lc_kyber.h

Go to the documentation of this file.

/*
 * Copyright (C) 2024 - 2025, Stephan Mueller <smueller@chronox.de>
 *
 * License: see LICENSE file in root directory
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ALL OF
 * WHICH ARE HEREBY DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
 * OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
 * USE OF THIS SOFTWARE, EVEN IF NOT ADVISED OF THE POSSIBILITY OF SUCH
 * DAMAGE.
 */
 
#ifndef LC_KYBER_H
#define LC_KYBER_H
 
#include "ext_headers.h"
 
#if defined __has_include
#if __has_include("lc_kyber_1024.h")
#include "lc_kyber_1024.h"
#define LC_KYBER_1024_ENABLED
#endif
#if __has_include("lc_kyber_768.h")
#include "lc_kyber_768.h"
#define LC_KYBER_768_ENABLED
#endif
#if __has_include("lc_kyber_512.h")
#include "lc_kyber_512.h"
#define LC_KYBER_512_ENABLED
#endif
#else
#error "Compiler misses __has_include"
#endif
 
#ifdef __cplusplus
extern "C" {
#endif
 
enum lc_kyber_type {
        LC_KYBER_UNKNOWN, 
        LC_KYBER_1024, 
        LC_KYBER_768, 
        LC_KYBER_512, 
};

 
/************************************* KEM ************************************/
struct lc_kyber_sk {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_sk sk_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_sk sk_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_sk sk_512;
#endif
        } key;
};

struct lc_kyber_pk {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_pk pk_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_pk pk_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_pk pk_512;
#endif
        } key;
};

struct lc_kyber_ct {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_ct ct_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_ct ct_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_ct ct_512;
#endif
        } key;
};

struct lc_kyber_ss {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_ss ss_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_ss ss_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_ss ss_512;
#endif
        } key;
};

enum lc_kyber_type lc_kyber_sk_type(const struct lc_kyber_sk *sk);

enum lc_kyber_type lc_kyber_pk_type(const struct lc_kyber_pk *pk);

enum lc_kyber_type lc_kyber_ct_type(const struct lc_kyber_ct *ct);

enum lc_kyber_type lc_kyber_ss_type(const struct lc_kyber_ss *ss);

LC_PURE unsigned int lc_kyber_sk_size(enum lc_kyber_type kyber_type);

LC_PURE unsigned int lc_kyber_pk_size(enum lc_kyber_type kyber_type);

LC_PURE unsigned int lc_kyber_ct_size(enum lc_kyber_type kyber_type);

LC_PURE unsigned int lc_kyber_ss_size(enum lc_kyber_type kyber_type);

int lc_kyber_sk_load(struct lc_kyber_sk *sk, const uint8_t *src_key,
                     size_t src_key_len);

int lc_kyber_pk_load(struct lc_kyber_pk *pk, const uint8_t *src_key,
                     size_t src_key_len);

int lc_kyber_ct_load(struct lc_kyber_ct *ct, const uint8_t *src_key,
                     size_t src_key_len);

int lc_kyber_ss_load(struct lc_kyber_ss *ss, const uint8_t *src_key,
                     size_t src_key_len);

int lc_kyber_pct(const struct lc_kyber_pk *pk, const struct lc_kyber_sk *sk);

int lc_kyber_sk_ptr(uint8_t **kyber_key, size_t *kyber_key_len,
                    struct lc_kyber_sk *sk);

int lc_kyber_pk_ptr(uint8_t **kyber_key, size_t *kyber_key_len,
                    struct lc_kyber_pk *pk);

int lc_kyber_ct_ptr(uint8_t **kyber_ct, size_t *kyber_ct_len,
                    struct lc_kyber_ct *ct);

int lc_kyber_ss_ptr(uint8_t **kyber_ss, size_t *kyber_ss_len,
                    struct lc_kyber_ss *ss);

int lc_kyber_keypair(struct lc_kyber_pk *pk, struct lc_kyber_sk *sk,
                     struct lc_rng_ctx *rng_ctx, enum lc_kyber_type kyber_type);

