SLH-DSA-Ascon: disable by default

Considering that this algorithm has not been analyzed and it is considered
a proof-of-concept, disable it by default.

Signed-off-by: Stephan Mueller <smueller@chronox.de>

Author: smuellerDD

.github/workflows/asan-address-test.yml

@@ -18,7 +18,7 @@ jobs:
         sudo apt-get update
         sudo apt-get install -y meson
     - name: Meson setup build
-      run: meson setup build -Db_sanitize=address
+      run: meson setup build -Db_sanitize=address -Dslh_dsa_ascon_128s=enabled -Dslh_dsa_ascon_128f=enabled
     - name: Meson compile
       run: meson compile -C build
     - name: Meson test

.github/workflows/clang-scan.yml

@@ -18,6 +18,6 @@ jobs:
         sudo apt-get update
         sudo apt-get install -y meson clang clang-tools
     - name: Meson setup
-      run: CC=clang meson setup build
+      run: CC=clang meson setup build -Dslh_dsa_ascon_128s=enabled -Dslh_dsa_ascon_128f=enabled
     - name: Clang Scanner
       run: SCANBUILD=$(pwd)/addon/scan-build.sh ninja -C build/ scan-build

.github/workflows/efi.yml

@@ -18,6 +18,6 @@ jobs:
         sudo apt-get update
         sudo apt-get install -y meson gnu-efi
     - name: Meson setup
-      run: meson setup build -Defi=enabled -Dpkcs7_generator=disabled -Dx509_generator=disabled
+      run: meson setup build -Defi=enabled -Dpkcs7_generator=disabled -Dx509_generator=disabled -Dslh_dsa_ascon_128s=enabled -Dslh_dsa_ascon_128f=enabled
     - name: Meson compile
       run: meson compile -C build

.github/workflows/macos-test.yml

@@ -16,7 +16,7 @@ jobs:
     - name: Install meson
       run: brew install meson
     - name: Meson setup
-      run: meson setup build
+      run: meson setup build -Dslh_dsa_ascon_128s=enabled -Dslh_dsa_ascon_128f=enabled
     - name: Meson compile
       run: meson compile -C build
     - name: Meson test

.github/workflows/small-stack-test.yml

@@ -18,7 +18,7 @@ jobs:
         sudo apt-get update
         sudo apt-get install -y meson
     - name: Meson setup
-      run: meson setup build -Dsmall_stack=enabled
+      run: meson setup build -Dsmall_stack=enabled -Dslh_dsa_ascon_128s=enabled -Dslh_dsa_ascon_128f=enabled
     - name: Meson compile
       run: meson compile -C build
     - name: Meson test

.github/workflows/timecop.yml

@@ -19,7 +19,7 @@ jobs:
         sudo apt-get install -y meson
         sudo apt-get install -y valgrind
     - name: Meson setup build
-      run: meson setup build -Dtimecop=enabled
+      run: meson setup build -Dtimecop=enabled -Dslh_dsa_ascon_128s=enabled -Dslh_dsa_ascon_128f=enabled
     - name: Meson compile
       run: meson compile -C build
     - name: Meson test

.github/workflows/userspace-test.yml

@@ -18,7 +18,7 @@ jobs:
         sudo apt-get update
         sudo apt-get install -y meson gcovr doxygen graphviz
     - name: Meson setup
-      run: meson setup build -Db_coverage=true
+      run: meson setup build -Db_coverage=true -Dslh_dsa_ascon_128s=enabled -Dslh_dsa_ascon_128f=enabled
     - name: Meson compile
       run: meson compile -C build
     - name: Meson test

.github/workflows/windows-test.yml

@@ -27,7 +27,7 @@ jobs:
         update: true
         install: git meson mingw-w64-${{matrix.env}}-meson mingw-w64-${{matrix.env}}-gcc
     - name: Meson setup
-      run: msys2 -c 'meson setup build'
+      run: msys2 -c 'meson setup build -Dslh_dsa_ascon_128s=enabled -Dslh_dsa_ascon_128f=enabled'
     - name: Meson compile
       run: msys2 -c 'meson compile -C build'
     - name: Meson test

CHANGES.md

@@ -17,7 +17,7 @@ Changes 1.3.0-prerelease
 
 * Add optional Jitter RNG entropy source
 
-* Add SLH-DSA-Ascon-128[s|f]
+* Add SLH-DSA-Ascon-128[s|f]  (by default they are disabled, enable with meson configuration options `slh_dsa_ascon_128s` and `slh_dsa_ascon_128f`)
 
 Changes 1.2.0
 * Locking für seeded_rng added to avoid requiring the caller providing a lock

README.md

@@ -289,7 +289,7 @@ Leancrypto offers various cryptographic algorithms:
 
   * ML-DSA (Dilithium) hybrid signature operation with Curve25519
 
-  * SLH-DSA (Sphincs Plus)
+  * SLH-DSA (Sphincs Plus) with SHAKE and Ascon
 
 * Symmetric algorithms