mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-10-24 04:09:07 +03:00
69291355b6
The verify-only SLH-DSA benchmark only had a SHAKE-128s vector, because that is the only verify-only signature in wolfcrypt/test/test.c. Builds with only the SHA2 parameter sets showed no SLH-DSA row at all. Add a SHA2-128s vector: a deterministic, empty-context signature of "Hello World!" by the existing bench_slhdsa_sha2_128s_key.der. It was generated with OpenSSL 4.0.3; wolfSSL verifies it, rejects it once a message bit is flipped, and its own deterministic signature from the same key is byte-identical. gen-slhdsa-mldsa-certs.sh gains the step that produces it, and a rerun reproduces the committed files. The pq-all verify-only benchmark config enables sha2 and requires this row too. bench_slhdsa_verify() now takes the parameter set and vector. The row uses the full benchmark's name, SLH-DSA-SHA2-S, and takes its strength from the public key size, as the full benchmark does. Verify-only builds accept -slhdsa-sha2-128s when SHA2-128s is built. Tested on the host with --enable-slhdsa=yes,sha2,verify-only on its own, with --enable-smallstack and with --disable-rng, with sha2 only, with SHAKE only and 192f only (no SHA2 row, no warnings), and with the full sha2 build.