abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-05-06 16:36:16 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update SPHINCS+

Browse Source
This commit is contained in:
Zhi Guan
2026-01-08 22:23:32 +08:00
parent aa28fc5252
commit 242365bef1
4 changed files with 564 additions and 95 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CMakeLists.txt
View File

@@ -455,7 +455,7 @@ if (ENABLE_SPHINCS)
add_definitions(-DENABLE_SPHINCS)
list(APPEND src src/sphincs.c)
#list(APPEND tools tools/sphincskeygen.c tools/sphincssign.c tools/sphincsverify.c)
#list(APPEND tests sphincs)
list(APPEND tests sphincs)
option(ENABLE_SPHINCS_CROSSCHECK "Enable SPHINCS SHA-256 cross-check" ON)
if (ENABLE_SPHINCS_CROSSCHECK)

110
include/gmssl/sphincs.h
View File

@@ -40,24 +40,18 @@ extern "C" {
# define HASH256_BLOCK_SIZE SM3_BLOCK_SIZE
#endif
/*
In order to make keeping track of the types easier throughout the pseudo-code in the rest of
this document, we refer to them respectively using the constants WOTS_HASH, WOTS_PK, TREE,
FORS_TREE, FORS_ROOTS, WOTS_PRF, and FORS_PRF.
*/
enum {
SPHINCS_ADRS_TYPE_WOTS_PRF = 0,
SPHINCS_ADRS_TYPE_WOTS_HASH = 0,
SPHINCS_ADRS_TYPE_WOTS_PK = 1,
SPHINCS_ADRS_TYPE_HASHTREE = 2,
SPHINCS_ADRS_TYPE_TREE = 2,
SPHINCS_ADRS_TYPE_FORS_TREE = 3,
SPHINCS_ADRS_TYPE_FORS_ROOT = 4,
SPHINCS_ADRS_TYPE_WOTS_KEYGEN = 5,
SPHINCS_ADRS_TYPE_FORS_KEYGEN = 6,
SPHINCS_ADRS_TYPE_FORS_ROOTS = 4,
SPHINCS_ADRS_TYPE_WOTS_PRF = 5,
SPHINCS_ADRS_TYPE_FORS_PRF = 6,
};
typedef uint8_t sphincs_adrs_t[32];
typedef struct {
uint32_t layer_address;
uint32_t tree_address[3];
@@ -67,28 +61,13 @@ typedef struct {
uint32_t hash_address;
} SPHINCS_ADRS_WOTS_HASH;
void sphincs_adrs_copy_layer_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_tree_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_type(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_keypair_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_chain_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_hash_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_set_layer_address(sphincs_adrs_t adrs, const uint32_t address);
void sphincs_adrs_set_tree_address(sphincs_adrs_t adrs, const uint64_t address);
void sphincs_adrs_set_type(sphincs_adrs_t adrs, const uint32_t type);
void sphincs_adrs_set_keypair_address(sphincs_adrs_t adrs, const uint32_t address);
void sphincs_adrs_set_chain_address(sphincs_adrs_t adrs, const uint32_t address);
void sphincs_adrs_set_hash_address(sphincs_adrs_t adrs, const uint32_t address);
// 所有的padding都在最后，是否意味着可以不用padding?
typedef struct {
uint32_t layer_address;
uint32_t tree_address[3];
uint32_t type; // = 1
uint32_t keypair_address;
uint32_t padding[3]; // = {0,0,0}
} SPHINCS_ADRS_WOTS_PK_COMP;
uint32_t padding[2];
} SPHINCS_ADRS_WOTS_PK;
typedef struct {
uint32_t layer_address;
@@ -97,12 +76,7 @@ typedef struct {
uint32_t padding; // = 0
uint32_t tree_height;
uint32_t tree_index;
} SPHINCS_ADRS_HASHTREE;
void sphincs_adrs_copy_tree_height(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_tree_index(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_set_tree_height(sphincs_adrs_t adrs, uint32_t height);
void sphincs_adrs_set_tree_index(sphincs_adrs_t adrs, uint32_t index);
} SPHINCS_ADRS_TREE;
typedef struct {
uint32_t layer_address;
@@ -118,8 +92,8 @@ typedef struct {
uint32_t tree_address[3];
uint32_t type; // = 4
uint32_t keypair_address;
uint32_t padding[2]; // = {0,0}
} SPHINCS_ADRS_FORS_ROOT;
uint32_t padding[2];
} SPHINCS_ADRS_FORS_ROOTS;
typedef struct {
uint32_t layer_address;
@@ -128,7 +102,7 @@ typedef struct {
uint32_t keypair_address;
uint32_t chain_address;
uint32_t hash_address; // = 0
} SPHINCS_ADRS_WOTS_KEYGEN;
} SPHINCS_ADRS_WOTS_PRF;
typedef struct {
uint32_t layer_address;
@@ -137,7 +111,36 @@ typedef struct {
uint32_t keypair_address;
uint32_t tree_height; // = 0
uint32_t tree_index;
} SPHINCS_ADRS_FORS_KEYGEN;
} SPHINCS_ADRS_FORS_PRF;
typedef uint8_t sphincs_adrs_t[32];
void sphincs_adrs_copy_layer_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_tree_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_type(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_keypair_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_chain_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_hash_address(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_tree_height(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_copy_tree_index(sphincs_adrs_t dst, const sphincs_adrs_t src);
void sphincs_adrs_set_layer_address(sphincs_adrs_t adrs, const uint32_t address);
void sphincs_adrs_set_tree_address(sphincs_adrs_t adrs, const uint64_t address);
void sphincs_adrs_set_type(sphincs_adrs_t adrs, const uint32_t type);
void sphincs_adrs_set_keypair_address(sphincs_adrs_t adrs, const uint32_t address);
void sphincs_adrs_set_chain_address(sphincs_adrs_t adrs, const uint32_t address);
void sphincs_adrs_set_hash_address(sphincs_adrs_t adrs, const uint32_t address);
void sphincs_adrs_set_tree_height(sphincs_adrs_t adrs, uint32_t height);
void sphincs_adrs_set_tree_index(sphincs_adrs_t adrs, uint32_t index);
typedef struct {
uint8_t layer_address;
uint64_t tree_address;
uint8_t type;
uint32_t others[3];
} SPHINCS_ADRSC;
#define SPHINCS_ADRSC_SIZE 22
typedef uint8_t sphincs_adrsc_t[22];
@@ -160,20 +163,33 @@ typedef struct {
// sizeof(sphincs_secret_t) == n, when sm3/sha256, n == 16
typedef uint8_t sphincs_secret_t[16];
void sphincs_wots_chain(const sphincs_secret_t x,
const sphincs_secret_t seed, const sphincs_adrs_t ots_adrs,
int start, int steps, sphincs_secret_t y);
typedef sphincs_secret_t sphincs_wots_key_t[35];
typedef sphincs_secret_t sphincs_wots_sig_t[35];
int sphincs_wots_key_print(FILE *fp, int fmt, int ind, const char *label, const sphincs_wots_key_t key);
int sphincs_wots_sig_print(FILE *fp, int fmt, int ind, const char *label, const sphincs_wots_sig_t sig);
void sphincs_wots_derive_sk(const sphincs_secret_t secret,
const sphincs_secret_t seed, const sphincs_adrs_t adrs,
const sphincs_secret_t seed, const sphincs_adrs_t in_adrs,
sphincs_wots_key_t sk);
void sphincs_wots_chain(const sphincs_secret_t x,
const sphincs_secret_t seed, const sphincs_adrs_t ots_adrs,
int start, int steps, sphincs_secret_t y);
void sphincs_wots_sk_to_pk(const sphincs_wots_key_t sk,
const sphincs_secret_t seed, const sphincs_adrs_t ots_adrs,
sphincs_wots_key_t pk);
void sphincs_wots_pk_to_root(const sphincs_wots_key_t pk,
const sphincs_secret_t seed, const sphincs_adrs_t in_adrs,
sphincs_secret_t root);
void sphincs_base_w_and_checksum(const sphincs_secret_t dgst, int steps[35]);
void sphincs_wots_sign(const sphincs_wots_key_t sk,
const sphincs_secret_t seed, const sphincs_adrs_t ots_adrs,
const sphincs_secret_t dgst, sphincs_wots_sig_t sig);
void sphincs_wots_sig_to_pk(const sphincs_wots_sig_t sig,
const sphincs_secret_t seed, const sphincs_adrs_t ots_adrs,
const sphincs_secret_t dgst, sphincs_wots_key_t pk);
typedef struct {

397
src/sphincs.c
View File

@@ -21,9 +21,6 @@
#include <gmssl/endian.h>
#include <gmssl/sphincs.h>
static const SPHINCS_PARAMS sphincs_params[] = {
// n h d lg(t) k w siglen
{ "SPHINCS+_128s", 16, 63, 7, 12, 14, 16, 133, 1, 7856 },
@@ -102,11 +99,203 @@ void sphincs_adrs_set_tree_index(sphincs_adrs_t adrs, uint32_t index) {
}
void sphincs_adrs_compress(const sphincs_adrs_t adrs, sphincs_adrsc_t adrsc)
int sphincs_adrs_print(FILE *fp, int fmt, int ind, const char *label, const sphincs_adrs_t adrs)
{
memcpy(adrsc, adrs, 22);
uint32_t layer_address;
uint32_t tree_address_hi32;
uint64_t tree_address_lo64;
uint32_t type;
uint32_t keypair_address;
uint32_t chain_address;
uint32_t hash_address;
uint32_t tree_height;
uint32_t tree_index;
uint32_t padding;
format_print(fp, fmt, ind, "%s\n", label);
ind += 4;
layer_address = GETU32(adrs);
format_print(fp, fmt, ind, "layer_address: %"PRIu32"\n", layer_address);
adrs += 4;
tree_address_hi32 = GETU32(adrs);
format_print(fp, fmt, ind, "tree_address : %"PRIu32"\n", tree_address_hi32);
adrs += 4;
tree_address_lo64 = GETU64(adrs);
format_print(fp, fmt, ind, "tree_address : %"PRIu64"\n", tree_address_lo64);
adrs += 8;
type = GETU32(adrs);
format_print(fp, fmt, ind, "type : %"PRIu32"\n", type);
adrs += 4;
switch (type) {
case SPHINCS_ADRS_TYPE_WOTS_HASH:
keypair_address = GETU32(adrs);
format_print(fp, fmt, ind, "keypair_address : %"PRIu32"\n", keypair_address);
adrs += 4;
chain_address = GETU32(adrs);
format_print(fp, fmt, ind, "chain_address: %"PRIu32"\n", chain_address);
adrs += 4;
