Botan 3.6.1
Crypto and TLS for C&
Botan::Kyber_Symmetric_Primitives Class Referenceabstract

#include <kyber_symmetric_primitives.h>

Inheritance diagram for Botan::Kyber_Symmetric_Primitives:
Botan::Kyber_90s_Symmetric_Primitives Botan::Kyber_Modern_Symmetric_Primitives Botan::ML_KEM_Symmetric_Primitives

Public Member Functions

std::pair< KyberSharedSecret, KyberEncryptionRandomnessG (StrongSpan< const KyberMessage > msg, StrongSpan< const KyberHashedPublicKey > pubkey_hash) const
 
std::pair< KyberSeedRho, KyberSeedSigmaG (StrongSpan< const KyberSeedRandomness > seed, const KyberConstants &mode) const
 
KyberHashedCiphertext H (StrongSpan< const KyberCompressedCiphertext > r) const
 
KyberMessage H (StrongSpan< const KyberMessage > m) const
 
KyberHashedPublicKey H (StrongSpan< const KyberSerializedPublicKey > pk) const
 
KyberSharedSecret J (StrongSpan< const KyberImplicitRejectionValue > rejection_value, StrongSpan< const KyberCompressedCiphertext > ciphertext) const
 
void KDF (StrongSpan< KyberSharedSecret > out, StrongSpan< const KyberSharedSecret > shared_secret, StrongSpan< const KyberHashedCiphertext > hashed_ciphertext) const
 
KyberSamplingRandomness PRF (KyberSigmaOrEncryptionRandomness seed, const uint8_t nonce, const size_t outlen) const
 
Botan::XOFXOF (StrongSpan< const KyberSeedRho > seed, std::tuple< uint8_t, uint8_t > matrix_position) const
 
virtual ~Kyber_Symmetric_Primitives ()=default
 

Protected Member Functions

virtual HashFunctionget_G () const =0
 
virtual HashFunctionget_H () const =0
 
virtual HashFunctionget_J () const =0
 
virtual HashFunctionget_KDF () const =0
 
virtual Botan::XOFget_PRF (std::span< const uint8_t > seed, uint8_t nonce) const =0
 
virtual Botan::XOFget_XOF (std::span< const uint8_t > seed, std::tuple< uint8_t, uint8_t > matrix_position) const =0
 
virtual std::optional< std::array< uint8_t, 1 > > seed_expansion_domain_separator (const KyberConstants &mode) const =0
 

Detailed Description

Adapter class that uses polymorphy to distinguish Kyber "modern" from Kyber "90s" modes.

Definition at line 30 of file kyber_symmetric_primitives.h.

Constructor & Destructor Documentation

◆ ~Kyber_Symmetric_Primitives()

virtual Botan::Kyber_Symmetric_Primitives::~Kyber_Symmetric_Primitives ( )
virtualdefault

Member Function Documentation

◆ G() [1/2]

std::pair< KyberSharedSecret, KyberEncryptionRandomness > Botan::Kyber_Symmetric_Primitives::G ( StrongSpan< const KyberMessage > msg,
StrongSpan< const KyberHashedPublicKey > pubkey_hash ) const
inline

Definition at line 55 of file kyber_symmetric_primitives.h.

56 {
57 return G_split<KyberSharedSecret, KyberEncryptionRandomness>(msg, pubkey_hash);
58 }

◆ G() [2/2]

std::pair< KyberSeedRho, KyberSeedSigma > Botan::Kyber_Symmetric_Primitives::G ( StrongSpan< const KyberSeedRandomness > seed,
const KyberConstants & mode ) const
inline

Definition at line 46 of file kyber_symmetric_primitives.h.

47 {
48 if(auto domsep = seed_expansion_domain_separator(mode)) {
49 return G_split<KyberSeedRho, KyberSeedSigma>(seed, *domsep);
50 } else {
51 return G_split<KyberSeedRho, KyberSeedSigma>(seed);
52 }
53 }
virtual std::optional< std::array< uint8_t, 1 > > seed_expansion_domain_separator(const KyberConstants &mode) const =0

References seed_expansion_domain_separator().

Referenced by Botan::Kyber_Algos::expand_keypair().

◆ get_G()

virtual HashFunction & Botan::Kyber_Symmetric_Primitives::get_G ( ) const
protectedpure virtual

◆ get_H()

virtual HashFunction & Botan::Kyber_Symmetric_Primitives::get_H ( ) const
protectedpure virtual

◆ get_J()

virtual HashFunction & Botan::Kyber_Symmetric_Primitives::get_J ( ) const
protectedpure virtual

◆ get_KDF()

virtual HashFunction & Botan::Kyber_Symmetric_Primitives::get_KDF ( ) const
protectedpure virtual

◆ get_PRF()

virtual Botan::XOF & Botan::Kyber_Symmetric_Primitives::get_PRF ( std::span< const uint8_t > seed,
uint8_t nonce ) const
protectedpure virtual

◆ get_XOF()

virtual Botan::XOF & Botan::Kyber_Symmetric_Primitives::get_XOF ( std::span< const uint8_t > seed,
std::tuple< uint8_t, uint8_t > matrix_position ) const
protectedpure virtual

◆ H() [1/3]

KyberHashedCiphertext Botan::Kyber_Symmetric_Primitives::H ( StrongSpan< const KyberCompressedCiphertext > r) const
inline

Definition at line 38 of file kyber_symmetric_primitives.h.

38 {
40 }
T process(const uint8_t in[], size_t length)
Definition buf_comp.h:105
virtual HashFunction & get_H() const =0
Strong< std::vector< uint8_t >, struct KyberHashedCiphertext_ > KyberHashedCiphertext
Definition kyber_types.h:67

References get_H(), and Botan::Buffered_Computation::process().

◆ H() [2/3]

KyberMessage Botan::Kyber_Symmetric_Primitives::H ( StrongSpan< const KyberMessage > m) const
inline

Definition at line 35 of file kyber_symmetric_primitives.h.

35{ return get_H().process<KyberMessage>(m); }
Strong< secure_vector< uint8_t >, struct KyberMessage_ > KyberMessage
Random message value to be encrypted by the CPA-secure Kyber encryption scheme.
Definition kyber_types.h:45

References get_H(), and Botan::Buffered_Computation::process().

◆ H() [3/3]

KyberHashedPublicKey Botan::Kyber_Symmetric_Primitives::H ( StrongSpan< const KyberSerializedPublicKey > pk) const
inline

Definition at line 42 of file kyber_symmetric_primitives.h.

42 {
44 }
Strong< std::vector< uint8_t >, struct KyberHashedPublicKey_ > KyberHashedPublicKey
Hash value of the serialized public key.
Definition kyber_types.h:60

References get_H(), and Botan::Buffered_Computation::process().

◆ J()

KyberSharedSecret Botan::Kyber_Symmetric_Primitives::J ( StrongSpan< const KyberImplicitRejectionValue > rejection_value,
StrongSpan< const KyberCompressedCiphertext > ciphertext ) const
inline

Definition at line 60 of file kyber_symmetric_primitives.h.

61 {
62 auto& j = get_J();
63 j.update(rejection_value);
64 j.update(ciphertext);
65 return j.final<KyberSharedSecret>();
66 }
virtual HashFunction & get_J() const =0
Strong< secure_vector< uint8_t >, struct KyberSharedSecret_ > KyberSharedSecret
Shared secret value generated during encapsulation and recovered during decapsulation.
Definition kyber_types.h:54

References get_J().

◆ KDF()

void Botan::Kyber_Symmetric_Primitives::KDF ( StrongSpan< KyberSharedSecret > out,
StrongSpan< const KyberSharedSecret > shared_secret,
StrongSpan< const KyberHashedCiphertext > hashed_ciphertext ) const
inline

Definition at line 69 of file kyber_symmetric_primitives.h.

71 {
72 auto& kdf = get_KDF();
73 kdf.update(shared_secret);
74 kdf.update(hashed_ciphertext);
75 kdf.final(out);
76 }
virtual HashFunction & get_KDF() const =0

References get_KDF().

◆ PRF()

KyberSamplingRandomness Botan::Kyber_Symmetric_Primitives::PRF ( KyberSigmaOrEncryptionRandomness seed,
const uint8_t nonce,
const size_t outlen ) const
inline

Definition at line 78 of file kyber_symmetric_primitives.h.

80 {
81 auto bare_seed_span = std::visit([&](const auto s) { return s.get(); }, seed);
82 return get_PRF(bare_seed_span, nonce).output<KyberSamplingRandomness>(outlen);
83 }
virtual Botan::XOF & get_PRF(std::span< const uint8_t > seed, uint8_t nonce) const =0
T output(size_t bytes)
Definition xof.h:155
Strong< secure_vector< uint8_t >, struct KyberSamplingRandomness_ > KyberSamplingRandomness
PRF value used for sampling of error polynomials.
Definition kyber_types.h:51

References get_PRF(), and Botan::XOF::output().

◆ seed_expansion_domain_separator()

virtual std::optional< std::array< uint8_t, 1 > > Botan::Kyber_Symmetric_Primitives::seed_expansion_domain_separator ( const KyberConstants & mode) const
protectedpure virtual

◆ XOF()

Botan::XOF & Botan::Kyber_Symmetric_Primitives::XOF ( StrongSpan< const KyberSeedRho > seed,
std::tuple< uint8_t, uint8_t > matrix_position ) const
inline

Definition at line 85 of file kyber_symmetric_primitives.h.

85 {
86 return get_XOF(seed, matrix_position);
87 }
virtual Botan::XOF & get_XOF(std::span< const uint8_t > seed, std::tuple< uint8_t, uint8_t > matrix_position) const =0

References get_XOF().

Referenced by Botan::Kyber_Algos::sample_matrix().


The documentation for this class was generated from the following file: