matlimatli
fd6ffebc54
Update license info for ML-KEM ( #2250 )
...
Fixes #2249
Signed-off-by: Mattias Lindblad <matlin@gmail.com>
2025-08-19 21:35:57 -04:00
matlimatli
5f9736304f
Avoid invalid compiler options for MSVC ( #2239 )
...
Fixes #2238 , Fixes #2177
Signed-off-by: Mattias Lindblad <matlin@gmail.com>
2025-08-19 08:26:13 -04:00
sukrucildirr
2dc4afc2cf
chore: fix typos across codebase ( #2244 )
...
* Update PROCEDURES.md
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
* Update FUZZING.md
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
* Update vectors_kem.c
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
* Update ossl_functions.h
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
---------
Signed-off-by: sukrucildirr <sukrucildirr@gmail.com>
2025-08-18 10:19:28 -04:00
Aiden Fox Ivey
da42a978d1
Restructure basic checks ( #2233 )
...
* Move actionlint to a standard runner
Restructure basic checks
* Move actionlint to a standard runner
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-18 10:18:41 -04:00
Aiden Fox Ivey
1d6e213aa3
Add Classic McEliece sanitization patch ( #2218 )
...
* Add patches
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Add Classic McEliece sanitization patch
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-18 10:04:23 -04:00
Aiden Fox Ivey
5f0a5f2b4e
Fix code scanning workflow ( #2217 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-18 10:04:02 -04:00
Aiden Fox Ivey
ec23683647
Change Nix install action to verified ( #2212 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-18 10:02:32 -04:00
nonam3e
16b8629972
Icicle-pqc integration ( #2216 )
...
* correct build
Signed-off-by: nonam3e <timur@ingonyama.com>
* use interface to link
Signed-off-by: nonam3e <timur@ingonyama.com>
* remove load backends
Signed-off-by: nonam3e <timur@ingonyama.com>
* liboqs 0.14.0 release candidate 1 (#2180 )
* Prepare 0.14.0 release candidate 1 [full tests] [extended tests]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update release notes with deprecation and security info [skip ci]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: nonam3e <timur@ingonyama.com>
* add icicle in scripts
Signed-off-by: nonam3e <timur@ingonyama.com>
* update docs
Signed-off-by: nonam3e <timur@ingonyama.com>
* add link
Signed-off-by: nonam3e <timur@ingonyama.com>
* build with local package
Signed-off-by: nonam3e <timur@ingonyama.com>
* update scripts
Signed-off-by: nonam3e <timur@ingonyama.com>
* choose alg -DOQS_ENABLE_KEM_ml_kem_512_icicle_cuda=ON -DOQS_ENABLE_KEM_ml_kem_768_icicle_cuda=OFF
Signed-off-by: nonam3e <timur@ingonyama.com>
* docs
Signed-off-by: nonam3e <timur@ingonyama.com>
* OQS_STATUS return type
Signed-off-by: nonam3e <timur@ingonyama.com>
* Document public / internal API split [skip ci] (#2182 )
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: nonam3e <timur@ingonyama.com>
* liboqs 0.14.0 release (#2198 )
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: nonam3e <timur@ingonyama.com>
* manual build
Signed-off-by: nonam3e <timur@ingonyama.com>
* remove tmp
Signed-off-by: nonam3e <timur@ingonyama.com>
* build statically with target_link_libraries
Signed-off-by: nonam3e <timur@ingonyama.com>
* Switch to dev mode for 0.14.1 (#2199 )
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: nonam3e <timur@ingonyama.com>
* update ACVP to 1.1.0.40 (#2172 )
Signed-off-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
Signed-off-by: nonam3e <timur@ingonyama.com>
* Added Custom Timeout to CI (#2189 )
* Added Custom Timeout to CI
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
* remove unnecessary comment
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
* Use correct syntax for timeout in jobs that span multiple files
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
---------
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
Signed-off-by: nonam3e <timur@ingonyama.com>
* Update nixpkgs from 24.05 to 25.05 (#2187 )
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
Signed-off-by: nonam3e <timur@ingonyama.com>
* update commit
Signed-off-by: nonam3e <timur@ingonyama.com>
* icicle pqc package cmd in CONFIGURE.md
Signed-off-by: nonam3e <timur@ingonyama.com>
* remove unnecessary targets from cmake config
Signed-off-by: nonam3e <timur@ingonyama.com>
* add SPDX-License-Identifier header
Signed-off-by: nonam3e <timur@ingonyama.com>
---------
Signed-off-by: nonam3e <timur@ingonyama.com>
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
Co-authored-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
Co-authored-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
Co-authored-by: Kitsios Konstantinos <kitsios.konst@gmail.com>
Co-authored-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-14 09:52:26 -04:00
Aiden Fox Ivey
bee7e6b922
Remove armel comment ( #2231 )
...
