[openssl/openssl] a248ec: ML-DSA: Add AVX512VL SHAKE x4 multi-buffer integra...

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: a248ec771e8d111db6f69a29cab50cff7610f70b
      https://github.com/openssl/openssl/commit/a248ec771e8d111db6f69a29cab50cff7610f70b
  Author: Marcel Cornu <[email protected]>
  Date:   2026-07-13 (Mon, 13 Jul 2026)

  Changed paths:
    M CHANGES.md
    M crypto/ml_dsa/ml_dsa_key.c
    M crypto/ml_dsa/ml_dsa_local.h
    M crypto/ml_dsa/ml_dsa_matrix.h
    M crypto/ml_dsa/ml_dsa_sample.c
    A crypto/ml_dsa/ml_dsa_sample_hw_x86_64.inc
    M crypto/ml_dsa/ml_dsa_sign.c
    M crypto/ml_dsa/ml_dsa_vector.h
    A crypto/sha/asm/keccak1600x4-avx512vl.pl
    M crypto/sha/build.info
    A crypto/sha/sha3_x4_avx512vl.c
    M include/internal/sha3.h
    M providers/fips-sources.checksums
    M providers/fips.checksum
    M providers/fips.module.sources

  Log Message:
  -----------
  ML-DSA: Add AVX512VL SHAKE x4 multi-buffer integration

Changes:
- Adds new SHAKE x4 API to perform 4 SHAKE operations in parallel when AVX512VL is supported.
- Adds AVX512VL Keccak x4 assembly module (keccak1600x4-avx512vl).
- Adds internal SHA3 x4 APIs/context in sha3.h and wrappers in sha3_x4.c modules.
- Adds runtime dispatch for ML-DSA sample operations with an OSSL_ML_DSA_SAMPLE_OPS vtable.
  Callers obtain the correct implementation via ossl_ml_dsa_sample_ops(), which returns
  either the generic scalar ops functions, or the AVX512VL multi-buffer ops depending
  on the build and CPU capabilities.
- Adds x86-64 multi-buffer function implementation into ml_dsa_sample_hw_x86_64.inc,
  included in ml_dsa_sample.c when KECCAK1600_ASM and x86_64 are defined.

Co-authored-by: Tomasz Kantecki <[email protected]>
Signed-off-by: Marcel Cornu <[email protected]>

Reviewed-by: Viktor Dukhovni <[email protected]>
Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Shane Lontis <[email protected]>
MergeDate: Mon Jul 13 15:55:54 2026
(Merged from https://github.com/openssl/openssl/pull/31090)


  Commit: 27caecd416627c18f9d038aa076f270afbfa4d60
      https://github.com/openssl/openssl/commit/27caecd416627c18f9d038aa076f270afbfa4d60
  Author: Marcel Cornu <[email protected]>
  Date:   2026-07-13 (Mon, 13 Jul 2026)

  Changed paths:
    M test/build.info
    A test/recipes/03-test_sha3_x4_internal.t
    A test/sha3_x4_internal_test.c

  Log Message:
  -----------
  test: add SHAKE x4 internal cross-validation tests

Add a new `sha3_x4_internal_test` target and recipe to validate the
internal SHAKE x4 implementation against scalar SHA3 reference paths.

Cover SHAKE-128 and SHAKE-256 in one-shot and incremental modes, plus
multi-absorb and multi-squeeze cases across varied input and output
sizes. Tests are skipped when AVX512VL extensions are not available.

Signed-off-by: Marcel Cornu <[email protected]>

Reviewed-by: Viktor Dukhovni <[email protected]>
Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Shane Lontis <[email protected]>
MergeDate: Mon Jul 13 15:55:55 2026
(Merged from https://github.com/openssl/openssl/pull/31090)


  Commit: 626ff8fd9344eb46e50464960ce84dcbacf5a4dd
      https://github.com/openssl/openssl/commit/626ff8fd9344eb46e50464960ce84dcbacf5a4dd
  Author: Marcel Cornu <[email protected]>
  Date:   2026-07-13 (Mon, 13 Jul 2026)

  Changed paths:
    A .github/workflows/avx512-sde.yml

  Log Message:
  -----------
  .github: add AVX512VL workflow using Intel SDE

Add a new CI workflow that runs AVX512 specific tests under Intel SDE
v10.8, since GitHub Actions runners do not currently have AVX512
hardware.
SDE emulates AVX512 instructions and spoofs CPUID so the AVX512 code
paths can be exercised.

Two jobs are included: linux (ubuntu-latest) and windows (windows-2022).
Each job builds OpenSSL with no-shared and enable-fips, then runs the
following tests under `sde64 -icx` (Icelake Server):

- ml_dsa_internal_test: exercises AVX512VL ML-DSA sampling
- sha3_x4_internal_test: exercises AVX512VL SHAKE x4 functions
- openssl fipsinstall: runs the full FIPS KAT suite (including ML-DSA
  and SHA3 self-tests) against the FIPS provider under emulation

Signed-off-by: Marcel Cornu <[email protected]>

Reviewed-by: Viktor Dukhovni <[email protected]>
Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Shane Lontis <[email protected]>
MergeDate: Mon Jul 13 15:55:57 2026
(Merged from https://github.com/openssl/openssl/pull/31090)


Compare: https://github.com/openssl/openssl/compare/6736bd2cb606...626ff8fd9344

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/6736bd-626ff8%40github.com.