Add ML-KEM 1024 from BoringSSL

Changes include conversion from C++, basic KNF, then adaptation to
use our sha3 functions for sha3 and shake instead of the BorinSSL
version. This Adds units tests to run against BoringSSL and NIST test
vectors.

The future public API is the same as Boring's - but is not yet exposed
pending making bytestring.h public (which will happen separately) and
a minor bump

Currently this will just ensure we build and run regress.

ok tb@ to get it into the tree and massage from there.

1 files changed, 9 insertions, 1 deletions

diff --git a/src/lib/libcrypto/hidden/openssl/mlkem.h b/src/lib/libcrypto/hidden/openssl/mlkem.h
index 01ac28cffd..103144d1a1 100644
--- a/src/lib/libcrypto/hidden/openssl/mlkem.h
+++ b/src/lib/libcrypto/hidden/openssl/mlkem.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: mlkem.h,v 1.1 2024/12/13 00:03:57 beck Exp $ */
+/* $OpenBSD: mlkem.h,v 1.2 2024/12/13 00:17:17 beck Exp $ */
 /*
  * Copyright (c) 2024 Bob Beck <beck@obtuse.com>
  *
@@ -35,6 +35,14 @@ LCRYPTO_USED(MLKEM768_marshal_public_key);
 LCRYPTO_USED(MLKEM768_parse_public_key);
 LCRYPTO_USED(MLKEM768_private_key_from_seed);
 LCRYPTO_USED(MLKEM768_parse_private_key);
+LCRYPTO_USED(MLKEM1024_generate_key);
+LCRYPTO_USED(MLKEM1024_public_from_private);
+LCRYPTO_USED(MLKEM1024_encap);
+LCRYPTO_USED(MLKEM1024_decap);
+LCRYPTO_USED(MLKEM1024_marshal_public_key);
+LCRYPTO_USED(MLKEM1024_parse_public_key);
+LCRYPTO_USED(MLKEM1024_private_key_from_seed);
+LCRYPTO_USED(MLKEM1024_parse_private_key);
 #endif
 
 #endif /* _LIBCRYPTO_MLKEM_H */