1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
// SPDX-License-Identifier: MIT
#if !defined( HSS_DERIVE_H_ )
#define HSS_DERIVE_H_
#include "common_defs.h"
#include "config.h"
#include "lms_namespace.h"
#if SECRET_MAX > 31
#error The code is not designed for a SECRET_MAX that high
#endif
#define SECRET_MAX_MASK (((merkle_index_t)1 << SECRET_MAX) - 1)
struct seed_derive {
const unsigned char *I;
const unsigned char *master_seed;
merkle_index_t q;
unsigned j;
#if SECRET_METHOD == 2
unsigned hash; /* Hash function to use */
unsigned m; /* Length of hash function */
#endif
#if SECRET_METHOD == 1
unsigned q_levels, j_levels;
merkle_index_t r_mask;
unsigned j_mask;
#define MAX_Q_HEIGHT ((MAX_MERKLE_HEIGHT + SECRET_MAX - 1) / SECRET_MAX)
#define MAX_J_HEIGHT (( 9 + SECRET_MAX - 1) / SECRET_MAX)
/* '9' is the number of bits a maximum 'p' can take up */
unsigned j_value[MAX_J_HEIGHT]; /* these are the values we insert */
/* into the hash. The lower SECRET_MAX bits are which child of */
/* the parent it is; the higher bits indicate the parents' */
/* identities */
unsigned char q_seed[MAX_Q_HEIGHT][SEED_LEN];
unsigned char j_seed[MAX_Q_HEIGHT][SEED_LEN];
#endif
};
bool hss_seed_derive_init( struct seed_derive *derive,
param_set_t lm, param_set_t ots,
const unsigned char *I, const unsigned char *seed );
/* This sets the internal 'q' value */
/* If we've already have a 'q' value set, it'll try to minimize the number */
/* of hashes done */
/* Once you've done that, you'll need to reset the 'h' */
void hss_seed_derive_set_q( struct seed_derive *derive, merkle_index_t q );
/* This sets the internal 'j' value */
void hss_seed_derive_set_j( struct seed_derive *derive, unsigned j );
#define NUM_ARTIFICIAL_SEEDS 3 /* 3 seeds are listed below */
/* This is the j value used when we're deriving the seed value */
/* for child Merkle trees */
#define SEED_CHILD_SEED (~1)
/* This is the j value used when we're deriving the I value */
/* used; either in the context of the parent tree, or of this tree */
#define SEED_CHILD_I (SEED_CHILD_SEED + 1)
/* This is the j value used when we're asking for the randomizer C */
/* for signing a message */
#define SEED_RANDOMIZER_INDEX (~2)
/* This generates the current seed. If increment_j is set, this will set */
/* up for the next j value */
void hss_seed_derive( unsigned char *seed, struct seed_derive *derive,
bool increment_j );
/* This needs to be called when we done with a seed_derive */
/* That structure contains keying data, this makes sure those are cleaned */
void hss_seed_derive_done( struct seed_derive *derive );
#endif /* HSS_DERIVE_H_ */