package mlkem

  1. Overview
  2. Docs
Pure OCaml implementation of FIPS 203 ML-KEM

Install 

dune-project
 Dependency

github.com Readme Changelog ISC License Edit opam file Versions (3)

Authors

  1. V
    Ville Vesilehto <ville@vesilehto.fi>

Maintainers

  1. V
    Ville Vesilehto <ville@vesilehto.fi>

Sources

v0.2.0.tar.gz
md5=8134ec4c6a35345a91223c34d5a133db
sha512=617282d33c5fb909be5b9b2e4b2c1830447c80206ad1e8f3ddb56459c40e9ff810489fa3ec927ffaa61148f826d81e71520816badce7bbebfde08a61eeea0b85

doc/mlkem.for_testing/Mlkem_for_testing/index.html

Module Mlkem_for_testingSource

Deterministic FIPS 203 entry points for known-answer testing only.

This library exposes test entropy and expanded decapsulation keys. It must not be used by production protocols. Use the corresponding module from Mlkem instead.

Sourceval sha3_256 : string -> string
Sourceval sha3_512 : string -> string
Sourceval shake128 : output_length:int -> string -> string
Sourceval shake256 : output_length:int -> string -> string

Internal hash entry points exposed for primitive known-answer tests.

Sourceval ct_equal : string -> string -> int

The comparison behind implicit rejection: 1 if the two strings are equal, 0 otherwise, including when their lengths differ.

Sourceval keygen_512 : d:string -> z:string -> (string * string, Mlkem.Mlkem512.error) result
Sourceval encapsulate_512 : encapsulation_key:string -> randomness:string -> (string * string, Mlkem.Mlkem512.error) result
Sourceval decapsulate_512 : expanded_decapsulation_key:string -> ciphertext:string -> (string, Mlkem.Mlkem512.error) result
Sourceval keygen_768 : d:string -> z:string -> (string * string, Mlkem.Mlkem768.error) result

Returns (expanded_decapsulation_key, encapsulation_key). Both d and z must be 32 bytes.

Sourceval encapsulate_768 : encapsulation_key:string -> randomness:string -> (string * string, Mlkem.Mlkem768.error) result

Returns (ciphertext, shared_secret) using the supplied 32-byte test randomness.

Sourceval decapsulate_768 : expanded_decapsulation_key:string -> ciphertext:string -> (string, Mlkem.Mlkem768.error) result

Decapsulates an ACVP-format 2400-byte key.

Sourceval keygen_1024 : d:string -> z:string -> (string * string, Mlkem.Mlkem1024.error) result
Sourceval encapsulate_1024 : encapsulation_key:string -> randomness:string -> (string * string, Mlkem.Mlkem1024.error) result
Sourceval decapsulate_1024 : expanded_decapsulation_key:string -> ciphertext:string -> (string, Mlkem.Mlkem1024.error) result