1300a4e223
核心功能： - ✅ Categories/Series双视图管理（category_view.rs + import_markdown.rs） - ✅ FUSE Multi-Volume支持（tree_type参数） - ✅ SSH/SFTP/SCP/rsync协议完整实现（4042行） - ✅ NFS/SMB Module Phase 1-3完成 - ✅ Archive Module Phase 1-4完成（2916行） - ✅ Download Center API完整实现 - ✅ S3兼容API实现（560行） Git配置修正： - ✅ 删除错误origin（gitea.momentry.ddns.net） - ✅ 删除m5max128（指向机器名） - ✅ 设置origin = m5max128gitea.momentry.ddns.net/admin/markbase - ✅ 设置m4minigitea = m4minigitea.momentry.ddns.net/warren/markbase 数据清理： - ✅ 删除38个临时SQLite（保留accusys.sqlite、demo.sqlite） - ✅ 删除.bak、test_*.bin、调试脚本等临时文件 - ✅ 删除临时目录（build/、download files/、raid_test/等） - ✅ 更新.gitignore排除临时文件 架构优化： - 52个文件修改，2434行新增，4739行删除 - Workspace成员整合（16个crate） - 数据库状态：accusys.sqlite保留（主demo测试） 远程同步： - ✅ 准备推送到m5max128gitea（远程Gitea） - ✅ 准备推送到m4minigitea（本地Gitea）
92 lines
3.7 KiB
C
92 lines
3.7 KiB
C
// Copyright (c) 2018, Google Inc.
|
|
// SPDX-License-Identifier: ISC
|
|
|
|
#ifndef OPENSSL_HEADER_HRSS_H
|
|
#define OPENSSL_HEADER_HRSS_H
|
|
|
|
#include <openssl/base.h>
|
|
|
|
#if defined(__cplusplus)
|
|
extern "C" {
|
|
#endif
|
|
|
|
// HRSS
|
|
//
|
|
// HRSS is a structured-lattice-based post-quantum key encapsulation mechanism.
|
|
// The best exposition is https://eprint.iacr.org/2017/667.pdf although this
|
|
// implementation uses a different KEM construction based on
|
|
// https://eprint.iacr.org/2017/1005.pdf.
|
|
|
|
struct HRSS_private_key {
|
|
uint8_t opaque[1808];
|
|
};
|
|
|
|
struct HRSS_public_key {
|
|
uint8_t opaque[1424];
|
|
};
|
|
|
|
// HRSS_SAMPLE_BYTES is the number of bytes of entropy needed to generate a
|
|
// short vector. There are 701 coefficients, but the final one is always set to
|
|
// zero when sampling. Otherwise, we need one byte of input per coefficient.
|
|
#define HRSS_SAMPLE_BYTES (701 - 1)
|
|
// HRSS_GENERATE_KEY_BYTES is the number of bytes of entropy needed to generate
|
|
// an HRSS key pair.
|
|
#define HRSS_GENERATE_KEY_BYTES (HRSS_SAMPLE_BYTES + HRSS_SAMPLE_BYTES + 32)
|
|
// HRSS_ENCAP_BYTES is the number of bytes of entropy needed to encapsulate a
|
|
// session key.
|
|
#define HRSS_ENCAP_BYTES (HRSS_SAMPLE_BYTES + HRSS_SAMPLE_BYTES)
|
|
// HRSS_PUBLIC_KEY_BYTES is the number of bytes in a public key.
|
|
#define HRSS_PUBLIC_KEY_BYTES 1138
|
|
// HRSS_CIPHERTEXT_BYTES is the number of bytes in a ciphertext.
|
|
#define HRSS_CIPHERTEXT_BYTES 1138
|
|
// HRSS_KEY_BYTES is the number of bytes in a shared key.
|
|
#define HRSS_KEY_BYTES 32
|
|
// HRSS_POLY3_BYTES is the number of bytes needed to serialise a mod 3
|
|
// polynomial.
|
|
#define HRSS_POLY3_BYTES 140
|
|
#define HRSS_PRIVATE_KEY_BYTES \
|
|
(HRSS_POLY3_BYTES * 2 + HRSS_PUBLIC_KEY_BYTES + 2 + 32)
|
|
|
|
// HRSS_generate_key is a deterministic function that outputs a public and
|
|
// private key based on the given entropy. It returns one on success or zero
|
|
// on malloc failure.
|
|
OPENSSL_EXPORT int HRSS_generate_key(
|
|
struct HRSS_public_key *out_pub, struct HRSS_private_key *out_priv,
|
|
const uint8_t input[HRSS_GENERATE_KEY_BYTES]);
|
|
|
|
// HRSS_encap is a deterministic function the generates and encrypts a random
|
|
// session key from the given entropy, writing those values to |out_shared_key|
|
|
// and |out_ciphertext|, respectively. It returns one on success or zero on
|
|
// malloc failure.
|
|
OPENSSL_EXPORT int HRSS_encap(uint8_t out_ciphertext[HRSS_CIPHERTEXT_BYTES],
|
|
uint8_t out_shared_key[HRSS_KEY_BYTES],
|
|
const struct HRSS_public_key *in_pub,
|
|
const uint8_t in[HRSS_ENCAP_BYTES]);
|
|
|
|
// HRSS_decap decrypts a session key from |ciphertext_len| bytes of
|
|
// |ciphertext|. If the ciphertext is valid, the decrypted key is written to
|
|
// |out_shared_key|. Otherwise the HMAC of |ciphertext| under a secret key (kept
|
|
// in |in_priv|) is written. If the ciphertext is the wrong length then it will
|
|
// leak which was done via side-channels. Otherwise it should perform either
|
|
// action in constant-time. It returns one on success (whether the ciphertext
|
|
// was valid or not) and zero on malloc failure.
|
|
OPENSSL_EXPORT int HRSS_decap(uint8_t out_shared_key[HRSS_KEY_BYTES],
|
|
const struct HRSS_private_key *in_priv,
|
|
const uint8_t *ciphertext, size_t ciphertext_len);
|
|
|
|
// HRSS_marshal_public_key serialises |in_pub| to |out|.
|
|
OPENSSL_EXPORT void HRSS_marshal_public_key(
|
|
uint8_t out[HRSS_PUBLIC_KEY_BYTES], const struct HRSS_public_key *in_pub);
|
|
|
|
// HRSS_parse_public_key sets |*out| to the public-key encoded in |in|. It
|
|
// returns true on success and zero on error.
|
|
OPENSSL_EXPORT int HRSS_parse_public_key(
|
|
struct HRSS_public_key *out, const uint8_t in[HRSS_PUBLIC_KEY_BYTES]);
|
|
|
|
|
|
#if defined(__cplusplus)
|
|
} // extern C
|
|
#endif
|
|
|
|
#endif // OPENSSL_HEADER_HRSS_H
|