func TestingOnlyNewDRBG(hash func() fips140.Hash, entropy, nonce []byte, s []byte) *hmacDRBGTestingOnlyNewDRBG creates an SP 800-90A Rev. 1 HMAC_DRBG with a plain personalization string.
This should only be used for ACVP testing. hmacDRBG is not intended to be used directly.
func Verify[P Point[P]](c *Curve[P], pub *PublicKey, hash []byte, sig *Signature) errorVerify verifies the signature, sig, of hash (which should be the result of hashing a larger message) using the public key, pub. If the hash is longer than the bit-length of the private key's curve order, the hash will be truncated to that length.
The inputs are not considered confidential, and may leak through timing side channels, or if an attacker has control of part of the inputs.
type Curve[P Point[P]] struct {
N *bigmod.Modulus
// contains filtered or unexported fields
}type Point[P any] interface {
*nistec.P224Point | *nistec.P256Point | *nistec.P384Point | *nistec.P521Point
Bytes() []byte
BytesX() ([]byte, error)
SetBytes([]byte) (P, error)
ScalarMult(P, []byte) (P, error)
ScalarBaseMult([]byte) (P, error)
Add(p1, p2 P) P
}Point is a generic constraint for the nistec Point types.
type PrivateKey struct {
// contains filtered or unexported fields
}func GenerateKey[P Point[P]](c *Curve[P], rand io.Reader) (*PrivateKey, error)GenerateKey generates a new ECDSA private key pair for the specified curve.
func NewPrivateKey[P Point[P]](c *Curve[P], D, Q []byte) (*PrivateKey, error)type PublicKey struct {
// contains filtered or unexported fields
}func NewPublicKey[P Point[P]](c *Curve[P], Q []byte) (*PublicKey, error)type Signature struct {
R, S []byte
}Signature is an ECDSA signature, where r and s are represented as big-endian byte slices of the same length as the curve order.
func Sign[P Point[P], H fips140.Hash](c *Curve[P], h func() H, priv *PrivateKey, rand io.Reader, hash []byte) (*Signature, error)Sign signs a hash (which shall be the result of hashing a larger message with the hash function H) using the private key, priv. If the hash is longer than the bit-length of the private key's curve order, the hash will be truncated to that length.
func SignDeterministic[P Point[P], H fips140.Hash](c *Curve[P], h func() H, priv *PrivateKey, hash []byte) (*Signature, error)SignDeterministic signs a hash (which shall be the result of hashing a larger message with the hash function H) using the private key, priv. If the hash is longer than the bit-length of the private key's curve order, the hash will be truncated to that length. This applies Deterministic ECDSA as specified in FIPS 186-5 and RFC 6979.