crypto/openssl/crypto/ml_kem/ml_kem.c

109

DECLARE_ML_KEM_KEYDATA(prvkey_##bits, ML_KEM_##bits##_RANK, ; scalar sbuf[ML_KEM_##bits##_RANK]; uint8_t zbuf[2 * ML_KEM_RANDOM_BYTES];)

crypto/openssl/crypto/ml_kem/ml_kem.c

116

typedef __owur int (*CBD_FUNC)(scalar *out, uint8_t in[ML_KEM_RANDOM_BYTES + 1],

crypto/openssl/crypto/ml_kem/ml_kem.c

130

#define PUBKEY_BYTES(b) (VECTOR_BYTES(b) + ML_KEM_RANDOM_BYTES)

crypto/openssl/crypto/ml_kem/ml_kem.c

1309

uint8_t input[ML_KEM_RANDOM_BYTES + 2];

crypto/openssl/crypto/ml_kem/ml_kem.c

1313

memcpy(input, key->rho, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1316

input[ML_KEM_RANDOM_BYTES] = i;

crypto/openssl/crypto/ml_kem/ml_kem.c

1317

input[ML_KEM_RANDOM_BYTES + 1] = j;

crypto/openssl/crypto/ml_kem/ml_kem.c

1335

static __owur int cbd_2(scalar *out, uint8_t in[ML_KEM_RANDOM_BYTES + 1],

crypto/openssl/crypto/ml_kem/ml_kem.c

1375

static __owur int cbd_3(scalar *out, uint8_t in[ML_KEM_RANDOM_BYTES + 1],

crypto/openssl/crypto/ml_kem/ml_kem.c

1426

const uint8_t seed[ML_KEM_RANDOM_BYTES], int rank,

crypto/openssl/crypto/ml_kem/ml_kem.c

1429

uint8_t input[ML_KEM_RANDOM_BYTES + 1];

crypto/openssl/crypto/ml_kem/ml_kem.c

1431

memcpy(input, seed, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1433

input[ML_KEM_RANDOM_BYTES] = (*counter)++;

crypto/openssl/crypto/ml_kem/ml_kem.c

1444

const uint8_t seed[ML_KEM_RANDOM_BYTES], int rank,

crypto/openssl/crypto/ml_kem/ml_kem.c

1447

uint8_t input[ML_KEM_RANDOM_BYTES + 1];

crypto/openssl/crypto/ml_kem/ml_kem.c

1449

memcpy(input, seed, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1451

input[ML_KEM_RANDOM_BYTES] = (*counter)++;

crypto/openssl/crypto/ml_kem/ml_kem.c

1480

const uint8_t r[ML_KEM_RANDOM_BYTES], scalar *tmp,

crypto/openssl/crypto/ml_kem/ml_kem.c

1491

uint8_t input[ML_KEM_RANDOM_BYTES + 1];

crypto/openssl/crypto/ml_kem/ml_kem.c

1513

memcpy(input, r, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1514

input[ML_KEM_RANDOM_BYTES] = counter;

crypto/openssl/crypto/ml_kem/ml_kem.c

1563

memcpy(out + vinfo->vector_bytes, rho, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1582

memcpy(out, key->z, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1605

memcpy(key->rho, in + vinfo->vector_bytes, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1652

memcpy(key->z, in, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1684

uint8_t hashed[2 * ML_KEM_RANDOM_BYTES];

crypto/openssl/crypto/ml_kem/ml_kem.c

1685

const uint8_t *const sigma = hashed + ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

1686

uint8_t augmented_seed[ML_KEM_RANDOM_BYTES + 1];

crypto/openssl/crypto/ml_kem/ml_kem.c

1697

memcpy(augmented_seed, seed, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1698

augmented_seed[ML_KEM_RANDOM_BYTES] = (uint8_t)rank;

crypto/openssl/crypto/ml_kem/ml_kem.c

1701

memcpy(key->rho, hashed, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1703

CONSTTIME_DECLASSIFY(key->rho, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1727

memcpy(key->z, seed + ML_KEM_RANDOM_BYTES, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1730

key->d = key->z + ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

1732

memcpy(key->d, seed, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1734

OPENSSL_cleanse(key->d, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1740

OPENSSL_cleanse((void *)augmented_seed, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1741

OPENSSL_cleanse((void *)sigma, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1759

const uint8_t entropy[ML_KEM_RANDOM_BYTES],

crypto/openssl/crypto/ml_kem/ml_kem.c

1762

uint8_t input[ML_KEM_RANDOM_BYTES + ML_KEM_PKHASH_BYTES];

crypto/openssl/crypto/ml_kem/ml_kem.c

1763

uint8_t Kr[ML_KEM_SHARED_SECRET_BYTES + ML_KEM_RANDOM_BYTES];

crypto/openssl/crypto/ml_kem/ml_kem.c

1767

memcpy(input, entropy, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1768

memcpy(input + ML_KEM_RANDOM_BYTES, key->pkhash, ML_KEM_PKHASH_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1798

uint8_t failure_key[ML_KEM_RANDOM_BYTES];

crypto/openssl/crypto/ml_kem/ml_kem.c

1799

uint8_t Kr[ML_KEM_SHARED_SECRET_BYTES + ML_KEM_RANDOM_BYTES];

crypto/openssl/crypto/ml_kem/ml_kem.c

1861

key->pkhash = key->seedbuf + ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

