mirror of
https://github.com/luxfi/crypto.git
synced 2026-07-27 01:54:50 +00:00
luxfi/crypto becomes the single Go entry point for ALL Lux-family crypto. Every public function in this module now dispatches between three implementations through a runtime-selectable backend: - vanilla: pure-Go reference (always available) - cgo: native binding (blst, libsecp256k1, ckzg) where present - gpu: batch acceleration via github.com/luxfi/accel The dispatcher reads LUX_CRYPTO_BACKEND (auto|vanilla|cgo|gpu); auto picks the most capable backend the binary was compiled and linked with. New canonical packages: backend/ runtime backend selector (env + programmatic) internal/gpuhost/ accel session lifecycle, single per-process keccak/ Keccak-256 with batch GPU dispatch sha256/ SHA-256 with batch GPU dispatch sha3/ SHA3 / SHAKE family ripemd160/ RIPEMD-160 (Bitcoin/Lux address derivation) ed25519/ Ed25519 with batch GPU verify bn254/ canonical alias for bn256 (matches FIPS naming) modexp/ canonical alias for bigmodexp evm256/ EIP-196/197 precompile ABI wrappers poseidon/ Poseidon2 hash via gnark-crypto pedersen/ Pedersen commitments over BN254 ntt/ Number-Theoretic Transform reference polymul/ negacyclic polynomial multiplication Extended existing packages with batch GPU paths: bls/batch.go BatchVerify routes through accel.BLSVerifyBatch mldsa/batch.go BatchVerify (ML-DSA-65) via accel.DilithiumVerifyBatch mlkem/batch.go BatchEncapsulate / BatchDecapsulate via Kyber kernels secp256k1/batch.go BatchVerifySignature via accel.ECDSAVerifyBatch GPU dispatch is gated on (a) backend.Default(), (b) batch size threshold, and (c) accel.Available(). When any gate fails the call falls through to the vanilla CPU path; output is byte-identical. The legacy gpu/ stub is replaced with a thin probe surface (Available, Backend, Devices, Version) that delegates to the same gpuhost session. Tests show vanilla and gpu backends produce identical outputs across all batch entry points (-race clean). See AUDIT.md for the per-algorithm state matrix and honest gaps.
65 lines
1.5 KiB
Go
65 lines
1.5 KiB
Go
package backend_test
|
|
|
|
// Determinism contract: when a caller flips LUX_CRYPTO_BACKEND between
|
|
// vanilla and gpu, the output of every public function in luxfi/crypto MUST
|
|
// be byte-identical. This test exercises the contract on the algorithms we
|
|
// have batch GPU paths for.
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/rand"
|
|
"testing"
|
|
|
|
"github.com/luxfi/crypto/backend"
|
|
"github.com/luxfi/crypto/keccak"
|
|
"github.com/luxfi/crypto/sha256"
|
|
)
|
|
|
|
func TestKeccak256BatchAcrossBackends(t *testing.T) {
|
|
inputs := make([][]byte, keccak.BatchThreshold+8)
|
|
for i := range inputs {
|
|
buf := make([]byte, 32)
|
|
rand.Read(buf)
|
|
inputs[i] = buf
|
|
}
|
|
|
|
prev := backend.Default()
|
|
t.Cleanup(func() { backend.SetDefault(prev) })
|
|
|
|
backend.SetDefault(backend.Vanilla)
|
|
vanilla := keccak.Sum256Batch(inputs)
|
|
|
|
backend.SetDefault(backend.GPU)
|
|
gpu := keccak.Sum256Batch(inputs)
|
|
|
|
for i := range vanilla {
|
|
if vanilla[i] != gpu[i] {
|
|
t.Errorf("keccak[%d] vanilla=%x gpu=%x", i, vanilla[i], gpu[i])
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestSHA256BatchAcrossBackends(t *testing.T) {
|
|
inputs := make([][]byte, sha256.BatchThreshold+8)
|
|
for i := range inputs {
|
|
buf := make([]byte, 32)
|
|
rand.Read(buf)
|
|
inputs[i] = buf
|
|
}
|
|
|
|
prev := backend.Default()
|
|
t.Cleanup(func() { backend.SetDefault(prev) })
|
|
|
|
backend.SetDefault(backend.Vanilla)
|
|
vanilla := sha256.Sum256Batch(inputs)
|
|
|
|
backend.SetDefault(backend.GPU)
|
|
gpu := sha256.Sum256Batch(inputs)
|
|
|
|
for i := range vanilla {
|
|
if !bytes.Equal(vanilla[i][:], gpu[i][:]) {
|
|
t.Errorf("sha256[%d] vanilla=%x gpu=%x", i, vanilla[i], gpu[i])
|
|
}
|
|
}
|
|
}
|