hash_address = GETU32(adrs);
format_print(fp, fmt, ind, "hash_address : %"PRIu32"\n", hash_address);
adrs += 4;
break;
case SPHINCS_ADRS_TYPE_WOTS_PK:
keypair_address = GETU32(adrs);
format_print(fp, fmt, ind, "keypair_address : %"PRIu32"\n", keypair_address);
adrs += 4;
padding = GETU32(adrs);
format_print(fp, fmt, ind, "padding : %"PRIu32"\n", padding);
adrs += 4;
padding = GETU32(adrs);
format_print(fp, fmt, ind, "padding : %"PRIu32"\n", padding);
adrs += 4;
break;
case SPHINCS_ADRS_TYPE_TREE:
padding = GETU32(adrs);
format_print(fp, fmt, ind, "padding : %"PRIu32"\n", padding);
adrs += 4;
tree_height = GETU32(adrs);
format_print(fp, fmt, ind, "tree_height : %"PRIu32"\n", tree_height);
adrs += 4;
tree_index = GETU32(adrs);
format_print(fp, fmt, ind, "tree_index : %"PRIu32"\n", tree_index);
adrs += 4;
break;
case SPHINCS_ADRS_TYPE_FORS_TREE:
keypair_address = GETU32(adrs);
format_print(fp, fmt, ind, "keypair_address : %"PRIu32"\n", keypair_address);
adrs += 4;
tree_height = GETU32(adrs);
format_print(fp, fmt, ind, "tree_height : %"PRIu32"\n", tree_height);
adrs += 4;
tree_index = GETU32(adrs);
format_print(fp, fmt, ind, "tree_index : %"PRIu32"\n", tree_index);
adrs += 4;
break;
break;
case SPHINCS_ADRS_TYPE_FORS_ROOTS:
keypair_address = GETU32(adrs);
format_print(fp, fmt, ind, "keypair_address : %"PRIu32"\n", keypair_address);
adrs += 4;
padding = GETU32(adrs);
format_print(fp, fmt, ind, "padding : %"PRIu32"\n", padding);
adrs += 4;
padding = GETU32(adrs);
format_print(fp, fmt, ind, "padding : %"PRIu32"\n", padding);
adrs += 4;
break;
case SPHINCS_ADRS_TYPE_WOTS_PRF:
keypair_address = GETU32(adrs);
format_print(fp, fmt, ind, "keypair_address : %"PRIu32"\n", keypair_address);
adrs += 4;
chain_address = GETU32(adrs);
format_print(fp, fmt, ind, "chain_address: %"PRIu32"\n", chain_address);
adrs += 4;
hash_address = GETU32(adrs);
format_print(fp, fmt, ind, "hash_address : %"PRIu32"\n", hash_address);
adrs += 4;
break;
case SPHINCS_ADRS_TYPE_FORS_PRF:
keypair_address = GETU32(adrs);
format_print(fp, fmt, ind, "keypair_address : %"PRIu32"\n", keypair_address);
adrs += 4;
tree_height = GETU32(adrs);
format_print(fp, fmt, ind, "tree_height : %"PRIu32"\n", tree_height);
adrs += 4;
tree_index = GETU32(adrs);
format_print(fp, fmt, ind, "tree_index : %"PRIu32"\n", tree_index);
adrs += 4;
break;
default:
error_print();
return -1;
}
return 1;
}
void sphincs_adrs_compress(const sphincs_adrs_t adrs, sphincs_adrsc_t adrsc)
{
// copy layer_address
memcpy(adrsc, adrs + 3, 1);
adrsc += 1;
adrs += 4;
// copy tree_address
memcpy(adrsc, adrs + 4, 8);
adrsc += 8;
adrs += 12;
// copy type
memcpy(adrsc, adrs + 3, 1);
adrsc += 1;
adrs += 4;
// copy others
memcpy(adrsc, adrs, 12);
}
int sphincs_wots_key_print(FILE *fp, int fmt, int ind, const char *label, const sphincs_wots_key_t key)
{
int i;
format_print(fp, fmt, ind, "%s\n", label);
ind += 4;
for (i = 0; i < 35; i++) {
format_print(fp, fmt, ind, "%d", i);
format_bytes(fp, fmt, ind, "", key[i], sizeof(sphincs_secret_t));
