Native ML-KEM768 implementation

for cryptographic backends that do not have support for ML-KEM (old
OpenSSL and Gcrypt; MbedTLS).

Based on the libcrux implementation used in OpenSSH, taken from this
revision:

https://github.com/openssh/openssh-portable/blob/6aba700/libcrux_mlkem768_sha3.h

But refactored to separate C and header file to support testing and
removed unused functions (to make compiler happy).

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
Reviewed-by: Pavol Žáčik <pzacik@redhat.com>
This commit is contained in:
Jakub Jelen
2025-12-19 12:00:41 +01:00
parent 9780fa2f01
commit 34db488e4d
27 changed files with 9569 additions and 91 deletions

View File

@@ -90,6 +90,11 @@ if (CLIENT_TESTING)
"-Wl,--wrap=sntrup761_keypair"
"-Wl,--wrap=sntrup761_enc"
"-Wl,--wrap=sntrup761_dec")
list(APPEND WRAP_SYMBOLS
"-Wl,--wrap=libcrux_ml_kem_mlkem768_portable_generate_key_pair"
"-Wl,--wrap=libcrux_ml_kem_mlkem768_portable_validate_public_key"
"-Wl,--wrap=libcrux_ml_kem_mlkem768_portable_encapsulate"
"-Wl,--wrap=libcrux_ml_kem_mlkem768_portable_decapsulate")
add_library(${TORTURE_SHARED_LIBRARY}
SHARED