pqfile 4.3.1

Quantum-resistant file encryption: ML-KEM (512/768/1024), hybrid X25519+ML-KEM-768, ML-DSA-65 and SLH-DSA signing, multi-recipient, Shamir sharing
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113

//! One-time utility that generates and prints static test vector constants.
//!
//! Run with:
//!   cargo run --example gen_vectors -p pqfile
//!
//! Paste the printed constants into pqfile/tests/static_vectors.rs and commit
//! both files together so they stay in sync.

use pqfile::encrypt::{encrypt_bytes, encrypt_stream, encrypt_stream_multi};
use pqfile::format::CHUNK_SIZE;
use pqfile::keygen::{keygen_bytes, keygen_bytes_hybrid_768};

fn to_hex(bytes: &[u8]) -> String {
    bytes.iter().map(|b| format!("{b:02x}")).collect()
}

fn main() {
    const PLAINTEXT: &[u8] = b"pqfile static test vector v1";

    println!("// ----------------------------------------------------------------");
    println!("// Static test vectors for pqfile format compliance.");
    println!("// Generated by: cargo run --example gen_vectors -p pqfile");
    println!("// Plaintext (hex): {}", to_hex(PLAINTEXT));
    println!("// ----------------------------------------------------------------");
    println!();
    println!("const PLAINTEXT: &[u8] = b\"pqfile static test vector v1\";");
    println!();

    // v2 whole-file AEAD vectors (one per KEM variant)
    for level in [512u16, 768, 1024] {
        let (pub_pem, priv_pem) = keygen_bytes(level, None).unwrap();
        let ct = encrypt_bytes(&pub_pem, PLAINTEXT).unwrap();
        println!("// ML-KEM-{level} v2 (whole-file AEAD, FORMAT.md section 5.1)");
        println!("const V2_{level}_PRIV_PEM: &str = concat!(");
        for line in priv_pem.trim().lines() {
            println!("    \"{line}\\n\",");
        }
        println!(");");
        println!("const V2_{level}_CT: &str = \"{}\";", to_hex(&ct));
        println!();
    }

    // v3 chunked STREAM vector - ML-KEM-768
    {
        let (pub_pem, priv_pem) = keygen_bytes(768, None).unwrap();
        let mut ct = Vec::new();
        encrypt_stream(
            &pub_pem,
            PLAINTEXT.len() as u64,
            CHUNK_SIZE,
            &mut { PLAINTEXT },
            &mut ct,
        )
        .unwrap();
        println!("// ML-KEM-768 v3 (64 KiB chunked STREAM, FORMAT.md section 5.2)");
        println!("const V3_768_PRIV_PEM: &str = concat!(");
        for line in priv_pem.trim().lines() {
            println!("    \"{line}\\n\",");
        }
        println!(");");
        println!("const V3_768_CT: &str = \"{}\";", to_hex(&ct));
        println!();
    }

    // v3 hybrid X25519+ML-KEM-768
    {
        let (pub_pem, priv_pem) = keygen_bytes_hybrid_768(None).unwrap();
        let mut ct = Vec::new();
        encrypt_stream(
            &pub_pem,
            PLAINTEXT.len() as u64,
            CHUNK_SIZE,
            &mut { PLAINTEXT },
            &mut ct,
        )
        .unwrap();
        println!("// Hybrid X25519+ML-KEM-768 v3 (FORMAT.md section 2)");
        println!("const V3_HYBRID_PRIV_PEM: &str = concat!(");
        for line in priv_pem.trim().lines() {
            println!("    \"{line}\\n\",");
        }
        println!(");");
        println!("const V3_HYBRID_CT: &str = \"{}\";", to_hex(&ct));
        println!();
    }

    // v4 two-recipient vector
    {
        let (pub1, priv1) = keygen_bytes(768, None).unwrap();
        let (pub2, priv2) = keygen_bytes(768, None).unwrap();
        let mut ct = Vec::new();
        encrypt_stream_multi(
            &[pub1.as_str(), pub2.as_str()],
            PLAINTEXT.len() as u64,
            &mut { PLAINTEXT },
            &mut ct,
        )
        .unwrap();
        println!("// ML-KEM-768 v4 two-recipient (FORMAT.md section 5.5)");
        println!("const V4_768_PRIV1_PEM: &str = concat!(");
        for line in priv1.trim().lines() {
            println!("    \"{line}\\n\",");
        }
        println!(");");
        println!("const V4_768_PRIV2_PEM: &str = concat!(");
        for line in priv2.trim().lines() {
            println!("    \"{line}\\n\",");
        }
        println!(");");
        println!("const V4_768_CT: &str = \"{}\";", to_hex(&ct));
        println!();
    }
}