/usr/include/botan-2/botan/newhope.h is in libbotan-2-dev 2.4.0-5ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 | /*
* NEWHOPE Ring-LWE scheme
* Based on the public domain reference implementation by the
* designers (https://github.com/tpoeppelmann/newhope)
*
* Further changes
* (C) 2016 Jack Lloyd
*
* Botan is released under the Simplified BSD License (see license.txt)
*/
#ifndef BOTAN_NEWHOPE_H_
#define BOTAN_NEWHOPE_H_
#include <botan/mem_ops.h>
namespace Botan {
class RandomNumberGenerator;
/*
* WARNING: This API is preliminary and will change
* Currently pubkey.h does not support a 2-phase KEM scheme of
* the sort NEWHOPE exports.
*/
// TODO: change to just a secure_vector
class newhope_poly final
{
public:
uint16_t coeffs[1024];
~newhope_poly() { secure_scrub_memory(coeffs, sizeof(coeffs)); }
};
enum Newhope_Params
{
NEWHOPE_SENDABYTES = 1824,
NEWHOPE_SENDBBYTES = 2048,
NEWHOPE_OFFER_BYTES = 1824,
NEWHOPE_ACCEPT_BYTES = 2048,
NEWHOPE_SHARED_KEY_BYTES = 32,
NEWHOPE_SEED_BYTES = 32,
NEWHOPE_POLY_BYTES = 1792,
CECPQ1_OFFER_BYTES = NEWHOPE_OFFER_BYTES + 32,
CECPQ1_ACCEPT_BYTES = NEWHOPE_ACCEPT_BYTES + 32,
CECPQ1_SHARED_KEY_BYTES = NEWHOPE_SHARED_KEY_BYTES + 32
};
/**
* This chooses the XOF + hash for NewHope
* The official NewHope specification and reference implementation use
* SHA-3 and SHAKE-128. BoringSSL instead uses SHA-256 and AES-128 in
* CTR mode. CECPQ1 (x25519+NewHope) always uses BoringSSL's mode
*/
enum class Newhope_Mode
{
SHA3,
BoringSSL
};
// offer
void BOTAN_PUBLIC_API(2,0) newhope_keygen(uint8_t send[NEWHOPE_SENDABYTES],
newhope_poly* sk,
RandomNumberGenerator& rng,
Newhope_Mode = Newhope_Mode::SHA3);
// accept
void BOTAN_PUBLIC_API(2,0) newhope_sharedb(uint8_t sharedkey[NEWHOPE_SHARED_KEY_BYTES],
uint8_t send[],
const uint8_t* received,
RandomNumberGenerator& rng,
Newhope_Mode mode = Newhope_Mode::SHA3);
// finish
void BOTAN_PUBLIC_API(2,0) newhope_shareda(uint8_t sharedkey[NEWHOPE_SHARED_KEY_BYTES],
const newhope_poly* ska,
const uint8_t* received,
Newhope_Mode mode = Newhope_Mode::SHA3);
}
#endif
|