Bruce
390b906d19
Patch ICICLE ML-KEM for deterministic encapsulation ( #2258 )
...
* patch ICICLE ML-KEM to include enc_derand, but they are not tested
Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>
* copy_from_upstream.py added deterministic encapsulation info to NTRU docs
Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>
---------
Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>
2025-09-15 10:09:26 -04:00
Saito Masataka
59bf831b47
Add NTRU back ( #2176 )
...
This commit includes following changes:
* Revert "Removed NTRU. (#1335 )"
* Replace the uses of malloc with OQS_MEM_malloc
* Add a derandomized keypair function
* Add "all" entries of NTRU algorithms to the KATs file
* Fix reflecting the removal of NTRU from PQClean
* Update NTRU documents with the latest manners
* Change the CODEOWNERS of NTRU KEM
Signed-off-by: Saito Masataka <saitomst@intellilink.co.jp>
2025-09-09 17:10:28 -04:00
Marco Gianvecchio
f58b45a087
Update CROSS to version 2.2 ( #2247 )
...
* update CROSS to version 2.2
Signed-off-by: rtjk <47841774+rtjk@users.noreply.github.com>
* in CROSS-RSDPG memset vector to 0 before AVX2 exponentiation
Signed-off-by: rtjk <47841774+rtjk@users.noreply.github.com>
* in CROSS-RSDPG memset vector to 0 before AVX2 exponentiation
Signed-off-by: rtjk <47841774+rtjk@users.noreply.github.com>
2025-09-09 17:03:45 -04:00
Aiden Fox Ivey
15a6b4805e
Move linux_arm_emulated to extended tests ( #2236 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
Co-authored-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-09-09 17:02:24 -04:00
max-p-log-p
c7ae760162
Change 64 bit add to 32 bit add to wrap on 32 bit counter for AES-CTR AES-NI implementation ( #2252 )
...
Signed-off-by: Brandon Luo <sel4@disroot.org>
Co-authored-by: Brandon Luo <brandon.luo@ll.mit.edu>
2025-09-09 16:55:19 -04:00
Vibhav Tiwari
d566dd236a
Improve random number generator security ( #2225 )
...
* Update common/CMakeLists.txt
* Add OQS_HAVE_BCRYPT compile definition
Signed-off-by: vibhav950 <vibhavtiwari.official@gmail.com>
* Use BCryptGenRandom as default Win32 system RNG
Signed-off-by: vibhav950 <vibhavtiwari.official@gmail.com>
* Fix code formatting
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix CMakeLists.txt
Signed-off-by: vibhav950 <vibhavtiwari.official@gmail.com>
* Revert change to OQS_randombytes docs
Signed-off-by: vibhav950 <vibhavtiwari.official@gmail.com>
* Fix CMake build failures
Signed-off-by: vibhav950 <vibhavtiwari.official@gmail.com>
---------
Signed-off-by: vibhav950 <vibhavtiwari.official@gmail.com>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-09-04 11:09:10 -04:00
Dmitry
68b0d172d7
docs: fix pluralization: "key encapsulation mechanisms (KEMs)" ( #2255 )
...
Signed-off-by: Dmitry <98899785+mdqst@users.noreply.github.com>
2025-08-27 16:26:40 -04:00
Douglas Stebila
475208af5f
Fix permissions for poutine_analysis job ( #2246 )
...
* Fix permissions for poutine_analysis job
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* supplychain job permissions in commit-to-main
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-08-27 16:20:40 -04:00
Rodrigo Martín
c62031ee75
Include DeriveEncapsulation functionality (Issue #2135 ) ( #2221 )
...
* Include 'encaps_derand' functionality
Signed-off-by: RodriM11 <62776780+RodriM11@users.noreply.github.com>
* Add changes pertaining to upstream copy
Signed-off-by: RodriM11 <62776780+RodriM11@users.noreply.github.com>
* Add co-author
Co-authored-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: RodriM11 <62776780+RodriM11@users.noreply.github.com>
* Fix formatting
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Modify 'vectors_kem.c' to employ '_derand' API
Signed-off-by: Rodrigo Martin Sánchez-Ledesma <rmsanchezledesma@indra.es>
---------
Signed-off-by: RodriM11 <62776780+RodriM11@users.noreply.github.com>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: Rodrigo Martin Sánchez-Ledesma <rmsanchezledesma@indra.es>
Co-authored-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Co-authored-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Rodrigo Martin Sánchez-Ledesma <rmsanchezledesma@indra.es>
2025-08-27 10:05:41 -04:00
h2parson
cbffa331d5
SLH-DSA ACVP tests ( #2237 )
...
