open-quantum-safe / liboqs / 27785308182

85%

Build Type

push

github

Committed by web-flow

Commit Message

Initial optimization barrier OQS_MEM_BLACK_BOX impl (#2431)

* Set CMAKE_BUILD_TYPE default; document CMAKE_BUILD_TYPE and escape hatch

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Add PoC binary to test targets

Amazon Linux 2023 ships with Clang 15 by default. PoC requires Clang 17
or above to work. Install with `sudo dnf install clang18` and use
CMAKE_C_COMPILER to specify clang-18 as the compiler.

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Wishlist

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Parameterize KEM name and probe location

I can parameterize control location, too, but 63 is a safe value for KEM
secret keys since rejection symbols are probably 32 bytes in length

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Shell script to sweep through all KEMs

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Dummy platform implementation

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Resolved type version warnings

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Fixed assembly typo

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Print raw statistics to CSV

Signed-off-by: Ganyu (Bruce) Xu <g66xu@uwaterloo.ca>

* Added Python script to analyze raw statistics

Python script is generated by Claude using Sonnet 4.6 extended. The
prompt:

Please help me write a Python script to perform statistical analysis
that determines whether two sets of samples come from the same
distribution. The input CSV file has header "epoch,sample,good,probe,ctrl`.

Some context for the data:
- We are trying to detect timing side channel in implementation of
  key encapsulation mechanisms (e.g. FrodoKEM). In some KEM schemes,
  the secret key contains a rejection symbol. In a faulty implementation,
  if the input ciphertext to a decapsulation routine is valid, then
  the rejection symbol is not used, and if the input ciphertext is
  invalid, then the rejection symbol is used and thus likely brough... (continued)

Coverage Stats

1 of 1 new or added line in 1 file covered. (100.0%)

251 existing lines in 16 files now uncovered.

193555 of 228917 relevant lines covered (84.55%)

9014710.59 hits per line