ec, ecdsa, sm2: custom-curve arithmetic, ECDSA and SM2 signatures

.github/workflows/rust-test.yml

@@ -19,6 +19,23 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@v4
 
+      - name: Check out bc-test-data
+        uses: actions/checkout@v4
+        with:
+          repository: bcgit/bc-test-data
+          path: .ci-data/bc-test-data
+
+      - name: Check out wycheproof
+        uses: actions/checkout@v4
+        with:
+          repository: C2SP/wycheproof
+          path: .ci-data/wycheproof
+
+      - name: Symlink test data alongside the checkout
+        run: |
+          ln -s "$GITHUB_WORKSPACE/.ci-data/bc-test-data" ../bc-test-data
+          ln -s "$GITHUB_WORKSPACE/.ci-data/wycheproof" ../wycheproof
+
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
 

Cargo.toml

@@ -19,6 +19,8 @@ bouncycastle-chacha20-poly1305-aead = { path = "./crypto/chacha20-poly1305-aead"
 bouncycastle-cipher = { path = "./crypto/cipher" }
 bouncycastle-core = { path = "crypto/core" }
 bouncycastle-core-test-framework = { path = "./crypto/core-test-framework" }
+bouncycastle-ec = { path = "./crypto/ec" }
+bouncycastle-ecdsa = { path = "./crypto/ecdsa" }
 bouncycastle-factory = { path = "./crypto/factory" }
 bouncycastle-hex = { path = "./crypto/hex" }
 bouncycastle-hkdf = { path = "./crypto/hkdf" }
@@ -33,6 +35,7 @@ bouncycastle-poly1305 = { path = "./crypto/poly1305" }
 bouncycastle-rng = { path = "./crypto/rng" }
 bouncycastle-sha2 = { path = "./crypto/sha2" }
 bouncycastle-sha3 = { path = "./crypto/sha3" }
+bouncycastle-sm2 = { path = "./crypto/sm2" }
 bouncycastle-sm3 = { path = "./crypto/sm3" }
 bouncycastle-utils = { path = "./crypto/utils" }
 
@@ -68,6 +71,7 @@ bouncycastle-chacha20.workspace = true
 bouncycastle-chacha20-poly1305-aead.workspace = true
 bouncycastle-cipher.workspace = true
 bouncycastle-core.workspace = true
+bouncycastle-ecdsa.workspace = true
 bouncycastle-factory.workspace = true
 bouncycastle-hex.workspace = true
 bouncycastle-hkdf.workspace = true
@@ -80,4 +84,5 @@ bouncycastle-poly1305.workspace = true
 bouncycastle-rng.workspace = true
 bouncycastle-sha2.workspace = true
 bouncycastle-sha3.workspace = true
+bouncycastle-sm2.workspace = true
 bouncycastle-sm3.workspace = true

INTRODUCTION.md

@@ -257,10 +257,12 @@ the `core-interface` sub-crate.
 Next up will be to round out the set of cryptographic primitives:
 
 * Block ciphers (AES)
-* Signatures (Ed25519, Ed448, ML-DSA, SLH-DSA)
-* Key Establishment (X25519, X448, ML-KEM)
+* Signatures (Ed25519, Ed448, ML-DSA, SLH-DSA, ECDSA, RSA)
+* Key Establishment (X25519, X448, ML-KEM, ECDH)
 
-(yes, you have noticed that RSA, ECDSA and ECDH are not on the list. I suppose we could, but we'd really rather not.)
+(an earlier draft of this list left out RSA, ECDSA and ECDH on purpose; there has been a change of heart, and they
+are being implemented on the same terms as everything else: fixed-width constant-time arithmetic, no runtime-described
+parameters.)
 
 After that, we'll tackle in some kind of order (depending on public interest and funding):