Bouncy Castle Provider 1.77 · org.bouncycastle.pqc.crypto.picnic.PicnicEngine

Field Summary

Modifier and Type	Field and Description
protected final int	andSizeBytes
private final int	CRYPTO_BYTES
private final int	CRYPTO_PUBLICKEYBYTES
private final int	CRYPTO_SECRETKEYBYTES
protected final Xof	digest
protected final int	digestSizeBytes
private static final Logger	LOG
protected static final int	LOWMC_MAX_AND_GATES
protected static final int	LOWMC_MAX_KEY_BITS
private static final int	LOWMC_MAX_STATE_SIZE
protected static final int	LOWMC_MAX_WORDS
protected final LowmcConstants	lowmcConstants
private static final int	MAX_AUX_BYTES
private static final int	MAX_DIGEST_SIZE
protected final int	numMPCParties
protected final int	numMPCRounds
protected final int	numOpenedRounds
protected final int	numRounds
protected final int	numSboxes
private final int	parameters
private static final int	PICNIC_MAX_LOWMC_BLOCK_SIZE
protected final int	pqSecurityLevel
protected static final int	saltSizeBytes
protected final int	seedSizeBytes
private int	signatureLength
protected final int	stateSizeBits
protected final int	stateSizeBytes
protected final int	stateSizeWords
private final int	transform
private static final int	TRANSFORM_FS < Largest signature size, in bytes
private static final int	TRANSFORM_INVALID
private static final int	TRANSFORM_UR
protected final int	UnruhGWithInputBytes
protected final int	UnruhGWithoutInputBytes
private static final int	WORD_SIZE_BITS

Constructor Summary

Access	Constructor and Description
pack-priv	PicnicEngine(int picnicParams, LowmcConstants lowmcConstants)

Method Summary

Modifier and Type	Method and Description
pack-priv static int	appendUnique(int[] list, int value, int position)
private boolean	arePaddingBitsZero(byte[] data, int bitLength)
private boolean	arePaddingBitsZero(int[] data, int bitLength)
private void	aux_mpc_AND(int mask_a, int mask_b, int fresh_output_mask, Tape tape)
protected void	aux_mpc_sbox(int[] in, int[] out, Tape tape)
pack-priv static int	bitsToChunks(int chunkLenBits, byte[] input, int inputLen, int[] chunks)
private void	Commit(byte[] seed, int seedOffset, View view, byte[] hash)
private void	commit(byte[] digest_arr, byte[] seed, byte[] aux, byte[] salt, int t, int j)
private void	commit_h(byte[] digest_arr, byte[][] C)
private void	commit_v(byte[] digest_arr, byte[] input, Msg msg)
private void	computeSaltAndRootSeed(byte[] saltAndRoot, int[] privateKey, int[] pubKey, int[] plaintext, byte[] message)
private byte[]	computeSeeds(int[] privateKey, int[] publicKey, int[] plaintext, byte[] message)
private boolean	contains(int[] list, int len, int value)
private int	countNonZeroChallenges(byte[] challengeBits, int challengeBitsOffset)
private boolean	createRandomTape(byte[] seed, int seedOffset, byte[] salt, int roundNumber, int playerNumber, byte[] tape, int tapeLen)
private void	createRandomTapes(Tape tape, byte[][] seeds, int seedsOffset, byte[] salt, int t)
public void	crypto_sign(byte[] sm, byte[] m, byte[] sk)
public void	crypto_sign_keypair(byte[] pk, byte[] sk, SecureRandom random)
public boolean	crypto_sign_open(byte[] m, byte[] sm, byte[] pk)
private int	deserializeSignature(Signature sig, byte[] sigBytes, int sigBytesLen, int sigBytesOffset)
private int	deserializeSignature2(Signature2 sig, byte[] sigBytes, int sigLen, int sigBytesOffset)
private void	expandChallengeHash(byte[] challengeHash, int[] challengeC, int[] challengeP)
pack-priv static int	extend(int bit)
private void	G(int viewNumber, byte[] seed, int seedOffset, View view, byte[] output)
private void	getAuxBits(byte[] output, Tape tape)
pack-priv int	getChallenge(byte[] challenge, int round)
private int[]	getMissingLeavesList(int[] challengeC)
public int	getPublicKeySize()
public int	getSecretKeySize()
public int	getSignatureSize(int messageLength)
public int	getTrueSignatureSize()
private void	H3(int[] circuitOutput, int[] plaintext, View[][] views, byte[][][] as, byte[] challengeBits, byte[] salt, byte[] message, byte[][][] gs)
private void	H3(int[] circuitOutput, int[] plaintext, int[][][] viewOutputs, byte[][][] as, byte[] challengeBits, byte[] salt, byte[] message, byte[][][] gs)
private void	HCP(byte[] challengeHash, int[] challengeC, int[] challengeP, byte[][] Ch, byte[] hCv, byte[] salt, int[] pubKey, int[] plaintext, byte[] message)
private void	implH3(int[] circuitOutput, int[] plaintext, byte[][][] as, byte[] challengeBits, byte[] salt, byte[] message, byte[][][] gs)
pack-priv static int	indexOf(int[] list, int len, int value)
pack-priv static boolean	is_picnic3(int params)
private void	LowMCEnc(int[] plaintext, int[] output, int[] key)
protected void	matrix_mul(int[] output, int[] state, int[] matrix, int matrixOffset)
protected void	matrix_mul_offset(int[] output, int outputOffset, int[] state, int stateOffset, int[] matrix, int matrixOffset)
private void	mpc_AND(int[] in1, int[] in2, int[] out, Tape rand, View[] views) Functions implementing Sign
private int	mpc_AND(int a, int b, int mask_a, int mask_b, Tape tape, Msg msg)
pack-priv void	mpc_AND_verify(int[] in1, int[] in2, int[] out, Tape rand, View view1, View view2)
private void	mpc_LowMC(Tape tapes, View[] views, int[] plaintext, int[] slab)
pack-priv void	mpc_LowMC_verify(View view1, View view2, Tape tapes, int[] tmp, int[] plaintext, int challenge)
private void	mpc_matrix_mul(int[] output, int outputOffset, int[] state, int stateOffset, int[] matrix, int matrixOffset, int players)
private void	mpc_sbox(int[] state, int[] state_masks, Tape tape, Msg msg)
private void	mpc_substitution(int[] state, Tape rand, View[] views)
pack-priv void	mpc_substitution_verify(int[] state, Tape rand, View view1, View view2)
private void	mpc_xor(int[] state, int[] in, int players)
private void	mpc_xor_constant(int[] state, int stateOffset, int[] in, int inOffset, int len)
private void	mpc_xor_constant_verify(int[] state, int[] in, int inOffset, int length, int challenge)
private void	picnic_keygen(byte[] plaintext_bytes, byte[] ciphertext_bytes, byte[] data_bytes, SecureRandom random)
private void	picnic_read_public_key(int[] ciphertext, int[] plaintext, byte[] pk)
private boolean	picnic_sign(byte[] sk, byte[] message, byte[] signature)
private int	picnic_verify(byte[] pk, byte[] message, byte[] signature, int sigLen)
private int	picnic_write_private_key(byte[] data, byte[] ciphertext, byte[] plaintext, byte[] buf)
private int	picnic_write_public_key(byte[] ciphertext, byte[] plaintext, byte[] buf)
pack-priv void	prove(Signature.Proof proof, int challenge, byte[] seeds, int seedsOffset, View[] views, byte[][] commitments, byte[][] gs)
pack-priv int	serializeSignature(Signature sig, byte[] sigBytes, int sigOffset) Serialization functions
private int	serializeSignature2(Signature2 sig, byte[] sigBytes, int sigOffset)
private void	setChallenge(byte[] challenge, int round, int trit)
private int	sign_picnic1(int[] privateKey, int[] pubKey, int[] plaintext, byte[] message, Signature sig)
private boolean	sign_picnic3(int[] privateKey, int[] pubKey, int[] plaintext, byte[] message, Signature2 sig)
private int	simulateOnline(int[] maskedKey, Tape tape, int[] tmp_shares, Msg msg, int[] plaintext, int[] pubKey)
private static boolean	subarrayEquals(byte[] a, byte[] b, int length)
private static boolean	subarrayEquals(int[] a, int[] b, int length)
private void	substitution(int[] state)
private void	tapesToWords(int[] shares, Tape tape)
private void	updateDigest(int[] block, byte[] temp)
private int	verify(Signature sig, int[] pubKey, int[] plaintext, byte[] message)
private int	verify_picnic3(Signature2 sig, int[] pubKey, int[] plaintext, byte[] message)
pack-priv boolean	verifyProof(Signature.Proof proof, View view1, View view2, int challenge, byte[] salt, int roundNumber, byte[] tmp, int[] plaintext, Tape tape)
private void	wordToMsgs(int w, Msg msg)
protected void	xor_array(int[] out, int[] in1, int[] in2, int in2_offset)
private void	xor_three(int[] output, int[] in1, int[] in2, int[] in3)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