* apply slh acvp branch
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* remove openssl/bio.h include
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix windows __attribute__ issue
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* Update tests/vectors_sig.c [skip ci]
Signed-off-by: Douglas Stebila <dstebila@users.noreply.github.com>
---------
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
Signed-off-by: Douglas Stebila <dstebila@users.noreply.github.com>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-08-27 09:43:57 -04:00
Douglas Stebila
d79049f378
Disable testing on Travis CI ( #2248 )
...
Aim to re-enable CI testing on s390x and ppc64le as per https://github.com/open-quantum-safe/liboqs/issues/2068
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-08-25 07:55:58 -04:00
Aiden Fox Ivey
1698d86177
Upgrade Jinja to 3.1.6 ( #2214 )
...
* Upgrade Jinja to 3.1.6
As per
https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7
use of Jinja 3.1.5 has a vulnerability. It's probably not an incredible problem,
but it would be best to upgrade these packages to stay updated with bugfixes.
This follows the Nix flake model where the inputs are not pinned explicitly, so
'updating' them will actually increment their versions.
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Fixed requirements merge conflict
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-19 21:44:24 -04:00
matlimatli
fd6ffebc54
Update license info for ML-KEM ( #2250 )
...
Fixes #2249
Signed-off-by: Mattias Lindblad <matlin@gmail.com>
2025-08-19 21:35:57 -04:00
matlimatli
5f9736304f
Avoid invalid compiler options for MSVC ( #2239 )
...
Fixes #2238 , Fixes #2177
Signed-off-by: Mattias Lindblad <matlin@gmail.com>
2025-08-19 08:26:13 -04:00
sukrucildirr
2dc4afc2cf
chore: fix typos across codebase ( #2244 )
...
* Update PROCEDURES.md
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
* Update FUZZING.md
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
* Update vectors_kem.c
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
* Update ossl_functions.h
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
---------
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
2025-08-18 10:19:28 -04:00
Aiden Fox Ivey
da42a978d1
Restructure basic checks ( #2233 )
...
* Move actionlint to a standard runner
Restructure basic checks
* Move actionlint to a standard runner
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-18 10:18:41 -04:00
Aiden Fox Ivey
1d6e213aa3
Add Classic McEliece sanitization patch ( #2218 )
...
* Add patches
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Add Classic McEliece sanitization patch
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-18 10:04:23 -04:00
Aiden Fox Ivey
5f0a5f2b4e
Fix code scanning workflow ( #2217 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-18 10:04:02 -04:00
Aiden Fox Ivey
ec23683647
Change Nix install action to verified ( #2212 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-18 10:02:32 -04:00
nonam3e
16b8629972
Icicle-pqc integration ( #2216 )
...
* correct build
Signed-off-by: nonam3e <timur@ingonyama.com>
* use interface to link
Signed-off-by: nonam3e <timur@ingonyama.com>
* remove load backends
Signed-off-by: nonam3e <timur@ingonyama.com>
* liboqs 0.14.0 release candidate 1 (#2180 )
* Prepare 0.14.0 release candidate 1 [full tests] [extended tests]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update release notes with deprecation and security info [skip ci]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: nonam3e <timur@ingonyama.com>
* add icicle in scripts
Signed-off-by: nonam3e <timur@ingonyama.com>
* update docs
Signed-off-by: nonam3e <timur@ingonyama.com>
* add link
Signed-off-by: nonam3e <timur@ingonyama.com>
* build with local package
Signed-off-by: nonam3e <timur@ingonyama.com>
* update scripts
Signed-off-by: nonam3e <timur@ingonyama.com>
* choose alg -DOQS_ENABLE_KEM_ml_kem_512_icicle_cuda=ON -DOQS_ENABLE_KEM_ml_kem_768_icicle_cuda=OFF
Signed-off-by: nonam3e <timur@ingonyama.com>
* docs
Signed-off-by: nonam3e <timur@ingonyama.com>
* OQS_STATUS return type
Signed-off-by: nonam3e <timur@ingonyama.com>
* Document public / internal API split [skip ci] (#2182 )
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: nonam3e <timur@ingonyama.com>
* liboqs 0.14.0 release (#2198 )
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: nonam3e <timur@ingonyama.com>
* manual build
Signed-off-by: nonam3e <timur@ingonyama.com>
* remove tmp
Signed-off-by: nonam3e <timur@ingonyama.com>
* build statically with target_link_libraries
Signed-off-by: nonam3e <timur@ingonyama.com>
* Switch to dev mode for 0.14.1 (#2199 )
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: nonam3e <timur@ingonyama.com>
* update ACVP to 1.1.0.40 (#2172 )
Signed-off-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
Signed-off-by: nonam3e <timur@ingonyama.com>
* Added Custom Timeout to CI (#2189 )
* Added Custom Timeout to CI
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
* remove unnecessary comment
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
* Use correct syntax for timeout in jobs that span multiple files
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
---------
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
Signed-off-by: nonam3e <timur@ingonyama.com>
* Update nixpkgs from 24.05 to 25.05 (#2187 )
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
Signed-off-by: nonam3e <timur@ingonyama.com>
* update commit
Signed-off-by: nonam3e <timur@ingonyama.com>
* icicle pqc package cmd in CONFIGURE.md
Signed-off-by: nonam3e <timur@ingonyama.com>
* remove unnecessary targets from cmake config
Signed-off-by: nonam3e <timur@ingonyama.com>
* add SPDX-License-Identifier header
Signed-off-by: nonam3e <timur@ingonyama.com>
---------
Signed-off-by: nonam3e <timur@ingonyama.com>
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
Co-authored-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
Co-authored-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
Co-authored-by: Kitsios Konstantinos <kitsios.konst@gmail.com>
Co-authored-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-14 09:52:26 -04:00
Aiden Fox Ivey
bee7e6b922
Remove armel comment ( #2231 )
...
* Remove armel comment
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Remove armel CMake config
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-14 09:51:40 -04:00
Aiden Fox Ivey
67ca2a3c84
Fix PLATFORMS.md ( #2232 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-14 09:51:14 -04:00
h2parson
9e964cad5b
Integrate SLH-DSA-C Library ( #2175 )
...
