121 lines
2.3 KiB
C++
121 lines
2.3 KiB
C++
|
|
#include "codecrypt.h"
|
|
|
|
using namespace ccr;
|
|
using namespace ccr::mce;
|
|
|
|
#include "decoding.h"
|
|
|
|
int ccr::mce::generate (pubkey&pub, privkey&priv, prng&rng, uint m, uint t)
|
|
{
|
|
//finite field
|
|
priv.fld.create (m);
|
|
|
|
//goppa polynomial
|
|
priv.g.generate_random_irreducible (t, priv.fld, rng);
|
|
|
|
//check and generator matrix
|
|
matrix generator;
|
|
permutation hp;
|
|
priv.g.compute_goppa_check_matrix (priv.h, priv.fld);
|
|
|
|
for (;;) if (priv.h.create_goppa_generator
|
|
(generator, priv.hperm, rng) ) break;
|
|
|
|
//scramble matrix
|
|
matrix S;
|
|
S.generate_random_invertible (generator.height(), rng);
|
|
S.compute_inversion (priv.Sinv);
|
|
|
|
//scramble permutation
|
|
permutation P;
|
|
P.generate_random (generator.width(), rng);
|
|
P.compute_inversion (priv.Pinv);
|
|
|
|
//public key
|
|
pub.t = t;
|
|
S.mult (generator);
|
|
P.permute (S, pub.G);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int pubkey::encrypt (const bvector& in, bvector&out, prng&rng)
|
|
{
|
|
uint s = cipher_size();
|
|
if (t > s) return 1;
|
|
if (in.size() != plain_size() ) return 2;
|
|
|
|
//make a codeword
|
|
G.mult_vecT_left (in, out);
|
|
|
|
//add error vector
|
|
bvector e;
|
|
e.resize (s, 0);
|
|
for (uint n = t; n > 0;) {
|
|
uint p = rng.random (s);
|
|
if (!e[p]) {
|
|
e[p] = 1;
|
|
--n;
|
|
}
|
|
}
|
|
out.add (e);
|
|
return 0;
|
|
}
|
|
|
|
int privkey::decrypt (const bvector&in, bvector&out)
|
|
{
|
|
//remove the P permutation
|
|
bvector not_permuted;
|
|
Pinv.permute (in, not_permuted);
|
|
|
|
//prepare for decoding
|
|
permutation hpermInv;
|
|
hperm.compute_inversion (hpermInv);
|
|
bvector canonical, syndrome;
|
|
hpermInv.permute (not_permuted, canonical);
|
|
h.mult_vec_right (canonical, syndrome);
|
|
|
|
//decode
|
|
bvector ev;
|
|
syndrome_decode (syndrome, fld, g, sqInv, ev);
|
|
|
|
std::cout << "ERRORS " << ev;
|
|
//check the error vector. It should have exactly t == deg(g) errors
|
|
if ( (int) ev.hamming_weight() != g.degree() )
|
|
return 1;
|
|
|
|
//correct the errors
|
|
canonical.add (ev);
|
|
|
|
//shuffle back into systematic order
|
|
hperm.permute (canonical, not_permuted);
|
|
|
|
//get rid of redundancy bits
|
|
not_permuted.resize (Sinv.size() );
|
|
|
|
//unscramble the result
|
|
Sinv.mult_vec_right (not_permuted, out);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int privkey::prepare ()
|
|
{
|
|
g.compute_goppa_check_matrix (h, fld);
|
|
g.compute_square_root_matrix (sqInv, fld);
|
|
return 0;
|
|
}
|
|
|
|
int privkey::sign (const bvector&in, bvector&out, uint delta, uint h, prng&rng)
|
|
{
|
|
|
|
return -1; //TODO
|
|
}
|
|
|
|
int pubkey::verify (const bvector&in, const bvector&hash, uint delta, uint h)
|
|
{
|
|
|
|
return -1; //TODO
|
|
}
|