Skip to content

[Cherry-pick FIPS 2025] Add encap/decapKeyCheck support in ACVP - #2875

Merged
samuel40791765 merged 1 commit into
aws:fips-2025-09-12from
samuel40791765:fips-2025-09-12-update-2
Dec 2, 2025
Merged

samuel40791765 merged 1 commit into
aws:fips-2025-09-12from
samuel40791765:fips-2025-09-12-update-2

Conversation

@samuel40791765

Copy link
Copy Markdown
Contributor

cherry picked from commit on main: 0336dd7

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

ACVP has support for a new test vectors that test against the
encapsulation/decapsulation key checks defined in FIPS 203.
> Adds "encapsulationKeyCheck" and "decapsulationKeyCheck" as functions
for ML-KEM Encap/Decap FIPS203 to exercise an implementation's
capability to perform the Encapsulation Key Check in FIPS 203 Section
7.2 and the Decapsulation Key Check in FIPS 203 Section 7.3. These tests
are only included if the appropriate function is present in the
registration. They operate by providing a valid or invalid key and
expecting the IUT to return a true for a valid key or false for an
invalid key.

* https://github.com/usnistgov/ACVP-Server/releases

This add support in ACVP to run against the relevant
`crypto_kem_check_pk` and `crypto_kem_check_sk` functions that do the
checks for us. Also added the new `encapsulationKeyCheck` and
`decapsulationKeyCheck` test vectors in `ML-KEM.bz2`.

### Call-outs:
N/A

### Testing:
new `encapsulationKeyCheck` and `decapsulationKeyCheck` test vectors in
`ML-KEM.bz2`

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license and the ISC license.

(cherry picked from commit 0336dd7)
@samuel40791765
samuel40791765 requested a review from a team as a code owner December 2, 2025 21:02
@samuel40791765
samuel40791765 enabled auto-merge (squash) December 2, 2025 21:04
@samuel40791765
samuel40791765 merged commit 613f0fd into aws:fips-2025-09-12 Dec 2, 2025
60 of 69 checks passed
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 0% with 24 lines in your changes missing coverage. Please review.
βœ… Project coverage is 78.68%. Comparing base (0d59e76) to head (e0a3be5).
⚠️ Report is 1 commits behind head on fips-2025-09-12.

Files with missing lines Patch % Lines
crypto/fipsmodule/ml_kem/ml_kem.c 0.00% 24 Missing ⚠️
Additional details and impacted files
@@                 Coverage Diff                 @@
##           fips-2025-09-12    #2875      +/-   ##
===================================================
- Coverage            78.71%   78.68%   -0.03%     
===================================================
  Files                  667      667              
  Lines               113002   113027      +25     
  Branches             16062    16068       +6     
===================================================
- Hits                 88946    88933      -13     
- Misses               23281    23317      +36     
- Partials               775      777       +2     

β˜” View full report in Codecov by Sentry.
πŸ“’ Have feedback on the report? Share it here.

πŸš€ New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants