Document the wolfProvider post-quantum build options and defines

wolfProvider/Makefile

@@ -18,6 +18,8 @@ ifeq ($(DOC_LANG),JA)
 	PDF = wolfProvider-Manual-jp.pdf
 else
 	PDF = wolfProvider-Manual.pdf
+	# chapter11 (Post-Quantum) is English-only until it is translated.
+	SOURCES += chapter11.md
 endif
 
 .PHONY: html-prep

wolfProvider/mkdocs.yml

@@ -14,6 +14,7 @@ nav:
     - "8. wolfProvider Design": chapter08.md
     - "9. Notes on Open Source Integration": chapter09.md
     - "10. Support and OpenSSL Version Adding": chapter10.md
+    - "11. Post-Quantum Cryptography": chapter11.md
 theme:
   name: null
   custom_dir: ../mkdocs-material/material

wolfProvider/src-ja/chapter03.md

@@ -261,6 +261,11 @@ wolfProviderを静的エンジンとして使用するには`--static`を付け
 | --enable-usersettings | **無効** | user_settings.h を使用し、MakefileのCFLAGSを使用しない |
 | --enable-dynamic | 有効 | wolfProviderをダイナミックプロバイダーとしてロードできるようにする |
 | --enable-singlethreaded | **無効** | wolfProviderをシングルスレッド環境で使用する |
+| --enable-pqc | **無効** | ポスト量子アルゴリズム (ML-KEM、ML-DSA、SLH-DSA) をすべて有効にする |
+| --enable-mlkem | **無効** | ML-KEM (FIPS 203) のみを有効にする |
+| --enable-mldsa | **無効** | ML-DSA (FIPS 204) のみを有効にする |
+| --enable-slhdsa | **無効** | SLH-DSA (FIPS 205) のみを有効にする |
+| --enable-lms | **無効** | LMS検証のみを有効にする |
 | | | | |
 | --with-openssl=DIR | | リンクするOpenSSLのインストール場所。設定されていない場合は、システムのデフォルトのライブラリとインクルードパスが使用されます。 |
 | --with-wolfssl=DIR | | リンクするwolfSSLのインストール場所。設定されていない場合は、システムのデフォルトのライブラリとインクルードパスが使用されます。 |
@@ -302,8 +307,11 @@ wolfProviderは、お客様がwolfProviderのビルド方法を設定できる
 | WP_HAVE_HKDF | HKDF (HMACベースの鍵導出関数) を有効化 |
 | WP_HAVE_HMAC | HMAC (ハッシュベースのメッセージ認証コード) を有効化 |
 | WP_HAVE_KRB5KDF | Kerberos 5 鍵導出関数を有効化 |
+| WP_HAVE_LMS | LMS (RFC 8554 / SP 800-208) 検証を有効化 |
 | WP_HAVE_MD5 | MD5 ハッシュアルゴリズムを有効化 |
 | WP_HAVE_MD5_SHA1 | MD5+SHA1 の組み合わせを有効化 |
+| WP_HAVE_MLDSA | ML-DSA (FIPS 204) ポスト量子署名を有効化 |
+| WP_HAVE_MLKEM | ML-KEM (FIPS 203) ポスト量子鍵カプセル化を有効化 |
 | WP_HAVE_PBE | パスワードベースの暗号化を有効化 |
 | WP_HAVE_RANDOM | 乱数生成を有効化 |
 | WP_HAVE_RSA | RSA 暗号化と署名を有効化 |
@@ -320,6 +328,7 @@ wolfProviderは、お客様がwolfProviderのビルド方法を設定できる
 | WP_HAVE_SHA512_224 | SHA512/224 ハッシュアルゴリズムを有効化 |
 | WP_HAVE_SHA512_256 | SHA512/256 ハッシュアルゴリズムを有効化 |
 | WP_HAVE_SHAKE_256 | SHAKE256 拡張出力関数を有効化 |
+| WP_HAVE_SLHDSA | SLH-DSA (FIPS 205) ポスト量子署名を有効化 |
 | WP_HAVE_TLS1_PRF | TLS1 擬似乱数関数を有効化 |
 | WP_HAVE_X25519 | X25519 楕円曲線を有効化 |
 | WP_HAVE_X448 | X448 楕円曲線を有効化 |

