Crypto.ECC.Ed25519.Sign

Short-time plan: custom field arithmetic TODO: optimal const time inversion in 25519, see eccss-20130911b.pdf TODO: convert code to portable implementation and get rid of Integer

Documentation

genkeys :: IO (Either String (SecKey, PubKey))

generate a new key pair (secret and derived public key) using some external entropy | This may be insecure, depending on your environment, so for your usage case you may need to implement some better key generator!

publickey :: SecKey -> Either String PubKey

derive public key from secret key

dsign :: SecKey -> Message -> Either String Signature

sign the message m with secret key sk, resulting in a detached signature

sign :: SecKey -> Message -> Either String SignedMessage

sign with secret key the message, resulting in message appended to the signature

dverify :: PubKey -> Signature -> Message -> VerifyResult

in: public key, message and signature, out: is the signature valid for public key and message?

verify :: PubKey -> SignedMessage -> VerifyResult

wrapper around dverify, in case we work with a signed message, i.e. the signature with appended message

type Message = ByteString

just a newtype for the message

type PubKey = ByteString

just a newtype for the public key (string of 32 bytes, b=256 bit)

data SecKey

just a wrapper for the secret key (string of 32 bytes, b=256 bit)

type Signature = ByteString

just a newtype for the signature (string of 2*32 bytes, b=256 bit)

type SignedMessage = ByteString

just a newtype for the signature with appended message

data SigOK

clear signal that everything is ok

Constructors

SigOK

Instances

Show SigOK

Defined in Crypto.ECC.Ed25519.Internal.Ed25519

Methods

showsPrec :: Int -> SigOK -> ShowS

show :: SigOK -> String

showList :: [SigOK] -> ShowS

Eq SigOK

Defined in Crypto.ECC.Ed25519.Internal.Ed25519

Methods

(==) :: SigOK -> SigOK -> Bool

(/=) :: SigOK -> SigOK -> Bool

type VerifyResult = Either String SigOK

Result of verifying a signature should only yield if it's good or bad, not more, but contains an error string if underlying primitives failed