10 Commits

Author	SHA1	Message	Date
slontis	ac87f6b3a3	LMS: Coverity Fix 1659010 (Unused Value) ... This was a false positive in a test. The code has been reordered to make the flow clearer. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28030)	2025-07-15 07:53:24 -04:00
slontis	6b5fd48ee4	LMS code review fixups ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
slontis	e6c8110483	Add LMS evp_test using NIST ACVP test data. ... This covers all LMS algorithm parameter sets. The following changes were done to handle the tests: (1) Changed LMS to use OSSL_PKEY_PARAM_PUB_KEY instead of OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY for import/export. (There is no reason to have the encoded form for verify operations). (2) Fixed a bug for W=1 with truncated digests. The checksum was using a value of 8-w, which was off by 1 for this case. A value was added to the ots parameters that represents this value. (3) A check in evp_test for a NID was removed since LMS does not have OIDS (HSS does). (4) the unused PROPERTIES param was removed from the LMS keymanager. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
Pauli	34520fd545	lms_test: add key gen negative test ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
Pauli	57267e2bcf	lms: add negative tests ... For EVP_PKEY_sign_message_init and EVP_PKEY_paramgen_init. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
Pauli	dff36957a4	lms: add signing negative test ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
slontis	48af66aef7	Add LMS to the fips provider. ... This required the LMS keymanager to have an export function. The self test will be provided by HSS, which covers the LMS case. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	7be3137fb5	Add LMS Signature verification. ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	c64558ede8	Add LMS public key decoder. ... This uses OSSL_DECODER_CTX_new_for_pkey(). "XDR" can be specified for the input type, and the key type is "LMS" Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	2a6a2adc8d	Add base code to load a LMS public key. ... This loads a XDR encoded LMS public key. It adds a simple LMS keymanager to import this key. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00