1*e7be843bSPierre Pronchery /*
2*e7be843bSPierre Pronchery * Copyright 2024-2025 The OpenSSL Project Authors. All Rights Reserved.
3*e7be843bSPierre Pronchery *
4*e7be843bSPierre Pronchery * Licensed under the Apache License 2.0 (the "License"). You may not use
5*e7be843bSPierre Pronchery * this file except in compliance with the License. You can obtain a copy
6*e7be843bSPierre Pronchery * in the file LICENSE in the source distribution or at
7*e7be843bSPierre Pronchery * https://www.openssl.org/source/license.html
8*e7be843bSPierre Pronchery */
9*e7be843bSPierre Pronchery
10*e7be843bSPierre Pronchery #include "internal/deprecated.h"
11*e7be843bSPierre Pronchery
12*e7be843bSPierre Pronchery #include <assert.h>
13*e7be843bSPierre Pronchery #include <string.h> /* memset */
14*e7be843bSPierre Pronchery #include <openssl/core_names.h>
15*e7be843bSPierre Pronchery #include <openssl/err.h>
16*e7be843bSPierre Pronchery #include <openssl/rand.h>
17*e7be843bSPierre Pronchery #include <openssl/proverr.h>
18*e7be843bSPierre Pronchery #include "prov/implementations.h"
19*e7be843bSPierre Pronchery #include "prov/providercommon.h"
20*e7be843bSPierre Pronchery #include "prov/provider_ctx.h"
21*e7be843bSPierre Pronchery #include "prov/der_ml_dsa.h"
22*e7be843bSPierre Pronchery #include "crypto/ml_dsa.h"
23*e7be843bSPierre Pronchery #include "internal/packet.h"
24*e7be843bSPierre Pronchery #include "internal/sizes.h"
25*e7be843bSPierre Pronchery
26*e7be843bSPierre Pronchery #define ML_DSA_MESSAGE_ENCODE_RAW 0
27*e7be843bSPierre Pronchery #define ML_DSA_MESSAGE_ENCODE_PURE 1
28*e7be843bSPierre Pronchery
29*e7be843bSPierre Pronchery static OSSL_FUNC_signature_sign_message_init_fn ml_dsa_sign_msg_init;
30*e7be843bSPierre Pronchery static OSSL_FUNC_signature_sign_fn ml_dsa_sign;
31*e7be843bSPierre Pronchery static OSSL_FUNC_signature_verify_message_init_fn ml_dsa_verify_msg_init;
32*e7be843bSPierre Pronchery static OSSL_FUNC_signature_verify_fn ml_dsa_verify;
33*e7be843bSPierre Pronchery static OSSL_FUNC_signature_digest_sign_init_fn ml_dsa_digest_signverify_init;
34*e7be843bSPierre Pronchery static OSSL_FUNC_signature_digest_sign_fn ml_dsa_digest_sign;
35*e7be843bSPierre Pronchery static OSSL_FUNC_signature_digest_verify_fn ml_dsa_digest_verify;
36*e7be843bSPierre Pronchery static OSSL_FUNC_signature_freectx_fn ml_dsa_freectx;
37*e7be843bSPierre Pronchery static OSSL_FUNC_signature_set_ctx_params_fn ml_dsa_set_ctx_params;
38*e7be843bSPierre Pronchery static OSSL_FUNC_signature_settable_ctx_params_fn ml_dsa_settable_ctx_params;
39*e7be843bSPierre Pronchery static OSSL_FUNC_signature_get_ctx_params_fn ml_dsa_get_ctx_params;
40*e7be843bSPierre Pronchery static OSSL_FUNC_signature_gettable_ctx_params_fn ml_dsa_gettable_ctx_params;
41*e7be843bSPierre Pronchery static OSSL_FUNC_signature_dupctx_fn ml_dsa_dupctx;
42*e7be843bSPierre Pronchery
43*e7be843bSPierre Pronchery typedef struct {
44*e7be843bSPierre Pronchery ML_DSA_KEY *key;
45*e7be843bSPierre Pronchery OSSL_LIB_CTX *libctx;
46*e7be843bSPierre Pronchery uint8_t context_string[ML_DSA_MAX_CONTEXT_STRING_LEN];
47*e7be843bSPierre Pronchery size_t context_string_len;
48*e7be843bSPierre Pronchery uint8_t test_entropy[ML_DSA_ENTROPY_LEN];
49*e7be843bSPierre Pronchery size_t test_entropy_len;
50*e7be843bSPierre Pronchery int msg_encode;
51*e7be843bSPierre Pronchery int deterministic;
52*e7be843bSPierre Pronchery int evp_type;
53*e7be843bSPierre Pronchery /* The Algorithm Identifier of the signature algorithm */
54*e7be843bSPierre Pronchery uint8_t aid_buf[OSSL_MAX_ALGORITHM_ID_SIZE];
55*e7be843bSPierre Pronchery size_t aid_len;
56*e7be843bSPierre Pronchery int mu; /* Flag indicating we should begin from \mu, not the message */
57*e7be843bSPierre Pronchery } PROV_ML_DSA_CTX;
58*e7be843bSPierre Pronchery
ml_dsa_freectx(void * vctx)59*e7be843bSPierre Pronchery static void ml_dsa_freectx(void *vctx)
60*e7be843bSPierre Pronchery {
61*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *ctx = (PROV_ML_DSA_CTX *)vctx;
62*e7be843bSPierre Pronchery
63*e7be843bSPierre Pronchery OPENSSL_cleanse(ctx->test_entropy, ctx->test_entropy_len);
64*e7be843bSPierre Pronchery OPENSSL_free(ctx);
65*e7be843bSPierre Pronchery }
66*e7be843bSPierre Pronchery
ml_dsa_newctx(void * provctx,int evp_type,const char * propq)67*e7be843bSPierre Pronchery static void *ml_dsa_newctx(void *provctx, int evp_type, const char *propq)
68*e7be843bSPierre Pronchery {
69*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *ctx;
70*e7be843bSPierre Pronchery
71*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
72*e7be843bSPierre Pronchery return NULL;
73*e7be843bSPierre Pronchery
74*e7be843bSPierre Pronchery ctx = OPENSSL_zalloc(sizeof(PROV_ML_DSA_CTX));
75*e7be843bSPierre Pronchery if (ctx == NULL)
76*e7be843bSPierre Pronchery return NULL;
77*e7be843bSPierre Pronchery
78*e7be843bSPierre Pronchery ctx->libctx = PROV_LIBCTX_OF(provctx);
79*e7be843bSPierre Pronchery ctx->msg_encode = ML_DSA_MESSAGE_ENCODE_PURE;
80*e7be843bSPierre Pronchery ctx->evp_type = evp_type;
81*e7be843bSPierre Pronchery return ctx;
82*e7be843bSPierre Pronchery }
83*e7be843bSPierre Pronchery
ml_dsa_dupctx(void * vctx)84*e7be843bSPierre Pronchery static void *ml_dsa_dupctx(void *vctx)
85*e7be843bSPierre Pronchery {
86*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *srcctx = (PROV_ML_DSA_CTX *)vctx;
87*e7be843bSPierre Pronchery
88*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
89*e7be843bSPierre Pronchery return NULL;
90*e7be843bSPierre Pronchery
91*e7be843bSPierre Pronchery /*
92*e7be843bSPierre Pronchery * Note that the ML_DSA_KEY is ref counted via EVP_PKEY so we can just copy
93*e7be843bSPierre Pronchery * the key here.
94*e7be843bSPierre Pronchery */
95*e7be843bSPierre Pronchery return OPENSSL_memdup(srcctx, sizeof(*srcctx));
96*e7be843bSPierre Pronchery }
97*e7be843bSPierre Pronchery
set_alg_id_buffer(PROV_ML_DSA_CTX * ctx)98*e7be843bSPierre Pronchery static int set_alg_id_buffer(PROV_ML_DSA_CTX *ctx)
99*e7be843bSPierre Pronchery {
100*e7be843bSPierre Pronchery int ret;
101*e7be843bSPierre Pronchery WPACKET pkt;
102*e7be843bSPierre Pronchery uint8_t *aid = NULL;
103*e7be843bSPierre Pronchery
104*e7be843bSPierre Pronchery /*
105*e7be843bSPierre Pronchery * We do not care about DER writing errors.
106*e7be843bSPierre Pronchery * All it really means is that for some reason, there's no
107*e7be843bSPierre Pronchery * AlgorithmIdentifier to be had, but the operation itself is
108*e7be843bSPierre Pronchery * still valid, just as long as it's not used to construct
109*e7be843bSPierre Pronchery * anything that needs an AlgorithmIdentifier.
110*e7be843bSPierre Pronchery */
111*e7be843bSPierre Pronchery ctx->aid_len = 0;
112*e7be843bSPierre Pronchery ret = WPACKET_init_der(&pkt, ctx->aid_buf, sizeof(ctx->aid_buf));
113*e7be843bSPierre Pronchery ret = ret && ossl_DER_w_algorithmIdentifier_ML_DSA(&pkt, -1, ctx->key);
114*e7be843bSPierre Pronchery if (ret && WPACKET_finish(&pkt)) {
115*e7be843bSPierre Pronchery WPACKET_get_total_written(&pkt, &ctx->aid_len);
116*e7be843bSPierre Pronchery aid = WPACKET_get_curr(&pkt);
117*e7be843bSPierre Pronchery }
118*e7be843bSPierre Pronchery WPACKET_cleanup(&pkt);
119*e7be843bSPierre Pronchery if (aid != NULL && ctx->aid_len != 0)
120*e7be843bSPierre Pronchery memmove(ctx->aid_buf, aid, ctx->aid_len);
121*e7be843bSPierre Pronchery return 1;
122*e7be843bSPierre Pronchery }
123*e7be843bSPierre Pronchery
ml_dsa_signverify_msg_init(void * vctx,void * vkey,const OSSL_PARAM params[],int operation,const char * desc)124*e7be843bSPierre Pronchery static int ml_dsa_signverify_msg_init(void *vctx, void *vkey,
125*e7be843bSPierre Pronchery const OSSL_PARAM params[], int operation,
126*e7be843bSPierre Pronchery const char *desc)
127*e7be843bSPierre Pronchery {
128*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *ctx = (PROV_ML_DSA_CTX *)vctx;
129*e7be843bSPierre Pronchery ML_DSA_KEY *key = vkey;
130*e7be843bSPierre Pronchery
131*e7be843bSPierre Pronchery if (!ossl_prov_is_running()
132*e7be843bSPierre Pronchery || ctx == NULL)
133*e7be843bSPierre Pronchery return 0;
134*e7be843bSPierre Pronchery
135*e7be843bSPierre Pronchery if (vkey == NULL && ctx->key == NULL) {
136*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_NO_KEY_SET);
137*e7be843bSPierre Pronchery return 0;
138*e7be843bSPierre Pronchery }
139*e7be843bSPierre Pronchery
140*e7be843bSPierre Pronchery if (key != NULL)
141*e7be843bSPierre Pronchery ctx->key = vkey;
142*e7be843bSPierre Pronchery if (!ossl_ml_dsa_key_matches(ctx->key, ctx->evp_type))
143*e7be843bSPierre Pronchery return 0;
144*e7be843bSPierre Pronchery
145*e7be843bSPierre Pronchery set_alg_id_buffer(ctx);
146*e7be843bSPierre Pronchery ctx->mu = 0;
147*e7be843bSPierre Pronchery
148*e7be843bSPierre Pronchery return ml_dsa_set_ctx_params(ctx, params);
149*e7be843bSPierre Pronchery }
150*e7be843bSPierre Pronchery
ml_dsa_sign_msg_init(void * vctx,void * vkey,const OSSL_PARAM params[])151*e7be843bSPierre Pronchery static int ml_dsa_sign_msg_init(void *vctx, void *vkey, const OSSL_PARAM params[])
152*e7be843bSPierre Pronchery {
153*e7be843bSPierre Pronchery return ml_dsa_signverify_msg_init(vctx, vkey, params,
154*e7be843bSPierre Pronchery EVP_PKEY_OP_SIGN, "ML_DSA Sign Init");
155*e7be843bSPierre Pronchery }
156*e7be843bSPierre Pronchery
ml_dsa_digest_signverify_init(void * vctx,const char * mdname,void * vkey,const OSSL_PARAM params[])157*e7be843bSPierre Pronchery static int ml_dsa_digest_signverify_init(void *vctx, const char *mdname,
158*e7be843bSPierre Pronchery void *vkey, const OSSL_PARAM params[])
159*e7be843bSPierre Pronchery {