andSizeBytes	back to summary
protected final int andSizeBytes

CRYPTO_BYTES	back to summary
private final int CRYPTO_BYTES

CRYPTO_PUBLICKEYBYTES	back to summary
private final int CRYPTO_PUBLICKEYBYTES

CRYPTO_SECRETKEYBYTES	back to summary
private final int CRYPTO_SECRETKEYBYTES

digest	back to summary
protected final Xof digest

digestSizeBytes	back to summary
protected final int digestSizeBytes

LOG	back to summary
private static final Logger LOG

LOWMC_MAX_AND_GATES	back to summary
protected static final int LOWMC_MAX_AND_GATES

LOWMC_MAX_KEY_BITS	back to summary
protected static final int LOWMC_MAX_KEY_BITS

LOWMC_MAX_STATE_SIZE	back to summary
private static final int LOWMC_MAX_STATE_SIZE

LOWMC_MAX_WORDS	back to summary
protected static final int LOWMC_MAX_WORDS

lowmcConstants	back to summary
protected final LowmcConstants lowmcConstants

MAX_AUX_BYTES	back to summary
private static final int MAX_AUX_BYTES

MAX_DIGEST_SIZE	back to summary
private static final int MAX_DIGEST_SIZE

numMPCParties	back to summary
protected final int numMPCParties

numMPCRounds	back to summary
protected final int numMPCRounds

numOpenedRounds	back to summary
protected final int numOpenedRounds

numRounds	back to summary
protected final int numRounds

numSboxes	back to summary
protected final int numSboxes

parameters	back to summary
private final int parameters

PICNIC_MAX_LOWMC_BLOCK_SIZE	back to summary
private static final int PICNIC_MAX_LOWMC_BLOCK_SIZE

pqSecurityLevel	back to summary
protected final int pqSecurityLevel

saltSizeBytes	back to summary
protected static final int saltSizeBytes

seedSizeBytes	back to summary
protected final int seedSizeBytes

signatureLength	back to summary
private int signatureLength

stateSizeBits	back to summary
protected final int stateSizeBits

stateSizeBytes	back to summary
protected final int stateSizeBytes

stateSizeWords	back to summary
protected final int stateSizeWords

transform	back to summary
private final int transform

TRANSFORM_FS	back to summary
private static final int TRANSFORM_FS < Largest signature size, in bytes

TRANSFORM_INVALID	back to summary
private static final int TRANSFORM_INVALID

TRANSFORM_UR	back to summary
private static final int TRANSFORM_UR

UnruhGWithInputBytes	back to summary
protected final int UnruhGWithInputBytes

UnruhGWithoutInputBytes	back to summary
protected final int UnruhGWithoutInputBytes

WORD_SIZE_BITS	back to summary
private static final int WORD_SIZE_BITS

Constructor Detail

PicnicEngine	back to summary
pack-priv PicnicEngine(int picnicParams, LowmcConstants lowmcConstants)

Method Detail

appendUnique	back to summary
pack-priv static int appendUnique(int[] list, int value, int position)

arePaddingBitsZero	back to summary
private boolean arePaddingBitsZero(byte[] data, int bitLength)

arePaddingBitsZero	back to summary
private boolean arePaddingBitsZero(int[] data, int bitLength)

aux_mpc_AND	back to summary
private void aux_mpc_AND(int mask_a, int mask_b, int fresh_output_mask, Tape tape)

aux_mpc_sbox	back to summary
protected void aux_mpc_sbox(int[] in, int[] out, Tape tape)

bitsToChunks	back to summary
pack-priv static int bitsToChunks(int chunkLenBits, byte[] input, int inputLen, int[] chunks)

Commit	back to summary
private void Commit(byte[] seed, int seedOffset, View view, byte[] hash)

commit	back to summary
private void commit(byte[] digest_arr, byte[] seed, byte[] aux, byte[] salt, int t, int j)

commit_h	back to summary
private void commit_h(byte[] digest_arr, byte[][] C)

commit_v	back to summary
private void commit_v(byte[] digest_arr, byte[] input, Msg msg)

computeSaltAndRootSeed	back to summary
private void computeSaltAndRootSeed(byte[] saltAndRoot, int[] privateKey, int[] pubKey, int[] plaintext, byte[] message)

computeSeeds	back to summary
private byte[] computeSeeds(int[] privateKey, int[] publicKey, int[] plaintext, byte[] message)

contains	back to summary
private boolean contains(int[] list, int len, int value)

countNonZeroChallenges	back to summary
private int countNonZeroChallenges(byte[] challengeBits, int challengeBitsOffset)

createRandomTape	back to summary
private boolean createRandomTape(byte[] seed, int seedOffset, byte[] salt, int roundNumber, int playerNumber, byte[] tape, int tapeLen)

createRandomTapes	back to summary
private void createRandomTapes(Tape tape, byte[][] seeds, int seedsOffset, byte[] salt, int t)

crypto_sign	back to summary
public void crypto_sign(byte[] sm, byte[] m, byte[] sk)

crypto_sign_keypair	back to summary
public void crypto_sign_keypair(byte[] pk, byte[] sk, SecureRandom random)

crypto_sign_open	back to summary
public boolean crypto_sign_open(byte[] m, byte[] sm, byte[] pk)

deserializeSignature	back to summary
private int deserializeSignature(Signature sig, byte[] sigBytes, int sigBytesLen, int sigBytesOffset)

deserializeSignature2	back to summary
private int deserializeSignature2(Signature2 sig, byte[] sigBytes, int sigLen, int sigBytesOffset)

expandChallengeHash	back to summary
private void expandChallengeHash(byte[] challengeHash, int[] challengeC, int[] challengeP)

extend	back to summary
pack-priv static int extend(int bit)

G	back to summary
private void G(int viewNumber, byte[] seed, int seedOffset, View view, byte[] output)

getAuxBits	back to summary
private void getAuxBits(byte[] output, Tape tape)

getChallenge	back to summary
pack-priv int getChallenge(byte[] challenge, int round)

getMissingLeavesList	back to summary
private int[] getMissingLeavesList(int[] challengeC)

getPublicKeySize	back to summary
public int getPublicKeySize()

getSecretKeySize	back to summary
public int getSecretKeySize()

getSignatureSize	back to summary
public int getSignatureSize(int messageLength)

getTrueSignatureSize	back to summary
public int getTrueSignatureSize()

H3	back to summary
private void H3(int[] circuitOutput, int[] plaintext, View[][] views, byte[][][] as, byte[] challengeBits, byte[] salt, byte[] message, byte[][][] gs)

H3	back to summary
private void H3(int[] circuitOutput, int[] plaintext, int[][][] viewOutputs, byte[][][] as, byte[] challengeBits, byte[] salt, byte[] message, byte[][][] gs)

HCP	back to summary
private void HCP(byte[] challengeHash, int[] challengeC, int[] challengeP, byte[][] Ch, byte[] hCv, byte[] salt, int[] pubKey, int[] plaintext, byte[] message)

implH3	back to summary
private void implH3(int[] circuitOutput, int[] plaintext, byte[][][] as, byte[] challengeBits, byte[] salt, byte[] message, byte[][][] gs)

indexOf	back to summary
pack-priv static int indexOf(int[] list, int len, int value)

is_picnic3	back to summary
pack-priv static boolean is_picnic3(int params)

LowMCEnc	back to summary
private void LowMCEnc(int[] plaintext, int[] output, int[] key)

matrix_mul	back to summary
protected void matrix_mul(int[] output, int[] state, int[] matrix, int matrixOffset)

matrix_mul_offset	back to summary
protected void matrix_mul_offset(int[] output, int outputOffset, int[] state, int stateOffset, int[] matrix, int matrixOffset)

mpc_AND	back to summary
private void mpc_AND(int[] in1, int[] in2, int[] out, Tape rand, View[] views) Functions implementing Sign

mpc_AND	back to summary
private int mpc_AND(int a, int b, int mask_a, int mask_b, Tape tape, Msg msg)

mpc_AND_verify	back to summary
pack-priv void mpc_AND_verify(int[] in1, int[] in2, int[] out, Tape rand, View view1, View view2)