* Remove armel comment
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Remove armel CMake config
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-14 09:51:40 -04:00
Aiden Fox Ivey
67ca2a3c84
Fix PLATFORMS.md ( #2232 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-08-14 09:51:14 -04:00
h2parson
9e964cad5b
Integrate SLH-DSA-C Library ( #2175 )
...
* copy from slhdsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* integrate with copy from upstream
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* explicitly list slhdsa files to include and push generated code
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* format code script
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add to requirements.in
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix code conventions
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* copy from upstream changes
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add chdir to copy from slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify template
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* generate requirements.txt
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify requirments in workflows
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* format
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* a
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* sort filenames in cmake file generation for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add newline at end of header file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add whitespace and fix alg info tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* update docs with copy from upstream
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add whitespace to src files
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* initialize ctx in slh
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* explicitly set little endian for windows x86
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* temporarily disable ctx signing for slh tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* disable kats until hashes available for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix issues in test sig mem
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* temporarily add namespaces so that slh dsa will not break test namespace
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* updates
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* formatted file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* align jinja template to astyle
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* change addrnd size
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* copy from slhdsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* integrate with copy from upstream
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* explicitly list slhdsa files to include and push generated code
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* format code script
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add to requirements.in
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix code conventions
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* copy from upstream changes
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add chdir to copy from slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify template
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* generate requirements.txt
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify requirments in workflows
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* format
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* a
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* sort filenames in cmake file generation for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add newline at end of header file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add whitespace and fix alg info tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* update docs with copy from upstream
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* add whitespace to src files
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* initialize ctx in slh
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* explicitly set little endian for windows x86
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* temporarily disable ctx signing for slh tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* disable kats until hashes available for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix issues in test sig mem
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* temporarily add namespaces so that slh dsa will not break test namespace
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* updates
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* formatted file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* align jinja template to astyle
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* change addrnd size
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix std algs filtering issue
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modifying windows amd toolchain file to fix endianness issue
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* disable leak testing on slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* disable slh dsa for arm emulated linux and zephyr tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix zephyr test skip logic
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix upstream issue with prehash naming and add variant specific nist levels
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* automatically update slh dsa yml file
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* get slh dsa md file generation working
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix naming in slh wrapper files
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* minor changes from review
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* separate slh dsa jobs from stfl sigs
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* separate slhdsa from sig stfl tests on mac and windows
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* fix macos yml format
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* modify zephyr timeout
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* re-enable some tests for slh dsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* separate leak tests
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* allow algorithm family level enablement and reconfigure slhdsa CI jobs
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* move slh dsa address sanitizer to extended tests and extend time limit to 90 minutes
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
* remove package deb from CI job, remove auto gen kat sig for slhdsa, add prime ctx step for sig testing slhdsa
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
---------
Signed-off-by: h2parson <h2parson@uwaterloo.ca>
2025-08-13 15:41:47 -04:00
Aiden Fox Ivey
01de36c1ec
Add Poutine SASL ( #2213 )
...
* Change Nix install action to verified
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Integrate poutine
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-07-29 11:03:31 -04:00
Aiden Fox Ivey
78e2389180
Update nixpkgs from 24.05 to 25.05 ( #2187 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-07-14 20:55:05 -04:00
Kitsios Konstantinos
6cc048ae6f
Added Custom Timeout to CI ( #2189 )
...