* copy from slhdsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* integrate with copy from upstream
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* explicitly list slhdsa files to include and push generated code
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* format code script
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add to requirements.in
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix code conventions
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* copy from upstream changes
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add chdir to copy from slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify template
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* generate requirements.txt
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify requirments in workflows
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* format
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* a
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* sort filenames in cmake file generation for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add newline at end of header file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add whitespace and fix alg info tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* update docs with copy from upstream
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add whitespace to src files
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* initialize ctx in slh
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* explicitly set little endian for windows x86
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* temporarily disable ctx signing for slh tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* disable kats until hashes available for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix issues in test sig mem
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* temporarily add namespaces so that slh dsa will not break test namespace
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* updates
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* formatted file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* align jinja template to astyle
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* change addrnd size
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* copy from slhdsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* integrate with copy from upstream
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* explicitly list slhdsa files to include and push generated code
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* format code script
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add to requirements.in
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix code conventions
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* copy from upstream changes
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add chdir to copy from slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify template
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* generate requirements.txt
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify requirments in workflows
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* format
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* a
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* sort filenames in cmake file generation for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add newline at end of header file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add whitespace and fix alg info tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* update docs with copy from upstream
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add whitespace to src files
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* initialize ctx in slh
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* explicitly set little endian for windows x86
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* temporarily disable ctx signing for slh tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* disable kats until hashes available for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix issues in test sig mem
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* temporarily add namespaces so that slh dsa will not break test namespace
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* updates
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* formatted file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* align jinja template to astyle
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* change addrnd size
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix std algs filtering issue
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modifying windows amd toolchain file to fix endianness issue
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* disable leak testing on slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* disable slh dsa for arm emulated linux and zephyr tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix zephyr test skip logic
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix upstream issue with prehash naming and add variant specific nist levels
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* automatically update slh dsa yml file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* get slh dsa md file generation working
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix naming in slh wrapper files
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* minor changes from review
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* separate slh dsa jobs from stfl sigs
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* separate slhdsa from sig stfl tests on mac and windows
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix macos yml format
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify zephyr timeout
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* re-enable some tests for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* separate leak tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* allow algorithm family level enablement and reconfigure slhdsa CI jobs
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* move slh dsa address sanitizer to extended tests and extend time limit to 90 minutes
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* remove package deb from CI job, remove auto gen kat sig for slhdsa, add prime ctx step for sig testing slhdsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
---------
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
2025-08-13 15:41:47 -04:00
Aiden Fox Ivey
01de36c1ec
Add Poutine SASL ( #2213 )
...
