Crypto.ECC.Ed25519.EdDSA

Long-time plan: get rid of Integer and do all field arithmetic const-time by hand

Documentation

b :: Int

working on exactly 256 bits

q :: FPrime

the large prime

l :: FPrime

curve parameter l

d :: FPrime

curve parameter d

i :: FPrime

sqrt (-1) on our curve

h :: ByteString -> ByteString

wrapper for our hash function

by :: FPrime

the y coordinate of the base point of the curve

inf :: Point

null :: FPrime

special form of FPrime, no bits set

eins :: FPrime

special form of FPrime, lowest bit set

alleeins :: FPrime

special form of FPrime, all bits set

xrecover :: FPrime -> Integer -> FPrime

recover the x coordinate from the y coordinate and a signum

listofbits :: FPrime -> [FPrime]

convert a FPrime to a list of FPrimes, each 0 or 1 depending on the inputs bits

bPoint :: Point

base point on the curve

padd :: Point -> Point -> Point

scalar addition

pmul :: Point -> FPrime -> Point

scalar multiplication, branchfree in k, pattern-matched branch on j (length of k)

ison :: Point -> Bool

check if Point is on the curve, prevents some attacks

getFPrime :: Get FPrime

converts 32 little endian bytes into one FPrime

putFPrime :: FPrime -> Put

converts one FPrime into exactly 32 little endian bytes

pointtobs :: Point -> ByteString

convert a point on the curve to a ByteString

bstopoint :: ByteString -> Either String Point

convert a ByteString to a point on the curve

keyPoint :: SecFPrime -> PubKeyPoint

multiply the curve base point by a FPrime, giving a point on the curve

a :: SecKey -> Either String SecFPrime

data Point

Constructors

Point (FPrime, FPrime)

Instances

Eq Point

Methods

(==) :: Point -> Point -> Bool

(/=) :: Point -> Point -> Bool

Show Point

Methods

showsPrec :: Int -> Point -> ShowS

show :: Point -> String

showList :: [Point] -> ShowS

data VerifyResult

Constructors

SigOK

SigBad

Instances

Eq VerifyResult

Methods

(==) :: VerifyResult -> VerifyResult -> Bool

(/=) :: VerifyResult -> VerifyResult -> Bool

Show VerifyResult

Methods

showsPrec :: Int -> VerifyResult -> ShowS

show :: VerifyResult -> String

showList :: [VerifyResult] -> ShowS

type PubKey = ByteString

type PubKeyPoint = Point

type SecKey = ByteString

type SecFPrime = FPrime

type Signature = ByteString

type Message = ByteString

genkeys_simple :: IO (Either String (SecKey, PubKey))

generate a new key pair (secret and derived public key) using some external entropy

genkeys :: CryptoRandomGen g => g -> Either String (SecKey, PubKey)

generate a new key pair (secret and derived public key) using the supplied randomness-generator

sign :: SecKey -> Message -> Either String Signature

sign with secret key the message, resulting in message appended to the signature

sign_detached :: SecKey -> Message -> Either String Signature

sign with secret key the message, resulting in a detached signature