160*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *ctx = (PROV_ML_DSA_CTX *)vctx;
161*e7be843bSPierre Pronchery
162*e7be843bSPierre Pronchery if (mdname != NULL && mdname[0] != '\0') {
163*e7be843bSPierre Pronchery ERR_raise_data(ERR_LIB_PROV, PROV_R_INVALID_DIGEST,
164*e7be843bSPierre Pronchery "Explicit digest not supported for ML-DSA operations");
165*e7be843bSPierre Pronchery return 0;
166*e7be843bSPierre Pronchery }
167*e7be843bSPierre Pronchery
168*e7be843bSPierre Pronchery ctx->mu = 0;
169*e7be843bSPierre Pronchery
170*e7be843bSPierre Pronchery if (vkey == NULL && ctx->key != NULL)
171*e7be843bSPierre Pronchery return ml_dsa_set_ctx_params(ctx, params);
172*e7be843bSPierre Pronchery
173*e7be843bSPierre Pronchery return ml_dsa_signverify_msg_init(vctx, vkey, params,
174*e7be843bSPierre Pronchery EVP_PKEY_OP_SIGN, "ML_DSA Sign Init");
175*e7be843bSPierre Pronchery }
176*e7be843bSPierre Pronchery
ml_dsa_sign(void * vctx,uint8_t * sig,size_t * siglen,size_t sigsize,const uint8_t * msg,size_t msg_len)177*e7be843bSPierre Pronchery static int ml_dsa_sign(void *vctx, uint8_t *sig, size_t *siglen, size_t sigsize,
178*e7be843bSPierre Pronchery const uint8_t *msg, size_t msg_len)
179*e7be843bSPierre Pronchery {
180*e7be843bSPierre Pronchery int ret = 0;
181*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *ctx = (PROV_ML_DSA_CTX *)vctx;
182*e7be843bSPierre Pronchery uint8_t rand_tmp[ML_DSA_ENTROPY_LEN], *rnd = NULL;
183*e7be843bSPierre Pronchery
184*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
185*e7be843bSPierre Pronchery return 0;
186*e7be843bSPierre Pronchery
187*e7be843bSPierre Pronchery if (sig != NULL) {
188*e7be843bSPierre Pronchery if (ctx->test_entropy_len != 0) {
189*e7be843bSPierre Pronchery rnd = ctx->test_entropy;
190*e7be843bSPierre Pronchery } else {
191*e7be843bSPierre Pronchery rnd = rand_tmp;
192*e7be843bSPierre Pronchery
193*e7be843bSPierre Pronchery if (ctx->deterministic == 1)
194*e7be843bSPierre Pronchery memset(rnd, 0, sizeof(rand_tmp));
195*e7be843bSPierre Pronchery else if (RAND_priv_bytes_ex(ctx->libctx, rnd, sizeof(rand_tmp), 0) <= 0)
196*e7be843bSPierre Pronchery return 0;
197*e7be843bSPierre Pronchery }
198*e7be843bSPierre Pronchery }
199*e7be843bSPierre Pronchery ret = ossl_ml_dsa_sign(ctx->key, ctx->mu, msg, msg_len,
200*e7be843bSPierre Pronchery ctx->context_string, ctx->context_string_len,
201*e7be843bSPierre Pronchery rnd, sizeof(rand_tmp), ctx->msg_encode,
202*e7be843bSPierre Pronchery sig, siglen, sigsize);
203*e7be843bSPierre Pronchery if (rnd != ctx->test_entropy)
204*e7be843bSPierre Pronchery OPENSSL_cleanse(rand_tmp, sizeof(rand_tmp));
205*e7be843bSPierre Pronchery return ret;
206*e7be843bSPierre Pronchery }
207*e7be843bSPierre Pronchery
ml_dsa_digest_sign(void * vctx,uint8_t * sig,size_t * siglen,size_t sigsize,const uint8_t * tbs,size_t tbslen)208*e7be843bSPierre Pronchery static int ml_dsa_digest_sign(void *vctx, uint8_t *sig, size_t *siglen, size_t sigsize,
209*e7be843bSPierre Pronchery const uint8_t *tbs, size_t tbslen)
210*e7be843bSPierre Pronchery {
211*e7be843bSPierre Pronchery return ml_dsa_sign(vctx, sig, siglen, sigsize, tbs, tbslen);
212*e7be843bSPierre Pronchery }
213*e7be843bSPierre Pronchery
ml_dsa_verify_msg_init(void * vctx,void * vkey,const OSSL_PARAM params[])214*e7be843bSPierre Pronchery static int ml_dsa_verify_msg_init(void *vctx, void *vkey, const OSSL_PARAM params[])
215*e7be843bSPierre Pronchery {
216*e7be843bSPierre Pronchery return ml_dsa_signverify_msg_init(vctx, vkey, params, EVP_PKEY_OP_VERIFY,
217*e7be843bSPierre Pronchery "ML_DSA Verify Init");
218*e7be843bSPierre Pronchery }
219*e7be843bSPierre Pronchery
ml_dsa_verify(void * vctx,const uint8_t * sig,size_t siglen,const uint8_t * msg,size_t msg_len)220*e7be843bSPierre Pronchery static int ml_dsa_verify(void *vctx, const uint8_t *sig, size_t siglen,
221*e7be843bSPierre Pronchery const uint8_t *msg, size_t msg_len)
222*e7be843bSPierre Pronchery {
223*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *ctx = (PROV_ML_DSA_CTX *)vctx;
224*e7be843bSPierre Pronchery
225*e7be843bSPierre Pronchery if (!ossl_prov_is_running())
226*e7be843bSPierre Pronchery return 0;
227*e7be843bSPierre Pronchery return ossl_ml_dsa_verify(ctx->key, ctx->mu, msg, msg_len,
228*e7be843bSPierre Pronchery ctx->context_string, ctx->context_string_len,
229*e7be843bSPierre Pronchery ctx->msg_encode, sig, siglen);
230*e7be843bSPierre Pronchery }
ml_dsa_digest_verify(void * vctx,const uint8_t * sig,size_t siglen,const uint8_t * tbs,size_t tbslen)231*e7be843bSPierre Pronchery static int ml_dsa_digest_verify(void *vctx,
232*e7be843bSPierre Pronchery const uint8_t *sig, size_t siglen,
233*e7be843bSPierre Pronchery const uint8_t *tbs, size_t tbslen)
234*e7be843bSPierre Pronchery {
235*e7be843bSPierre Pronchery return ml_dsa_verify(vctx, sig, siglen, tbs, tbslen);
236*e7be843bSPierre Pronchery }
237*e7be843bSPierre Pronchery
ml_dsa_set_ctx_params(void * vctx,const OSSL_PARAM params[])238*e7be843bSPierre Pronchery static int ml_dsa_set_ctx_params(void *vctx, const OSSL_PARAM params[])
239*e7be843bSPierre Pronchery {
240*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *pctx = (PROV_ML_DSA_CTX *)vctx;
241*e7be843bSPierre Pronchery const OSSL_PARAM *p;
242*e7be843bSPierre Pronchery
243*e7be843bSPierre Pronchery if (pctx == NULL)
244*e7be843bSPierre Pronchery return 0;
245*e7be843bSPierre Pronchery if (ossl_param_is_empty(params))
246*e7be843bSPierre Pronchery return 1;
247*e7be843bSPierre Pronchery
248*e7be843bSPierre Pronchery p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_CONTEXT_STRING);
249*e7be843bSPierre Pronchery if (p != NULL) {
250*e7be843bSPierre Pronchery void *vp = pctx->context_string;
251*e7be843bSPierre Pronchery
252*e7be843bSPierre Pronchery if (!OSSL_PARAM_get_octet_string(p, &vp, sizeof(pctx->context_string),
253*e7be843bSPierre Pronchery &(pctx->context_string_len))) {
254*e7be843bSPierre Pronchery pctx->context_string_len = 0;
255*e7be843bSPierre Pronchery return 0;
256*e7be843bSPierre Pronchery }
257*e7be843bSPierre Pronchery }
258*e7be843bSPierre Pronchery p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_TEST_ENTROPY);
259*e7be843bSPierre Pronchery if (p != NULL) {
260*e7be843bSPierre Pronchery void *vp = pctx->test_entropy;
261*e7be843bSPierre Pronchery
262*e7be843bSPierre Pronchery pctx->test_entropy_len = 0;
263*e7be843bSPierre Pronchery if (!OSSL_PARAM_get_octet_string(p, &vp, sizeof(pctx->test_entropy),
264*e7be843bSPierre Pronchery &(pctx->test_entropy_len)))
265*e7be843bSPierre Pronchery return 0;
266*e7be843bSPierre Pronchery if (pctx->test_entropy_len != sizeof(pctx->test_entropy)) {
267*e7be843bSPierre Pronchery pctx->test_entropy_len = 0;
268*e7be843bSPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_SEED_LENGTH);
269*e7be843bSPierre Pronchery return 0;
270*e7be843bSPierre Pronchery }
271*e7be843bSPierre Pronchery }
272*e7be843bSPierre Pronchery p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_DETERMINISTIC);
273*e7be843bSPierre Pronchery if (p != NULL && !OSSL_PARAM_get_int(p, &pctx->deterministic))
274*e7be843bSPierre Pronchery return 0;
275*e7be843bSPierre Pronchery
276*e7be843bSPierre Pronchery p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_MESSAGE_ENCODING);
277*e7be843bSPierre Pronchery if (p != NULL && !OSSL_PARAM_get_int(p, &pctx->msg_encode))
278*e7be843bSPierre Pronchery return 0;
279*e7be843bSPierre Pronchery
280*e7be843bSPierre Pronchery p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_MU);
281*e7be843bSPierre Pronchery if (p != NULL && !OSSL_PARAM_get_int(p, &pctx->mu))
282*e7be843bSPierre Pronchery return 0;
283*e7be843bSPierre Pronchery
284*e7be843bSPierre Pronchery return 1;
285*e7be843bSPierre Pronchery }
286*e7be843bSPierre Pronchery
ml_dsa_settable_ctx_params(void * vctx,ossl_unused void * provctx)287*e7be843bSPierre Pronchery static const OSSL_PARAM *ml_dsa_settable_ctx_params(void *vctx,
288*e7be843bSPierre Pronchery ossl_unused void *provctx)
289*e7be843bSPierre Pronchery {
290*e7be843bSPierre Pronchery static const OSSL_PARAM settable_ctx_params[] = {
291*e7be843bSPierre Pronchery OSSL_PARAM_octet_string(OSSL_SIGNATURE_PARAM_CONTEXT_STRING, NULL, 0),
292*e7be843bSPierre Pronchery OSSL_PARAM_octet_string(OSSL_SIGNATURE_PARAM_TEST_ENTROPY, NULL, 0),
293*e7be843bSPierre Pronchery OSSL_PARAM_int(OSSL_SIGNATURE_PARAM_DETERMINISTIC, 0),
294*e7be843bSPierre Pronchery OSSL_PARAM_int(OSSL_SIGNATURE_PARAM_MU, 0),
295*e7be843bSPierre Pronchery OSSL_PARAM_int(OSSL_SIGNATURE_PARAM_MESSAGE_ENCODING, 0),
296*e7be843bSPierre Pronchery OSSL_PARAM_END
297*e7be843bSPierre Pronchery };
298*e7be843bSPierre Pronchery
299*e7be843bSPierre Pronchery return settable_ctx_params;
300*e7be843bSPierre Pronchery }
301*e7be843bSPierre Pronchery
302*e7be843bSPierre Pronchery static const OSSL_PARAM known_gettable_ctx_params[] = {
303*e7be843bSPierre Pronchery OSSL_PARAM_octet_string(OSSL_SIGNATURE_PARAM_ALGORITHM_ID, NULL, 0),
304*e7be843bSPierre Pronchery OSSL_PARAM_END
305*e7be843bSPierre Pronchery };
306*e7be843bSPierre Pronchery
ml_dsa_gettable_ctx_params(ossl_unused void * vctx,ossl_unused void * provctx)307*e7be843bSPierre Pronchery static const OSSL_PARAM *ml_dsa_gettable_ctx_params(ossl_unused void *vctx,
308*e7be843bSPierre Pronchery ossl_unused void *provctx)
309*e7be843bSPierre Pronchery {
310*e7be843bSPierre Pronchery return known_gettable_ctx_params;
311*e7be843bSPierre Pronchery }
312*e7be843bSPierre Pronchery
ml_dsa_get_ctx_params(void * vctx,OSSL_PARAM * params)313*e7be843bSPierre Pronchery static int ml_dsa_get_ctx_params(void *vctx, OSSL_PARAM *params)
314*e7be843bSPierre Pronchery {
315*e7be843bSPierre Pronchery PROV_ML_DSA_CTX *ctx = (PROV_ML_DSA_CTX *)vctx;
316*e7be843bSPierre Pronchery OSSL_PARAM *p;
317*e7be843bSPierre Pronchery
318*e7be843bSPierre Pronchery if (ctx == NULL)
319*e7be843bSPierre Pronchery return 0;
320*e7be843bSPierre Pronchery
321*e7be843bSPierre Pronchery p = OSSL_PARAM_locate(params, OSSL_SIGNATURE_PARAM_ALGORITHM_ID);
322*e7be843bSPierre Pronchery if (p != NULL
323*e7be843bSPierre Pronchery && !OSSL_PARAM_set_octet_string(p,
324*e7be843bSPierre Pronchery ctx->aid_len == 0 ? NULL : ctx->aid_buf,
325*e7be843bSPierre Pronchery ctx->aid_len))
326*e7be843bSPierre Pronchery return 0;
327*e7be843bSPierre Pronchery
328*e7be843bSPierre Pronchery return 1;
329*e7be843bSPierre Pronchery }
330*e7be843bSPierre Pronchery
331*e7be843bSPierre Pronchery #define MAKE_SIGNATURE_FUNCTIONS(alg) \
332*e7be843bSPierre Pronchery static OSSL_FUNC_signature_newctx_fn ml_dsa_##alg##_newctx; \
333*e7be843bSPierre Pronchery static void *ml_dsa_##alg##_newctx(void *provctx, const char *propq) \
334*e7be843bSPierre Pronchery { \
335*e7be843bSPierre Pronchery return ml_dsa_newctx(provctx, EVP_PKEY_ML_DSA_##alg, propq); \
336*e7be843bSPierre Pronchery } \
337*e7be843bSPierre Pronchery const OSSL_DISPATCH ossl_ml_dsa_##alg##_signature_functions[] = { \
338*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_NEWCTX, (void (*)(void))ml_dsa_##alg##_newctx }, \
339*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_SIGN_MESSAGE_INIT, \
340*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_sign_msg_init }, \
341*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_SIGN, (void (*)(void))ml_dsa_sign }, \
342*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_VERIFY_MESSAGE_INIT, \
343*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_verify_msg_init }, \
344*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_VERIFY, (void (*)(void))ml_dsa_verify }, \
345*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_DIGEST_SIGN_INIT, \
346*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_digest_signverify_init }, \
347*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_DIGEST_SIGN, \
348*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_digest_sign }, \
349*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_DIGEST_VERIFY_INIT, \
350*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_digest_signverify_init }, \
351*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_DIGEST_VERIFY, \
352*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_digest_verify }, \
353*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_FREECTX, (void (*)(void))ml_dsa_freectx }, \
354*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_SET_CTX_PARAMS, \
355*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_set_ctx_params }, \
356*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_SETTABLE_CTX_PARAMS, \
357*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_settable_ctx_params }, \
358*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_GET_CTX_PARAMS, \
359*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_get_ctx_params }, \
360*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_GETTABLE_CTX_PARAMS, \
361*e7be843bSPierre Pronchery (void (*)(void))ml_dsa_gettable_ctx_params }, \
362*e7be843bSPierre Pronchery { OSSL_FUNC_SIGNATURE_DUPCTX, (void (*)(void))ml_dsa_dupctx }, \
363*e7be843bSPierre Pronchery OSSL_DISPATCH_END \
364*e7be843bSPierre Pronchery }
365*e7be843bSPierre Pronchery
366*e7be843bSPierre Pronchery MAKE_SIGNATURE_FUNCTIONS(44);
367*e7be843bSPierre Pronchery MAKE_SIGNATURE_FUNCTIONS(65);
368*e7be843bSPierre Pronchery MAKE_SIGNATURE_FUNCTIONS(87);
369