1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
package eddilithium2_test
import (
"encoding/binary"
"testing"
"github.com/cloudflare/circl/sign/eddilithium2"
)
func BenchmarkVerify(b *testing.B) {
// Note that Dilithium precomputes quite a bit during Unpacking/Keygen
// instead of at the moment of verification (as compared to the reference
// implementation. A fair comparison thus should sum verification
// times with unpacking times.)
var seed [32]byte
var msg [8]byte
var sig [eddilithium2.SignatureSize]byte
pk, sk := eddilithium2.NewKeyFromSeed(&seed)
eddilithium2.SignTo(sk, msg[:], sig[:])
b.ResetTimer()
for i := 0; i < b.N; i++ {
// We should generate a new signature for every verify attempt,
// as this influences the time a little bit. This difference, however,
// is small and generating a new signature in between creates a lot
// pressure on the allocator which makes an accurate measurement hard.
eddilithium2.Verify(pk, msg[:], sig[:])
}
}
func BenchmarkSign(b *testing.B) {
// Note that Dilithium precomputes quite a bit during Unpacking/Keygen
// instead of at the moment of signing (as compared to the reference
// implementation. A fair comparison thus should sum sign times with
// unpacking times.)
var seed [32]byte
var msg [8]byte
var sig [eddilithium2.SignatureSize]byte
_, sk := eddilithium2.NewKeyFromSeed(&seed)
b.ResetTimer()
for i := 0; i < b.N; i++ {
binary.LittleEndian.PutUint64(msg[:], uint64(i))
eddilithium2.SignTo(sk, msg[:], sig[:])
}
}
func BenchmarkGenerateKey(b *testing.B) {
var seed [32]byte
for i := 0; i < b.N; i++ {
binary.LittleEndian.PutUint64(seed[:], uint64(i))
eddilithium2.NewKeyFromSeed(&seed)
}
}
func BenchmarkPublicFromPrivate(b *testing.B) {
var seed [32]byte
for i := 0; i < b.N; i++ {
b.StopTimer()
binary.LittleEndian.PutUint64(seed[:], uint64(i))
_, sk := eddilithium2.NewKeyFromSeed(&seed)
b.StartTimer()
sk.Public()
}
}
func TestSignThenVerifyAndPkSkPacking(t *testing.T) {
var seed [eddilithium2.SeedSize]byte
var sig [eddilithium2.SignatureSize]byte
var msg [8]byte
var pkb [eddilithium2.PublicKeySize]byte
var skb [eddilithium2.PrivateKeySize]byte
var pk2 eddilithium2.PublicKey
var sk2 eddilithium2.PrivateKey
for i := uint64(0); i < 100; i++ {
binary.LittleEndian.PutUint64(seed[:], i)
pk, sk := eddilithium2.NewKeyFromSeed(&seed)
for j := uint64(0); j < 10; j++ {
binary.LittleEndian.PutUint64(msg[:], j)
eddilithium2.SignTo(sk, msg[:], sig[:])
if !eddilithium2.Verify(pk, msg[:], sig[:]) {
t.Fatal()
}
}
pk.Pack(&pkb)
pk2.Unpack(&pkb)
if !pk.Equal(&pk2) {
t.Fatal()
}
sk.Pack(&skb)
sk2.Unpack(&skb)
if !sk.Equal(&sk2) {
t.Fatal()
}
}
}
func TestPublicFromPrivate(t *testing.T) {
var seed [eddilithium2.SeedSize]byte
for i := uint64(0); i < 100; i++ {
binary.LittleEndian.PutUint64(seed[:], i)
pk, sk := eddilithium2.NewKeyFromSeed(&seed)
pk2 := sk.Public().(*eddilithium2.PublicKey)
var pkb1, pkb2 [eddilithium2.PublicKeySize]byte
pk.Pack(&pkb1)
pk2.Pack(&pkb2)
if pkb1 != pkb2 {
t.Fatal()
}
}
}
|
