Add real CI for ML-KEM

.github/workflows/ml-kem.yml

@@ -23,32 +23,30 @@ jobs:
     with:
       msrv: 1.74.0
 
-# TODO
-#  no_std:
-#    needs: set-msrv
-#    runs-on: ubuntu-latest
-#    strategy:
-#      matrix:
-#        rust:
-#          - ${{needs.set-msrv.outputs.msrv}}
-#          - stable
-#        target:
-#          - thumbv7em-none-eabi
-#          - wasm32-unknown-unknown
-#    steps:
-#      - uses: actions/checkout@v4
-#      - uses: RustCrypto/actions/cargo-cache@master
-#      - uses: dtolnay/rust-toolchain@master
-#        with:
-#          toolchain: ${{ matrix.rust }}
-#          targets: ${{ matrix.target }}
-#      - run: cargo build --no-default-features --target ${{ matrix.target }}
+  no_std:
+    needs: set-msrv
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        rust:
+          - ${{needs.set-msrv.outputs.msrv}}
+          - stable
+        target:
+          - thumbv7em-none-eabi
+          - wasm32-unknown-unknown
+    steps:
+      - uses: actions/checkout@v4
+      - uses: RustCrypto/actions/cargo-cache@master
+      - uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: ${{ matrix.rust }}
+          targets: ${{ matrix.target }}
+      - run: cargo build --no-default-features --target ${{ matrix.target }}
 
-# TODO
-#  minimal-versions:
-#    uses: RustCrypto/actions/.github/workflows/minimal-versions.yml@master
-#    with:
-#      working-directory: ${{ github.workflow }}
+  minimal-versions:
+    uses: RustCrypto/actions/.github/workflows/minimal-versions.yml@master
+    with:
+      working-directory: ${{ github.workflow }}
 
   test:
     needs: set-msrv
@@ -64,11 +62,9 @@ jobs:
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: ${{ matrix.rust }}
-      - run: cargo build --all-features
-      # TODO(tarcieri): remove cargo build, run cargo test
-      #- run: cargo test --no-default-features
-      #- run: cargo test
-      #- run: cargo test --all-features
+      - run: cargo test --no-default-features
+      - run: cargo test
+      - run: cargo test --all-features
 
 # TODO(tarcieri): miri
 #  miri:

ml-kem/Cargo.toml

@@ -10,10 +10,8 @@ default = []
 deterministic = [] # Expose deterministic generation and encapsulation functions
 
 [dependencies]
-const-default = "1.0.0"
-crypto-common = { version = "0.1.6", features = ["getrandom"] }
-generic-array = { version = "1.0.0", features = ["const-default"] }
 hybrid-array = { version = "0.2.0-rc.6" }
+rand_core = "0.6.4"
 sha3 = "0.10.8"
 
 [dev-dependencies]

ml-kem/src/crypto.rs

@@ -1,7 +1,7 @@
 #![allow(dead_code)]
 
-use crypto_common::rand_core::CryptoRngCore;
 use hybrid_array::{Array, ArraySize};
+use rand_core::CryptoRngCore;
 use sha3::{
     digest::{ExtendableOutput, Update, XofReader},
     Digest, Sha3_256, Sha3_512, Shake128, Shake256,

ml-kem/src/kem.rs

@@ -1,6 +1,6 @@
 use core::marker::PhantomData;
-use crypto_common::rand_core::CryptoRngCore;
 use hybrid_array::typenum::U32;
+use rand_core::CryptoRngCore;
 
 use crate::crypto::{rand, G, H, J};
 use crate::param::{DecapsulationKeySize, EncapsulationKeySize, EncodedCiphertext, KemParams};

ml-kem/src/lib.rs

@@ -56,11 +56,11 @@ pub mod kem;
 mod param;
 
 use core::fmt::Debug;
-use crypto_common::rand_core::CryptoRngCore;
 use hybrid_array::{
     typenum::{U10, U11, U2, U3, U4, U5},
     Array,
 };
+use rand_core::CryptoRngCore;
 
 #[cfg(feature = "deterministic")]
 pub use util::B32;
@@ -132,10 +132,25 @@ pub trait KemCore {
     type CiphertextSize: ArraySize;
 
     /// A decapsulation key for this KEM
-    type DecapsulationKey: Decapsulate<Ciphertext<Self>, SharedKey<Self>> + Debug + PartialEq;
+    type DecapsulationKey: Decapsulate<Ciphertext<Self>, SharedKey<Self>>
+        + EncodedSizeUser
+        + Debug
+        + PartialEq;
 
+    #[cfg(not(feature = "deterministic"))]
     /// An encapsulation key for this KEM
-    type EncapsulationKey: Encapsulate<Ciphertext<Self>, SharedKey<Self>> + Debug + PartialEq;
+    type EncapsulationKey: Encapsulate<Ciphertext<Self>, SharedKey<Self>>
+        + EncodedSizeUser
+        + Debug
+        + PartialEq;
+
+    #[cfg(feature = "deterministic")]
+    /// An encapsulation key for this KEM
+    type EncapsulationKey: Encapsulate<Ciphertext<Self>, SharedKey<Self>>
+        + EncapsulateDeterministic<Ciphertext<Self>, SharedKey<Self>>
+        + EncodedSizeUser
+        + Debug
+        + PartialEq;
 
     /// Generate a new (decapsulation, encapsulation) key pair
     fn generate(rng: &mut impl CryptoRngCore) -> (Self::DecapsulationKey, Self::EncapsulationKey);

ml-kem/tests/vectors.rs

@@ -1,6 +1,6 @@
 #![cfg(feature = "deterministic")]
 
-use generic_array::GenericArray;
+use hybrid_array::Array;
 use ml_kem::*;
 
 pub struct GenerateVector {
@@ -12,8 +12,8 @@ pub struct GenerateVector {
 
 impl GenerateVector {
     pub fn verify<K: KemCore>(&self) {
-        let d = GenericArray::from_slice(&self.d);
-        let z = GenericArray::from_slice(&self.z);
+        let d = Array::from_slice(&self.d);
+        let z = Array::from_slice(&self.z);
         let (dk, ek) = K::generate_deterministic(d, z);
         assert_eq!(dk.as_bytes().as_slice(), self.dk);
         assert_eq!(ek.as_bytes().as_slice(), self.ek);
@@ -35,10 +35,10 @@ pub struct EncapsulateVector {
 
 impl EncapsulateVector {
     pub fn verify<K: KemCore>(&self) {
-        let m = GenericArray::from_slice(&self.m);
+        let m = Array::from_slice(&self.m);
         let ek_bytes = Encoded::<K::EncapsulationKey>::from_slice(self.ek);
         let ek = K::EncapsulationKey::from_bytes(ek_bytes);
-        let (k, c) = ek.encapsulate_deterministic(m);
+        let (c, k) = ek.encapsulate_deterministic(m).unwrap();
         assert_eq!(k.as_slice(), &self.k);
         assert_eq!(c.as_slice(), self.c);
     }
@@ -56,7 +56,7 @@ impl DecapsulateVector {
         let dk = K::DecapsulationKey::from_bytes(dk_bytes);
 
         let c_bytes = Ciphertext::<K>::from_slice(self.c);
-        let k = dk.decapsulate(c_bytes);
+        let k = dk.decapsulate(c_bytes).unwrap();
         assert_eq!(k.as_slice(), &self.k);
     }
 }