From 3ddf7bc717904f5265b6954dfb39d8620f104e1a Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Tue, 24 Feb 2026 16:06:11 +0100 Subject: [PATCH] Fix verify test cases not having a randomized signature Signed-off-by: Gilles Peskine --- util/generate_mldsa_tests.py | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/util/generate_mldsa_tests.py b/util/generate_mldsa_tests.py index a49fed9fd..588fda6ff 100755 --- a/util/generate_mldsa_tests.py +++ b/util/generate_mldsa_tests.py @@ -145,8 +145,12 @@ def one_mldsa_verify_pure(api: API, message: bytes, deterministic: bool, descr: str) -> test_case.TestCase: - """Construct one test case for verification.""" - signature = key.sign_message(message, deterministic=True) + """Construct one test case for verification. + + When deterministic is true, the test case is a deterministic signature. + When deterministic is false, the test case is some other valid signature. + """ + signature = key.sign_message(message, deterministic=deterministic) tc = test_case.TestCase() tc.set_function(api.function('verify_pure', key.kl)) tc.set_dependencies([f'TF_PSA_CRYPTO_PQCP_MLDSA_{key.kl}_ENABLED']) @@ -171,14 +175,14 @@ def gen_mldsa_pure(api: API, kl: int) -> Iterable[test_case.TestCase]: yield one_mldsa_verify_pure(api, key, MESSAGES[0][0], True, f'key#{i}') for message, descr in MESSAGES[1:]: - yield one_mldsa_verify_pure(api, KEYS[kl][0], message, - True, f'key#1 {descr}') + yield one_mldsa_verify_pure(api, KEYS[kl][0], message, True, + f'key#1 {descr}') for i, key in enumerate(KEYS[kl], 1): yield one_mldsa_verify_pure(api, key, MESSAGES[0][0], False, f'key#{i}') for message, descr in MESSAGES[1:]: - yield one_mldsa_verify_pure(api, KEYS[kl][0], message, - False, f'key#1 {descr}') + yield one_mldsa_verify_pure(api, KEYS[kl][0], message, False, + f'key#1 {descr}') def gen_pqcp_mldsa_all() -> Iterable[test_case.TestCase]: """Generate all test cases for mldsa-native."""