* Change Nix install action to verified
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Integrate poutine
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-07-29 11:03:31 -04:00
Aiden Fox Ivey
78e2389180
Update nixpkgs from 24.05 to 25.05 ( #2187 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-07-14 20:55:05 -04:00
Kitsios Konstantinos
6cc048ae6f
Added Custom Timeout to CI ( #2189 )
...
* Added Custom Timeout to CI
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
* remove unnecessary comment
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
* Use correct syntax for timeout in jobs that span multiple files
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
---------
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
2025-07-14 20:54:43 -04:00
Abhinav Saxena
d39268b204
update ACVP to 1.1.0.40 ( #2172 )
...
Signed-off-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
2025-07-14 20:54:05 -04:00
Douglas Stebila
dc90c6cb41
Switch to dev mode for 0.14.1 ( #2199 )
...
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-07-14 20:53:32 -04:00
Douglas Stebila
94b421ebb8
liboqs 0.14.0 release ( #2198 )
...
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-07-10 13:46:40 -04:00
Spencer Wilson
3674df5cf3
Document public / internal API split [skip ci] ( #2182 )
...
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-07-10 10:50:42 -04:00
Spencer Wilson
b5d3dac4eb
liboqs 0.14.0 release candidate 1 ( #2180 )
...
* Prepare 0.14.0 release candidate 1 [full tests] [extended tests]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update release notes with deprecation and security info [skip ci]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-06-26 14:23:12 -04:00
Spencer Wilson
4215362acb
Merge commit from fork
...
* Enable constant-time testing for -O3 builds [extended tests]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Add regression test for HQC constant-time issues
* Build HQC without optimizations
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-06-23 14:36:48 -04:00
Aiden Fox Ivey
50185c6e72
Zeroize memory in SHA3 implementation ( #2171 )
...
* Add OQS_MEM_aligned_secure_free convenience fn
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Rewrite SHA3 aligned frees to zeroize
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-06-20 14:12:12 -04:00
Marcel Cornu
8f926065eb
Add AVX512VL-Optimized SHA3/SHAKE Implementations ( #2167 )
...
* Add SHA3-256/384/512 and SHAKE128/256 AVX512VL implementations
Co-authored-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
Co-authored-by: Erdinc Ozturk <erdinc.ozturk@intel.com>
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
Signed-off-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
* AVX512VL SHA3 is added as an extension of XKCP implementation
Co-authored-by: Marcel Cornu <marcel.d.cornu@intel.com>
Signed-off-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Add SHA3-384 tests
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Update namespace test to include SHA3
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Release SHA3 context after triggering dispatcher
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Add linux CI for OQS_USE_SHA3_AVX512VL=OFF config
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Add AVX512 emulation to linux CI
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
---------
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
Signed-off-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
Co-authored-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
Co-authored-by: Erdinc Ozturk <erdinc.ozturk@intel.com>
2025-06-20 13:37:32 -04:00
Aiden Fox Ivey
47b8fdd404
Adding code coverage ( #2148 )
...
* First stab at adding coverage tests
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Install dependencies for coveralls action
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Integrate code coverage into CI
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Properly parallelize
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Refine test coverage
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Ignore unused exclude path error
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update exclude path
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Fix Markdown formatting
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Pin dependencies
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update workflow badge path
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Fix path in CI.md
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Remove unnecessary call to install curl
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
Co-authored-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-06-19 14:45:44 -04:00
Douglas Stebila
6218d54496
Benchmarking comments only on alerts ( #2168 )
...
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-06-18 11:38:44 -04:00
Pablo Gutiérrez
a56b796271
increased alert threshold ( #2166 )
...
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
2025-06-16 10:50:07 -04:00
Nathaniel Brough
8d9cfd7f33
test: Add basic kem fuzz testing ( #2133 )
...