* Added Custom Timeout to CI
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
* remove unnecessary comment
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
* Use correct syntax for timeout in jobs that span multiple files
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
---------
Signed-off-by: Konstantinos <konstantinos.kitsios@uzh.ch>
2025-07-14 20:54:43 -04:00
Abhinav Saxena
d39268b204
update ACVP to 1.1.0.40 ( #2172 )
...
Signed-off-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
2025-07-14 20:54:05 -04:00
Douglas Stebila
dc90c6cb41
Switch to dev mode for 0.14.1 ( #2199 )
...
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-07-14 20:53:32 -04:00
Douglas Stebila
94b421ebb8
liboqs 0.14.0 release ( #2198 )
...
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
0.14.0
2025-07-10 13:46:40 -04:00
Spencer Wilson
3674df5cf3
Document public / internal API split [skip ci] ( #2182 )
...
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-07-10 10:50:42 -04:00
Spencer Wilson
b5d3dac4eb
liboqs 0.14.0 release candidate 1 ( #2180 )
...
* Prepare 0.14.0 release candidate 1 [full tests] [extended tests]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update release notes with deprecation and security info [skip ci]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-06-26 14:23:12 -04:00
Spencer Wilson
4215362acb
Merge commit from fork
...
* Enable constant-time testing for -O3 builds [extended tests]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Add regression test for HQC constant-time issues
* Build HQC without optimizations
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-06-23 14:36:48 -04:00
Aiden Fox Ivey
50185c6e72
Zeroize memory in SHA3 implementation ( #2171 )
...
* Add OQS_MEM_aligned_secure_free convenience fn
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Rewrite SHA3 aligned frees to zeroize
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-06-20 14:12:12 -04:00
Marcel Cornu
8f926065eb
Add AVX512VL-Optimized SHA3/SHAKE Implementations ( #2167 )
...
* Add SHA3-256/384/512 and SHAKE128/256 AVX512VL implementations
Co-authored-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
Co-authored-by: Erdinc Ozturk <erdinc.ozturk@intel.com>
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
Signed-off-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
* AVX512VL SHA3 is added as an extension of XKCP implementation
Co-authored-by: Marcel Cornu <marcel.d.cornu@intel.com>
Signed-off-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Add SHA3-384 tests
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Update namespace test to include SHA3
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Release SHA3 context after triggering dispatcher
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Add linux CI for OQS_USE_SHA3_AVX512VL=OFF config
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
* Add AVX512 emulation to linux CI
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
---------
Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>
Signed-off-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
Co-authored-by: Tomasz Kantecki <tomasz.kantecki@intel.com>
Co-authored-by: Erdinc Ozturk <erdinc.ozturk@intel.com>
2025-06-20 13:37:32 -04:00
Aiden Fox Ivey
47b8fdd404
Adding code coverage ( #2148 )
...
* First stab at adding coverage tests
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Install dependencies for coveralls action
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Integrate code coverage into CI
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Properly parallelize
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Refine test coverage
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Ignore unused exclude path error
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update exclude path
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Fix Markdown formatting
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Pin dependencies
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update workflow badge path
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Fix path in CI.md
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
* Remove unnecessary call to install curl
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
Co-authored-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-06-19 14:45:44 -04:00
Douglas Stebila
6218d54496
Benchmarking comments only on alerts ( #2168 )
...
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-06-18 11:38:44 -04:00
Pablo Gutiérrez
a56b796271
increased alert threshold ( #2166 )
...
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
2025-06-16 10:50:07 -04:00
Nathaniel Brough
8d9cfd7f33
test: Add basic kem fuzz testing ( #2133 )
...
Signed-off-by: Nathaniel Brough <nathaniel.brough@gmail.com>
2025-06-12 10:03:59 -04:00
Pablo Gutiérrez
d745d35938
Continuous Benchmarking using Github Actions ( #2134 )
...
* Added workflows and script for speed beanchmarking
Signed-off-by: Pablo Gutiérrez Félix <pablogf@uma.es>
* changed branch push to main
Signed-off-by: Pablo Gutiérrez Félix <pablogf@uma.es>
* Added SPDX-License-Identifer
Signed-off-by: Pablo Gutiérrez Félix <pablogf@uma.es>
* Fixed github security warnings
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
* Fixed github security warnings 2
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
* Fixes after commit-to-main tests
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
---------
Signed-off-by: Pablo Gutiérrez Félix <pablogf@uma.es>
Signed-off-by: Pablo Gutiérrez <pablogf@uma.es>
2025-06-11 09:38:44 -04:00
Matthias J. Kannwischer
708b1052d5
Adjust constan-time test exception for mlkem-native [extended tests] ( #2162 )
...
The constant-time tests have been failing for mlkem-native as check_sk changed it's name and is no no longer recognized as an exception.
This function processes exclusively public data in the secret key and it's, hence, okay to branch both inside the function and depending on the return value.
This commit renames the function in the constant_time exceptions file.
Signed-off-by: Matthias J. Kannwischer <matthias@kannwischer.eu>
2025-06-10 08:49:19 -04:00
Sadiq Hussain M
a47d8926c9
tests: Check OQS_STATUS of RNG and fstore functions ( #2153 )
2025-06-06 13:26:31 -04:00
h2parson
f06ade9406
Wycheproof ( #2145 )
...
* added wycheproof vectors for mlkem
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* astyle formatting
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* add license and remove unused vars
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* random_bytes_free
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* remove unused rc
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* add assert
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* initialize variables before branching
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* fix dead code warning
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* explicit json encoding and helpers run subprocess addedd
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* styling
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* fixing dead code and linux issues
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
* Skip failing CI test (#2157 )
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Hayden Parsons <h2parson@eduroam-campus-10-36-104-59.campus-dynamic.uwaterloo.ca>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-06-05 19:47:02 -04:00
Sadiq Hussain M
9aa76bc130
tests: Remove unused variables ( #2152 )
...
signed_msg and signed_msg_len aren't used as
output parameters anywhere.
Hence, remove their occurrences.
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Co-authored-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
2025-06-05 09:00:37 -04:00
Sadiq Hussain M
bf14f5fce2
tests: Use secure free for secret key objects ( #2149 )
...
Use OQS_MEM_secure_free() instead of
OQS_MEM_insecure_free() for secret key objects.
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Co-authored-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
2025-06-05 09:00:20 -04:00
Matthias J. Kannwischer
4784356bd1
Update mlkem-native to v1.0.0 ( #2146 )
...
* Update mlkem-native to v1.0.0
This commit updates mlkem-native to the first stable release v1.0.0.
This also removes a patch that was needed for an older version of mlkem-native.
Resolves https://github.com/open-quantum-safe/liboqs/issues/2110
Signed-off-by: Matthias J. Kannwischer <matthias@kannwischer.eu>
* Skip failing CI test (#2157 )
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Matthias J. Kannwischer <matthias@kannwischer.eu>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-06-05 08:59:49 -04:00
Sadiq Hussain M
894547b15c
Check for NULL dereference before using secure free ( #2151 )
...
* Check for NULL dereference before using secure free
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
* Skip failing CI test (#2157 )
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-06-04 16:18:45 -04:00
Sadiq Hussain M
65ed00c2f1
Use OQS_MEM_cleanse() instead of memset() ( #2158 )
...
* Use OQS_MEM_cleanse() instead of memset()
This is needed for secret objects as memset
maybe optimized out by the compiler.
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
* Skip failing CI test (#2157 )
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Hussain1811 <Sadiq.Hussain.M@ibm.com>
Co-authored-by: Douglas Stebila <dstebila@users.noreply.github.com>
2025-06-04 16:18:36 -04:00
Douglas Stebila
1e8222339b
Skip failing CI test ( #2157 )
...
* Skip failing CI test
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Fix typo
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-06-04 08:09:16 -04:00
M-AlNoaimi
51bf0b6b94
Add support for context string signing in signature algorithms ( #2142 )
...
Signed-off-by: M-AlNoaimi <26318936+M-AlNoaimi@users.noreply.github.com>
2025-05-28 06:46:00 -04:00
Abhinav Saxena
b75bfb8c56
Update ACVP vectors to latest release ( #2131 )
...
