feat(crypto): add post-quantum signature support

actuator/src/main/java/org/tron/core/actuator/AccountPermissionUpdateActuator.java

@@ -95,13 +95,14 @@ private boolean checkPermission(Permission permission) throws ContractValidateEx
     long weightSum = 0;
     List<ByteString> addressList = permission.getKeysList()
         .stream()
-        .map(x -> x.getAddress())
+        .map(Key::getAddress)
         .distinct()
         .collect(toList());
     if (addressList.size() != permission.getKeysList().size()) {
       throw new ContractValidateException(
           "address should be distinct in permission " + permission.getType());
     }
+
     for (Key key : permission.getKeysList()) {
       if (!DecodeUtil.addressValid(key.getAddress().toByteArray())) {
         throw new ContractValidateException("key is not a validate address");
@@ -237,4 +238,5 @@ public ByteString getOwnerAddress() throws InvalidProtocolBufferException {
   public long calcFee() {
     return chainBaseManager.getDynamicPropertiesStore().getUpdateAccountPermissionFee();
   }
+
 }

actuator/src/main/java/org/tron/core/actuator/VMActuator.java

@@ -400,7 +400,8 @@ private void create()
 
       long thisTxCPULimitInUs = calculateCpuLimitInUs(isConstantCall,
           rootRepository.getDynamicPropertiesStore().getMaxCpuTimeOfOneTx(),
-          getCpuLimitInUsRatio(), CommonParameter.getInstance().getConstantCallTimeoutMs());
+          getCpuLimitInUsRatio(),
+          CommonParameter.getInstance().getConstantCallTimeoutMs());
       long vmStartInUs = System.nanoTime() / VMConstant.ONE_THOUSAND;
       long vmShouldEndInUs = vmStartInUs + thisTxCPULimitInUs;
       ProgramInvoke programInvoke = ProgramInvokeFactory

actuator/src/main/java/org/tron/core/utils/ProposalUtil.java

@@ -941,6 +941,38 @@ public static void validator(DynamicPropertiesStore dynamicPropertiesStore,
         }
         break;
       }
+      case ALLOW_FN_DSA_512: {
+        if (!forkController.pass(ForkBlockVersionEnum.VERSION_4_8_2)) {
+          throw new ContractValidateException(
+              "Bad chain parameter id [ALLOW_FN_DSA_512]");
+        }
+        if (value != 0 && value != 1) {
+          throw new ContractValidateException(
+              "This value[ALLOW_FN_DSA_512] is only allowed to be 0 or 1");
+        }
+        if (dynamicPropertiesStore.getAllowFnDsa512() == value) {
+          throw new ContractValidateException(
+              "[ALLOW_FN_DSA_512] has been set to " + value
+                  + ", no need to propose again");
+        }
+        break;
+      }
+      case ALLOW_ML_DSA_44: {
+        if (!forkController.pass(ForkBlockVersionEnum.VERSION_4_8_2)) {
+          throw new ContractValidateException(
+              "Bad chain parameter id [ALLOW_ML_DSA_44]");
+        }
+        if (value != 0 && value != 1) {
+          throw new ContractValidateException(
+              "This value[ALLOW_ML_DSA_44] is only allowed to be 0 or 1");
+        }
+        if (dynamicPropertiesStore.getAllowMlDsa44() == value) {
+          throw new ContractValidateException(
+              "[ALLOW_ML_DSA_44] has been set to " + value
+                  + ", no need to propose again");
+        }
+        break;
+      }
       default:
         break;
     }
@@ -1029,7 +1061,10 @@ public enum ProposalType {         // current value, value range
     ALLOW_TVM_PRAGUE(95), // 0, 1
     ALLOW_TVM_OSAKA(96), // 0, 1
     ALLOW_HARDEN_RESOURCE_CALCULATION(97), // 0, 1
-    ALLOW_HARDEN_EXCHANGE_CALCULATION(98); // 0, 1
+    ALLOW_HARDEN_EXCHANGE_CALCULATION(98), // 0, 1
+    ALLOW_FN_DSA_512(99), // 0, 1
+    ALLOW_ML_DSA_44(100); // 0, 1
+
     private long code;
 
     ProposalType(long code) {

actuator/src/main/java/org/tron/core/utils/TransactionUtil.java

@@ -37,6 +37,7 @@
 import org.tron.api.GrpcAPI.TransactionExtention;
 import org.tron.api.GrpcAPI.TransactionSignWeight;
 import org.tron.api.GrpcAPI.TransactionSignWeight.Result;
+import org.tron.common.math.StrictMathWrapper;
 import org.tron.common.parameter.CommonParameter;
 import org.tron.common.utils.Sha256Hash;
 import org.tron.core.ChainBaseManager;
@@ -221,14 +222,28 @@ public TransactionSignWeight getTransactionSignWeight(Transaction trx) {
           }
         }
         tswBuilder.setPermission(permission);
-        if (trx.getSignatureCount() > 0) {
-          List<ByteString> approveList = new ArrayList<>();
-          long currentWeight = TransactionCapsule.checkWeight(permission, trx.getSignatureList(),
+        long currentWeight = 0L;
+        List<ByteString> approveList = new ArrayList<>();
+        if (trx.getSignatureCount() > 0 ) {
+          currentWeight = TransactionCapsule.checkWeight(permission, trx.getSignatureList(),
               Sha256Hash.hash(CommonParameter.getInstance()
                   .isECKeyCryptoEngine(), trx.getRawData().toByteArray()), approveList);
-          tswBuilder.addAllApprovedList(approveList);
-          tswBuilder.setCurrentWeight(currentWeight);
         }
+        if (chainBaseManager.getDynamicPropertiesStore().isAnyPqSchemeAllowed()
+            && trx.getPqAuthSigCount() > 0) {
+          try {
+            long pqWeight = TransactionCapsule.validatePQSignatureGetWeight(trx, permission,
+                chainBaseManager.getDynamicPropertiesStore(), approveList);
+            // sum all signature weight
+            currentWeight = StrictMathWrapper.addExact(currentWeight,pqWeight);
+          } catch (ArithmeticException e) {
+            throw new PermissionException("weight overflow");
+          }
+        }
+
+        tswBuilder.addAllApprovedList(approveList);
+        tswBuilder.setCurrentWeight(currentWeight);
+
         if (tswBuilder.getCurrentWeight() >= permission.getThreshold()) {
           resultBuilder.setCode(Result.response_code.ENOUGH_PERMISSION);
         } else {