FIPS 203 IPD update: ML-KEM-IPD-768 and ML-KEM-IPD-1024

[jakemas]

Issues:

AWS-LC is tracking the standardization of FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard. This PR brings our implementation of ML-KEM up to the specification described in FIPS 203.

Most recent changes in this area:
a1f73bc
56f3569
4b07805

Description of changes:

NIST have made the following public statements regarding the planned changes to FIPS 203:

• NIST will specify lower-level de-randomized API to enable CAVP testing with seeds as keys.

As such, this PR includes the following:

• The addition of ML-KEM-IPD-768 and ML-KEM-IPD-1024 to AWS-LC. Note: as common functionality is already added to aws-lc, this lift is extremely light, as we need only to define crypto/ml_kem/ml_kem_768_ipd.c and crypto/ml_kem/ml_kem_1024_ipd.c.
• The addition of de-randomized testing API for ML-KEM-IPD-768 and ML-KEM-IPD-1024
• KATs for ML-KEM-IPD-768 and ML-KEM-IPD-1024 that use seeds as keys (as per CAVP requirement)
• An update to the file that captures the divergence from the upstream reference listed at https://github.com/aws/aws-lc/tree/main/crypto/ml_kem#readme. This removes the outdated information regarding pq_custom_randombytes and updates with information regarding the de-randomized API.
• Reserving NIDs 986 and 987 so that ML-KEM-IPD has reserved consecutive NIDs for better customer experience.

Call-outs:

Divergence from the reference implementation: I have checked upstream (https://github.com/pq-crystals/kyber/tree/standard) for any additional changes to the IPD reference implementation, and see two more recent commits since the previous import. These are:

• pq-crystals/kyber@0264efa
• pq-crystals/kyber@d1321ce

I have not included these fixes into this PR, as AWS-LC independently addressed these issues in PR 4b07805.

Testing:

The new KEM algorithms have been added to the built_in_kems list, and as such, are included within the complete PerKEMTest suite. This includes testing of the de-randomized APIs added in #1578.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 78.28%. Comparing base (b862b16) to head (ba6f0c8).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1724      +/-   ##
==========================================
+ Coverage   78.26%   78.28%   +0.01%     
==========================================
  Files         580      580              
  Lines       96418    96521     +103     
  Branches    13830    13838       +8     
==========================================
+ Hits        75465    75562      +97     
- Misses      20340    20345       +5     
- Partials      613      614       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.