}
return 1;
}
int sphincs_wots_sig_print(FILE *fp, int fmt, int ind, const char *label, const sphincs_wots_sig_t sig)
{
int i;
format_print(fp, fmt, ind, "%s\n", label);
ind += 4;
for (i = 0; i < 35; i++) {
format_print(fp, fmt, ind, "%d", i);
format_bytes(fp, fmt, ind, "", sig[i], sizeof(sphincs_secret_t));
}
return 1;
}
void sphincs_wots_derive_sk(const sphincs_secret_t secret,
const sphincs_secret_t seed, const sphincs_adrs_t in_adrs,
sphincs_wots_key_t sk)
{
uint8_t block[HASH256_BLOCK_SIZE] = {0};
sphincs_adrs_t adrs;
sphincs_adrsc_t adrsc;
HASH256_CTX ctx;
hash256_t dgst;
int i;
memcpy(block, seed, sizeof(sphincs_secret_t));
sphincs_adrs_copy_layer_address(adrs, in_adrs);
sphincs_adrs_copy_tree_address(adrs, in_adrs);
sphincs_adrs_set_type(adrs, SPHINCS_ADRS_TYPE_WOTS_PRF);
for (i = 0; i < 35; i++) {
sphincs_adrs_set_chain_address(adrs, i);
sphincs_adrs_set_hash_address(adrs, 0);
sphincs_adrs_compress(adrs, adrsc);
// sk[i]
hash256_init(&ctx);
hash256_update(&ctx, block, sizeof(block));
hash256_update(&ctx, adrsc, sizeof(adrsc));
hash256_update(&ctx, secret, sizeof(sphincs_secret_t));
hash256_finish(&ctx, dgst);
format_bytes(stderr, 0, 0, "wots_sk[i]", dgst, 32);
memcpy(sk[i], dgst, sizeof(sphincs_secret_t));
}
}
void sphincs_wots_chain(const sphincs_secret_t x,
const sphincs_secret_t seed, const sphincs_adrs_t ots_adrs,
@@ -154,38 +343,6 @@ void sphincs_wots_chain(const sphincs_secret_t x,
}
}
void sphincs_wots_derive_sk(const sphincs_secret_t secret,
const sphincs_secret_t seed, const sphincs_adrs_t in_adrs,
sphincs_wots_key_t sk)
{
uint8_t block[HASH256_BLOCK_SIZE] = {0};
sphincs_adrs_t adrs;
sphincs_adrsc_t adrsc;
HASH256_CTX ctx;
hash256_t dgst;
int i;
memcpy(block, seed, sizeof(sphincs_secret_t));
sphincs_adrs_copy_layer_address(adrs, in_adrs);
sphincs_adrs_copy_tree_address(adrs, in_adrs);
sphincs_adrs_set_type(adrs, SPHINCS_ADRS_TYPE_WOTS_PRF);
for (i = 0; i < 35; i++) {
sphincs_adrs_set_chain_address(adrs, i);
sphincs_adrs_set_hash_address(adrs, 0);
sphincs_adrs_compress(adrs, adrsc);
// sk[i]
hash256_init(&ctx);
hash256_update(&ctx, block, sizeof(block));
hash256_update(&ctx, adrsc, sizeof(adrsc));
hash256_update(&ctx, secret, sizeof(sphincs_secret_t));
hash256_finish(&ctx, dgst);
memcpy(sk, dgst, sizeof(sphincs_secret_t));
}
}
void sphincs_wots_sk_to_pk(const sphincs_wots_key_t sk,
const sphincs_secret_t seed, const sphincs_adrs_t ots_adrs,
sphincs_wots_key_t pk)
@@ -347,7 +504,7 @@ void sphincs_xmss_build_tree(const sphincs_secret_t secret,
}
// build xmss tree
sphincs_adrs_set_type(adrs, SPHINCS_ADRS_TYPE_HASHTREE);
sphincs_adrs_set_type(adrs, SPHINCS_ADRS_TYPE_TREE);
//sphincs_adrs_set_padding(adrs, 0);
children = tree;
@@ -386,7 +543,7 @@ void sphincs_xmss_build_root(const sphincs_secret_t wots_root, uint32_t tree_ind
sphincs_adrs_copy_layer_address(adrs, in_adrs);
sphincs_adrs_copy_tree_address(adrs, in_adrs);
sphincs_adrs_set_type(adrs, SPHINCS_ADRS_TYPE_HASHTREE);
