blob: c2a324475853ede89c57ead20b07536248faf8b9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
|
/*
* XMSS WOTS Parameters
* Descibes a signature method for XMSS Winternitz One Time Signatures,
* as defined in:
* [1] XMSS: Extended Hash-Based Signatures,
* draft-itrf-cfrg-xmss-hash-based-signatures-06
* Release: July 2016.
* https://datatracker.ietf.org/doc/
* draft-irtf-cfrg-xmss-hash-based-signatures/?include_text=1
*
* (C) 2016,2017 Matthias Gierlings
*
* Botan is released under the Simplified BSD License (see license.txt)
**/
#include <botan/xmss_wots_parameters.h>
#include <botan/exceptn.h>
#include <cmath>
namespace Botan {
XMSS_WOTS_Parameters::ots_algorithm_t
XMSS_WOTS_Parameters::xmss_wots_id_from_string(const std::string& param_set)
{
if(param_set == "WOTSP_SHA2-256_W16")
{ return WOTSP_SHA2_256_W16; }
if(param_set == "WOTSP_SHA2-512_W16")
{ return WOTSP_SHA2_512_W16; }
if(param_set == "WOTSP_SHAKE128_W16")
{ return WOTSP_SHAKE128_W16; }
if(param_set == "WOTSP_SHAKE256_W16")
{ return WOTSP_SHAKE256_W16; }
throw Invalid_Argument("Unknown XMSS-WOTS algorithm param '" + param_set + "'");
}
XMSS_WOTS_Parameters::XMSS_WOTS_Parameters(const std::string& param_set)
: XMSS_WOTS_Parameters(xmss_wots_id_from_string(param_set))
{}
XMSS_WOTS_Parameters::XMSS_WOTS_Parameters(ots_algorithm_t oid)
: m_oid(oid)
{
switch(oid)
{
case WOTSP_SHA2_256_W16:
m_element_size = 32;
m_w = 16;
m_len = 67;
m_name = "WOTSP_SHA2-256_W16";
m_hash_name = "SHA-256";
m_strength = 256;
break;
case WOTSP_SHA2_512_W16:
m_element_size = 64;
m_w = 16;
m_len = 131;
m_name = "WOTSP_SHA2-512_W16";
m_hash_name = "SHA-512";
m_strength = 512;
break;
case WOTSP_SHAKE128_W16:
m_element_size = 32;
m_w = 16;
m_len = 67;
m_name = "WOTSP_SHAKE128_W16";
m_hash_name = "SHAKE-128(256)";
m_strength = 256;
break;
case WOTSP_SHAKE256_W16:
m_element_size = 64;
m_w = 16;
m_len = 131;
m_name = "WOTSP_SHAKE256_W16";
m_hash_name = "SHAKE-256(512)";
m_strength = 512;
break;
default:
throw Not_Implemented("Algorithm id does not match any known XMSS WOTS algorithm id.");
break;
}
m_w == 16 ? m_lg_w = 4 : m_lg_w = 2;
m_len_1 = static_cast<size_t>(std::ceil((8 * element_size()) / m_lg_w));
m_len_2 = static_cast<size_t>(
floor(log2(m_len_1 * (wots_parameter() - 1)) / m_lg_w) + 1);
BOTAN_ASSERT(m_len == m_len_1 + m_len_2, "Invalid XMSS WOTS parameter "
"\"len\" detedted.");
}
secure_vector<uint8_t>
XMSS_WOTS_Parameters::base_w(const secure_vector<uint8_t>& msg, size_t out_size) const
{
secure_vector<uint8_t> result;
size_t in = 0;
size_t total = 0;
size_t bits = 0;
for(size_t i = 0; i < out_size; i++)
{
if(bits == 0)
{
total = msg[in];
in++;
bits += 8;
}
bits -= m_lg_w;
result.push_back(static_cast<uint8_t>((total >> bits) & (m_w - 1)));
}
return result;
}
secure_vector<uint8_t>
XMSS_WOTS_Parameters::base_w(size_t value) const
{
value <<= (8 - ((m_len_2 * m_lg_w) % 8));
size_t len_2_bytes = static_cast<size_t>(
std::ceil(static_cast<float>(m_len_2 * m_lg_w) / 8.f));
secure_vector<uint8_t> result;
XMSS_Tools::concat(result, value, len_2_bytes);
return base_w(result, m_len_2);
}
void
XMSS_WOTS_Parameters::append_checksum(secure_vector<uint8_t>& data)
{
size_t csum = 0;
for(size_t i = 0; i < data.size(); i++)
{
csum += wots_parameter() - 1 - data[i];
}
secure_vector<uint8_t> csum_bytes = base_w(csum);
std::move(csum_bytes.begin(), csum_bytes.end(), std::back_inserter(data));
}
}
|
