );\n  await expectReject(checks, \"encaps-pk-too-long\", () =>\n    kemEncapsRaw(ctx.runner, param, zerosB64(km.publicKey + 1)),\n  );\n\n  // Wrong-length ciphertext to decaps (use a valid-length sk of zeros).\n  const skZeros = zerosB64(km.secretKey);\n  await expectReject(checks, \"decaps-ct-too-short\", () =>\n    kemDecapsRaw(ctx.runner, param, skZeros, zerosB64(km.ciphertext - 1)),\n  );\n  await expectReject(checks, \"decaps-ct-too-long\", () =>\n    kemDecapsRaw(ctx.runner, param, skZeros, zerosB64(km.ciphertext + 1)),\n  );\n\n  // Wrong-length secret key to decaps (use a valid-length ct of zeros).\n  await expectReject(checks, \"decaps-sk-too-short\", () =>\n    kemDecapsRaw(ctx.runner, param, zerosB64(km.secretKey - 1), zerosB64(km.ciphertext)),\n  );\n\n  // --- C. FIPS 203 §7.2 encapsulation-key modulus-range check ---------------\n  // A correctly-SIZED ek whose t̂ coefficients are NOT reduced mod q (< 3329)\n  // must be rejected: §7.2 requires encaps to perform the \"modulus check\"\n  // (ek must round-trip through ByteEncode₁₂/ByteDecode₁₂). The length checks\n  // above do NOT catch this — an ek with an out-of-range coefficient still has\n  // the right byte length. We take a VALID ek from keygen and force its first\n  // 12-bit coefficient to 0xFFF (4095 ≥ 3329) while preserving the length, then\n  // require encaps to reject it with a defined error. We assert NO crypto bytes.\n  if (pkB64.length > 0) {\n    await expectReject(checks, \"encaps-ek-coeff-out-of-range\", () =>\n      kemEncapsRaw(ctx.runner, param, outOfRangeEk(pkB64)),\n    );\n  } else {\n    checks.push(\n      fail(\n        \"encaps-ek-coeff-out-of-range\",\n        \"could not obtain a valid ek from keygen to build the modulus-range probe\",\n        BUG,\n      ),\n    );\n  }\n\n  const status = rollUp(checks);\n  return {\n    category: \"sizes\",\n    status,\n    bugClass: BUG,\n    checks,\n    summary:\n      status === \"pass\"\n        ? \"all artifact lengths correct; wrong-length inputs rejected\"\n        : `${checks.filter((c) => c.status === \"fail\").length} size/format issue(s)`,\n  };\n};\n\n/**\n * Build a same-length-but-out-of-range encapsulation key from a valid one.\n *\n * FIPS 203 packs t̂ with ByteEncode₁₂: each consecutive 3 bytes [b0,b1,b2] hold\n * two 12-bit little-endian coefficients\n *   d0 = b0 | ((b1 & 0x0F) << 8)\n *   d1 = (b1 >> 4) | (b2 << 4)\n * We set the FIRST coefficient d0 to 0xFFF (4095), which is ≥ q (3329) and thus\n * NOT a valid reduced coefficient — this is the classic \"ek not reduced mod q\"\n * malleability. The byte length is unchanged, so only a real §7.2 modulus check\n * (not a length check) catches it. We touch only b0/b1, leaving everything else\n * (including ρ) intact, so the ek stays structurally well-formed apart from the\n * single out-of-range coefficient. No cryptographic values are fabricated.\n */\nfunction outOfRangeEk(ekB64: string): string {\n  const buf = Buffer.from(ekB64, \"base64\");\n  if (buf.length >= 2) {\n    buf[0] = 0xff; // low 8 bits of d0\n    buf[1] = (buf[1] as number) | 0x0f; // high 4 bits of d0 -> d0 = 0xFFF = 4095\n  }\n  return buf.toString(\"base64\");\n}\n\n/**\n * Run an operation that SHOULD be rejected. A clean protocol `error` (ok:false)\n * passes. A normal success (the SUT accepted a wrong-length input) fails. A\n * harness error such as a crash or timeout also fails — a conforming SUT must\n * reject gracefully, not die.\n */\nasync function expectReject(\n  checks: Check[],\n  name: string,\n  op: () => Promise<import(\"../protocol.js\").Response>,\n): Promise<void> {\n  try {\n    const resp = await op();\n    if (resp.ok === false) {\n      checks.push(pass(name, `rejected with defined error: ${resp.code} (${resp.message})`, BUG));\n    } else {\n      checks.push(\n        fail(name, \"SUT accepted a wrong-length input and returned a success result\", BUG),\n      );\n    }\n  } catch (err) {\n    checks.push(\n      fail(\n        name,\n        `SUT crashed/hung on a wrong-length input instead of returning a defined error: ` +\n          `${(err as Error).message}`,\n        BUG,\n      ),\n    );\n  }\n}\n"]}

package/dist/categories/slh-dsa.js.map

@@ -1 +1 @@
-{"version":3,"file":"slh-dsa.js","sourceRoot":"","sources":["../../src/categories/slh-dsa.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,CAAC,MAAM,MAAM,GAAa,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC"}
+{"version":3,"file":"slh-dsa.js","sourceRoot":"","sources":["../../src/categories/slh-dsa.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,CAAC,MAAM,MAAM,GAAa,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC","sourcesContent":["/**\n * SLH-DSA self-consistency category (FIPS 205).\n *\n * SLH-DSA (the standardized SPHINCS+) presents the same black-box surface as\n * ML-DSA — keygen / sign / verify — so it reuses the shared signature driver\n * in signature.ts with the family fixed to \"slh-dsa\". It covers, for each of\n * the 12 standardized parameter sets:\n *   - pk/sk/sig size conformance (FIPS 205 Table 2),\n *   - sign→verify correctness round-trips,\n *   - verify rejects a tampered signature and a wrong message,\n *   - a deterministic-vs-hedged signing advisory probe (SLH-DSA supports both),\n *   - wrong-length verify inputs rejected with a defined error (AF-05).\n *\n * No external vectors are needed for self-consistency; exact-value KAT would\n * come from official ACVP files via the kat category. We assert NO crypto bytes.\n *\n * Out of scope: SP 800-208 stateful hash signatures (LMS / XMSS / HSS). Those\n * require state-management guarantees a stateless request/response harness\n * cannot model; see README.md.\n */\n\nimport type { Category } from \"./types.js\";\nimport { makeSignatureCategory } from \"./signature.js\";\n\nexport const slhDsa: Category = makeSignatureCategory(\"slh-dsa\", \"slh-dsa\");\n"]}

package/dist/categories/timing.js.map

@@ -1 +1 @@
-{"version":3,"file":"timing.js","sourceRoot":"","sources":["../../src/categories/timing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,MAAM,CAAC,MAAM,MAAM,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IACrE,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,oCAAoC,CAAC,CAAC;YACrE,OAAO,EAAE,sBAAsB;SAChC,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IACpB,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,yDAAyD;IACzD,IAAI,KAAa,CAAC;IAClB,IAAI,WAAmB,CAAC;IACxB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACxB,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,kCAAmC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,wBAAwB;SAClC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAEjE,yCAAyC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAExE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IAE9C,sEAAsE;IACtE,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,wBAAwB;IACzD,MAAM,MAAM,GAAG,OAAO,GAAG,kBAAkB,CAAC;IAE5C,MAAM,MAAM,GACV,uBAAuB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;QAChF,cAAc,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,iBAAiB;QACrE,CAAC,MAAM;YACL,CAAC,CAAC,kFAAkF;gBAClF,qFAAqF;YACvF,CAAC,CAAC,sFAAsF,CAAC,CAAC;IAE9F,4CAA4C;IAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,MAAM;QACN,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,2BAA2B,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;YACrF,CAAC,CAAC,4BAA4B,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;KACpF,CAAC;AACJ,CAAC,CAAC;AAEF,KAAK,UAAU,OAAO,CACpB,GAAyC,EACzC,KAAa,EACb,KAAa,EACb,MAAc,EACd,KAAqC;IAErC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,EAAY;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAC5B,CAAC,CAAC,CAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAY,GAAI,MAAM,CAAC,GAAG,CAAY,CAAC,GAAG,CAAC;QAC7D,CAAC,CAAE,MAAM,CAAC,GAAG,CAAY,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"timing.js","sourceRoot":"","sources":["../../src/categories/timing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAkD,IAAI,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,MAAM,CAAC,MAAM,MAAM,GAAa,KAAK,EAAE,GAAG,EAA2B,EAAE;IACrE,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,oCAAoC,CAAC,CAAC;YACrE,OAAO,EAAE,sBAAsB;SAChC,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;IACpB,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,yDAAyD;IACzD,IAAI,KAAa,CAAC;IAClB,IAAI,WAAmB,CAAC;IACxB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACxB,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,kCAAmC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,wBAAwB;SAClC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAEjE,yCAAyC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAExE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IAE9C,sEAAsE;IACtE,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,wBAAwB;IACzD,MAAM,MAAM,GAAG,OAAO,GAAG,kBAAkB,CAAC;IAE5C,MAAM,MAAM,GACV,uBAAuB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;QAChF,cAAc,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,iBAAiB;QACrE,CAAC,MAAM;YACL,CAAC,CAAC,kFAAkF;gBAClF,qFAAqF;YACvF,CAAC,CAAC,sFAAsF,CAAC,CAAC;IAE9F,4CAA4C;IAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,MAAM;QACN,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,2BAA2B,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;YACrF,CAAC,CAAC,4BAA4B,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;KACpF,CAAC;AACJ,CAAC,CAAC;AAEF,KAAK,UAAU,OAAO,CACpB,GAAyC,EACzC,KAAa,EACb,KAAa,EACb,MAAc,EACd,KAAqC;IAErC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,EAAY;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAC5B,CAAC,CAAC,CAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAY,GAAI,MAAM,CAAC,GAAG,CAAY,CAAC,GAAG,CAAC;QAC7D,CAAC,CAAE,MAAM,CAAC,GAAG,CAAY,CAAC;AAC9B,CAAC","sourcesContent":["/**\n * Timing category — ADVISORY ONLY (ML-KEM).\n *\n * Coarsely compares decapsulation wall-clock time for valid vs. invalid\n * ciphertexts over many trials. A large, consistent difference can hint at a\n * non-constant-time reject path (an AF-02-adjacent timing oracle).\n *\n * THIS IS NOT A CONFORMANCE VERDICT. Cross-process timing over stdin/stdout is\n * dominated by IPC and scheduler noise, so the result is reported as ADVISORY\n * and NEVER fails the overall run. Real constant-time analysis needs in-process\n * statistical tooling (e.g. dudect), not a black-box harness. Treat any signal\n * here as \"worth a closer look\", not proof.\n */\n\nimport { type Category, type CategoryResult, type Check, pass, skip } from \"./types.js\";\nimport { flipBitB64, kemDecapsRaw, kemEncaps, kemKeygen, requireKem } from \"./helpers.js\";\nimport { toB64 } from \"../protocol.js\";\n\nexport const timing: Category = async (ctx): Promise<CategoryResult> => {\n  if (ctx.sizes.family !== \"ml-kem\") {\n    return {\n      category: \"timing\",\n      status: \"skip\",\n      checks: [skip(\"applicability\", \"timing probe targets ML-KEM decaps\")],\n      summary: \"skipped (not ML-KEM)\",\n    };\n  }\n\n  const km = requireKem(ctx.sizes);\n  const param = km.id;\n  const checks: Check[] = [];\n\n  // Establish a single key + honest ct + one corrupted ct.\n  let skB64: string;\n  let honestCtB64: string;\n  let badCtB64: string;\n  try {\n    const { pk, sk } = await kemKeygen(ctx.runner, param);\n    skB64 = toB64(sk);\n    const { ct } = await kemEncaps(ctx.runner, param, toB64(pk));\n    honestCtB64 = toB64(ct);\n    badCtB64 = flipBitB64(honestCtB64, 0, 0);\n  } catch (err) {\n    return {\n      category: \"timing\",\n      status: \"skip\",\n      checks: [skip(\"setup\", `could not set up timing probe: ${(err as Error).message}`)],\n      summary: \"skipped — setup failed\",\n    };\n  }\n\n  const trials = Math.max(50, Math.min(ctx.iterations * 20, 2000));\n\n  // Warm-up to amortize JIT/spawn effects.\n  for (let i = 0; i < 10; i++) {\n    await kemDecapsRaw(ctx.runner, param, skB64, honestCtB64);\n    await kemDecapsRaw(ctx.runner, param, skB64, badCtB64);\n  }\n\n  const validTimes = await measure(ctx, skB64, honestCtB64, trials, param);\n  const invalidTimes = await measure(ctx, skB64, badCtB64, trials, param);\n\n  const vMed = median(validTimes);\n  const iMed = median(invalidTimes);\n  const denom = Math.min(vMed, iMed) || 1;\n  const relDiff = Math.abs(vMed - iMed) / denom;\n\n  // Heuristic, intentionally loose threshold given cross-process noise.\n  const ADVISORY_THRESHOLD = 0.25; // 25% median difference\n  const signal = relDiff > ADVISORY_THRESHOLD;\n\n  const detail =\n    `valid decaps median ${vMed.toFixed(3)}ms, invalid median ${iMed.toFixed(3)}ms ` +\n    `(rel. diff ${(relDiff * 100).toFixed(1)}%, ${trials} trials each). ` +\n    (signal\n      ? \"ADVISORY: noticeable timing gap between valid/invalid decaps — investigate with \" +\n        \"in-process constant-time tooling; cross-process timing is noisy and not conclusive.\"\n      : \"no strong cross-process timing signal (this is NOT proof of constant-time behavior).\");\n\n  // Always a pass/skip — never fails the run.\n  checks.push(pass(\"decaps-timing\", detail));\n\n  return {\n    category: \"timing\",\n    status: \"pass\",\n    checks,\n    summary: signal\n      ? `ADVISORY timing signal: ${(relDiff * 100).toFixed(1)}% median gap (not a verdict)`\n      : `no strong timing signal (${(relDiff * 100).toFixed(1)}% median gap, advisory)`,\n  };\n};\n\nasync function measure(\n  ctx: import(\"./types.js\").CategoryContext,\n  skB64: string,\n  ctB64: string,\n  trials: number,\n  param: import(\"../sizes.js\").ParamSet,\n): Promise<number[]> {\n  const out: number[] = [];\n  for (let i = 0; i < trials; i++) {\n    const t0 = performance.now();\n    await kemDecapsRaw(ctx.runner, param, skB64, ctB64);\n    out.push(performance.now() - t0);\n  }\n  return out;\n}\n\nfunction median(xs: number[]): number {\n  if (xs.length === 0) return 0;\n  const sorted = [...xs].sort((a, b) => a - b);\n  const mid = sorted.length >> 1;\n  return sorted.length % 2 === 0\n    ? ((sorted[mid - 1] as number) + (sorted[mid] as number)) / 2\n    : (sorted[mid] as number);\n}\n"]}