int lc_kyber_keypair_from_seed(struct lc_kyber_pk *pk, struct lc_kyber_sk *sk,
                               const uint8_t *seed, size_t seedlen,
                               enum lc_kyber_type kyber_type);

int lc_kyber_enc(struct lc_kyber_ct *ct, struct lc_kyber_ss *ss,
                 const struct lc_kyber_pk *pk);

int lc_kyber_enc_kdf(struct lc_kyber_ct *ct, uint8_t *ss, size_t ss_len,
                     const struct lc_kyber_pk *pk);

int lc_kyber_dec(struct lc_kyber_ss *ss, const struct lc_kyber_ct *ct,
                 const struct lc_kyber_sk *sk);

int lc_kyber_dec_kdf(uint8_t *ss, size_t ss_len, const struct lc_kyber_ct *ct,
                     const struct lc_kyber_sk *sk);
 
/************************************* KEX ************************************/


int lc_kex_uake_initiator_init(struct lc_kyber_pk *pk_e_i,
                               struct lc_kyber_ct *ct_e_i,
                               struct lc_kyber_ss *tk, struct lc_kyber_sk *sk_e,
                               const struct lc_kyber_pk *pk_r);

int lc_kex_uake_responder_ss(struct lc_kyber_ct *ct_e_r, uint8_t *shared_secret,
                             size_t shared_secret_len, const uint8_t *kdf_nonce,
                             size_t kdf_nonce_len,
                             const struct lc_kyber_pk *pk_e_i,
                             const struct lc_kyber_ct *ct_e_i,
                             const struct lc_kyber_sk *sk_r);

int lc_kex_uake_initiator_ss(uint8_t *shared_secret, size_t shared_secret_len,
                             const uint8_t *kdf_nonce, size_t kdf_nonce_len,
                             const struct lc_kyber_ct *ct_e_r,
                             const struct lc_kyber_ss *tk,
                             const struct lc_kyber_sk *sk_e);


int lc_kex_ake_initiator_init(struct lc_kyber_pk *pk_e_i,
                              struct lc_kyber_ct *ct_e_i,
                              struct lc_kyber_ss *tk, struct lc_kyber_sk *sk_e,
                              const struct lc_kyber_pk *pk_r);

int lc_kex_ake_responder_ss(struct lc_kyber_ct *ct_e_r_1,
                            struct lc_kyber_ct *ct_e_r_2,
                            uint8_t *shared_secret, size_t shared_secret_len,
                            const uint8_t *kdf_nonce, size_t kdf_nonce_len,
                            const struct lc_kyber_pk *pk_e_i,
                            const struct lc_kyber_ct *ct_e_i,
                            const struct lc_kyber_sk *sk_r,
                            const struct lc_kyber_pk *pk_i);

int lc_kex_ake_initiator_ss(uint8_t *shared_secret, size_t shared_secret_len,
                            const uint8_t *kdf_nonce, size_t kdf_nonce_len,
                            const struct lc_kyber_ct *ct_e_r_1,
                            const struct lc_kyber_ct *ct_e_r_2,
                            const struct lc_kyber_ss *tk,
                            const struct lc_kyber_sk *sk_e,
                            const struct lc_kyber_sk *sk_i);
 
/************************************* IES ************************************/
 
#ifdef LC_KYBER_IES


int lc_kyber_ies_enc(const struct lc_kyber_pk *pk, struct lc_kyber_ct *ct,
                     const uint8_t *plaintext, uint8_t *ciphertext,
                     size_t datalen, const uint8_t *aad, size_t aadlen,
                     uint8_t *tag, size_t taglen, struct lc_aead_ctx *aead);

int lc_kyber_ies_enc_init(struct lc_aead_ctx *aead,
                          const struct lc_kyber_pk *pk, struct lc_kyber_ct *ct,
                          const uint8_t *aad, size_t aadlen);

int lc_kyber_ies_enc_update(struct lc_aead_ctx *aead, const uint8_t *plaintext,
                            uint8_t *ciphertext, size_t datalen);

int lc_kyber_ies_enc_final(struct lc_aead_ctx *aead, uint8_t *tag,
                           size_t taglen);

int lc_kyber_ies_dec(const struct lc_kyber_sk *sk, const struct lc_kyber_ct *ct,
                     const uint8_t *ciphertext, uint8_t *plaintext,
                     size_t datalen, const uint8_t *aad, size_t aadlen,
                     const uint8_t *tag, size_t taglen,
                     struct lc_aead_ctx *aead);

int lc_kyber_ies_dec_init(struct lc_aead_ctx *aead,
                          const struct lc_kyber_sk *sk,
                          const struct lc_kyber_ct *ct, const uint8_t *aad,
                          size_t aadlen);

int lc_kyber_ies_dec_update(struct lc_aead_ctx *aead, const uint8_t *ciphertext,
                            uint8_t *plaintext, size_t datalen);

int lc_kyber_ies_dec_final(struct lc_aead_ctx *aead, const uint8_t *tag,
                           size_t taglen);
 
#endif /* LC_KYBER_IES */
 
/****************************** Kyber X25510 KEM ******************************/
 
#ifdef LC_KYBER_X25519_KEM


struct lc_kyber_x25519_sk {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_x25519_sk sk_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_x25519_sk sk_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_x25519_sk sk_512;
#endif
        } key;
};

struct lc_kyber_x25519_pk {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_x25519_pk pk_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_x25519_pk pk_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_x25519_pk pk_512;
#endif
        } key;
};

struct lc_kyber_x25519_ct {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_x25519_ct ct_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_x25519_ct ct_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_x25519_ct ct_512;
#endif
        } key;
};

struct lc_kyber_x25519_ss {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_x25519_ss ss_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_x25519_ss ss_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_x25519_ss ss_512;
#endif
        } key;
};

enum lc_kyber_type lc_kyber_x25519_sk_type(const struct lc_kyber_x25519_sk *sk);

enum lc_kyber_type lc_kyber_x25519_pk_type(const struct lc_kyber_x25519_pk *pk);

enum lc_kyber_type lc_kyber_x25519_ct_type(const struct lc_kyber_x25519_ct *ct);

enum lc_kyber_type lc_kyber_x25519_ss_type(const struct lc_kyber_x25519_ss *ss);

LC_PURE
unsigned int lc_kyber_x25519_sk_size(enum lc_kyber_type kyber_type);

LC_PURE
unsigned int lc_kyber_x25519_pk_size(enum lc_kyber_type kyber_type);

LC_PURE
unsigned int lc_kyber_x25519_ct_size(enum lc_kyber_type kyber_type);

LC_PURE
unsigned int lc_kyber_x25519_ss_size(enum lc_kyber_type kyber_type);
 
int lc_kyber_x25519_sk_load(struct lc_kyber_x25519_sk *sk,
                            const uint8_t *kyber_src_key,
                            size_t kyber_src_key_len,
                            const uint8_t *x25519_src_key,
                            size_t x25519_src_key_len);
 
int lc_kyber_x25519_pk_load(struct lc_kyber_x25519_pk *pk,
                            const uint8_t *kyber_src_key,
                            size_t kyber_src_key_len,
                            const uint8_t *x25519_src_key,
                            size_t x25519_src_key_len);
 
int lc_kyber_x25519_ct_load(struct lc_kyber_x25519_ct *ct,
                            const uint8_t *kyber_src_ct,
                            size_t kyber_src_ct_len,
                            const uint8_t *x25519_rem_pub_key,
                            size_t x25519_rem_pub_len);
 
int lc_kyber_x25519_ss_load(struct lc_kyber_x25519_ss *ss,
                            const uint8_t *kyber_src_ss,
                            size_t kyber_src_ss_len, const uint8_t *x25519_ss,
                            size_t x25519_ss_len);

int lc_kyber_x25519_sk_ptr(uint8_t **kyber_key, size_t *kyber_key_len,
                           uint8_t **x25519_key, size_t *x25519_key_len,
                           struct lc_kyber_x25519_sk *sk);

int lc_kyber_x25519_pk_ptr(uint8_t **kyber_key, size_t *kyber_key_len,
                           uint8_t **x25519_key, size_t *x25519_key_len,
                           struct lc_kyber_x25519_pk *pk);

int lc_kyber_x25519_ct_ptr(uint8_t **kyber_ct, size_t *kyber_ct_len,
                           uint8_t **x25519_key, size_t *x25519_key_len,
                           struct lc_kyber_x25519_ct *ct);

int lc_kyber_x25519_ss_ptr(uint8_t **kyber_ss, size_t *kyber_ss_len,
                           uint8_t **x25519_ss, size_t *x25519_ss_len,
                           struct lc_kyber_x25519_ss *ss);

int lc_kyber_x25519_keypair(struct lc_kyber_x25519_pk *pk,
                            struct lc_kyber_x25519_sk *sk,
                            struct lc_rng_ctx *rng_ctx,
                            enum lc_kyber_type kyber_type);

int lc_kyber_x25519_enc_kdf(struct lc_kyber_x25519_ct *ct, uint8_t *ss,
                            size_t ss_len, const struct lc_kyber_x25519_pk *pk);

int lc_kyber_x25519_dec_kdf(uint8_t *ss, size_t ss_len,
                            const struct lc_kyber_x25519_ct *ct,
                            const struct lc_kyber_x25519_sk *sk);
 
/****************************** Kyber X25510 KEX ******************************/

int lc_kex_x25519_uake_initiator_init(struct lc_kyber_x25519_pk *pk_e_i,
                                      struct lc_kyber_x25519_ct *ct_e_i,
                                      struct lc_kyber_x25519_ss *tk,
                                      struct lc_kyber_x25519_sk *sk_e,
                                      const struct lc_kyber_x25519_pk *pk_r);

int lc_kex_x25519_uake_responder_ss(struct lc_kyber_x25519_ct *ct_e_r,
                                    uint8_t *shared_secret,
                                    size_t shared_secret_len,
                                    const uint8_t *kdf_nonce,
                                    size_t kdf_nonce_len,
                                    const struct lc_kyber_x25519_pk *pk_e_i,
                                    const struct lc_kyber_x25519_ct *ct_e_i,
                                    const struct lc_kyber_x25519_sk *sk_r);

int lc_kex_x25519_uake_initiator_ss(uint8_t *shared_secret,
                                    size_t shared_secret_len,
                                    const uint8_t *kdf_nonce,
                                    size_t kdf_nonce_len,
                                    const struct lc_kyber_x25519_ct *ct_e_r,
                                    const struct lc_kyber_x25519_ss *tk,
                                    const struct lc_kyber_x25519_sk *sk_e);

int lc_kex_x25519_ake_initiator_init(struct lc_kyber_x25519_pk *pk_e_i,
                                     struct lc_kyber_x25519_ct *ct_e_i,
                                     struct lc_kyber_x25519_ss *tk,
                                     struct lc_kyber_x25519_sk *sk_e,
                                     const struct lc_kyber_x25519_pk *pk_r);

int lc_kex_x25519_ake_responder_ss(struct lc_kyber_x25519_ct *ct_e_r_1,
                                   struct lc_kyber_x25519_ct *ct_e_r_2,
                                   uint8_t *shared_secret,
                                   size_t shared_secret_len,
                                   const uint8_t *kdf_nonce,
                                   size_t kdf_nonce_len,
                                   const struct lc_kyber_x25519_pk *pk_e_i,
                                   const struct lc_kyber_x25519_ct *ct_e_i,
                                   const struct lc_kyber_x25519_sk *sk_r,
                                   const struct lc_kyber_x25519_pk *pk_i);

int lc_kex_x25519_ake_initiator_ss(uint8_t *shared_secret,
                                   size_t shared_secret_len,
                                   const uint8_t *kdf_nonce,
                                   size_t kdf_nonce_len,
                                   const struct lc_kyber_x25519_ct *ct_e_r_1,
                                   const struct lc_kyber_x25519_ct *ct_e_r_2,
                                   const struct lc_kyber_x25519_ss *tk,
                                   const struct lc_kyber_x25519_sk *sk_e,
                                   const struct lc_kyber_x25519_sk *sk_i);
 
/****************************** Kyber X25519 IES ******************************/
 
#ifdef LC_KYBER_IES

int lc_kyber_x25519_ies_enc(const struct lc_kyber_x25519_pk *pk,
                            struct lc_kyber_x25519_ct *ct,
                            const uint8_t *plaintext, uint8_t *ciphertext,
                            size_t datalen, const uint8_t *aad, size_t aadlen,
                            uint8_t *tag, size_t taglen,
                            struct lc_aead_ctx *aead);

int lc_kyber_x25519_ies_enc_init(struct lc_aead_ctx *aead,
                                 const struct lc_kyber_x25519_pk *pk,
                                 struct lc_kyber_x25519_ct *ct,
                                 const uint8_t *aad, size_t aadlen);

int lc_kyber_x25519_ies_enc_update(struct lc_aead_ctx *aead,
                                   const uint8_t *plaintext,
                                   uint8_t *ciphertext, size_t datalen);

int lc_kyber_x25519_ies_enc_final(struct lc_aead_ctx *aead, uint8_t *tag,
                                  size_t taglen);

int lc_kyber_x25519_ies_dec(const struct lc_kyber_x25519_sk *sk,
                            const struct lc_kyber_x25519_ct *ct,
                            const uint8_t *ciphertext, uint8_t *plaintext,
                            size_t datalen, const uint8_t *aad, size_t aadlen,
                            const uint8_t *tag, size_t taglen,
                            struct lc_aead_ctx *aead);

int lc_kyber_x25519_ies_dec_init(struct lc_aead_ctx *aead,
                                 const struct lc_kyber_x25519_sk *sk,
                                 const struct lc_kyber_x25519_ct *ct,
                                 const uint8_t *aad, size_t aadlen);

int lc_kyber_x25519_ies_dec_update(struct lc_aead_ctx *aead,
                                   const uint8_t *ciphertext,
                                   uint8_t *plaintext, size_t datalen);

int lc_kyber_x25519_ies_dec_final(struct lc_aead_ctx *aead, const uint8_t *tag,
                                  size_t taglen);
 
#endif /* LC_KYBER_IES */
 
#endif /* LC_KYBER_X25519_KEM */
 
/****************************** Kyber X25510 KEM ******************************/
 
#ifdef LC_KYBER_X448_KEM


struct lc_kyber_x448_sk {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_x448_sk sk_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_x448_sk sk_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_x448_sk sk_512;
#endif
        } key;
};

struct lc_kyber_x448_pk {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_x448_pk pk_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_x448_pk pk_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_x448_pk pk_512;
#endif
        } key;
};

struct lc_kyber_x448_ct {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_x448_ct ct_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_x448_ct ct_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_x448_ct ct_512;
#endif
        } key;
};

struct lc_kyber_x448_ss {
        enum lc_kyber_type kyber_type;
        union {
#ifdef LC_KYBER_1024_ENABLED
                struct lc_kyber_1024_x448_ss ss_1024;
#endif
#ifdef LC_KYBER_768_ENABLED
                struct lc_kyber_768_x448_ss ss_768;
#endif
#ifdef LC_KYBER_512_ENABLED
                struct lc_kyber_512_x448_ss ss_512;
#endif
        } key;
};

enum lc_kyber_type lc_kyber_x448_sk_type(const struct lc_kyber_x448_sk *sk);

enum lc_kyber_type lc_kyber_x448_pk_type(const struct lc_kyber_x448_pk *pk);

enum lc_kyber_type lc_kyber_x448_ct_type(const struct lc_kyber_x448_ct *ct);

enum lc_kyber_type lc_kyber_x448_ss_type(const struct lc_kyber_x448_ss *ss);

LC_PURE
unsigned int lc_kyber_x448_sk_size(enum lc_kyber_type kyber_type);

LC_PURE
unsigned int lc_kyber_x448_pk_size(enum lc_kyber_type kyber_type);

LC_PURE
unsigned int lc_kyber_x448_ct_size(enum lc_kyber_type kyber_type);

LC_PURE
unsigned int lc_kyber_x448_ss_size(enum lc_kyber_type kyber_type);
 
int lc_kyber_x448_sk_load(struct lc_kyber_x448_sk *sk,
                          const uint8_t *kyber_src_key,
                          size_t kyber_src_key_len, const uint8_t *x448_src_key,
                          size_t x448_src_key_len);
 
int lc_kyber_x448_pk_load(struct lc_kyber_x448_pk *pk,
                          const uint8_t *kyber_src_key,
                          size_t kyber_src_key_len, const uint8_t *x448_src_key,
                          size_t x448_src_key_len);
 
int lc_kyber_x448_ct_load(struct lc_kyber_x448_ct *ct,
                          const uint8_t *kyber_src_ct, size_t kyber_src_ct_len,
                          const uint8_t *x448_rem_pub_key,
                          size_t x448_rem_pub_len);
 
int lc_kyber_x448_ss_load(struct lc_kyber_x448_ss *ss,
                          const uint8_t *kyber_src_ss, size_t kyber_src_ss_len,
                          const uint8_t *x448_ss, size_t x448_ss_len);

int lc_kyber_x448_sk_ptr(uint8_t **kyber_key, size_t *kyber_key_len,
                         uint8_t **x448_key, size_t *x448_key_len,
                         struct lc_kyber_x448_sk *sk);

int lc_kyber_x448_pk_ptr(uint8_t **kyber_key, size_t *kyber_key_len,
                         uint8_t **x448_key, size_t *x448_key_len,
                         struct lc_kyber_x448_pk *pk);

int lc_kyber_x448_ct_ptr(uint8_t **kyber_ct, size_t *kyber_ct_len,
                         uint8_t **x448_key, size_t *x448_key_len,
                         struct lc_kyber_x448_ct *ct);

int lc_kyber_x448_ss_ptr(uint8_t **kyber_ss, size_t *kyber_ss_len,
                         uint8_t **x448_ss, size_t *x448_ss_len,
                         struct lc_kyber_x448_ss *ss);

int lc_kyber_x448_keypair(struct lc_kyber_x448_pk *pk,
                          struct lc_kyber_x448_sk *sk,
                          struct lc_rng_ctx *rng_ctx,
                          enum lc_kyber_type kyber_type);

int lc_kyber_x448_enc_kdf(struct lc_kyber_x448_ct *ct, uint8_t *ss,
                          size_t ss_len, const struct lc_kyber_x448_pk *pk);

int lc_kyber_x448_dec_kdf(uint8_t *ss, size_t ss_len,
                          const struct lc_kyber_x448_ct *ct,
                          const struct lc_kyber_x448_sk *sk);
 
/****************************** Kyber X25510 KEX ******************************/

int lc_kex_x448_uake_initiator_init(struct lc_kyber_x448_pk *pk_e_i,
                                    struct lc_kyber_x448_ct *ct_e_i,
                                    struct lc_kyber_x448_ss *tk,
                                    struct lc_kyber_x448_sk *sk_e,
                                    const struct lc_kyber_x448_pk *pk_r);

int lc_kex_x448_uake_responder_ss(struct lc_kyber_x448_ct *ct_e_r,
                                  uint8_t *shared_secret,
                                  size_t shared_secret_len,
                                  const uint8_t *kdf_nonce,
                                  size_t kdf_nonce_len,
                                  const struct lc_kyber_x448_pk *pk_e_i,
                                  const struct lc_kyber_x448_ct *ct_e_i,
                                  const struct lc_kyber_x448_sk *sk_r);

