Struct k256::Secp256k1

pub struct Secp256k1;

secp256k1 (K-256) elliptic curve.

Specified in Certicom’s SECG in “SEC 2: Recommended Elliptic Curve Domain Parameters”:

https://www.secg.org/sec2-v2.pdf

The curve’s equation is y² = x³ + 7 over a ~256-bit prime field.

It’s primarily notable for usage in Bitcoin and other cryptocurrencies, particularly in conjunction with the Elliptic Curve Digital Signature Algorithm (ECDSA).

Trait Implementations

impl AssociatedOid for Secp256k1

Available on crate feature pkcs8 only.

const OID: ObjectIdentifier = _

The OID associated with this type.

impl Clone for Secp256k1

fn clone(&self) -> Secp256k1

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Curve for Secp256k1

type FieldBytesSize = UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>

32-byte serialized field elements.

type Uint = Uint<crypto_bigint::::uint::U256::{constant#0}>

256-bit field modulus.

const ORDER: U256 = ORDER

Curve order.

impl CurveArithmetic for Secp256k1

Available on crate feature arithmetic only.

type AffinePoint = AffinePoint

Elliptic curve point in affine coordinates.

type ProjectivePoint = ProjectivePoint

Elliptic curve point in projective coordinates.

type Scalar = Scalar

Scalar field modulo this curve’s order.

impl Debug for Secp256k1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl DecompactPoint<Secp256k1> for AffinePoint

Available on crate feature arithmetic only.

Decompaction using Taproot conventions as described in BIP 340.

fn decompact(x_bytes: &FieldBytes) -> CtOption<Self>

Attempt to decompact an elliptic curve point

impl DecompressPoint<Secp256k1> for AffinePoint

Available on crate feature arithmetic only.

fn decompress(x_bytes: &FieldBytes, y_is_odd: Choice) -> CtOption<Self>

Attempt to decompress an elliptic curve point.

impl Default for Secp256k1

fn default() -> Secp256k1

Returns the “default value” for a type.

impl DigestPrimitive for Secp256k1

Available on crate features ecdsa-core and sha256 only.

type Digest = CoreWrapper<CtVariableCoreWrapper<Sha256VarCore, UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>, OidSha256>>

Preferred digest to use when computing ECDSA signatures for this elliptic curve. This is typically a member of the SHA-2 family.

impl FieldBytesEncoding<Secp256k1> for U256

fn decode_field_bytes(field_bytes: &FieldBytes) -> Self

Decode unsigned integer from serialized field element.

fn encode_field_bytes(&self) -> FieldBytes

Encode unsigned integer into serialized field element.

impl FromEncodedPoint<Secp256k1> for AffinePoint

Available on crate feature arithmetic only.

fn from_encoded_point(encoded_point: &EncodedPoint) -> CtOption<Self>

Attempts to parse the given EncodedPoint as an SEC1-encoded AffinePoint.

Returns

None value if encoded_point is not on the secp256k1 curve.

impl FromEncodedPoint<Secp256k1> for ProjectivePoint

Available on crate feature arithmetic only.

fn from_encoded_point(p: &EncodedPoint) -> CtOption<Self>

Deserialize the type this trait is impl’d on from an EncodedPoint.

impl GroupDigest for Secp256k1

Available on crate features hash2curve and arithmetic only.

type FieldElement = FieldElement

The field element representation for a group value with multiple elements

fn hash_from_bytes<'a, X>( msgs: &[&[u8]], dsts: &'a [&'a [u8]], ) -> Result<Self::ProjectivePoint, Error>

where X: ExpandMsg<'a>,

Computes the hash to curve routine.

fn encode_from_bytes<'a, X>( msgs: &[&[u8]], dsts: &'a [&'a [u8]], ) -> Result<Self::ProjectivePoint, Error>

where X: ExpandMsg<'a>,

Computes the encode to curve routine.

fn hash_to_scalar<'a, X>( msgs: &[&[u8]], dsts: &'a [&'a [u8]], ) -> Result<Self::Scalar, Error>

where X: ExpandMsg<'a>, Self::Scalar: FromOkm,

Computes the hash to field routine according to https://www.ietf.org/archive/id/draft-irtf-cfrg-hash-to-curve-13.html#section-5 and returns a scalar.

impl Ord for Secp256k1

fn cmp(&self, other: &Secp256k1) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized + PartialOrd,

Restrict a value to a certain interval.

impl PartialEq for Secp256k1

fn eq(&self, other: &Secp256k1) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for Secp256k1

fn partial_cmp(&self, other: &Secp256k1) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

This method tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

This method tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

This method tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

This method tests greater than or equal to (for self and other) and is used by the >= operator.

impl PointCompression for Secp256k1

const COMPRESS_POINTS: bool = true

secp256k1 points are typically compressed.

impl SignPrimitive<Secp256k1> for Scalar

Available on crate features ecdsa-core and ecdsa only.

fn try_sign_prehashed<K>( &self, k: K, z: &FieldBytes, ) -> Result<(Signature, Option<RecoveryId>), Error>

where K: AsRef<Self> + Invert<Output = CtOption<Self>>,

Try to sign the prehashed message.

fn try_sign_prehashed_rfc6979<D>( &self, z: &GenericArray<u8, <C as Curve>::FieldBytesSize>, ad: &[u8], ) -> Result<(Signature<C>, Option<RecoveryId>), Error>

where Self: From<ScalarPrimitive<C>> + Invert<Output = CtOption<Self>>, D: Digest<OutputSize = <C as Curve>::FieldBytesSize> + BlockSizeUser + FixedOutput + FixedOutputReset,

Available on crate feature rfc6979 only.

Try to sign the given message digest deterministically using the method described in RFC6979 for computing ECDSA ephemeral scalar k.

impl ToEncodedPoint<Secp256k1> for AffinePoint

Available on crate feature arithmetic only.

fn to_encoded_point(&self, compress: bool) -> EncodedPoint

Serialize this value as a SEC1 EncodedPoint, optionally applying point compression.

impl ToEncodedPoint<Secp256k1> for ProjectivePoint

Available on crate feature arithmetic only.

fn to_encoded_point(&self, compress: bool) -> EncodedPoint

Serialize this value as a SEC1 EncodedPoint, optionally applying point compression.

impl VerifyPrimitive<Secp256k1> for AffinePoint

Available on crate features ecdsa-core and ecdsa only.

fn verify_prehashed(&self, z: &FieldBytes, sig: &Signature) -> Result<(), Error>

Verify the prehashed message against the provided ECDSA signature.

fn verify_digest<D>( &self, msg_digest: D, sig: &Signature<C>, ) -> Result<(), Error>

where D: FixedOutput<OutputSize = <C as Curve>::FieldBytesSize>,

Available on crate feature digest only.

Verify message digest against the provided signature.

impl Copy for Secp256k1

impl Eq for Secp256k1

impl PrimeCurve for Secp256k1

impl StructuralPartialEq for Secp256k1