Add SLH-DSA-Ascon-128[s|f]

Signed-off-by: Stephan Mueller <smueller@chronox.de>

Author: smuellerDD

CHANGES.md

@@ -17,6 +17,8 @@ Changes 1.3.0-prerelease
 
 * Add optional Jitter RNG entropy source
 
+* Add SLH-DSA-Ascon-128[s|f]
+
 Changes 1.2.0
 * Locking für seeded_rng added to avoid requiring the caller providing a lock
 

TODO

@@ -25,3 +25,4 @@
 
 - RISCV asm: check whether it works for RISCV32
 
+- Add SLH-DSA-Ascon to Linux kernel

linux_kernel/lc_sphincs_shake_128f.h.awk

@@ -1,5 +1,6 @@
 # Set the Dilithium security strength
 {gsub("@sphincs_strength@", "17088", $0) ;
+ gsub("@sphincs_hash@", "lc_shake256", $0) ;
  gsub("@sphincs_name@", "lc_sphincs_shake_128f", $0) ;
  gsub("@sphincs_header@", "SHAKE_128F_", $0) ;
 

linux_kernel/lc_sphincs_shake_128s.h.awk

@@ -1,5 +1,6 @@
 # Set the Dilithium security strength
 {gsub("@sphincs_strength@", "7856", $0) ;
+ gsub("@sphincs_hash@", "lc_shake256", $0) ;
  gsub("@sphincs_name@", "lc_sphincs_shake_128s", $0) ;
  gsub("@sphincs_header@", "SHAKE_128S_", $0) ;
 

linux_kernel/lc_sphincs_shake_192f.h.awk

@@ -1,5 +1,6 @@
 # Set the Dilithium security strength
 {gsub("@sphincs_strength@", "35664", $0) ;
+ gsub("@sphincs_hash@", "lc_shake256", $0) ;
  gsub("@sphincs_name@", "lc_sphincs_shake_192f", $0) ;
  gsub("@sphincs_header@", "SHAKE_192F_", $0) ;
 

linux_kernel/lc_sphincs_shake_192s.h.awk

@@ -1,5 +1,6 @@
 # Set the Dilithium security strength
 {gsub("@sphincs_strength@", "16224", $0) ;
+ gsub("@sphincs_hash@", "lc_shake256", $0) ;
  gsub("@sphincs_name@", "lc_sphincs_shake_192s", $0) ;
  gsub("@sphincs_header@", "SHAKE_192S_", $0) ;
 

linux_kernel/lc_sphincs_shake_256f.h.awk

@@ -1,5 +1,6 @@
 # Set the Dilithium security strength
 {gsub("@sphincs_strength@", "49856", $0) ;
+ gsub("@sphincs_hash@", "lc_shake256", $0) ;
  gsub("@sphincs_name@", "lc_sphincs_shake_256f", $0) ;
  gsub("@sphincs_header@", "SHAKE_256F_", $0) ;
 

linux_kernel/lc_sphincs_shake_256s.h.awk

@@ -1,5 +1,6 @@
 # Set the Dilithium security strength
 {gsub("@sphincs_strength@", "29792", $0) ;
+ gsub("@sphincs_hash@", "lc_shake256", $0) ;
  gsub("@sphincs_name@", "lc_sphincs_shake_256s", $0) ;
  gsub("@sphincs_header@", "SHAKE_256S_", $0) ;
 

meson.build

@@ -150,7 +150,9 @@ if (get_option('sphincs_shake_256s').enabled() or
     get_option('sphincs_shake_192s').enabled() or
     get_option('sphincs_shake_192f').enabled() or
     get_option('sphincs_shake_128s').enabled() or
-    get_option('sphincs_shake_128f').enabled())
+    get_option('sphincs_shake_128f').enabled() or
+    get_option('slh_dsa_ascon_128s').enabled() or
+    get_option('slh_dsa_ascon_128f').enabled())
 	add_global_arguments([ '-DLC_SPHINCS' ], language: 'c')
 	sphincs_enabled = true
 endif
@@ -478,6 +480,16 @@ if get_option('sha3').disabled() and get_option('ascon_keccak').enabled()
 	error('Ascon-Keccak support requires SHA-3')
 endif
 
+if (get_option('slh_dsa_ascon_128s').enabled() and
+    get_option('ascon').disabled())
+	error('SLH-DSA-Ascon-128s support requires Ascon')
+endif
+
+if (get_option('slh_dsa_ascon_128f').enabled() and
+    get_option('ascon').disabled())
+	error('SLH-DSA-Ascon-128f support requires Ascon')
+endif
+
 if get_option('x509_parser').disabled() and get_option('pkcs7_parser').enabled()
 	error('PKCS#7 parser support requires X.509 parser support')
 endif

meson_options.txt

@@ -19,6 +19,20 @@ This option enables the Ascon-Keccak 256, and Ascon-Keccak 512 AEAD. Note, this
 requires also SHA-3 being enabled.
 ''')
 
+option('slh_dsa_ascon_128s', type: 'feature', value: 'enabled',
+       description: '''SLH-DSA-Ascon-128s support
+
+This option enables the SLH-DSA-Ascon-128s support with the same parameters
+as SLH-DSA-SHAKE-128s. Note, this requires Ascon being enabled.
+''')
+
+option('slh_dsa_ascon_128f', type: 'feature', value: 'enabled',
+       description: '''SLH-DSA-Ascon-128f support
+
+This option enables the SLH-DSA-Ascon-128f support with the same parameters
+as SLH-DSA-SHAKE-128f. Note, this requires Ascon being enabled.
+''')
+
 option('chacha20', type: 'feature', value: 'enabled',
        description: 'ChaCha20 support')
 option('chacha20_drng', type: 'feature', value: 'enabled',