Top Inners Fields Constructors Methods
org.bouncycastle.pqc.crypto.gemss

pack-priv Class GeMSSEngine

extends Object
Class Inheritance
Imports
java.math.BigInteger, java.security.SecureRandom, org.bouncycastle.crypto.digests.SHA3Digest, .SHAKEDigest, org.bouncycastle.util.Pack

Nested and Inner Type Summary

Modifier and TypeClass and Description
pack-priv static enum
GeMSSEngine.FunctionParams

Field Summary

Modifier and TypeField and Description
pack-priv final int
ACCESS_last_equations8

private int
buffer

pack-priv Pointer
Buffer_NB_WORD_GFqn

pack-priv Pointer
Buffer_NB_WORD_MUL

pack-priv final boolean
ENABLED_REMOVE_ODD_DEGREE

pack-priv int
HFE_odd_degree

pack-priv final int
HFEDeg

pack-priv final int
HFEDegI

pack-priv final int
HFEDegJ

pack-priv final int
HFEDELTA

pack-priv final int
HFEm

pack-priv final int
HFEmq

pack-priv final int
HFEmq8

pack-priv final int
HFEmr

pack-priv final int
HFEmr8

pack-priv final int
HFEn

pack-priv int
HFEn1h_rightmost

pack-priv int
HFEn_1rightmost

pack-priv final int
HFEnq

pack-priv final int
HFEnr

pack-priv final int
HFENr8

pack-priv final int
HFENr8c

pack-priv final int
HFEnv

pack-priv final int
HFEnvq

pack-priv final int
HFEnvr

pack-priv final int
HFEnvr8

pack-priv final int
HFEv

pack-priv final int
HFEvq

pack-priv final int
HFEvr

pack-priv int
II

pack-priv int
KP

pack-priv int
KX

pack-priv final int
LEN_UNROLLED_64

pack-priv final int
LOST_BITS

pack-priv final int
LTRIANGULAR_N_SIZE

pack-priv int
LTRIANGULAR_NV_SIZE

pack-priv final long
MASK_GF2m

pack-priv final long
MASK_GF2n

pack-priv final int
MATRIXn_SIZE

pack-priv final int
MATRIXnv_SIZE

pack-priv final int
MLv_GFqn_SIZE

pack-priv int
MQv_GFqn_SIZE

pack-priv Mul_GF2x
mul

pack-priv final int
NB_BITS_UINT

pack-priv final int
NB_BYTES_EQUATION

pack-priv final int
NB_BYTES_GFqm

pack-priv final int
NB_BYTES_GFqn

pack-priv final int
NB_BYTES_GFqnv

pack-priv int
NB_COEFS_HFEPOLY

pack-priv final int
NB_ITE

pack-priv int
NB_MONOMIAL_PK

pack-priv int
NB_MONOMIAL_VINEGAR

pack-priv int
NB_UINT_HFEVPOLY

pack-priv int
NB_WORD_GF2m

pack-priv int
NB_WORD_GF2nv

pack-priv final int
NB_WORD_GF2nvm

pack-priv int
NB_WORD_GFqn

pack-priv final int
NB_WORD_GFqv

pack-priv int
NB_WORD_MMUL

pack-priv final int
NB_WORD_MUL

pack-priv final int
NB_WORD_UNCOMP_EQ

pack-priv int
POW_II

private SecureRandom
random

pack-priv Rem_GF2n
rem

pack-priv final int
Sha3BitStrength

pack-priv SHA3Digest
sha3Digest

pack-priv final int
ShakeBitStrength

pack-priv final int
SIZE_DIGEST

pack-priv final int
SIZE_DIGEST_UINT

pack-priv final int
SIZE_ROW

pack-priv final int
SIZE_SEED_SK

pack-priv final int
SIZE_SIGN_UNCOMPRESSED

pack-priv final int
VAL_BITS_M

Constructor Summary

AccessConstructor and Description
public
GeMSSEngine(int K, int HFEn, int HFEv, int HFEDELTA, int NB_ITE, int HFEDeg, int HFEDegI, int HFEDegJ)

Method Summary

Modifier and TypeMethod and Description
pack-priv void

Returns:

0 if the result is correct, ERROR_ALLOC for error from malloc/calloc functions.
changeVariablesMQS64_gf2(Pointer MQS, Pointer S)

@brief Apply the change of variables x'=xS to a MQS stored with a monomial representation.

private void
choose_LOOPJR(Pointer c, PointerUnion pk, int START, long xj, int NB_BYTES_EQ, int NB_WORD_EQ)

private int
chooseRootHFE_gf2nx(Pointer root, SecretKeyHFE.complete_sparse_monic_gf2nx F, Pointer U)

pack-priv void
cleanLowerMatrix(Pointer L, GeMSSEngine.FunctionParams cleanLowerMatrix)

pack-priv void
cleanMonicHFEv_gf2nx(Pointer F)

private void
CMP_AND_SWAP_CST_TIME(Pointer tab, Pointer tab_j, Pointer prod)

public void
compress_signHFE(byte[] sm8, Pointer sm)

private void
convMonic_gf2nx(Pointer F, int d)

private long

Returns:

The constant c of pk2, in GF(2).
convMQ_last_uncompressL_gf2(Pointer pk2, PointerUnion pk)

@brief Decompression of a compressed MQ equation in GF(2)[x1,...,x_(n+v)].

pack-priv void
convMQ_UL_gf2(byte[] pk, byte[] pk_U, int end)

private long

Returns:

The constant c of pk2, in GF(2).
convMQ_uncompressL_gf2(Pointer pk2, PointerUnion pk)

@brief Decompression of a compressed MQ equation in GF(2)[x1,...,x_(n+v)].

pack-priv void
convMQS_one_eq_to_hybrid_rep8_comp_gf2(byte[] pk, PointerUnion pk_cp, byte[] pk_U)

pack-priv void
convMQS_one_eq_to_hybrid_rep8_uncomp_gf2(byte[] pk, PointerUnion pk_cp, byte[] pk_U)

pack-priv void
convMQS_one_to_last_mr8_equations_gf2(byte[] pk_U, PointerUnion pk_cp)

private void
copy_for_casct(Pointer tmp, Pointer tab_ipa, Pointer tab, Pointer tab_i, Pointer prod, int pb, int i)

private void
copy_move_matrix_move(Pointer buf, Pointer F_cp, int len)

public int
crypto_sign_open(byte[] PK, byte[] message, byte[] signature)

private void
div_q_monic_gf2nx(Pointer A, int da, Pointer B, int db)

pack-priv int
div_r_gf2nx(Pointer A, int da, Pointer B, int db)

private void
div_r_monic_cst_gf2nx(Pointer A, int da, Pointer B, int db)

private int
div_r_monic_gf2nx(Pointer A, int da, Pointer B, int db)

private void
divsqr_r_HFE_cstdeg_gf2nx(Pointer poly, int idx, int start, int end, SecretKeyHFE.complete_sparse_monic_gf2nx F, Pointer cst)

private void
dotProduct_gf2n(Pointer res, Pointer vec_x, Pointer vec_y, int len)

private void
dotproduct_move_move(Pointer buf, Pointer F_cp, Pointer alpha_vec, int len)

pack-priv void
evalHFEv_gf2nx(Pointer Fxv, Pointer F, Pointer xv)

@brief Evaluation of F in (X,v), with F a HFEv polynomial.

private long
evalMQnocst_unrolled_no_simd_gf2(Pointer m, PointerUnion mq_orig)

private void
evalMQShybrid8_uncomp_nocst_gf2_m(Pointer res, Pointer x, PointerUnion mq_quo, PointerUnion mq_rem_orig)

@brief Variable-time evaluation of a MQS in a vector.

private void
evalMQSnocst8_quo_gf2(Pointer c, Pointer m, PointerUnion pk_orig)

pack-priv void
evalMQSv_unrolled_gf2(Pointer c, Pointer m, Pointer pk)

pack-priv void
fast_sort_gf2n(Pointer tab, int l)

@brief Sort in ascending order of a vector in GF(2^n), in-place.

pack-priv void
findRootsSplit2_HT_gf2nx(Pointer roots, Pointer f)

private void
findRootsSplit_gf2nx(Pointer roots, Pointer f, int deg)

pack-priv void
findRootsSplit_x2_x_c_HT_gf2nx(Pointer root, Pointer c)

private void
for_and_xor_shift_incre_move(Pointer L_cp, int iq, int len)

private void
for_casct_move(Pointer tab_i, Pointer tab_ipa, Pointer prod, int len, int shift)

private void
for_copy_move(Pointer table, SecretKeyHFE.complete_sparse_monic_gf2nx F)

private void
for_mul(Pointer res_orig, Pointer inv, int start)

private void
for_mul_rem_xor_move(Pointer res, Pointer leading_coef, Pointer B, int start, int end)

pack-priv void
for_mul_xorrange_move(Pointer res, Pointer A, Pointer B, int len)

private int
for_setPK(byte[] pk, byte[] pk_U, int pk_p, int pk_U_cp, int end)

private int
for_setpk2_end_move_plus(Pointer pk2, PointerUnion pk64, int len)

private void
for_sqr_divsqr(Pointer Xqn, int start, int end, SecretKeyHFE.complete_sparse_monic_gf2nx F, Pointer cst)

private void

Returns:

The degree of Xqn.
frobeniusMap_multisqr_HFE_gf2nx(Pointer Xqn, SecretKeyHFE.complete_sparse_monic_gf2nx F, Pointer cst)

@brief Computation of (X^(2^n) - X) mod (F-U).

private int
gcd_gf2nx(Pointer A, int da, Pointer B, int db)

pack-priv void
genSecretMQS_gf2_opt(Pointer MQS, Pointer F)

private void
getSHA3Hash(Pointer output, int outOff, int outLength, byte[] input, int inOff, int inputLenth, byte[] hash)

private void
initListDifferences_gf2nx(int[] L)

pack-priv int

Returns:

0 if the result is correct, ERROR_ALLOC for error from malloc/calloc functions.
interpolateHFE_FS_ref(Pointer MQS, Pointer F, Pointer S)

@brief Computation of the multivariate representation of a HFEv polynomial, then a change of variables is applied.

private void
inv_gf2n(Pointer res, Pointer A, int AOff)

pack-priv void
invMatrixLU_gf2(Pointer S, Pointer L_orig, Pointer U_orig, GeMSSEngine.FunctionParams imluParams)

@brief Compute the inverse of S=LU a matrix (n,n) or (n+v, n+v) in GF(2), in-place.

private void
loop_sqr(Pointer Xqn_sqr, Pointer Xqn)

private int
loop_xor_loop_move_xorandmask_move(Pointer Sinv_cpi, Pointer Sinv_cpj, Pointer L_cpj, Pointer L, int i, int iq, int len, int innerloopbound, int nextrow)

private void
LOOPIR(Pointer S, Pointer L_cp, Pointer U, int NB_IT, int nq, int nr, int iq, boolean REM)

private void
LOOPIR_INIT(Pointer MQS2_cp, Pointer MQS_cpj, Pointer MQS_cpi, Pointer S_cpj, int STARTIR, int NB_ITIR)

private void
LOOPIR_LOOPK_COMPLETE(Pointer MQS2_cp, Pointer S_cpj, Pointer MQS_cpj, int STARTIR, int NB_ITIR)

private void
LOOPJR(Pointer S, Pointer L, Pointer U, int NB_IT, int iq, int jq)

private long
LOOPJR_NOCST_64(Pointer c, PointerUnion pk64, int START, int NB_IT, long xj, int NB_BYTES_EQ, int NB_WORD_EQ)

private void
LOOPJR_UNROLLED_64(Pointer c, PointerUnion pk64, int START, int NB_IT, long xj, int NB_BYTES_EQ, int NB_WORD_EQ)

private void
LOOPK_COMPLETE(Pointer MQS2_cp, Pointer S_cpj, Pointer MQS_cpj, int start, int end)

private void
LOOPKR(Pointer MQS_cpj, Pointer MQS2_cp, long bit_kr, int START, int NB_IT)

pack-priv void
mul_gf2n(Pointer P, Pointer A, int AOff, Pointer B)

pack-priv void
mul_gf2n(Pointer P, Pointer A, Pointer B)

pack-priv void
mul_move(Pointer res, Pointer A, Pointer B)

public void
mul_rem_xorrange(Pointer res, Pointer A, Pointer B)

public void
mul_rem_xorrange(Pointer res, Pointer A, Pointer B, int b_cp)

public void
mul_xorrange(Pointer res, Pointer A, Pointer B)

private void
mulMatricesLU_gf2(Pointer S, Pointer L, Pointer U, GeMSSEngine.FunctionParams functionParams)

private void
precSignHFE(SecretKeyHFE sk_HFE, Pointer[] linear_coefs, byte[] sk)

private void
precSignHFESeed(SecretKeyHFE sk_HFE, byte[] sk)

private void
rem_gf2n(Pointer P, int p_cp, Pointer Pol)

private static long
remainderUnsigned(long dividend, long divisor)

private int
setArrayL(int[] L, int k, int pos, int len)

private int
setPK(byte[] pk, byte[] pk_U, int nb_bits, int pk_p, int pk_U_cp, int k, int start, int end)

private void
setPk2_endValue(Pointer pk2, PointerUnion pk64, int nb_bits, int iq)

private int
setPk2Value(Pointer pk2, PointerUnion pk64, int nb_bits, int iq, int len)

public int

Returns:

0 for a valid signature, !=0 else.
sign_openHFE_huncomp_pk(byte[] m, int len, byte[] sm8, PointerUnion pk, PointerUnion hpk)

@brief Verify the signature of the document m of length len bytes, using a (HFEv-)-based signature scheme.

public void
signHFE_FeistelPatarin(SecureRandom random, byte[] sm8, byte[] m, int m_cp, int len, byte[] sk)

private void
special_buffer(Pointer buf, Pointer F, Pointer alpha_vec)

private void
sqr_gf2n(Pointer C, int c_shift, Pointer A, int a_shift)

private void
sqr_gf2n(Pointer C, Pointer A)

private void
sqr_gf2nx(Pointer poly, int d)

private void
traceMap_gf2nx(Pointer poly_trace, Pointer poly_frob, Pointer f, int deg)

private void
uncompress_signHFE(Pointer sm, byte[] sm8)

pack-priv void
vecMatProduct(Pointer res, Pointer vec, Pointer S_orig, GeMSSEngine.FunctionParams vecMatProduct)

private void
vmpv_xorrange_move(Pointer acc, Pointer V, Pointer F)

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait