diff options
| author | Matt Braithwaite <mab@google.com> | 2016-06-03 03:23:29 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2016-06-04 00:26:18 +0300 |
| commit | 6b7436b0d29ac3018e23cfc0dd734dfd8024a80f (patch) | |
| tree | 2a00fe68d57d3fb07a4a4a79be529f89f9f97e35 /include/openssl/newhope.h | |
| parent | 0fc7df55c04e439e765c32a4dd93e43387fe40be (diff) | |
newhope: restore statistical tests.
One of these tests the distribution of noise polynomials; the other
tests that that agreed-upon keys (prior to whitening) have roughly equal
numbers of 0s and 1s.
Along the way, expose a few more API bits.
Change-Id: I6b04708d41590de45d82ea95bae1033cfccd5d67
Reviewed-on: https://boringssl-review.googlesource.com/8130
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'include/openssl/newhope.h')
| -rw-r--r-- | include/openssl/newhope.h | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/include/openssl/newhope.h b/include/openssl/newhope.h index 31d559fa..74103c98 100644 --- a/include/openssl/newhope.h +++ b/include/openssl/newhope.h @@ -89,6 +89,14 @@ OPENSSL_EXPORT int NEWHOPE_finish(uint8_t out_key[SHA256_DIGEST_LENGTH], /* Lower-level functions. */ +/* NEWHOPE_POLY_noise sets |r| to a random polynomial where the coefficients are + * sampled from the noise distribution. */ +void NEWHOPE_POLY_noise(NEWHOPE_POLY* r); + +/* NEWHOPE_POLY_noise sets |r| to an output of NEWHOPE_POLY_noise, and then + * applies NTT(r) in-place. */ +void NEWHOPE_POLY_noise_ntt(NEWHOPE_POLY* r); + /* NEWHOPE_offer_computation is the work of |NEWHOPE_offer|, less the encoding * parts. The inputs are the noise polynomials |s| and |e|, and random * polynomial |a|. The output is the polynomial |pk|. */ @@ -125,6 +133,11 @@ OPENSSL_EXPORT void NEWHOPE_POLY_frombytes( OPENSSL_EXPORT void NEWHOPE_POLY_tobytes(uint8_t r[NEWHOPE_POLY_LENGTH], const NEWHOPE_POLY* p); +/* NEWHOPE_offer_frommsg decodes an offer message |msg| into its constituent + * polynomials |out_pk| and |a|. */ +OPENSSL_EXPORT void NEWHOPE_offer_frommsg( + NEWHOPE_POLY *out_pk, NEWHOPE_POLY *out_a, + const uint8_t msg[NEWHOPE_OFFERMSG_LENGTH]); #if defined(__cplusplus) } /* extern "C" */ |