1896

key->vinfo->rank * sizeof(scalar) + 2 * ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

1991

ret->pkhash = ret->rho + ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

1997

ret->d = ret->z + ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

2066

memcpy(out, key->d, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

2067

out += ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

2068

memcpy(out, key->z, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

2089

key->d = key->z + ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

2090

memcpy(key->d, seed, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

2091

seed += ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

2092

memcpy(key->z, seed, ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

22

#if ML_KEM_SEED_BYTES != ML_KEM_SHARED_SECRET_BYTES + ML_KEM_RANDOM_BYTES

crypto/openssl/crypto/ml_kem/ml_kem.c

2205

CONSTTIME_DECLASSIFY(key->z, 2 * ML_KEM_RANDOM_BYTES);

crypto/openssl/crypto/ml_kem/ml_kem.c

2228

|| entropy == NULL || elen != ML_KEM_RANDOM_BYTES

crypto/openssl/crypto/ml_kem/ml_kem.c

2270

uint8_t r[ML_KEM_RANDOM_BYTES];

crypto/openssl/crypto/ml_kem/ml_kem.c

2275

if (RAND_bytes_ex(key->libctx, r, ML_KEM_RANDOM_BYTES,

crypto/openssl/crypto/ml_kem/ml_kem.c

2312

classify_bytes = 2 * sizeof(scalar) + ML_KEM_RANDOM_BYTES;

crypto/openssl/crypto/ml_kem/ml_kem.c

25

#if ML_KEM_SHARED_SECRET_BYTES != ML_KEM_RANDOM_BYTES

crypto/openssl/crypto/ml_kem/ml_kem.c

677

static __owur int prf(uint8_t *out, size_t len, const uint8_t in[ML_KEM_RANDOM_BYTES + 1],

crypto/openssl/crypto/ml_kem/ml_kem.c

681

&& single_keccak(out, len, in, ML_KEM_RANDOM_BYTES + 1, mdctx);

crypto/openssl/crypto/ml_kem/ml_kem.c

715

if (!EVP_DigestUpdate(mdctx, key->rho, ML_KEM_RANDOM_BYTES))

crypto/openssl/crypto/ml_kem/ml_kem.c

740

const uint8_t z[ML_KEM_RANDOM_BYTES],

crypto/openssl/crypto/ml_kem/ml_kem.c

745

&& EVP_DigestUpdate(mdctx, z, ML_KEM_RANDOM_BYTES)

crypto/openssl/include/crypto/ml_kem.h

48

#define ML_KEM_SEED_BYTES (ML_KEM_RANDOM_BYTES * 2) /* Keygen (d, z) */

crypto/openssl/include/crypto/ml_kem.h

53

#if ML_KEM_PKHASH_BYTES != ML_KEM_RANDOM_BYTES

crypto/openssl/providers/implementations/kem/ml_kem_kem.c

108

OPENSSL_cleanse(ctx->entropy, ML_KEM_RANDOM_BYTES);

crypto/openssl/providers/implementations/kem/ml_kem_kem.c

118

size_t len = ML_KEM_RANDOM_BYTES;

crypto/openssl/providers/implementations/kem/ml_kem_kem.c

123

&& len == ML_KEM_RANDOM_BYTES)

crypto/openssl/providers/implementations/kem/ml_kem_kem.c

205

ctx->entropy, ML_KEM_RANDOM_BYTES, key);

crypto/openssl/providers/implementations/kem/ml_kem_kem.c

218

OPENSSL_cleanse(ctx->entropy, ML_KEM_RANDOM_BYTES);

crypto/openssl/providers/implementations/kem/ml_kem_kem.c

35

uint8_t entropy_buf[ML_KEM_RANDOM_BYTES];

crypto/openssl/providers/implementations/kem/ml_kem_kem.c

58

OPENSSL_cleanse(ctx->entropy, ML_KEM_RANDOM_BYTES);

crypto/openssl/providers/implementations/keymgmt/ml_kem_kmgmt.c

345

size_t zlen = ML_KEM_RANDOM_BYTES;

crypto/openssl/providers/implementations/keymgmt/ml_kem_kmgmt.c

440

puboff = prvlen - ML_KEM_RANDOM_BYTES - ML_KEM_PKHASH_BYTES - publen;

crypto/openssl/providers/implementations/keymgmt/ml_kem_kmgmt.c

73

unsigned char entropy[ML_KEM_RANDOM_BYTES];

crypto/openssl/test/ml_kem_evp_extra_test.c

276

if (!TEST_mem_eq(rawpub + v->vector_bytes, ML_KEM_RANDOM_BYTES,

crypto/openssl/test/ml_kem_evp_extra_test.c

277

expected_rho[i], ML_KEM_RANDOM_BYTES))

crypto/openssl/test/ml_kem_internal_test.c

147

ML_KEM_RANDOM_BYTES,

crypto/openssl/test/ml_kem_internal_test.c

149

ML_KEM_RANDOM_BYTES))

crypto/openssl/test/ml_kem_internal_test.c

40

static uint8_t ml_kem_expected_rho[3][ML_KEM_RANDOM_BYTES] = {

crypto/openssl/test/ml_kem_internal_test.c

96

decap_entropy = ml_kem_public_entropy + ML_KEM_RANDOM_BYTES;