crypto: Add 128 and 192 variants of SLH-DSA

Author: sverker

lib/crypto/c_src/pkey.c

@@ -109,6 +109,46 @@ struct pkey_type_t pkey_types[] = {
     },
 #endif
 #ifdef HAVE_SLH_DSA
+    {
+        .name.atom_str = "slh_dsa_shake_128s",
+        .evp_pkey_id = EVP_PKEY_SLH_DSA_SHAKE_128S,
+        .sign.alg_str = "SLH-DSA-SHAKE-128s"
+    },
+    {
+        .name.atom_str = "slh_dsa_shake_128f",
+        .evp_pkey_id = EVP_PKEY_SLH_DSA_SHAKE_128F,
+        .sign.alg_str = "SLH-DSA-SHAKE-128f"
+    },
+    {
+        .name.atom_str = "slh_dsa_sha2_128s",
+        .evp_pkey_id = EVP_PKEY_SLH_DSA_SHA2_128S,
+        .sign.alg_str = "SLH-DSA-SHA2-128s"
+    },
+    {
+        .name.atom_str = "slh_dsa_sha2_128f",
+        .evp_pkey_id = EVP_PKEY_SLH_DSA_SHA2_128F,
+        .sign.alg_str = "SLH-DSA-SHA2-128f"
+    },
+    {
+        .name.atom_str = "slh_dsa_shake_192s",
+        .evp_pkey_id = EVP_PKEY_SLH_DSA_SHAKE_192S,
+        .sign.alg_str = "SLH-DSA-SHAKE-192s"
+    },
+    {
+        .name.atom_str = "slh_dsa_shake_192f",
+        .evp_pkey_id = EVP_PKEY_SLH_DSA_SHAKE_192F,
+        .sign.alg_str = "SLH-DSA-SHAKE-192f"
+    },
+    {
+        .name.atom_str = "slh_dsa_sha2_192s",
+        .evp_pkey_id = EVP_PKEY_SLH_DSA_SHA2_192S,
+        .sign.alg_str = "SLH-DSA-SHA2-192s"
+    },
+    {
+        .name.atom_str = "slh_dsa_sha2_192f",
+        .evp_pkey_id = EVP_PKEY_SLH_DSA_SHA2_192F,
+        .sign.alg_str = "SLH-DSA-SHA2-192f"
+    },
     {
         .name.atom_str = "slh_dsa_shake_256s",
         .evp_pkey_id = EVP_PKEY_SLH_DSA_SHAKE_256S,

lib/crypto/src/crypto.erl

@@ -2443,7 +2443,9 @@ rand_seed_nif(_Seed) -> ?nif_stub.
 -type mldsa() :: mldsa44 | mldsa65 | mldsa87.
 -type mldsa_private() :: {seed | expandedkey, binary()}.
 -type mldsa_public() :: binary().
--type slh_dsa() :: slh_dsa_shake_256s | slh_dsa_shake_256f | slh_dsa_sha2_256s | slh_dsa_sha2_256f.
+-type slh_dsa() :: slh_dsa_shake_128s | slh_dsa_shake_128f | slh_dsa_sha2_128s | slh_dsa_sha2_128f
+                 | slh_dsa_shake_192s | slh_dsa_shake_192f | slh_dsa_sha2_192s | slh_dsa_sha2_192f
+                 | slh_dsa_shake_256s | slh_dsa_shake_256f | slh_dsa_sha2_256s | slh_dsa_sha2_256f.
 -type slh_dsa_private() :: binary().
 -type slh_dsa_public() :: binary().
 
@@ -2551,6 +2553,14 @@ pkey_sign_nif(_Algorithm, _Type, _Digest, _Key, _Options) -> ?nif_stub.
 
 pkey_sign_heavy_nif(_Algorithm, _Type, _Digest, _Key, _Options) -> ?nif_stub.
 
+is_heavy(slh_dsa_shake_128s) -> true;
+is_heavy(slh_dsa_shake_128f) -> true;
+is_heavy(slh_dsa_sha2_128s) -> true;
+is_heavy(slh_dsa_sha2_128f) -> true;
+is_heavy(slh_dsa_shake_192s) -> true;
+is_heavy(slh_dsa_shake_192f) -> true;
+is_heavy(slh_dsa_sha2_192s) -> true;
+is_heavy(slh_dsa_sha2_192f) -> true;
 is_heavy(slh_dsa_shake_256s) -> true;
 is_heavy(slh_dsa_shake_256f) -> true;
 is_heavy(slh_dsa_sha2_256s) -> true;

lib/crypto/test/crypto_SUITE.erl

@@ -1283,7 +1283,7 @@ sign_verify_oqs(_Config) ->
                  true = lists:member(Alg, Supported),
                  sign_verify_oqs_do(Alg)
              end
-             || Alg <- mldsa_sign_ciphers()],
+             || Alg <- quantum_sign_ciphers()],
             ok
     end.
 
@@ -1301,8 +1301,19 @@ sign_verify_oqs_do(Alg) ->
     ok.
 
 %% Supported by OpenSSL 3.5
-mldsa_sign_ciphers() ->
+quantum_sign_ciphers() ->
     [mldsa44, mldsa65, mldsa87,
+
+     slh_dsa_shake_128s,
+     slh_dsa_shake_128f,
+     slh_dsa_sha2_128s,
+     slh_dsa_sha2_128f,
+
+     slh_dsa_shake_192s,
+     slh_dsa_shake_192f,
+     slh_dsa_sha2_192s,
+     slh_dsa_sha2_192f,
+
      slh_dsa_shake_256s,
      slh_dsa_shake_256f,
      slh_dsa_sha2_256s,