36 #define MBEDTLS_ERR_LMS_BAD_INPUT_DATA -0x0011
37 #define MBEDTLS_ERR_LMS_OUT_OF_PRIVATE_KEYS -0x0013
38 #define MBEDTLS_ERR_LMS_VERIFY_FAILED -0x0015
39 #define MBEDTLS_ERR_LMS_ALLOC_FAILED -0x0017
40 #define MBEDTLS_ERR_LMS_BUFFER_TOO_SMALL -0x0019
43 #define MBEDTLS_LMOTS_N_HASH_LEN_MAX (32u)
44 #define MBEDTLS_LMOTS_P_SIG_DIGIT_COUNT_MAX (34u)
45 #define MBEDTLS_LMOTS_N_HASH_LEN(type) ((type) == MBEDTLS_LMOTS_SHA256_N32_W8 ? 32u : 0)
46 #define MBEDTLS_LMOTS_I_KEY_ID_LEN (16u)
47 #define MBEDTLS_LMOTS_Q_LEAF_ID_LEN (4u)
48 #define MBEDTLS_LMOTS_TYPE_LEN (4u)
49 #define MBEDTLS_LMOTS_P_SIG_DIGIT_COUNT(type) ((type) == MBEDTLS_LMOTS_SHA256_N32_W8 ? 34u : 0)
50 #define MBEDTLS_LMOTS_C_RANDOM_VALUE_LEN(type) (MBEDTLS_LMOTS_N_HASH_LEN(type))
52 #define MBEDTLS_LMOTS_SIG_LEN(type) (MBEDTLS_LMOTS_TYPE_LEN + \
53 MBEDTLS_LMOTS_C_RANDOM_VALUE_LEN(type) + \
54 (MBEDTLS_LMOTS_P_SIG_DIGIT_COUNT(type) * \
55 MBEDTLS_LMOTS_N_HASH_LEN(type)))
58 #define MBEDTLS_LMS_TYPE_LEN (4)
59 #define MBEDTLS_LMS_H_TREE_HEIGHT(type) ((type) == MBEDTLS_LMS_SHA256_M32_H10 ? 10u : 0)
64 #define MBEDTLS_LMS_M_NODE_BYTES(type) ((type) == MBEDTLS_LMS_SHA256_M32_H10 ? 32 : 0)
65 #define MBEDTLS_LMS_M_NODE_BYTES_MAX 32
67 #define MBEDTLS_LMS_SIG_LEN(type, otstype) (MBEDTLS_LMOTS_Q_LEAF_ID_LEN + \
68 MBEDTLS_LMOTS_SIG_LEN(otstype) + \
69 MBEDTLS_LMS_TYPE_LEN + \
70 (MBEDTLS_LMS_H_TREE_HEIGHT(type) * \
71 MBEDTLS_LMS_M_NODE_BYTES(type)))
73 #define MBEDTLS_LMS_PUBLIC_KEY_LEN(type) (MBEDTLS_LMS_TYPE_LEN + \
74 MBEDTLS_LMOTS_TYPE_LEN + \
75 MBEDTLS_LMOTS_I_KEY_ID_LEN + \
76 MBEDTLS_LMS_M_NODE_BYTES(type))
140 #if defined(MBEDTLS_LMS_PRIVATE)
164 } mbedtls_lmots_private_t;
211 #if defined(MBEDTLS_LMS_PRIVATE)
244 } mbedtls_lms_private_t;
283 const unsigned char *key,
size_t key_size);
309 unsigned char *key,
size_t key_size,
333 const unsigned char *msg,
size_t msg_size,
334 const unsigned char *sig,
size_t sig_size);
336 #if defined(MBEDTLS_LMS_PRIVATE)
342 void mbedtls_lms_private_init(mbedtls_lms_private_t *ctx);
350 void mbedtls_lms_private_free(mbedtls_lms_private_t *ctx);
376 int mbedtls_lms_generate_private_key(mbedtls_lms_private_t *ctx,
379 int (*f_rng)(
void *,
unsigned char *,
size_t),
380 void *p_rng,
const unsigned char *seed,
402 const mbedtls_lms_private_t *priv_ctx);
441 int mbedtls_lms_sign(mbedtls_lms_private_t *ctx,
442 int (*f_rng)(
void *,
unsigned char *,
size_t),
443 void *p_rng,
const unsigned char *msg,
444 unsigned int msg_size,
unsigned char *sig,
size_t sig_size,
int mbedtls_lms_export_public_key(const mbedtls_lms_public_t *ctx, unsigned char *key, size_t key_size, size_t *key_len)
This function exports an LMS public key from a LMS public context that already contains a public key.
#define MBEDTLS_LMOTS_I_KEY_ID_LEN
#define MBEDTLS_LMOTS_P_SIG_DIGIT_COUNT_MAX
mbedtls_lmots_algorithm_type_t
@ MBEDTLS_LMOTS_SHA256_N32_W8
void mbedtls_lms_public_free(mbedtls_lms_public_t *ctx)
This function uninitializes an LMS public context.
int mbedtls_lms_verify(const mbedtls_lms_public_t *ctx, const unsigned char *msg, size_t msg_size, const unsigned char *sig, size_t sig_size)
This function verifies a LMS signature, using a LMS context that contains a public key.
void mbedtls_lms_public_init(mbedtls_lms_public_t *ctx)
This function initializes an LMS public context.
#define MBEDTLS_LMOTS_N_HASH_LEN_MAX
mbedtls_lms_algorithm_type_t
@ MBEDTLS_LMS_SHA256_M32_H10
int mbedtls_lms_import_public_key(mbedtls_lms_public_t *ctx, const unsigned char *key, size_t key_size)
This function imports an LMS public key into a public LMS context.
#define MBEDTLS_LMS_M_NODE_BYTES_MAX
#define MBEDTLS_LMOTS_Q_LEAF_ID_LEN
Build-time configuration info.
Macro wrapper for struct's members.
#define MBEDTLS_PRIVATE(member)