* Faster Faster Kyber and Dilithium

* benchmarks for kyber and dilithium

* update skiplist

* more dilithium benchmarks
Co-authored-by: amin <amin@abdulrahman.de>
Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu>

* ntruhps2048509

* ntruhps2048677, ntruhrss701

* ntruhps4096821

* update benchmarks
Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu>

* NTRU m4 polynomial inversion implementation for four parameter sets

* add benchmarks
Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu>

Add Picnic implementations from https://github.com/dkales/picnic_m4

I wish people would just submit a patch to pqm4 instead of writing
another paper about a bug that is well known...
Anyway, I fixed this now...

Fixes two minor bugs in matacc. They did not actually result in wrong
outputs.

In the uniform sampling, we use 3 bytes to sample 2 coefficients. In
case the sampled coefficient is too large, we throw it away.
Once we sampled 256 coefficients it is possible that we still have one
coefficient left which needs to be discarded.
The check if we are at the end of a polynomial already was wrongly
implemented by checking for ctr < KYBER_Q/4 rather than ctr < KYBER_N/4
in two places.

Luckily, it has no effect in both cases.
In the first, ctr = KYBER_N/4 implies k=0 and hence the the code does
nothing.
In the second, an additional Keccak squeeze is triggered, but the output
is never used.

* use publicinputs AES for ntrulpr

* new benchmarks

* add saber

* rm unused

* update all

* add all

* saber

* soft links

* link all

* benchmarks
Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu>

* NTRU Prime m4 implementation for six parameter sets

* NTRU Prime m4 implementation for six parameter sets

* delete .DS_Store

* delete useless files & change to asm function [jump753divsteps.c]

* update mupq to include ntruprime round 3 parameter sets

* modified arith.h

* delete useless comment

* using stack memory instead of static memory

* update mupq

* fix buffer size

* add basemul_8x8_156

* update skiplist

* add benchmarks

* eliminate more bss

* update benchmarks for sntrup761
Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu>
Co-authored-by: Trista Li <trista5658321@gmail.com>

* Add an optional memory timing test to the boardtest.elf

* Add support for the Nucleo-L4R5ZI board

* Add a PQM4 preprocessor definition flag

* Properly detect PQM4/MUPQ in bikel{1,3} sources

* Include the nucleo-l4r5zi in the README

* Update mupq

On my Raspberry Pi I often ran into the problem that the Pi would miss the
beginning of the serial output and then get stuck in an infinite loop trying
to reflash again and again.
By waiting a couple of hundred ms when starting up, this can be prevented.
For me this heavily improved reliability.

Resolve #199

Closes #198

The previous version of pqm4 had a build everything script that would spit out
all the binaries.
With the multiplatform pqm4, this is no longer needed. One can simply
make -j4 PLATFORM=stm32f4discovery
However, we currently still have a non-functional build_everything.py script
sitting around. I've fixed it, but we could also remove it.

Additionally, to allow users to simply run ./test.py, I added a default uart
device "/dev/ttyUSB0". The old pqm4 also assumed that serial device.
Right now pqm4 miserably fails without a --uart argument and a reasonable
error message.

* Adapt the PQM3 Multiplatform & Scheme Discovery to PQM4

* Add HAL support for CW308T-STM32F3

* Adapt platform interfaces

* Implement simplified platform running interface

* Simplify chipwhisperer interface

* Fix for systems without the GNU findutils

* Add the mps2-an386 platform, which is also supported by QEMU

* Speed up scheme search

* Skip scheme list generation if IMPLEMENTATION_PATH is given

* Optionally push all data/bss into the "flash" portion of the MPS2

The flash is actually just a RAM. The main purpose of the board here is stack
testing and this will allow us to use all 4MB of the "ram" memory region for
stack/heap.

* Implement stack size querying

* Don't capture stdin for QEMU platforms

* Fix argument parsing for benchmarks

* Add possibility to run QEMU benchmarks directly from make

* Fix scheme list generation

* Remove automatic call to git

* Add some comments for the scheme finding mechanism

* Add the possibility for scheme specific makefiles

* Clean up makefiles

* Generate a skiplist for each platform

* Move reusable buildsystem and interface code to mupq

* Move randombytes implementation to hal for testvector test

* Make all-in-one compilation the default

* Document the new platforms in the README.md

* Update mupq

* Add _sbrk wrapping to opencm3

* Update mupq

* adjust pqm4 to run multiple iterations in a single binary

* Always add LTO flag

* Update mupq

* Reorganize symmetric crypto sources

* Include HAL and crypto sources in AIO compilation

* Fix LTO compilation

* Use existing linker script if present

* Update mupq

* Don't use the nano libc (worse performance)

* Fix compilation for self-tests

* Quick-fix build error for bikel1 on mps2-an386 platform

* Update benchmarks

* Use full ram for some frodokem schemes

* Fix compilation on mps2-an386 platform

* Update skip_list.py

* switch to mupq master
Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu>

* remove static from NTT buffers in NTRU

* ntru benchmarks

* update bikel[1,3]/m4f to ches2021

* updated bike in mupq

* new bike benchmarks
Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu>

* stack-optimized fips202

* fips202stack benchmarks

* switch to mupq master

* update pqclean to include new SPHINCS+ parameter sets

* add SPHINCS+ benchmarks

* switch mupq to master

Merge implementation of Rader's trick of sntrup761 and ntrulpr761 from https://tches.iacr.org/index.php/TCHES/article/view/8733

 (#184)

* add Darwin option to host_unidirectional

* rm everything about sntrup761

* sntrup761 success; ntrulpr failed

* rm ntrulpr files from sntrup

* add missing files for sntrup

* add missing sntrup file

* ntrulpr compilable but ERROR KEYS

* we start with rm everything in ntrulpr

* all files tested

* rm unsued files

* add soft liks

* more soft links

* more soft links

* add NTRUPrime benchmarks

* updated kem.c from NTRUPrime-PolyMul

* another attempt at the ntrulpr benchmarks

* slightly tweak the check for MacOS
Co-authored-by: Matthias J. Kannwischer <matthias@kannwischer.eu>