1.1.2 릴리즈 개발 시작

COMPLIANCE.md

@@ -12,23 +12,38 @@ NIST CAVP는 단일 알고리즘에 대한 검증 작업입니다. 실제 프로
 
 - [ ] SP 800-90A DRBG(Deterministic Random Bit Generators)
 
+> [KCMVP](https://seed.kisa.or.kr/kisa/kcmvp/EgovVerification.do) (KS X ISO/IEC 18031)
+
+- [ ] Security techniques - Hash-functions - Part 3: Dedicated hash-functions (2018)
+
 ## SHA2
 
-> [NIST CAVP - Secure Hashing](https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/secure-hashing) (ISO/IEC 10118-3)
+> [NIST CAVP - Secure Hashing](https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/secure-hashing)
 
 - [ ] FIPS 180-4 SHA Test Vectors for Hashing Bit/Byte-Oriented Messages
 
-> [KCMVP](https://seed.kisa.or.kr/kisa/kcmvp/EgovVerification.do) KS X ISO/IEC 10118-3:2001
+> [KCMVP](https://seed.kisa.or.kr/kisa/kcmvp/EgovVerification.do) (KS X ISO/IEC 10118-3:2001)
 
 - [ ] Security techniques - Hash-functions - Part 3: Dedicated hash-functions (2018)
 
 ## SHA3
 
-> [NIST CAVP - Secure Hashing](https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/secure-hashing) (ISO/IEC 10118-3)
+> [NIST CAVP - Secure Hashing](https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/secure-hashing)
 
 - [X] FIPS 202 SHA-3 Hash Function Test Vectors for Hashing Bit/Byte-Oriented Messages
 - [X] FIPS 202 SHA-3 XOF Test Vectors for Bit/Byte-Oriented Output
 
-> [KCMVP](https://seed.kisa.or.kr/kisa/kcmvp/EgovVerification.do) KS X ISO/IEC 10118-3:2001
+> [KCMVP](https://seed.kisa.or.kr/kisa/kcmvp/EgovVerification.do) (KS X ISO/IEC 10118-3:2001)
+
+- [X] Security techniques - Hash-functions - Part 3: Dedicated hash-functions (2018)
+
+## HKDF
+
+> [NIST CAVP - Key Derivation](https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/key-derivation) (SP 800-108)
 
-- [X] Security techniques - Hash-functions - Part 3: Dedicated hash-functions (2018)
+- [ ] KDF in Counter Mode Test Vectors
+- [ ] KDF in Feedback Mode Test Vectors where no counter is used
+- [ ] KDF in Feedback Mode Test Vectors where zero length IV is allowed
+- [ ] KDF in Feedback Mode Test Vectors where zero length IV is not allowed
+- [ ] KDF in Double-Pipeline Iteration Mode Test Vectors where no counter is used
+- [ ] KDF in Double-Pipeline Iteration Mode Test Vectors where counter is used

Cargo.toml

@@ -3,7 +3,7 @@ members = ["internal/*", "crypto/*"]
 resolver = "2"
 
 [workspace.package]
-version = "1.1.2-Alpha"
+version = "1.1.2-Alpha1"
 edition = "2024"
 authors = ["Q. T. Felix <qtfelix@qu4nt.space>"]
 license = "MIT LICENSE"
@@ -13,15 +13,20 @@ strip = true
 
 [workspace.dependencies]
 ### INTERNAL CORE DEPENDENCIES ###
-entlib-native-ffi =             { path = "./internal/ffi",            version = "1.1.2-Alpha" }
-entlib-native-quantum-util =    { path = "./internal/quantum-util",   version = "1.1.2-Alpha" }
+entlib-native-ffi =             { path = "./internal/ffi",            version = "1.1.2-Alpha1" }
+entlib-native-quantum-util =    { path = "./internal/quantum-util",   version = "1.1.2-Alpha1" }
 ### EXTERNAL DEPENDENCIES ###
-tokio =                         { version = "1",                       features = ["rt", "process"] }
+tokio = { version = "1",           features = ["rt", "process"] } # Q. T. Felix TODO: 제거
 ### INTERNAL CRYPTO DEPENDENCIES ###
-entlib-native-base64 =          { path = "./crypto/base64",           version = "1.1.2-Alpha" }
-entlib-native-constant-time =   { path = "./crypto/constant-time",    version = "1.1.2-Alpha" }
-entlib-native-core-secure =     { path = "./crypto/core-secure",      version = "1.1.2-Alpha" }
-entlib-native-rng =             { path = "./crypto/rng",              version = "1.1.2-Alpha" }
-entlib-native-sha2 =            { path = "./crypto/sha2",             version = "1.1.2-Alpha" }
-entlib-native-sha3 =            { path = "./crypto/sha3",             version = "1.1.2-Alpha" }
-entlib-native-chacha20 =        { path = "./crypto/chacha20",         version = "1.1.2-Alpha" }
+entlib-native-base64 =              { path = "./crypto/base64",             version = "1.1.2-Alpha1" }
+entlib-native-constant-time =       { path = "./crypto/constant-time",      version = "1.1.2-Alpha1" }
+entlib-native-core-secure =         { path = "./crypto/core-secure",        version = "1.1.2-Alpha1" }
+entlib-native-rng =                 { path = "./crypto/rng",                version = "1.1.2-Alpha1" }
+entlib-native-sha2 =                { path = "./crypto/sha2",               version = "1.1.2-Alpha1" }
+entlib-native-sha3 =                { path = "./crypto/sha3",               version = "1.1.2-Alpha1" }
+entlib-native-chacha20 =            { path = "./crypto/chacha20",           version = "1.1.2-Alpha1" }
+entlib-native-key-establishment =   { path = "./crypto/key-establishment",  version = "1.1.2-Alpha1" }
+entlib-native-digital-signature =   { path = "./crypto/digital-signature",  version = "1.1.2-Alpha1" }
+entlib-native-tls =                 { path = "./crypto/tls",                version = "1.1.2-Alpha1" }
+entlib-native-hkdf =                { path = "./crypto/hkdf",               version = "1.1.2-Alpha1" }
+entlib-native-hex =                 { path = "./crypto/hex",                version = "1.1.2-Alpha1" }

crypto/constant-time/src/constant_time.rs

@@ -1,25 +1,3 @@
-/*
- * Copyright (c) 2025-2026 Quant
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the “Software”),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included
- * in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS
- * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
- * IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
- * TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
- * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
 //! 상수-시간(Constant-Time) 연산을 위한 통합 트레이트 및 구현체
 //!
 //! 이 모듈은 민감 데이터를 다룰 때 타이밍 공격(timing attack)을 방지하기 위해

crypto/constant-time/src/constant_time_asm.rs

@@ -1,25 +1,3 @@
-/*
- * Copyright (c) 2025-2026 Quant
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the “Software”),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included
- * in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS
- * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
- * IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
- * TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
- * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
 //! 아키텍처별 인라인 어셈블리 기반 상수-시간 프리미티브
 //!
 //! # Author

crypto/core-secure/Cargo.toml

@@ -6,6 +6,7 @@ authors.workspace = true
 license.workspace = true
 
 [dependencies]
+entlib-native-constant-time.workspace = true
 
 [dev-dependencies]
 criterion = { version = "0.8.2", features = ["html_reports"] }