mpc_LowMC	back to summary
private void mpc_LowMC(Tape tapes, View[] views, int[] plaintext, int[] slab)

mpc_LowMC_verify	back to summary
pack-priv void mpc_LowMC_verify(View view1, View view2, Tape tapes, int[] tmp, int[] plaintext, int challenge)

mpc_matrix_mul	back to summary
private void mpc_matrix_mul(int[] output, int outputOffset, int[] state, int stateOffset, int[] matrix, int matrixOffset, int players)

mpc_sbox	back to summary
private void mpc_sbox(int[] state, int[] state_masks, Tape tape, Msg msg)

mpc_substitution	back to summary
private void mpc_substitution(int[] state, Tape rand, View[] views)

mpc_substitution_verify	back to summary
pack-priv void mpc_substitution_verify(int[] state, Tape rand, View view1, View view2)

mpc_xor	back to summary
private void mpc_xor(int[] state, int[] in, int players)

mpc_xor_constant	back to summary
private void mpc_xor_constant(int[] state, int stateOffset, int[] in, int inOffset, int len)

mpc_xor_constant_verify	back to summary
private void mpc_xor_constant_verify(int[] state, int[] in, int inOffset, int length, int challenge)

picnic_keygen	back to summary
private void picnic_keygen(byte[] plaintext_bytes, byte[] ciphertext_bytes, byte[] data_bytes, SecureRandom random)

picnic_read_public_key	back to summary
private void picnic_read_public_key(int[] ciphertext, int[] plaintext, byte[] pk)

picnic_sign	back to summary
private boolean picnic_sign(byte[] sk, byte[] message, byte[] signature)

picnic_verify	back to summary
private int picnic_verify(byte[] pk, byte[] message, byte[] signature, int sigLen)

picnic_write_private_key	back to summary
private int picnic_write_private_key(byte[] data, byte[] ciphertext, byte[] plaintext, byte[] buf)

picnic_write_public_key	back to summary
private int picnic_write_public_key(byte[] ciphertext, byte[] plaintext, byte[] buf)

prove	back to summary
pack-priv void prove(Signature.Proof proof, int challenge, byte[] seeds, int seedsOffset, View[] views, byte[][] commitments, byte[][] gs)

serializeSignature	back to summary
pack-priv int serializeSignature(Signature sig, byte[] sigBytes, int sigOffset) Serialization functions

serializeSignature2	back to summary
private int serializeSignature2(Signature2 sig, byte[] sigBytes, int sigOffset)

setChallenge	back to summary
private void setChallenge(byte[] challenge, int round, int trit)

sign_picnic1	back to summary
private int sign_picnic1(int[] privateKey, int[] pubKey, int[] plaintext, byte[] message, Signature sig)

sign_picnic3	back to summary
private boolean sign_picnic3(int[] privateKey, int[] pubKey, int[] plaintext, byte[] message, Signature2 sig)

simulateOnline	back to summary
private int simulateOnline(int[] maskedKey, Tape tape, int[] tmp_shares, Msg msg, int[] plaintext, int[] pubKey)

subarrayEquals	back to summary
private static boolean subarrayEquals(byte[] a, byte[] b, int length)

subarrayEquals	back to summary
private static boolean subarrayEquals(int[] a, int[] b, int length)

substitution	back to summary
private void substitution(int[] state)

tapesToWords	back to summary
private void tapesToWords(int[] shares, Tape tape)

updateDigest	back to summary
private void updateDigest(int[] block, byte[] temp)

verify	back to summary
private int verify(Signature sig, int[] pubKey, int[] plaintext, byte[] message)

verify_picnic3	back to summary
private int verify_picnic3(Signature2 sig, int[] pubKey, int[] plaintext, byte[] message)

verifyProof	back to summary
pack-priv boolean verifyProof(Signature.Proof proof, View view1, View view2, int challenge, byte[] salt, int roundNumber, byte[] tmp, int[] plaintext, Tape tape)

wordToMsgs	back to summary
private void wordToMsgs(int w, Msg msg)

xor_array	back to summary
protected void xor_array(int[] out, int[] in1, int[] in2, int in2_offset)

xor_three	back to summary
private void xor_three(int[] output, int[] in1, int[] in2, int[] in3)

pack-priv Class PicnicEngine

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail