build(core): add ML-KEM

trezor · Feb 20, 2025 · 2181bb1 · 2181bb1
1 parent 7856bd4
commit 2181bb1
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 0 deletions.
diff --git a/core/SConscript.firmware b/core/SConscript.firmware
@@ -143,6 +143,19 @@ SOURCE_MOD_CRYPTO += [
     'vendor/trezor-crypto/slip39_english.c',
     'vendor/trezor-crypto/tls_prf.c',
 ]
+SOURCE_MOD_MLKEM = [
+    'vendor/mlkem-native/mlkem/compress.c',
+    'vendor/mlkem-native/mlkem/indcpa.c',
+    'vendor/mlkem-native/mlkem/kem.c',
+    'vendor/mlkem-native/mlkem/poly.c',
+    'vendor/mlkem-native/mlkem/poly_k.c',
+    'vendor/mlkem-native/mlkem/sampling.c',
+    'vendor/mlkem-native/mlkem/verify.c',
+    'vendor/mlkem-native/mlkem/fips202/fips202.c',
+    'vendor/mlkem-native/mlkem/fips202/fips202x4.c',
+    'vendor/mlkem-native/mlkem/fips202/keccakf1600.c',
+    'vendor/trezor-crypto/mlkem.c',
+]
 if EVERYTHING:
     SOURCE_MOD_CRYPTO += [
         'vendor/trezor-crypto/cardano.c',
@@ -718,6 +731,7 @@ obj_program.extend(env.Object(source=SOURCE_FIRMWARE))
 obj_program.extend(env.Object(source=SOURCE_MICROPYTHON))
 obj_program.extend(env.Object(source=SOURCE_MICROPYTHON_SPEED, COPT='-O3'))
 obj_program.extend(env.Object(source=SOURCE_HAL))
+obj_program.extend(env.Object(source=SOURCE_MOD_MLKEM))
 if FROZEN:
     obj_program.extend(env.Object(source=source_mpyc))
 

diff --git a/core/SConscript.unix b/core/SConscript.unix
@@ -177,6 +177,19 @@ if FEATURE_FLAGS["SECP256K1_ZKP"]:
         'vendor/trezor-crypto/zkp_ecdsa.c',
         'vendor/trezor-crypto/zkp_bip340.c',
     ]
+    SOURCE_MOD_MLKEM = [
+        'vendor/mlkem-native/mlkem/compress.c',
+        'vendor/mlkem-native/mlkem/indcpa.c',
+        'vendor/mlkem-native/mlkem/kem.c',
+        'vendor/mlkem-native/mlkem/poly.c',
+        'vendor/mlkem-native/mlkem/poly_k.c',
+        'vendor/mlkem-native/mlkem/sampling.c',
+        'vendor/mlkem-native/mlkem/verify.c',
+        'vendor/mlkem-native/mlkem/fips202/fips202.c',
+        'vendor/mlkem-native/mlkem/fips202/fips202x4.c',
+        'vendor/mlkem-native/mlkem/fips202/keccakf1600.c',
+        'vendor/trezor-crypto/mlkem.c',
+    ]
 
 # AES-GCM
 if FEATURE_FLAGS["AES_GCM"]:
@@ -778,6 +791,7 @@ if FEATURE_FLAGS["SECP256K1_ZKP"]:
     source_files.extend(SOURCE_MOD_SECP256K1_ZKP)
 obj_program.extend(env.Object(source=SOURCE_MICROPYTHON))
 obj_program.extend(env.Object(source=SOURCE_UNIX))
+obj_program.extend(env.Object(source=SOURCE_MOD_MLKEM, CCFLAGS='$CCFLAGS'))
 if FROZEN:
     obj_program.extend(env.Object(source=source_mpyc))
 

diff --git a/core/vendor/mlkem-native b/core/vendor/mlkem-native
@@ -0,0 +1 @@
+../../vendor/mlkem-native/