feat: add SLH-DSA-SHA2 to bench driver and parser

- pqc_bench.sh: enable-slhdsa=yes,sha2 in configure flags; add
  six SHA2 run_bench calls alongside the existing SHAKE set
- pqc_parse.py: add _WOLFSSL_SLHDSA_SHA2_RE pattern to normalise
  wolfSSL SLH-DSA-SHA2-[SF] names to canonical SLH-DSA-SHA2-{bits}{sf}

Author: MarkAtwood

wolfcrypt/benchmark/pqc_bench.sh

@@ -169,7 +169,7 @@ if [ "$SKIP_BUILD" -eq 0 ]; then
     ./configure \
         --enable-mlkem \
         --enable-dilithium \
-        --enable-slhdsa \
+        "--enable-slhdsa=yes,sha2" \
         --enable-memory \
         "--enable-trackmemory=verbose" \
         "--enable-stacksize=verbose" \
@@ -247,14 +247,22 @@ run_bench "ML-KEM-1024"  -kyber1024
 # '-ml-dsa' benchmarks all three security levels (44/65/87) in one pass.
 run_bench "ML-DSA (levels 44/65/87)" -ml-dsa
 
-# SLH-DSA (NIST FIPS 205, formerly SPHINCS+) — all parameter sets
+# SLH-DSA (NIST FIPS 205, formerly SPHINCS+) — SHAKE parameter sets
 run_bench "SLH-DSA-SHAKE-128s"  -slhdsa-shake128s
 run_bench "SLH-DSA-SHAKE-128f"  -slhdsa-shake128f
 run_bench "SLH-DSA-SHAKE-192s"  -slhdsa-shake192s
 run_bench "SLH-DSA-SHAKE-192f"  -slhdsa-shake192f
 run_bench "SLH-DSA-SHAKE-256s"  -slhdsa-shake256s
 run_bench "SLH-DSA-SHAKE-256f"  -slhdsa-shake256f
 
+# SLH-DSA (NIST FIPS 205) — SHA2 parameter sets
+run_bench "SLH-DSA-SHA2-128s"   -slhdsa-sha2-128s
+run_bench "SLH-DSA-SHA2-128f"   -slhdsa-sha2-128f
+run_bench "SLH-DSA-SHA2-192s"   -slhdsa-sha2-192s
+run_bench "SLH-DSA-SHA2-192f"   -slhdsa-sha2-192f
+run_bench "SLH-DSA-SHA2-256s"   -slhdsa-sha2-256s
+run_bench "SLH-DSA-SHA2-256f"   -slhdsa-sha2-256f
+
 echo ""
 
 # ---------------------------------------------------------------------------

wolfcrypt/benchmark/pqc_parse.py

@@ -109,10 +109,11 @@ def make_record(
 # ---------------------------------------------------------------------------
 
 # wolfSSL emits "ML-KEM 512 " (space-separated, trailing space)
-_WOLFSSL_MLKEM_RE  = re.compile(r"ML-KEM\s+(\d+)\s*$", re.IGNORECASE)
-_WOLFSSL_MLDSA_RE  = re.compile(r"ML-DSA\s*$",         re.IGNORECASE)
-_WOLFSSL_SLHDSA_RE = re.compile(r"SLH-DSA-([SF])\s*$", re.IGNORECASE)
-_WOLFSSL_DILITH_RE = re.compile(r"DILITHIUM\s*$",       re.IGNORECASE)
+_WOLFSSL_MLKEM_RE       = re.compile(r"ML-KEM\s+(\d+)\s*$",       re.IGNORECASE)
+_WOLFSSL_MLDSA_RE       = re.compile(r"ML-DSA\s*$",                re.IGNORECASE)
+_WOLFSSL_SLHDSA_SHA2_RE = re.compile(r"SLH-DSA-SHA2-([SF])\s*$",  re.IGNORECASE)
+_WOLFSSL_SLHDSA_RE      = re.compile(r"SLH-DSA-([SF])\s*$",        re.IGNORECASE)
+_WOLFSSL_DILITH_RE      = re.compile(r"DILITHIUM\s*$",              re.IGNORECASE)
 
 # Canonical algorithm names already in NIST form (liboqs / OpenSSL / CIRCL)
 _CANONICAL_RE = re.compile(
@@ -152,6 +153,10 @@ def normalise_algorithm(raw_algo: str, raw_keysize: str = "") -> str:
     if _WOLFSSL_MLDSA_RE.match(algo):
         return f"ML-DSA-{keysize}"
 
+    m = _WOLFSSL_SLHDSA_SHA2_RE.match(algo)
+    if m:
+        return f"SLH-DSA-SHA2-{keysize}{m.group(1).lower()}"
+
     m = _WOLFSSL_SLHDSA_RE.match(algo)
     if m:
         return f"SLH-DSA-SHAKE-{keysize}{m.group(1).lower()}"