clatter 0.1.3-alpha

no_std compatible implementation of Noise protocol framework with Post-Quantum extensions
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

//! Kyber implementation by Argyle-Software: https://github.com/Argyle-Software/kyber
//!
//! The implementation crate is designed so that only one Kyber security level variant can
//! be active at a time.

use pqc_kyber::{
    decapsulate, encapsulate, keypair, KYBER_CIPHERTEXTBYTES, KYBER_PUBLICKEYBYTES,
    KYBER_SECRETKEYBYTES, KYBER_SSBYTES,
};
use zeroize::Zeroize;

use crate::bytearray::SensitiveByteArray;
use crate::error::KemError;
use crate::traits::{CryptoComponent, Kem};

/// Kyber512 KEM implementation
#[cfg(feature = "use-argyle-kyber512")]
pub struct Kyber512;
/// Kyber768 KEM implementation
#[cfg(feature = "use-argyle-kyber768")]
pub struct Kyber768;
/// Kyber1024 KEM implementation
#[cfg(feature = "use-argyle-kyber1024")]
pub struct Kyber1024;

#[cfg(feature = "use-argyle-kyber512")]
impl CryptoComponent for Kyber512 {
    fn name() -> &'static str {
        "Kyber512"
    }
}

#[cfg(feature = "use-argyle-kyber768")]
impl CryptoComponent for Kyber768 {
    fn name() -> &'static str {
        "Kyber768"
    }
}

#[cfg(feature = "use-argyle-kyber1024")]
impl CryptoComponent for Kyber1024 {
    fn name() -> &'static str {
        "Kyber1024"
    }
}

macro_rules! impl_kyber {
    ($kyber:ty) => {
        impl Kem for $kyber {
            type SecretKey = SensitiveByteArray<[u8; KYBER_SECRETKEYBYTES]>;
            type PubKey = [u8; KYBER_PUBLICKEYBYTES];
            type Ct = [u8; KYBER_CIPHERTEXTBYTES];
            type Ss = SensitiveByteArray<[u8; KYBER_SSBYTES]>;

            fn genkey<R: rand_core::RngCore + rand_core::CryptoRng>(
                rng: &mut R,
            ) -> crate::error::KemResult<crate::KeyPair<Self::PubKey, Self::SecretKey>> {
                let keys = keypair(rng).map_err(|_| KemError::KeyGeneration)?;

                Ok(crate::KeyPair {
                    public: keys.public,
                    secret: Self::SecretKey::new(keys.secret),
                })
            }

            fn encapsulate<R: rand_core::RngCore + rand_core::CryptoRng>(
                pk: &[u8],
                rng: &mut R,
            ) -> crate::error::KemResult<(Self::Ct, Self::Ss)> {
                let (ct, mut ss) = encapsulate(pk, rng).map_err(|_| KemError::Encapsulation)?;
                let res = Ok((ct, SensitiveByteArray::new(ss)));
                ss.zeroize();
                res
            }

            fn decapsulate(ct: &[u8], sk: &[u8]) -> crate::error::KemResult<Self::Ss> {
                Ok(SensitiveByteArray::new(
                    decapsulate(ct, sk).map_err(|_| KemError::Decapsulation)?,
                ))
            }
        }
    };
}

#[cfg(feature = "use-argyle-kyber512")]
impl_kyber!(Kyber512);
#[cfg(feature = "use-argyle-kyber768")]
impl_kyber!(Kyber768);
#[cfg(feature = "use-argyle-kyber1024")]
impl_kyber!(Kyber1024);