Top Description Inners Fields Constructors Methods
org.bouncycastle.math.ec.rfc8032

public abstract Class Ed448

extends Object
Class Inheritance
Imports
java.security.SecureRandom, org.bouncycastle.crypto.Xof, org.bouncycastle.crypto.digests.SHAKEDigest, org.bouncycastle.math.ec.rfc7748.X448, .X448Field, org.bouncycastle.math.raw.Nat
A low-level implementation of the Ed448 and Ed448ph instantiations of the Edwards-Curve Digital Signature Algorithm specified in RFC 8032.

The implementation uses the "signed mult-comb" algorithm (for scalar multiplication by a fixed point) from Mike Hamburg, "Fast and compact elliptic-curve cryptography". Standard projective coordinates are used for most point arithmetic.

Nested and Inner Type Summary

Modifier and TypeClass and Description
public static class
Ed448.Algorithm

private static class
Ed448.F

private static class
Ed448.PointAffine

private static class
Ed448.PointProjective

private static class
Ed448.PointTemp

public static class
Ed448.PublicPoint

Field Summary

Modifier and TypeField and Description
private static final int[]
B225_x

private static final int[]
B225_y

private static final int[]
B_x

private static final int[]
B_y

private static final int
C_d

private static final int
COORD_INTS

private static final byte[]
DOM4_PREFIX

private static final int[]
P

private static final int
POINT_BYTES

private static Ed448.PointAffine[]
PRECOMP_BASE225_WNAF

private static int[]
PRECOMP_BASE_COMB

private static Ed448.PointAffine[]
PRECOMP_BASE_WNAF

private static final int
PRECOMP_BLOCKS

private static final Object
PRECOMP_LOCK

private static final int
PRECOMP_MASK

private static final int
PRECOMP_POINTS

private static final int
PRECOMP_RANGE

private static final int
PRECOMP_SPACING

private static final int
PRECOMP_TEETH

public static final int
PREHASH_SIZE

public static final int
PUBLIC_KEY_SIZE

private static final int
SCALAR_BYTES

private static final int
SCALAR_INTS

public static final int
SECRET_KEY_SIZE

public static final int
SIGNATURE_SIZE

private static final int
WNAF_WIDTH_225

private static final int
WNAF_WIDTH_BASE

Constructor Summary

AccessConstructor and Description
public
Ed448()

Method Summary

Modifier and TypeMethod and Description
private static byte[]
calculateS(byte[] r, byte[] k, byte[] s)

private static boolean
checkContextVar(byte[] ctx)

private static int
checkPoint(Ed448.PointAffine p)

private static int
checkPoint(Ed448.PointProjective p)

private static boolean
checkPointFullVar(byte[] p)

private static boolean
checkPointOrderVar(Ed448.PointAffine p)

private static boolean
checkPointVar(byte[] p)

private static byte[]
copy(byte[] buf, int off, int len)

public static Xof
createPrehash()

private static Xof
createXof()

private static boolean
decodePointVar(byte[] p, boolean negate, Ed448.PointAffine r)

private static void
dom4(Xof d, byte phflag, byte[] ctx)

private static void
encodePoint(Ed448.PointAffine p, byte[] r, int rOff)

public static void
encodePublicPoint(Ed448.PublicPoint publicPoint, byte[] pk, int pkOff)

private static int
encodeResult(Ed448.PointProjective p, byte[] r, int rOff)

private static Ed448.PublicPoint
exportPoint(Ed448.PointAffine p)

public static void
generatePrivateKey(SecureRandom random, byte[] k)

public static void
generatePublicKey(byte[] sk, int skOff, byte[] pk, int pkOff)

public static Ed448.PublicPoint
generatePublicKey(byte[] sk, int skOff)

private static int
getWindow4(int[] x, int n)

private static void
implSign(Xof d, byte[] h, byte[] s, byte[] pk, int pkOff, byte[] ctx, byte phflag, byte[] m, int mOff, int mLen, byte[] sig, int sigOff)

private static void
implSign(byte[] sk, int skOff, byte[] ctx, byte phflag, byte[] m, int mOff, int mLen, byte[] sig, int sigOff)

private static void
implSign(byte[] sk, int skOff, byte[] pk, int pkOff, byte[] ctx, byte phflag, byte[] m, int mOff, int mLen, byte[] sig, int sigOff)

private static boolean
implVerify(byte[] sig, int sigOff, byte[] pk, int pkOff, byte[] ctx, byte phflag, byte[] m, int mOff, int mLen)

private static boolean
implVerify(byte[] sig, int sigOff, Ed448.PublicPoint publicPoint, byte[] ctx, byte phflag, byte[] m, int mOff, int mLen)

private static void
invertZs(Ed448.PointProjective[] points)

private static void
normalizeToAffine(Ed448.PointProjective p, Ed448.PointAffine r)

private static boolean
normalizeToNeutralElementVar(Ed448.PointProjective p)

private static void
pointAdd(Ed448.PointAffine p, Ed448.PointProjective r, Ed448.PointTemp t)

private static void
pointAdd(Ed448.PointProjective p, Ed448.PointProjective r, Ed448.PointTemp t)

private static void
pointAddVar(boolean negate, Ed448.PointAffine p, Ed448.PointProjective r, Ed448.PointTemp t)

private static void
pointAddVar(boolean negate, Ed448.PointProjective p, Ed448.PointProjective r, Ed448.PointTemp t)

private static void
pointCopy(Ed448.PointAffine p, Ed448.PointProjective r)

private static void
pointCopy(Ed448.PointProjective p, Ed448.PointProjective r)

private static void
pointDouble(Ed448.PointProjective r, Ed448.PointTemp t)

private static void
pointLookup(int block, int index, Ed448.PointAffine p)

private static void
pointLookup(int[] x, int n, int[] table, Ed448.PointProjective r)

private static void
pointLookup15(int[] table, Ed448.PointProjective r)

private static int[]
pointPrecompute(Ed448.PointProjective p, int count, Ed448.PointTemp t)

private static void
pointPrecompute(Ed448.PointAffine p, Ed448.PointProjective[] points, int pointsOff, int pointsLen, Ed448.PointTemp t)

private static void
pointSetNeutral(Ed448.PointProjective p)

public static void
precompute()

private static void
pruneScalar(byte[] n, int nOff, byte[] r)

private static void
scalarMult(byte[] k, Ed448.PointProjective p, Ed448.PointProjective r)

private static void
scalarMultBase(byte[] k, Ed448.PointProjective r)

private static void
scalarMultBaseEncoded(byte[] k, byte[] r, int rOff)

public static void
scalarMultBaseXY(X448.Friend friend, byte[] k, int kOff, int[] x, int[] y)

Note

Only for use by X448

private static void
scalarMultOrderVar(Ed448.PointAffine p, Ed448.PointProjective r)

private static void
scalarMultStraus225Var(int[] nb, int[] np, Ed448.PointAffine p, int[] nq, Ed448.PointAffine q, Ed448.PointProjective r)

public static void
sign(byte[] sk, int skOff, byte[] ctx, byte[] m, int mOff, int mLen, byte[] sig, int sigOff)

public static void
sign(byte[] sk, int skOff, byte[] pk, int pkOff, byte[] ctx, byte[] m, int mOff, int mLen, byte[] sig, int sigOff)

public static void
signPrehash(byte[] sk, int skOff, byte[] ctx, byte[] ph, int phOff, byte[] sig, int sigOff)

public static void
signPrehash(byte[] sk, int skOff, byte[] pk, int pkOff, byte[] ctx, byte[] ph, int phOff, byte[] sig, int sigOff)

public static void
signPrehash(byte[] sk, int skOff, byte[] ctx, Xof ph, byte[] sig, int sigOff)

public static void
signPrehash(byte[] sk, int skOff, byte[] pk, int pkOff, byte[] ctx, Xof ph, byte[] sig, int sigOff)

public static boolean
validatePublicKeyFull(byte[] pk, int pkOff)

public static Ed448.PublicPoint
validatePublicKeyFullExport(byte[] pk, int pkOff)

public static boolean
validatePublicKeyPartial(byte[] pk, int pkOff)

public static Ed448.PublicPoint
validatePublicKeyPartialExport(byte[] pk, int pkOff)

public static boolean
verify(byte[] sig, int sigOff, byte[] pk, int pkOff, byte[] ctx, byte[] m, int mOff, int mLen)

public static boolean
verify(byte[] sig, int sigOff, Ed448.PublicPoint publicPoint, byte[] ctx, byte[] m, int mOff, int mLen)

public static boolean
verifyPrehash(byte[] sig, int sigOff, byte[] pk, int pkOff, byte[] ctx, byte[] ph, int phOff)

public static boolean
verifyPrehash(byte[] sig, int sigOff, Ed448.PublicPoint publicPoint, byte[] ctx, byte[] ph, int phOff)

public static boolean
verifyPrehash(byte[] sig, int sigOff, byte[] pk, int pkOff, byte[] ctx, Xof ph)

public static boolean
verifyPrehash(byte[] sig, int sigOff, Ed448.PublicPoint publicPoint, byte[] ctx, Xof ph)

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait