SLOTHY: Add CI that runs the optimization in CI

Signed-off-by: Matthias J. Kannwischer <[email protected]>

Author: mkannwischer

.github/workflows/all.yml

@@ -65,6 +65,14 @@ jobs:
     needs: [ base, nix ]
     uses: ./.github/workflows/ct-tests.yml
     secrets: inherit
+  slothy:
+    name: SLOTHY
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    needs: [ base, nix ]
+    uses: ./.github/workflows/slothy.yml
+    secrets: inherit
   baremetal:
     name: Baremetal
     permissions:

.github/workflows/ci_ec2_reusable.yml

@@ -192,16 +192,24 @@ jobs:
           nix-verbose: ${{ inputs.verbose }}
           mldsa_parameter_set: ${{ inputs.cbmc_mldsa_parameter_set }}
           gh_token: ${{ secrets.AWS_GITHUB_TOKEN }}
-      # - name: SLOTHY
-      #   if: ${{ inputs.slothy }}
-      #   uses: ./.github/actions/setup-shell
-      #   with:
-      #     gh_token: ${{ secrets.AWS_GITHUB_TOKEN }}
-      #     nix-cache: true
-      #     nix-shell: ci-slothy
-      #     script: |
-      #       autogen --slothy
-      #       tests all --opt opt
+      - name: SLOTHY
+        if: ${{ inputs.slothy }}
+        uses: ./.github/actions/setup-shell
+        with:
+          gh_token: ${{ secrets.AWS_GITHUB_TOKEN }}
+          nix-cache: true
+          nix-shell: ci-slothy
+          script: |
+            autogen --slothy
+            tests all --opt opt
+            # Force testing of SLOTHY-optimized Keccak variants
+            # We can't run the examples here because some of them also specify the backend
+            make clean
+            tests all --no-examples --opt opt --cflags="-DMLD_CONFIG_FIPS202_BACKEND_FILE=\\\"fips202/native/aarch64/x1_scalar.h\\\""
+            make clean
+            tests all --no-examples --opt opt --cflags="-DMLD_CONFIG_FIPS202_BACKEND_FILE=\\\"fips202/native/aarch64/x4_v8a_scalar.h\\\""
+            make clean
+            tests all --no-examples --opt opt --cflags="-march=armv8.4-a+sha3 -DMLD_CONFIG_FIPS202_BACKEND_FILE=\\\"fips202/native/aarch64/x4_v8a_v84a_scalar.h\\\""
   stop-ec2-runner:
     name: Stop instance (${{ inputs.ec2_instance_type }})
     permissions:

.github/workflows/slothy.yml

@@ -0,0 +1,29 @@
+# Copyright (c) The mlkem-native project authors
+# Copyright (c) The mldsa-native project authors
+# SPDX-License-Identifier: Apache-2.0 OR ISC OR MIT
+
+name: SLOTHY re-optimization tests
+permissions:
+  contents: read
+on:
+  workflow_call:
+  workflow_dispatch:
+
+jobs:
+  slothy:
+    name: SLOTHY
+    if: ${{ github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork }}
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    uses: ./.github/workflows/ci_ec2_reusable.yml
+    with:
+      name: SLOTHY
+      ec2_instance_type: c8g.8xlarge
+      ec2_ami: ubuntu-latest (aarch64)
+      ec2_volume_size: 20
+      lint: false
+      test: false
+      cbmc: false
+      slothy: true
+    secrets: inherit