qssh 0.4.3

Post-quantum secure shell with NIST PQC algorithms (Falcon, SPHINCS+, ML-KEM), configurable security tiers, and quantum-resistant protocol design
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

//! Minimal test to verify pure-Rust PQ crypto (fn-dsa + slh-dsa)

use qssh::crypto::PqKeyExchange;

#[test]
fn test_pq_key_exchange_creation() {
    let kex = PqKeyExchange::new().unwrap();

    // fn-dsa Falcon-512: PK = 897 bytes
    assert_eq!(kex.falcon_pk.len(), 897, "Falcon-512 public key size");
    // slh-dsa SPHINCS+: PK = 32 bytes
    assert_eq!(kex.sphincs_pk.len(), 32, "SPHINCS+ public key size");
}

#[test]
fn test_falcon_sign_verify_roundtrip() {
    let kex = PqKeyExchange::new().unwrap();
    let msg = b"test message for falcon signing";

    let sig = kex.sign_falcon(msg).unwrap();
    assert!(kex.verify_falcon(msg, &sig, &kex.falcon_pk).unwrap(),
        "Falcon signature should verify");
}

#[test]
fn test_sphincs_sign_verify_roundtrip() {
    let kex = PqKeyExchange::new().unwrap();
    let msg = b"test message for sphincs signing";

    let sig = kex.sign(msg).unwrap();
    assert!(kex.verify(msg, &sig, &kex.sphincs_pk).unwrap(),
        "SPHINCS+ signature should verify");
}

#[test]
fn test_no_c_ffi_dependencies() {
    // Verify that pqcrypto C-FFI types are not referenced in crypto module
    let output = std::process::Command::new("grep")
        .args(["-rn", "pqcrypto_falcon\\|pqcrypto_sphincsplus\\|pqcrypto_traits", "src/crypto/"])
        .output()
        .expect("Failed to run grep");

    let result = String::from_utf8_lossy(&output.stdout);
    assert!(result.is_empty(),
        "Should NOT reference pqcrypto C-FFI crates: {}", result);
}