int lc_kex_x448_uake_initiator_ss(uint8_t *shared_secret,
                                  size_t shared_secret_len,
                                  const uint8_t *kdf_nonce,
                                  size_t kdf_nonce_len,
                                  const struct lc_kyber_x448_ct *ct_e_r,
                                  const struct lc_kyber_x448_ss *tk,
                                  const struct lc_kyber_x448_sk *sk_e);

int lc_kex_x448_ake_initiator_init(struct lc_kyber_x448_pk *pk_e_i,
                                   struct lc_kyber_x448_ct *ct_e_i,
                                   struct lc_kyber_x448_ss *tk,
                                   struct lc_kyber_x448_sk *sk_e,
                                   const struct lc_kyber_x448_pk *pk_r);

int lc_kex_x448_ake_responder_ss(struct lc_kyber_x448_ct *ct_e_r_1,
                                 struct lc_kyber_x448_ct *ct_e_r_2,
                                 uint8_t *shared_secret,
                                 size_t shared_secret_len,
                                 const uint8_t *kdf_nonce, size_t kdf_nonce_len,
                                 const struct lc_kyber_x448_pk *pk_e_i,
                                 const struct lc_kyber_x448_ct *ct_e_i,
                                 const struct lc_kyber_x448_sk *sk_r,
                                 const struct lc_kyber_x448_pk *pk_i);

int lc_kex_x448_ake_initiator_ss(uint8_t *shared_secret,
                                 size_t shared_secret_len,
                                 const uint8_t *kdf_nonce, size_t kdf_nonce_len,
                                 const struct lc_kyber_x448_ct *ct_e_r_1,
                                 const struct lc_kyber_x448_ct *ct_e_r_2,
                                 const struct lc_kyber_x448_ss *tk,
                                 const struct lc_kyber_x448_sk *sk_e,
                                 const struct lc_kyber_x448_sk *sk_i);
 
/****************************** Kyber X448 IES ******************************/
 
#ifdef LC_KYBER_IES

int lc_kyber_x448_ies_enc(const struct lc_kyber_x448_pk *pk,
                          struct lc_kyber_x448_ct *ct, const uint8_t *plaintext,
                          uint8_t *ciphertext, size_t datalen,
                          const uint8_t *aad, size_t aadlen, uint8_t *tag,
                          size_t taglen, struct lc_aead_ctx *aead);

int lc_kyber_x448_ies_enc_init(struct lc_aead_ctx *aead,
                               const struct lc_kyber_x448_pk *pk,
                               struct lc_kyber_x448_ct *ct, const uint8_t *aad,
                               size_t aadlen);

int lc_kyber_x448_ies_enc_update(struct lc_aead_ctx *aead,
                                 const uint8_t *plaintext, uint8_t *ciphertext,
                                 size_t datalen);

int lc_kyber_x448_ies_enc_final(struct lc_aead_ctx *aead, uint8_t *tag,
                                size_t taglen);

int lc_kyber_x448_ies_dec(const struct lc_kyber_x448_sk *sk,
                          const struct lc_kyber_x448_ct *ct,
                          const uint8_t *ciphertext, uint8_t *plaintext,
                          size_t datalen, const uint8_t *aad, size_t aadlen,
                          const uint8_t *tag, size_t taglen,
                          struct lc_aead_ctx *aead);

int lc_kyber_x448_ies_dec_init(struct lc_aead_ctx *aead,
                               const struct lc_kyber_x448_sk *sk,
                               const struct lc_kyber_x448_ct *ct,
                               const uint8_t *aad, size_t aadlen);

int lc_kyber_x448_ies_dec_update(struct lc_aead_ctx *aead,
                                 const uint8_t *ciphertext, uint8_t *plaintext,
                                 size_t datalen);

int lc_kyber_x448_ies_dec_final(struct lc_aead_ctx *aead, const uint8_t *tag,
                                size_t taglen);
 
#endif /* LC_KYBER_IES */
 
#endif /* LC_KYBER_X448_KEM */
 
#ifdef __cplusplus
}
#endif
 
#endif /* LC_KYBER_H */