]> git.ipfire.org Git - thirdparty/openssl.git/commit
ml-dsa(fips): add power up signature self tests for ML-DSA-65
authorPauli <ppzgs1@gmail.com>
Fri, 24 Jan 2025 01:55:21 +0000 (12:55 +1100)
committerTomas Mraz <tomas@openssl.org>
Fri, 14 Feb 2025 09:46:04 +0000 (10:46 +0100)
commitcd430bf5da18d56a9a4b59809756390b46d2f3dd
tree50413f3828c92b42df97d1f0bd65b49a8627949a
parent63282ea4ac8641342023f863d9929f0ac8ad5a84
ml-dsa(fips): add power up signature self tests for ML-DSA-65

This added self tests for ML-DSA.  IG 10.3.A.15 requires known answer
tests for both signing and verify.  This adds them.

The signature generation is constructed to encounter all three of the rejection
loop tests that are relevant for ML-DSA-65.  The message has been generated
so that:

    * it fails the z_max rejection test on iteration one
    * it fails the r0_max rejection test on iteration two
    * it fails the h_ones rejection test on iteration three
    * it successfully generates the signature on iteration four

It is thus an optimal self test in terms of iterations and coverage.

Key generation self tests will be dealt with separately.

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26548)
providers/fips/self_test_data.inc
providers/fips/self_test_kats.c