sphincs_adrs_set_type(adrs, SPHINCS_ADRS_TYPE_TREE);
//sphincs_adrs_set_padding(adrs, 0);
memcpy(root, wots_root, sizeof(sphincs_secret_t));
@@ -480,7 +637,7 @@ void sphincs_fors_derive_sk(const sphincs_secret_t secret,
sphincs_adrs_copy_layer_address(adrs, in_adrs);
sphincs_adrs_copy_tree_address(adrs, in_adrs);
sphincs_adrs_set_type(adrs, SPHINCS_ADRS_TYPE_FORS_KEYGEN);
sphincs_adrs_set_type(adrs, SPHINCS_ADRS_TYPE_FORS_PRF);
sphincs_adrs_copy_keypair_address(adrs, in_adrs);
sphincs_adrs_set_tree_height(adrs, 0);
sphincs_adrs_set_tree_index(adrs, fors_index);
@@ -516,7 +673,6 @@ void sphincs_fors_derive_root(const sphincs_secret_t secret,
sphincs_fors_derive_root_ex(secret, seed, in_adrs, fors_height, fors_trees, root);
}
void sphincs_fors_sign(const sphincs_secret_t secret,
const sphincs_secret_t seed, const sphincs_adrs_t in_adrs,
const uint8_t dgst[SPHINCS_FORS_DIGEST_SIZE],
@@ -527,13 +683,162 @@ void sphincs_fors_sign(const sphincs_secret_t secret,
size_t i;
for (i = 0; i < SPHINCS_FORS_NUM_TREES; i++) {
//sphincs_fors_derive_sk(secret, seed, adrs, fors_index, fors_sk);
}
}
int sphincs_fors_signature_to_bytes(const SPHINCS_FORS_SIGNATURE *sig, uint8_t **out, size_t *outlen)
{
if (!sig || !outlen) {
error_print();
return -1;
}
if (out && *out) {
memcpy(*out, sig->fors_sk, sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT);
*out += sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT;
memcpy(*out, sig->auth_path, sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT * SPHINCS_FORS_NUM_TREES);
*out += sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT * SPHINCS_FORS_NUM_TREES;
}
*outlen += sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT;
*outlen += sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT * SPHINCS_FORS_NUM_TREES;
return 1;
}
int sphincs_fors_signature_from_bytes(SPHINCS_FORS_SIGNATURE *sig, const uint8_t **in, size_t *inlen)
{
if (!sig || !in || !(*in) || !inlen) {
error_print();
return -1;
}
if (*inlen < SPHINCS_FORS_SIGNATURE_SIZE) {
error_print();
return -1;
}
memcpy(sig->fors_sk, *in, sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT);
*in += sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT;
*inlen += sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT;
memcpy(sig->auth_path, *in, sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT * SPHINCS_FORS_NUM_TREES);
*in += sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT * SPHINCS_FORS_NUM_TREES;
*inlen += sizeof(sphincs_secret_t) * SPHINCS_FORS_HEIGHT * SPHINCS_FORS_NUM_TREES;
return 1;
}
int sphincs_fors_signature_print_ex(FILE *fp, int fmt, int ind, const char *label, const SPHINCS_FORS_SIGNATURE *sig)
{
int i, j;
format_print(fp, fmt, ind, "%s\n", label);
ind += 4;
for (i = 0; i < SPHINCS_FORS_HEIGHT; i++) {
format_bytes(fp, fmt, 0, "fork_sk", sig->fors_sk[i], sizeof(sphincs_secret_t));
format_print(fp, fmt, ind, "auth_path\n");
for (j = 0; i < SPHINCS_FORS_NUM_TREES; i++) {
}
}
return 1;
}
