randomBuffer enabled instead of empty buffer for testing

demo changes
crypto function name changes & additions

Author: tomekmarchi

package.json

@@ -100,6 +100,7 @@
 		"server": "nodemon ./serverApp/index.js --watch ./udsp/ --watch ./serverApp/  --watch ./utilities/",
 		"simulate": "nodemon ./scripts/simulate.js --watch ./client/ --watch ./server/ --watch ./scripts/simulate.js --watch utilities/",
 		"connectRequest": "nodemon ./scripts/client/connectRequest.js --watch ./udsp/ --watch ./scripts/client/connectRequest.js --watch ./utilities/ --delay 3",
+		"connectRequestHybridKyber": "nodemon ./scripts/client/connectRequestHybridKyber.js --watch ./udsp/ --watch ./scripts/client/connectRequestHybridKyber.js --watch ./utilities/ --delay 3",
 		"connect": "nodemon ./scripts/client/connect.js --watch ./udsp/ --watch ./scripts/client/connect.js --watch ./utilities/ --delay 3",
 		"closeReconnect": "nodemon ./scripts/client/closeReconnect.js --watch ./udsp/ --watch ./scripts/client/closeReconnect.js --watch ./utilities/ --delay 3",
 		"request": "nodemon ./scripts/client/request.js --watch ./udsp/ --watch ./scripts/client/request.js --watch ./utilities/ --delay 3",

scripts/client/connectRequestCipherSuite.js renamed to scripts/client/connectRequestHybridKyber.js

@@ -39,6 +39,18 @@ export function randomBuffer(size = 8) {
 	randomize(target);
 	return target;
 }
+const int32 = 32;
+export function random32ByteBuffer() {
+	const target = bufferAlloc(int32);
+	randomize(target);
+	return target;
+}
+const int64 = 64;
+export function random64ByteBuffer() {
+	const target = bufferAlloc(int64);
+	randomize(target);
+	return target;
+}
 export function randomConnectionId(size = 8) {
 	return randomBuffer(size);
 }

utilities/crypto.js

@@ -1,3 +1,4 @@
+import { ml_dsa44 } from '@noble/post-quantum/ml-dsa';
 /*
 	Algorithm 1, implementing key generation for ML-DSA, uses an RBG to generate the 256-bit random
 	value ξ . The seed ξ shall be freshly generated using an approved RBG, as prescribed in NIST SP 800-90A,
@@ -7,10 +8,9 @@
 	RBG with at least 128 bits of security but less than 192 bits of security is used, then the claimed security
 	strength of ML-DSA-44 is reduced from category 2 to category 1.)
 */
-import { bufferAlloc } from '../crypto.js';
-import { ml_dsa44 } from '@noble/post-quantum/ml-dsa';
+import { randomBuffer } from '../crypto.js';
 export function createSeed(size = 32) {
-	const seed = bufferAlloc(size);
+	const seed = randomBuffer(size);
 	return seed;
 }
 export async function signatureKeypair(seed = createSeed()) {

utilities/cryptoMiddleware/dilithium44.js

@@ -0,0 +1,15 @@
+import {
+	createSeed,
+	sign,
+	signatureKeypair,
+	verifySignature
+} from './dilithium44.js';
+export const dilithium44_ed25519 = {
+	name: 'dilithium44_ed25519',
+	alias: 'dilithium44_ed25519',
+	id: 1,
+	createSeed,
+	signatureKeypair,
+	sign,
+	verifySignature
+};

utilities/cryptoMiddleware/dilithium44_ed25519.js

@@ -8,9 +8,9 @@ import { ml_dsa65, ml_dsa87 } from '@noble/post-quantum/ml-dsa';
 	RBG with at least 128 bits of security but less than 192 bits of security is used, then the claimed security
 	strength of ML-DSA-44 is reduced from category 2 to category 1.)
 */
-import { bufferAlloc } from '../crypto.js';
+import { randomBuffer } from '../crypto.js';
 export function createSeed(size = 32) {
-	const seed = bufferAlloc(size);
+	const seed = randomBuffer(size);
 	return seed;
 }
 export async function signatureKeypair(seed = createSeed()) {
@@ -31,7 +31,7 @@ export async function verifySignature(signedMessage, publicKey, message) {
 export const dilithium65 = {
 	name: 'dilithium65',
 	alias: 'dilithium65',
-	id: 1,
+	id: 2,
 	createSeed,
 	signatureKeypair,
 	sign,

utilities/cryptoMiddleware/dilithium65.js

@@ -1,3 +1,4 @@
+import { ml_dsa87 } from '@noble/post-quantum/ml-dsa';
 /*
 	Algorithm 1, implementing key generation for ML-DSA, uses an RBG to generate the 256-bit random
 	value ξ . The seed ξ shall be freshly generated using an approved RBG, as prescribed in NIST SP 800-90A,
@@ -7,10 +8,9 @@
 	RBG with at least 128 bits of security but less than 192 bits of security is used, then the claimed security
 	strength of ML-DSA-44 is reduced from category 2 to category 1.)
 */
-import { bufferAlloc } from '../crypto.js';
-import { ml_dsa87 } from '@noble/post-quantum/ml-dsa';
+import { randomBuffer } from '../crypto.js';
 export function createSeed(size = 32) {
-	const seed = bufferAlloc(size);
+	const seed = randomBuffer(size);
 	return seed;
 }
 export async function signatureKeypair(seed = createSeed()) {
@@ -31,7 +31,7 @@ export async function verifySignature(signedMessage, publicKey, message) {
 export const dilithium87 = {
 	name: 'dilithium87',
 	alias: 'dilithium87',
-	id: 1,
+	id: 3,
 	createSeed,
 	signatureKeypair,
 	sign,

utilities/cryptoMiddleware/dilithium87.js

@@ -22,8 +22,7 @@ import {
 	verifySignature,
 	verifySignatureDetached,
 } from './ed25519.js';
-import { blake3 } from '@noble/hashes/blake3';
-import { hash } from './blake3.js';
+import { blake3 } from './blake3.js';
 const sodium = await import('sodium-native');
 const sodiumLib = sodium?.default || sodium;
 const {
@@ -33,6 +32,7 @@ const {
 const {
 	randomConnectionId, randomBuffer, toBase64
 } = defaultCrypto;
+const hash = blake3.hash;
 export const x25519_xchacha20 = {
 	name: 'x25519_xchacha20',
 	alias: 'default',
@@ -65,5 +65,5 @@ export const x25519_xchacha20 = {
 	serverInitializeSession: serverSetSessionAttach,
 	serverSetSession: serverSetSessionAttach,
 	preferred: true,
-	hash: blake3,
+	hash,
 };