Modulecryptonite-0.30Haskell2010

Crypto.PubKey.ECDSA

Elliptic Curve Digital Signature Algorithm, with the parameterized curve implementations provided by module Crypto.ECC.

Public/private key pairs can be generated using curveGenerateKeyPair or decoded from binary.

WARNING: Only curve P-256 has constant-time implementation. Signature operations with P-384 and P-521 may leak the private key.

Signature verification should be safe for all curves.

3 types
1 class
13 values

Packagecryptonite-0.30
Exports17
LanguageHaskell2010
LicenceBSD-3-Clause
SourceECDSA.hs

classclass EllipticCurveBasepointArith curve => EllipticCurveECDSA curve where

Elliptic curves with ECDSA capabilities.

Methods

scalarIsValid :: proxy curve -> Scalar curve -> Bool
Is a scalar in the accepted range for ECDSA
scalarIsZero :: proxy curve -> Scalar curve -> Bool
Test whether the scalar is zero
scalarInv :: proxy curve -> Scalar curve -> Maybe (Scalar curve)
Scalar inversion modulo the curve order
pointX :: proxy curve -> Point curve -> Maybe (Scalar curve)
Return the point X coordinate as a scalar

Instances3EllipticCurveECDSA

EllipticCurveECDSA Curve_P256R1Defined in cryptonite-0.30 · Crypto.PubKey.ECDSA
EllipticCurveECDSA Curve_P384R1Defined in cryptonite-0.30 · Crypto.PubKey.ECDSA
EllipticCurveECDSA Curve_P521R1Defined in cryptonite-0.30 · Crypto.PubKey.ECDSA

Public keys

4 declarations

typetype PublicKey curve = Point curve

ECDSA Public Key.

valueencodePublic

:: (EllipticCurve curve, ByteArray bs)
=> proxy curve
-> PublicKey curve
-> bs

Encode a public key into binary form, i.e. the uncompressed encoding referenced from RFC 5480 section 2.2.

valuedecodePublic

:: (EllipticCurve curve, ByteArray bs)
=> proxy curve
-> bs
-> CryptoFailable (PublicKey curve)

Try to decode the binary form of a public key.

valuetoPublic

:: EllipticCurveECDSA curve
=> proxy curve
-> PrivateKey curve
-> PublicKey curve

Create a public key from a private key.

Private keys

3 declarations

typetype PrivateKey curve = Scalar curve

ECDSA Private Key.

valueencodePrivate

:: (EllipticCurveECDSA curve, ByteArray bs)
=> proxy curve
-> PrivateKey curve
-> bs

Encode a private key into binary form, i.e. the privateKey field described in RFC 5915.

valuedecodePrivate

:: (EllipticCurveECDSA curve, ByteArray bs)
=> proxy curve
-> bs
-> CryptoFailable (PrivateKey curve)

Try to decode the binary form of a private key.

Signatures

3 declarations

datadata Signature curve

Represent a ECDSA signature namely R and S.

Constructors

Signature
- sign_r :: Scalar curve
  ECDSA r
- sign_s :: Scalar curve
  ECDSA s

Instances3Eq, Show, NFData

Eq (Scalar curve) => Eq (Signature curve)Defined in cryptonite-0.30 · Crypto.PubKey.ECDSA
Show (Scalar curve) => Show (Signature curve)Defined in cryptonite-0.30 · Crypto.PubKey.ECDSA
NFData (Scalar curve) => NFData (Signature curve)Defined in cryptonite-0.30 · Crypto.PubKey.ECDSA

valuesignatureFromIntegers

:: EllipticCurveECDSA curve
=> proxy curve
-> (Integer, Integer)
-> CryptoFailable (Signature curve)

Create a signature from integers (R, S).

valuesignatureToIntegers

:: EllipticCurveECDSA curve
=> proxy curve
-> Signature curve
-> (Integer, Integer)

Get integers (R, S) from a signature.

The values can then be used to encode the signature to binary with ASN.1.

Generation and verification

6 declarations

valuesignWith

:: (EllipticCurveECDSA curve, ByteArrayAccess msg, HashAlgorithm hash)
=> proxy curve
-> Scalar curve
-> PrivateKey curve
-> hash
-> msg
-> Maybe (Signature curve)

Sign message using the private key and an explicit k scalar.

valuesignDigestWith

:: (EllipticCurveECDSA curve, HashAlgorithm hash)
=> proxy curve
-> Scalar curve
-> PrivateKey curve
-> Digest hash
-> Maybe (Signature curve)

Sign digest using the private key and an explicit k scalar.

valuesign

:: (EllipticCurveECDSA curve, MonadRandom m, ByteArrayAccess msg, HashAlgorithm hash)
=> proxy curve
-> PrivateKey curve
-> hash
-> msg
-> m (Signature curve)

Sign a message using hash and private key.

valuesignDigest

:: (EllipticCurveECDSA curve, MonadRandom m, HashAlgorithm hash)
=> proxy curve
-> PrivateKey curve
-> Digest hash
-> m (Signature curve)

Sign a digest using hash and private key.

valueverify

:: (EllipticCurveECDSA curve, ByteArrayAccess msg, HashAlgorithm hash)
=> proxy curve
-> hash
-> PublicKey curve
-> Signature curve
-> msg
-> Bool

Verify a signature using hash and public key.

valueverifyDigest

:: (EllipticCurveECDSA curve, HashAlgorithm hash)
=> proxy curve
-> PublicKey curve
-> Signature curve
-> Digest hash
-> Bool

Verify a digest using hash and public key.