mirror of
https://github.com/vacp2p/boringssl.git
synced 2026-08-27 11:41:09 +00:00
Moss Hsu
c0e441916a
The existing ML-KEM ACVP fixture only covers valid encapsulation keys. Older NIST-generated invalid keys had unintended lengths, so they did not exercise rejection of non-canonical polynomial coefficients. Add a focused NIST demo fixture for ML-KEM-768 and ML-KEM-1024. Each parameter set includes a valid key and a correctly sized invalid key whose first coefficient is 3330, outside the canonical range 0 through 3328. The full response was accepted by the NIST demo server before trimming. Keep these cases separate from ML-KEM.bz2 so the regression stays explicit without replacing unrelated ML-KEM coverage. Change-Id: Ic31b4a843b53d8749a3cf3d6a6a56f777152a8de Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/101367 Reviewed-by: David Benjamin <davidben@google.com> Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: David Benjamin <davidben@google.com> SLSA-Policy-Verified: SLSA Policy Verification Service <devtools-gerritcodereview-exitgate@google.com>