24#define MBEDTLS_ERR_LMS_BAD_INPUT_DATA -0x0011
25#define MBEDTLS_ERR_LMS_OUT_OF_PRIVATE_KEYS -0x0013
26#define MBEDTLS_ERR_LMS_VERIFY_FAILED -0x0015
27#define MBEDTLS_ERR_LMS_ALLOC_FAILED -0x0017
28#define MBEDTLS_ERR_LMS_BUFFER_TOO_SMALL -0x0019
31#define MBEDTLS_LMOTS_N_HASH_LEN_MAX (32u)
32#define MBEDTLS_LMOTS_P_SIG_DIGIT_COUNT_MAX (34u)
33#define MBEDTLS_LMOTS_N_HASH_LEN(type) ((type) == MBEDTLS_LMOTS_SHA256_N32_W8 ? 32u : 0)
34#define MBEDTLS_LMOTS_I_KEY_ID_LEN (16u)
35#define MBEDTLS_LMOTS_Q_LEAF_ID_LEN (4u)
36#define MBEDTLS_LMOTS_TYPE_LEN (4u)
37#define MBEDTLS_LMOTS_P_SIG_DIGIT_COUNT(type) ((type) == MBEDTLS_LMOTS_SHA256_N32_W8 ? 34u : 0)
38#define MBEDTLS_LMOTS_C_RANDOM_VALUE_LEN(type) (MBEDTLS_LMOTS_N_HASH_LEN(type))
40#define MBEDTLS_LMOTS_SIG_LEN(type) (MBEDTLS_LMOTS_TYPE_LEN + \
41 MBEDTLS_LMOTS_C_RANDOM_VALUE_LEN(type) + \
42 (MBEDTLS_LMOTS_P_SIG_DIGIT_COUNT(type) * \
43 MBEDTLS_LMOTS_N_HASH_LEN(type)))
46#define MBEDTLS_LMS_TYPE_LEN (4)
47#define MBEDTLS_LMS_H_TREE_HEIGHT(type) ((type) == MBEDTLS_LMS_SHA256_M32_H10 ? 10u : 0)
52#define MBEDTLS_LMS_M_NODE_BYTES(type) ((type) == MBEDTLS_LMS_SHA256_M32_H10 ? 32 : 0)
53#define MBEDTLS_LMS_M_NODE_BYTES_MAX 32
55#define MBEDTLS_LMS_SIG_LEN(type, otstype) (MBEDTLS_LMOTS_Q_LEAF_ID_LEN + \
56 MBEDTLS_LMOTS_SIG_LEN(otstype) + \
57 MBEDTLS_LMS_TYPE_LEN + \
58 (MBEDTLS_LMS_H_TREE_HEIGHT(type) * \
59 MBEDTLS_LMS_M_NODE_BYTES(type)))
61#define MBEDTLS_LMS_PUBLIC_KEY_LEN(type) (MBEDTLS_LMS_TYPE_LEN + \
62 MBEDTLS_LMOTS_TYPE_LEN + \
63 MBEDTLS_LMOTS_I_KEY_ID_LEN + \
64 MBEDTLS_LMS_M_NODE_BYTES(type))
128#if defined(MBEDTLS_LMS_PRIVATE)
152} mbedtls_lmots_private_t;
199#if defined(MBEDTLS_LMS_PRIVATE)
232} mbedtls_lms_private_t;
271 const unsigned char *key,
size_t key_size);
297 unsigned char *key,
size_t key_size,
321 const unsigned char *msg,
size_t msg_size,
322 const unsigned char *sig,
size_t sig_size);
324#if defined(MBEDTLS_LMS_PRIVATE)
330void mbedtls_lms_private_init(mbedtls_lms_private_t *ctx);
338void mbedtls_lms_private_free(mbedtls_lms_private_t *ctx);
364int mbedtls_lms_generate_private_key(mbedtls_lms_private_t *ctx,
367 int (*f_rng)(
void *,
unsigned char *,
size_t),
368 void *p_rng,
const unsigned char *seed,
390 const mbedtls_lms_private_t *priv_ctx);
429int mbedtls_lms_sign(mbedtls_lms_private_t *ctx,
430 int (*f_rng)(
void *,
unsigned char *,
size_t),
431 void *p_rng,
const unsigned char *msg,
432 unsigned int msg_size,
unsigned char *sig,
size_t sig_size,
int mbedtls_lms_export_public_key(const mbedtls_lms_public_t *ctx, unsigned char *key, size_t key_size, size_t *key_len)
This function exports an LMS public key from a LMS public context that already contains a public key.
#define MBEDTLS_LMOTS_I_KEY_ID_LEN
#define MBEDTLS_LMOTS_P_SIG_DIGIT_COUNT_MAX
mbedtls_lmots_algorithm_type_t
@ MBEDTLS_LMOTS_SHA256_N32_W8
void mbedtls_lms_public_free(mbedtls_lms_public_t *ctx)
This function uninitializes an LMS public context.
int mbedtls_lms_verify(const mbedtls_lms_public_t *ctx, const unsigned char *msg, size_t msg_size, const unsigned char *sig, size_t sig_size)
This function verifies a LMS signature, using a LMS context that contains a public key.
void mbedtls_lms_public_init(mbedtls_lms_public_t *ctx)
This function initializes an LMS public context.
#define MBEDTLS_LMOTS_N_HASH_LEN_MAX
mbedtls_lms_algorithm_type_t
@ MBEDTLS_LMS_SHA256_M32_H10
int mbedtls_lms_import_public_key(mbedtls_lms_public_t *ctx, const unsigned char *key, size_t key_size)
This function imports an LMS public key into a public LMS context.
#define MBEDTLS_LMS_M_NODE_BYTES_MAX
#define MBEDTLS_LMOTS_Q_LEAF_ID_LEN
Build-time configuration info.
Macro wrapper for struct's members.
#define MBEDTLS_PRIVATE(member)