Add crypto callbacks for LMS and XMSS

[padelsbach]

Description

Add struct fields and callbacks (MakeKey, Sign, Verify and SigsLeft) into existing LMS and XMSS code. Add wc_LmsKey_InitId and _InitLabel for PKCS11 compat. Added unit tests.

Testing

New unit tests

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10380

Scan targets checked: wolfcrypt-bugs, wolfcrypt-src

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-tls12

[padelsbach]

jenkins retest this please

[Frauschi]

A lot of minor things, mainly as the WiP patch I sent you was in a very rough state tbh (sorry for that).

[padelsbach]

jenkins retest this please

[Frauschi]

Ok, I have updates regarding the PKCS#11 "pre-hash" thing. It turns out that this is actually an error in their specification, which is already corrected in the current working drafts for the next version. The data passed to the sign and verify operations is indeed the whole message, not any pre-hashed digest!

After taking a more in-depth look into the algorithms, a simple pre-hash as proposed in the two helper methods of this PR also does not work and breaks spec compliance. Within both algorithms, the message is hashed together with the current state of the private key, which is not available in a CryptoCb / PKCS#11 setup on the host. Hence, this would have never worked properly anyway.

In total, this greatly simplifies our efforts, as the “normal” callbacks can directly be used for PKCS#11 as well. Hence, the two new helper methods for pre-hashing (wc_LmsKey_HashMsg() and wc_XmssKey_HashMsg()) can be removed completely. Furthermore, all the PKCS#11-related comments are unnecessary as a result.