bitcoinpqc 0.4.0

Post-Quantum Cryptographic signature algorithms for Bitcoin (BIP-360)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

#include <stdlib.h>
#include <string.h>
#include <stdio.h>
#include "libbitcoinpqc/ml_dsa.h"

/*
 * This file implements the verification function for ML-DSA-44 (CRYSTALS-Dilithium)
 */

/* Include necessary headers from Dilithium reference implementation */
#include "../../dilithium/ref/api.h"
#include "../../dilithium/ref/sign.h"
#include "../../dilithium/ref/params.h"

// Debug mode flag - set to 0 to disable debug output
#define ML_DSA_DEBUG 0

// Conditional debug print macro
#define DEBUG_PRINT(fmt, ...) \
    do { if (ML_DSA_DEBUG) printf(fmt, ##__VA_ARGS__); } while (0)

int ml_dsa_44_verify(
    const uint8_t *sig,
    size_t siglen,
    const uint8_t *m,
    size_t mlen,
    const uint8_t *pk
) {
    if (!sig || !m || !pk) {
        DEBUG_PRINT("ML-DSA verify: Invalid arguments\n");
        return -1;
    }

    DEBUG_PRINT("ML-DSA verify: Verifying signature of length %zu for message of length %zu\n", siglen, mlen);

    /* Check signature size */
    if (siglen == 0 || siglen > CRYPTO_BYTES) {
        DEBUG_PRINT("ML-DSA verify: Invalid signature size: %zu (max: %d)\n", siglen, CRYPTO_BYTES);
        return -1;
    }

    /* Debug: Print first few bytes of signature */
    DEBUG_PRINT("ML-DSA verify: Signature prefix: ");
    for (size_t i = 0; i < 8 && i < siglen; i++) {
        if (ML_DSA_DEBUG) printf("%02x", sig[i]);
    }
    if (ML_DSA_DEBUG) printf("...\n");

    /* Set up empty context */
    uint8_t ctx[1] = {0};
    size_t ctxlen = 0;

    /* Call the reference implementation's verification function */
    int result = crypto_sign_verify(sig, siglen, m, mlen, ctx, ctxlen, pk);

    DEBUG_PRINT("ML-DSA verify: crypto_sign_verify returned %d\n", result);

    return result;
}