crypt/wolfssl
1
0
Fork 0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00
Code Activity

Build LMS and XMSS verify-only in FIPS v7 per SP 800-208 sec 8.1

Browse Source
This commit is contained in:
kaleb-himes
2026-10-12 15:42:33 -06:00
committed by Paul Adelsbach
parent f5c98d7d7f
commit 786fa87419
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
IDE/WIN-PQ-FIPSv7/user_settings.h
View File

@@ -215,7 +215,9 @@
#define WOLFSSL_HAVE_LMS /* LMS (SP 800-208) */
#define WOLFSSL_LMS_SHA256_192
#define WOLFSSL_LMS_SHAKE256
#define WOLFSSL_LMS_VERIFY_ONLY /* SP 800-208 sec 8.1 */
#define WOLFSSL_HAVE_XMSS /* XMSS (SP 800-208) */
#define WOLFSSL_XMSS_VERIFY_ONLY /* SP 800-208 sec 8.1 */
#define WOLFSSL_HAVE_SLHDSA /* SLH-DSA (FIPS 205) */
#define WOLFSSL_WC_SLHDSA
#define WOLFSSL_SLHDSA_PARAM_128S

3
configure.ac
View File

@@ -7834,6 +7834,9 @@ AS_CASE([$FIPS_VERSION],
[ENABLED_LMS="yes"])
# LMS: enable SHA-256/192 and SHAKE256 parameter sets for FIPS v7
AM_CFLAGS="$AM_CFLAGS -DWOLFSSL_LMS_SHA256_192 -DWOLFSSL_LMS_SHAKE256"
# SP 800-208 sec 8.1: LMS/XMSS keygen and signing are validated only in
# hardware modules; a software module verifies only (sec 8.2).
AM_CFLAGS="$AM_CFLAGS -DWOLFSSL_LMS_VERIFY_ONLY -DWOLFSSL_XMSS_VERIFY_ONLY"
AS_IF([test "$ENABLED_SLHDSA" != "yes" &&
(test "$ENABLED_FIPS_DEV" != "yes" || test "$enable_slhdsa" != "no")],