wolfProvider/src/chapter03.md

@@ -212,65 +212,11 @@ By default, wolfProvider only builds a shared library, with building of a static
 | --enable-usersettings | **Disabled** | Use your own user_settings.h and do not add Makefile CFLAGS |
 | --enable-dynamic | **Enabled** | Enable loading wolfProvider as a dynamic provider |
 | --enable-singlethreaded | **Disabled** | Enable wolfProvider single threaded |
+| --enable-pqc | **Disabled** | Enable ML-KEM and ML-DSA (FIPS 203/204) |
+| --enable-mlkem | **Disabled** | Enable ML-KEM (FIPS 203) only |
+| --enable-mldsa | **Disabled** | Enable ML-DSA (FIPS 204) only |
+| --enable-slhdsa | **Disabled** | Enable SLH-DSA (FIPS 205) only |
+| --enable-lms | **Disabled** | Enable LMS verification only |
 | | | |
 | --with-openssl=DIR |   | OpenSSL installation location to link against. If not set, use the system default library and include paths. |
 | --with-wolfssl=DIR |   | wolfSSL installation location to link against. If not set, use the system default library and include paths. |
-
-## Build Defines
-
-wolfProvider exposes several preprocessor defines that allow users to configure how wolfProvider is built. These are described in the table below.
-
-| Define                           | Description |
-| :------------------------------- | :----------------------------- |
-| WOLFPROVIDER_USER_SETTINGS | Read user-specified defines from user_settings.h. |
-| WOLFPROV_DEBUG | Output debug information |
-| WP_CHECK_FORCE_FAIL | Force failure checking for testing purposes |
-| WP_ALLOW_NON_FIPS | Allow certain non-FIPS algorithms in FIPS mode |
-| WP_HAVE_AESCCM | AES encryption in CCM (Counter with CBC-MAC) mode |
-| WP_HAVE_AESCFB | AES encryption in CFB (Cipher Feedback) mode |
-| WP_HAVE_AESCBC | AES encryption in CBC (Cipher Block Chaining) mode |
-| WP_HAVE_AESCTR | AES encryption in CTR (Counter) mode |
-| WP_HAVE_AESCTS | AES encryption in CTS (Ciphertext Stealing) mode |
-| WP_HAVE_AESECB | AES encryption in ECB (Electronic Codebook) mode |
-| WP_HAVE_AESGCM | AES encryption in GCM (Galois/Counter Mode) mode |
-| WP_HAVE_CMAC | CMAC (Cipher-based Message Authentication Code) support |
-| WP_HAVE_DES3CBC | Triple DES encryption in CBC mode |
-| WP_HAVE_DH | Diffie-Hellman key exchange support |
-| WP_HAVE_DIGEST | General digest/hash algorithm support |
-| WP_HAVE_ECC | General Elliptic Curve Cryptography support |
-| WP_HAVE_EC_P192 | P-192 elliptic curve support |
-| WP_HAVE_EC_P224 | P-224 elliptic curve support |
-| WP_HAVE_EC_P256 | P-256 elliptic curve support |
-| WP_HAVE_EC_P384 | P-384 elliptic curve support |
-| WP_HAVE_EC_P521 | P-521 elliptic curve support |
-| WP_HAVE_ECDH | ECDH (Elliptic Curve Diffie-Hellman) key exchange support |
-| WP_HAVE_ECDSA | ECDSA (Elliptic Curve Digital Signature Algorithm) support |
-| WP_HAVE_ECKEYGEN | Elliptic curve key generation support |
-| WP_HAVE_ED25519 | Ed25519 elliptic curve signature support |
-| WP_HAVE_ED448 | Ed448 elliptic curve signature support |
-| WP_HAVE_GMAC | GMAC (Galois/Counter Mode Authentication) support |
-| WP_HAVE_HKDF | HKDF (HMAC-based Key Derivation Function) support |
-| WP_HAVE_HMAC | HMAC (Hash-based Message Authentication Code) support |
-| WP_HAVE_KRB5KDF | Kerberos 5 Key Derivation Function support |
-| WP_HAVE_MD5 | MD5 hash algorithm support |
-| WP_HAVE_MD5_SHA1 | MD5+SHA1 combination support |
-| WP_HAVE_PBE | Password-Based Encryption support |
-| WP_HAVE_RANDOM | Random number generation support |
-| WP_HAVE_RSA | RSA encryption and signature support |
-| WP_HAVE_SHA1 | SHA1 hash algorithm support |
-| WP_HAVE_SHA224 | SHA224 hash algorithm support |
-| WP_HAVE_SHA256 | SHA256 hash algorithm support |
-| WP_HAVE_SHA384 | SHA384 hash algorithm support |
-| WP_HAVE_SHA3 | SHA3 family hash algorithm support |
-| WP_HAVE_SHA3_224 | SHA3-224 hash algorithm support |
-| WP_HAVE_SHA3_256 | SHA3-256 hash algorithm support |
-| WP_HAVE_SHA3_384 | SHA3-384 hash algorithm support |
-| WP_HAVE_SHA3_512 | SHA3-512 hash algorithm support |
-| WP_HAVE_SHA512 | SHA512 hash algorithm support |
-| WP_HAVE_SHA512_224 | SHA512/224 hash algorithm support |
-| WP_HAVE_SHA512_256 | SHA512/256 hash algorithm support |
-| WP_HAVE_SHAKE_256 | SHAKE256 extendable output function support |
-| WP_HAVE_TLS1_PRF | TLS1 Pseudo-Random Function support |
-| WP_HAVE_X25519 | X25519 elliptic curve support |
-| WP_HAVE_X448 | X448 elliptic curve support |
-| WP_RSA_PSS_ENCODING | RSA-PSS (Probabilistic Signature Scheme) encoding support |