Signed-off-by: Nathaniel Brough <nathaniel.brough@gmail.com>
2025-06-12 10:03:59 -04:00
Pablo Gutiérrez
d745d35938
Continuous Benchmarking using Github Actions ( #2134 )
...
* Added workflows and script for speed beanchmarking
Signed-off-by: Pablo Gutiérrez Félix <pablogf@uma.es>
* changed branch push to main
Signed-off-by: Pablo Gutiérrez Félix <pablogf@uma.es>
* Added SPDX-License-Identifer
Signed-off-by: Pablo Gutiérrez Félix <pablogf@uma.es>
* Fixed github security warnings
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
* Fixed github security warnings 2
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
* Fixes after commit-to-main tests
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
---------
Signed-off-by: Pablo Gutiérrez Félix <pablogf@uma.es>
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
2025-06-11 09:38:44 -04:00
Matthias J. Kannwischer
708b1052d5
Adjust constan-time test exception for mlkem-native [extended tests] ( #2162 )
...
The constant-time tests have been failing for mlkem-native as check_sk changed it's name and is no no longer recognized as an exception.
This function processes exclusively public data in the secret key and it's, hence, okay to branch both inside the function and depending on the return value.
This commit renames the function in the constant_time exceptions file.
Signed-off-by: Matthias J. Kannwischer <matthias@kannwischer.eu>
2025-06-10 08:49:19 -04:00
Sadiq Hussain M
a47d8926c9
tests: Check OQS_STATUS of RNG and fstore functions ( #2153 )
2025-06-06 13:26:31 -04:00
h2parson
f06ade9406
Wycheproof ( #2145 )
...
* added wycheproof vectors for mlkem
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* astyle formatting
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* add license and remove unused vars
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* random_bytes_free
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* remove unused rc
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* add assert
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* initialize variables before branching
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* fix dead code warning
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* explicit json encoding and helpers run subprocess addedd
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* styling
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* fixing dead code and linux issues
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* Skip failing CI test (#2157 )
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-06-05 19:47:02 -04:00
Sadiq Hussain M
9aa76bc130
tests: Remove unused variables ( #2152 )
...
signed_msg and signed_msg_len aren't used as
output parameters anywhere.
Hence, remove their occurrences.
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Co-authored-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
2025-06-05 09:00:37 -04:00
Sadiq Hussain M
bf14f5fce2
tests: Use secure free for secret key objects ( #2149 )
...
Use OQS_MEM_secure_free() instead of
OQS_MEM_insecure_free() for secret key objects.
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Co-authored-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
2025-06-05 09:00:20 -04:00
Matthias J. Kannwischer
4784356bd1
Update mlkem-native to v1.0.0 ( #2146 )
...
* Update mlkem-native to v1.0.0
This commit updates mlkem-native to the first stable release v1.0.0.
This also removes a patch that was needed for an older version of mlkem-native.
Resolves https://github.com/open-quantum-safe/liboqs/issues/2110
Signed-off-by: Matthias J. Kannwischer <matthias@kannwischer.eu>
* Skip failing CI test (#2157 )
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Matthias J. Kannwischer <matthias@kannwischer.eu>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-06-05 08:59:49 -04:00
Sadiq Hussain M
894547b15c
Check for NULL dereference before using secure free ( #2151 )
...
* Check for NULL dereference before using secure free
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
* Skip failing CI test (#2157 )
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-06-04 16:18:45 -04:00
Sadiq Hussain M
65ed00c2f1
Use OQS_MEM_cleanse() instead of memset() ( #2158 )
...
* Use OQS_MEM_cleanse() instead of memset()
This is needed for secret objects as memset
maybe optimized out by the compiler.
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
* Skip failing CI test (#2157 )
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-06-04 16:18:36 -04:00
Douglas Stebila
1e8222339b
Skip failing CI test ( #2157 )
...
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-06-04 08:09:16 -04:00
M-AlNoaimi
51bf0b6b94
Add support for context string signing in signature algorithms ( #2142 )
...
Signed-off-by: M-AlNoaimi <26318936+M-AlNoaimi@users.noreply.github.com>
2025-05-28 06:46:00 -04:00
Abhinav Saxena
b75bfb8c56
Update ACVP vectors to latest release ( #2131 )
...
Signed-off-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
2025-05-02 21:07:50 -04:00