Signed-off-by: Abhinav Saxena <abhinav.saxena@thalesgroup.com>
2025-05-02 21:07:50 -04:00
Jan Adriaan Leegwater
429c98ee7e
Integrate SNOVA into liboqs ( #2109 )
...
* Integrate SNOVA into liboqs
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Remove SNOVA_66_15_3
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Add ARM NEON
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Update, tighter constant_time passes and issues [full tests] [extended tests]
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Update remote commit
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Review comments SWilson4 [full tests] [extended tests]
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Fix newline at end of file [full tests] [extended tests]
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Restrict zephyr algorithms to the low stack ones. [full tests] [extended tests]
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Disable SNOVA_24_5_5 in zephyr test [full tests] [extended tests]
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Fix typos in KAT [full tests] [extended tests]
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
* Use Constant Time version for sign [full tests] [extended tests]
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
---------
Signed-off-by: Jan Adriaan Leegwater <info@vacuas.nl>
2025-05-01 11:41:57 -04:00
Pravek Sharma
9c68f3d7e4
Change cupqc upstream repo ( #2115 )
...
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
2025-04-25 12:09:39 -04:00
Aiden Fox Ivey
f8766fa696
Update Nix flake inputs ( #2126 )
...
Signed-off-by: Aiden Fox Ivey <aiden@aidenfoxivey.com>
2025-04-25 11:35:44 -04:00
Spencer Wilson
1dfa5beaba
Promote @SWilson4 from Committer to Maintainer [skip ci] ( #2120 )
...
* Promote @SWilson4 from Committer to Maintainer [skip ci]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Document Michael's leave of absence [skip ci]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Remove John Schanck from the list of current committers [skip ci]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Keep @SWilson4 on the list of Committers [skip ci]
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-04-21 09:57:38 -04:00
Khalid
5d4a3caee0
Restrict -Wno-maybe-uninitialized to GCC and fix stack size typo ( #2111 )
...
Signed-off-by: Khalid Alraddady <187553667+hawazyn@users.noreply.github.com>
Co-authored-by: Khalid Alraddady <187553667+hawazyn@users.noreply.github.com>
2025-04-21 09:36:14 -04:00
Pravek Sharma
23360d41be
Switch to dev mode ( #2125 )
...
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
2025-04-17 12:35:10 -04:00
Pravek Sharma
85cac74dab
0.13.0 release ( #2119 )
...
* Bump version string
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
* Update release notes
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
* Update security notes
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
* Remove rc1 tags
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
* Add link to OQS survey in RELEASE.md
Co-authored-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
* Update RELEASE.md with HQC remark
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
* Update release date
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
* Add survey link to README.md
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
---------
Signed-off-by: Pravek Sharma <sharmapravek@gmail.com>
Co-authored-by: Douglas Stebila <dstebila@uwaterloo.ca>
2025-04-17 11:05:33 -04:00
Spencer Wilson
3cedd464f7
Fix PR workflow runs ( #2123 )
...
* Run scorecard workflow with models:read
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Remove all permissions for scorecard workflow
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Add security-events and id-token perms
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Clean up comments
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
* Update commit-to-main and weekly calls
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
---------
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-04-11 07:30:01 -04:00
Douglas Stebila
a7d698ca9c
Temporarily disable HQC ( #2122 )
...
* Temporarily disable HQC
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
* Add logic to disable algorithms by default
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
---------
Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
Co-authored-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-04-11 05:47:21 -04:00
Spencer Wilson
6337a8424d
Add support caveat ( #2114 )
...
Signed-off-by: Spencer Wilson <spencer.wilson@uwaterloo.ca>
2025-03-24 20:01:09 -04:00
Martin Kröning
a20597ce83
build: search unistd.h separately from sys/random.h for getentropy ( #2104 )
...
Signed-off-by: Martin Kröning <martin.kroening@eonerc.rwth-aachen.de>
2025-03-20 12:58:16 -04:00
Basil Hess
fe11b6a9fd
Update nist-round in UOV and MAYO data sheet ( #2105 )
...
Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
2025-03-19 11:56:15 -04:00