int sphincs_fors_signature_print(FILE *fp, int fmt, int ind, const char *label, const uint8_t *sig, size_t siglen)
{
return -1;
}
int sphincs_public_key_to_bytes(const SPHINCS_KEY *key, uint8_t **out, size_t *outlen)
{
if (!key || !outlen) {
error_print();
return -1;
}
if (out && *out) {
memcpy(*out, key->public_key.seed, sizeof(sphincs_secret_t));
*out += sizeof(sphincs_secret_t);
memcpy(*out, key->public_key.root, sizeof(sphincs_secret_t));
*out += sizeof(sphincs_secret_t);
}
*outlen += sizeof(sphincs_secret_t) * 2;
return 1;
}
int sphincs_public_key_from_bytes(SPHINCS_KEY *key, const uint8_t **in, size_t *inlen)
{
if (!key || !in || !(*in) || !inlen) {
error_print();
return -1;
}
if (*inlen < sizeof(sphincs_secret_t) * 2) {
error_print();
return -1;
}
memcpy(key->public_key.seed, *in, sizeof(sphincs_secret_t));
*in += sizeof(sphincs_secret_t);
*inlen -= sizeof(sphincs_secret_t);
memcpy(key->public_key.root, *in, sizeof(sphincs_secret_t));
*in += sizeof(sphincs_secret_t);
*inlen -= sizeof(sphincs_secret_t);
return 1;
}
int sphincs_public_key_print(FILE *fp, int fmt, int ind, const char *label, const SPHINCS_KEY *key)
{
format_print(fp, fmt, ind, "%s\n", label);
ind += 4;
format_bytes(fp, fmt, ind, "seed", key->public_key.seed, sizeof(sphincs_secret_t));
format_bytes(fp, fmt, ind, "root", key->public_key.root, sizeof(sphincs_secret_t));
return 1;
}
int sphincs_private_key_to_bytes(const SPHINCS_KEY *key, uint8_t **out, size_t *outlen)
{
if (!key || !outlen) {
error_print();
return -1;
}
if (sphincs_public_key_to_bytes(key, out, outlen) != 1) {
error_print();
return -1;
}
if (out && *out) {
memcpy(*out, key->secret, sizeof(sphincs_secret_t));
*out += sizeof(sphincs_secret_t);
memcpy(*out, key->sk_prf, sizeof(sphincs_secret_t));
*out += sizeof(sphincs_secret_t);
}
*outlen += sizeof(sphincs_secret_t) * 2;
return 1;
}
int sphincs_private_key_from_bytes(SPHINCS_KEY *key, const uint8_t **in, size_t *inlen)
{
if (!key || !in || !(*in) || !inlen) {
error_print();
return -1;
}
if (*inlen < SPHINCS_PRIVATE_KEY_SIZE) {
error_print();
return -1;
}
if (sphincs_public_key_from_bytes(key, in, inlen) != 1) {
error_print();
return -1;
}
return 1;
}
int sphincs_private_key_print(FILE *fp, int fmt, int ind, const char *label, const SPHINCS_KEY *key)
{
format_print(fp, fmt, ind, "%s\n", label);
ind += 4;
sphincs_public_key_print(fp, fmt, ind, "public_key", key);
format_bytes(fp, fmt, ind, "secret", key->secret, sizeof(sphincs_secret_t));
format_bytes(fp, fmt, ind, "sk_prf", key->sk_prf, sizeof(sphincs_secret_t));
return 1;
}
void sphincs_key_cleanup(SPHINCS_KEY *key)
{
if (key) {
gmssl_secure_clear(key->secret, sizeof(sphincs_secret_t));
gmssl_secure_clear(key->sk_prf, sizeof(sphincs_secret_t));
}
}

148
tests/sphincstest.c Normal file
View File

@@ -0,0 +1,148 @@
/*
* Copyright 2014-2026 The GmSSL Project. All Rights Reserved.
*
* Licensed under the Apache License, Version 2.0 (the License); you may
* not use this file except in compliance with the License.
*
* http://www.apache.org/licenses/LICENSE-2.0
*/
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <gmssl/hex.h>
#include <gmssl/rand.h>
#include <gmssl/error.h>
#include <gmssl/endian.h>
#include <gmssl/sphincs.h>
// 这个应该是用值去验证的
static int test_sphincs_wots_derive_sk(void)
{
sphincs_secret_t secret;
sphincs_secret_t seed;
sphincs_adrs_t adrs;
sphincs_wots_key_t wots_sk;
sphincs_wots_derive_sk(secret, seed, adrs, wots_sk);
sphincs_wots_key_print(stderr, 0, 4, "wots_sk", wots_sk);
printf("%s() ok\n", __FUNCTION__);
return 1;
}
static int test_sphincs_wots_chain(void)
{
sphincs_secret_t x;
sphincs_secret_t seed;
sphincs_adrs_t adrs;
sphincs_secret_t y;
int start = 0;
int steps = 15;
sphincs_wots_chain(x, seed, adrs, start, steps, y);
printf("%s() ok\n", __FUNCTION__);
return 1;
}
static int test_sphincs_wots_sk_to_pk(void)
{
sphincs_wots_key_t wots_sk;
sphincs_secret_t seed;
sphincs_adrs_t adrs;
sphincs_wots_key_t wots_pk;
sphincs_wots_sk_to_pk(wots_sk, seed, adrs, wots_pk);
sphincs_wots_key_print(stderr, 0, 4, "wots_pk", wots_pk);
printf("%s() ok\n", __FUNCTION__);
return 1;
}
static int test_sphincs_wots_pk_to_root(void)
{
sphincs_wots_key_t wots_pk;
sphincs_secret_t seed;
sphincs_adrs_t adrs;
sphincs_secret_t wots_root;
sphincs_wots_pk_to_root(wots_pk, seed, adrs, wots_root);
printf("%s() ok\n", __FUNCTION__);
return 1;
}
static int test_sphincs_wots_sign(void)
{
sphincs_wots_key_t wots_sk;
sphincs_secret_t seed;
sphincs_adrs_t adrs;
sphincs_secret_t dgst;
sphincs_wots_sig_t wots_sig;
sphincs_wots_sign(wots_sk, seed, adrs, dgst, wots_sig);
printf("%s() ok\n", __FUNCTION__);
return 1;
}
static int test_sphincs_wots_sig_to_pk(void)
{
sphincs_wots_sig_t wots_sig;
sphincs_secret_t seed;
sphincs_adrs_t adrs;
sphincs_secret_t dgst;
sphincs_wots_key_t wots_pk;
sphincs_wots_sig_to_pk(wots_sig, seed, adrs, dgst, wots_pk);
printf("%s() ok\n", __FUNCTION__);
return 1;
}
static int test_sphincs_wots_sign_verify(void)
{
sphincs_wots_key_t wots_sk;
sphincs_wots_key_t wots_pk;
sphincs_secret_t seed;
sphincs_adrs_t adrs;
sphincs_secret_t dgst;
sphincs_wots_sig_t wots_sig;
sphincs_wots_key_t wots_pk2;
sphincs_wots_sk_to_pk(wots_sk, seed, adrs, wots_pk);
sphincs_wots_sign(wots_sk, seed, adrs, dgst, wots_sig);
sphincs_wots_sig_to_pk(wots_sig, seed, adrs, dgst, wots_pk2);
if (memcmp(wots_pk2, wots_pk, sizeof(sphincs_wots_key_t)) != 0) {
error_print();
return -1;
}
printf("%s() ok\n", __FUNCTION__);
return 1;
}
int main(void)
{
if (test_sphincs_wots_derive_sk() != 1) goto err;
if (test_sphincs_wots_chain() != 1) goto err;
if (test_sphincs_wots_sk_to_pk() != 1) goto err;
if (test_sphincs_wots_pk_to_root() != 1) goto err;
if (test_sphincs_wots_sign() != 1) goto err;
if (test_sphincs_wots_sig_to_pk() != 1) goto err;
if (test_sphincs_wots_sign_verify() != 1) goto err;
printf("%s all tests passed\n", __FILE__);
return 0;
err:
error_print();
return -1;
}