Package org.bouncycastle.math.ec.rfc8032

Class Ed448

java.lang.Object

org.bouncycastle.math.ec.rfc8032.Ed448

public abstract class Ed448
extends Object

A low-level implementation of the Ed448 and Ed448ph instantiations of the Edwards-Curve Digital Signature Algorithm specified in RFC 8032.

The implementation uses the "signed mult-comb" algorithm (for scalar multiplication by a fixed point) from Mike Hamburg, "Fast and compact elliptic-curve cryptography". Standard projective coordinates are used for most point arithmetic.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	Ed448.Algorithm
static final class	Ed448.PublicPoint

Field Summary

Fields

Modifier and Type	Field	Description
static final int	PREHASH_SIZE
static final int	PUBLIC_KEY_SIZE
static final int	SECRET_KEY_SIZE
static final int	SIGNATURE_SIZE

Constructor Summary

Constructors

Constructor	Description
Ed448()

Method Summary

Modifier and Type	Method	Description
static Xof	createPrehash()
static void	encodePublicPoint(Ed448.PublicPoint publicPoint, byte[] pk, int pkOff)
static void	generatePrivateKey(SecureRandom random, byte[] k)
static Ed448.PublicPoint	generatePublicKey(byte[] sk, int skOff)
static void	generatePublicKey(byte[] sk, int skOff, byte[] pk, int pkOff)
static void	precompute()
static void	scalarMultBaseXY(X448.Friend friend, byte[] k, int kOff, int[] x, int[] y)	NOTE: Only for use by X448
static void	sign(byte[] sk, int skOff, byte[] ctx, byte[] m, int mOff, int mLen, byte[] sig, int sigOff)
static void	sign(byte[] sk, int skOff, byte[] pk, int pkOff, byte[] ctx, byte[] m, int mOff, int mLen, byte[] sig, int sigOff)
static void	signPrehash(byte[] sk, int skOff, byte[] ctx, byte[] ph, int phOff, byte[] sig, int sigOff)
static void	signPrehash(byte[] sk, int skOff, byte[] pk, int pkOff, byte[] ctx, byte[] ph, int phOff, byte[] sig, int sigOff)
static void	signPrehash(byte[] sk, int skOff, byte[] pk, int pkOff, byte[] ctx, Xof ph, byte[] sig, int sigOff)
static void	signPrehash(byte[] sk, int skOff, byte[] ctx, Xof ph, byte[] sig, int sigOff)
static boolean	validatePublicKeyFull(byte[] pk, int pkOff)
static Ed448.PublicPoint	validatePublicKeyFullExport(byte[] pk, int pkOff)
static boolean	validatePublicKeyPartial(byte[] pk, int pkOff)
static Ed448.PublicPoint	validatePublicKeyPartialExport(byte[] pk, int pkOff)
static boolean	verify(byte[] sig, int sigOff, byte[] pk, int pkOff, byte[] ctx, byte[] m, int mOff, int mLen)
static boolean	verify(byte[] sig, int sigOff, Ed448.PublicPoint publicPoint, byte[] ctx, byte[] m, int mOff, int mLen)
static boolean	verifyPrehash(byte[] sig, int sigOff, byte[] pk, int pkOff, byte[] ctx, byte[] ph, int phOff)
static boolean	verifyPrehash(byte[] sig, int sigOff, byte[] pk, int pkOff, byte[] ctx, Xof ph)
static boolean	verifyPrehash(byte[] sig, int sigOff, Ed448.PublicPoint publicPoint, byte[] ctx, byte[] ph, int phOff)
static boolean	verifyPrehash(byte[] sig, int sigOff, Ed448.PublicPoint publicPoint, byte[] ctx, Xof ph)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

PREHASH_SIZE

public static final int PREHASH_SIZE

See Also:

• Constant Field Values

PUBLIC_KEY_SIZE

public static final int PUBLIC_KEY_SIZE

See Also:

• Constant Field Values

SECRET_KEY_SIZE

public static final int SECRET_KEY_SIZE

See Also:

• Constant Field Values

SIGNATURE_SIZE

public static final int SIGNATURE_SIZE

See Also:

• Constant Field Values

Constructor Details

Ed448

public Ed448()

Method Details

createPrehash

public static Xof createPrehash()

encodePublicPoint

public static void encodePublicPoint(Ed448.PublicPoint publicPoint,
 byte[] pk,
 int pkOff)

generatePrivateKey

public static void generatePrivateKey(SecureRandom random,
 byte[] k)

generatePublicKey

public static void generatePublicKey(byte[] sk,
 int skOff,
 byte[] pk,
 int pkOff)

generatePublicKey

public static Ed448.PublicPoint generatePublicKey(byte[] sk,
 int skOff)

precompute

public static void precompute()

scalarMultBaseXY

public static void scalarMultBaseXY(X448.Friend friend,
 byte[] k,
 int kOff,
 int[] x,
 int[] y)

NOTE: Only for use by X448

sign

public static void sign(byte[] sk,
 int skOff,
 byte[] ctx,
 byte[] m,
 int mOff,
 int mLen,
 byte[] sig,
 int sigOff)

sign

public static void sign(byte[] sk,
 int skOff,
 byte[] pk,
 int pkOff,
 byte[] ctx,
 byte[] m,
 int mOff,
 int mLen,
 byte[] sig,
 int sigOff)

signPrehash

public static void signPrehash(byte[] sk,
 int skOff,
 byte[] ctx,
 byte[] ph,
 int phOff,
 byte[] sig,
 int sigOff)

signPrehash

public static void signPrehash(byte[] sk,
 int skOff,
 byte[] pk,
 int pkOff,
 byte[] ctx,
 byte[] ph,
 int phOff,
 byte[] sig,
 int sigOff)

signPrehash

public static void signPrehash(byte[] sk,
 int skOff,
 byte[] ctx,
 Xof ph,
 byte[] sig,
 int sigOff)

signPrehash

public static void signPrehash(byte[] sk,
 int skOff,
 byte[] pk,
 int pkOff,
 byte[] ctx,
 Xof ph,
 byte[] sig,
 int sigOff)

validatePublicKeyFull

public static boolean validatePublicKeyFull(byte[] pk,
 int pkOff)

validatePublicKeyFullExport

public static Ed448.PublicPoint validatePublicKeyFullExport(byte[] pk,
 int pkOff)

validatePublicKeyPartial

public static boolean validatePublicKeyPartial(byte[] pk,
 int pkOff)

validatePublicKeyPartialExport

public static Ed448.PublicPoint validatePublicKeyPartialExport(byte[] pk,
 int pkOff)

verify

public static boolean verify(byte[] sig,
 int sigOff,
 byte[] pk,
 int pkOff,
 byte[] ctx,
 byte[] m,
 int mOff,
 int mLen)

verify

public static boolean verify(byte[] sig,
 int sigOff,
 Ed448.PublicPoint publicPoint,
 byte[] ctx,
 byte[] m,
 int mOff,
 int mLen)

verifyPrehash

public static boolean verifyPrehash(byte[] sig,
 int sigOff,
 byte[] pk,
 int pkOff,
 byte[] ctx,
 byte[] ph,
 int phOff)

verifyPrehash

public static boolean verifyPrehash(byte[] sig,
 int sigOff,
 Ed448.PublicPoint publicPoint,
 byte[] ctx,
 byte[] ph,
 int phOff)

verifyPrehash

public static boolean verifyPrehash(byte[] sig,
 int sigOff,
 byte[] pk,
 int pkOff,
 byte[] ctx,
 Xof ph)

verifyPrehash

public static boolean verifyPrehash(byte[] sig,
 int sigOff,
 Ed448.PublicPoint publicPoint,
 byte[] ctx,
 Xof ph)