1 /* 2 * This file is part of the openHiTLS project. 3 * 4 * openHiTLS is licensed under the Mulan PSL v2. 5 * You can use this software according to the terms and conditions of the Mulan PSL v2. 6 * You may obtain a copy of Mulan PSL v2 at: 7 * 8 * http://license.coscl.org.cn/MulanPSL2 9 * 10 * THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND, 11 * EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT, 12 * MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE. 13 * See the Mulan PSL v2 for more details. 14 */ 15 16 #ifndef CRYPT_SLH_DSA_FORS_H 17 #define CRYPT_SLH_DSA_FORS_H 18 19 #include "hitls_build.h" 20 #ifdef HITLS_CRYPTO_SLH_DSA 21 22 #include <stdint.h> 23 #include "crypt_slh_dsa.h" 24 #include "slh_dsa_local.h" 25 26 /** 27 * @brief Sign a message using FORS 28 * 29 * @param md Input message to sign (already hashed to appropriate length) 30 * @param mdLen Length of the message 31 * @param adrs Address structure for domain separation 32 * @param ctx Context 33 * @param sig Output signature 34 * @param sigLen Length of the signature 35 * @return int 0 on success, error code otherwise 36 */ 37 int32_t ForsSign(const uint8_t *md, uint32_t mdLen, SlhDsaAdrs *adrs, const CryptSlhDsaCtx *ctx, uint8_t *sig, 38 uint32_t *sigLen); 39 40 /** 41 * @brief Verify a FORS signature 42 * 43 * @param sig Input signature 44 * @param sigLen Length of the signature 45 * @param md Input message that was signed 46 * @param mdLen Length of the message 47 * @param adrs Address structure for domain separation 48 * @param ctx Context 49 * @param pk Output public key 50 * @return int 0 if signature is valid, error code otherwise 51 */ 52 int32_t ForsPkFromSig(const uint8_t *sig, uint32_t sigLen, const uint8_t *md, uint32_t mdLen, SlhDsaAdrs *adrs, 53 const CryptSlhDsaCtx *ctx, uint8_t *pk); 54 55 /** 56 * @brief Generate a FORS private value 57 * 58 * @param adrs Address structure for domain separation 59 * @param idx Tree index 60 * @param ctx Context 61 * @param sk Output private value, the length is n 62 * @return int 0 on success, error code otherwise 63 */ 64 int32_t ForsGenPrvKey(const SlhDsaAdrs *adrs, uint32_t idx, const CryptSlhDsaCtx *ctx, uint8_t *sk); 65 66 /** 67 * @brief Generate a FORS node 68 * 69 * @param idx Tree index 70 * @param height Height of the tree 71 * @param adrs Address structure for domain separation 72 * @param ctx Context 73 * @param node Output node, the length is n 74 * @return int 0 on success, error code otherwise 75 */ 76 int32_t ForsNode(uint32_t idx, uint32_t height, SlhDsaAdrs *adrs, const CryptSlhDsaCtx *ctx, uint8_t *node); 77 78 #endif // HITLS_CRYPTO_SLH_DSA 79 #endif // CRYPT_SLH_DSA_FORS_H