Struct modular_frost::algorithm::SchnorrSignature

pub struct SchnorrSignature<C>
where
    C: Ciphersuite,
{
    pub R: <C as Ciphersuite>::G,
    pub s: <C as Ciphersuite>::F,
}

A Schnorr signature of the form (R, s) where s = r + cx.

These are intended to be strict. It is generic over Ciphersuite which is for PrimeGroups, and mandates canonical encodings in its read function.

RFC 8032 has an alternative verification formula, 8R = 8s - 8cX, which is intended to handle torsioned nonces/public keys. Due to this library’s strict requirements, such signatures will not be verifiable with this library.

Fields

R: <C as Ciphersuite>::G

s: <C as Ciphersuite>::F

Implementations

impl<C> SchnorrSignature<C>

where C: Ciphersuite,

pub fn read<R>(reader: &mut R) -> Result<SchnorrSignature<C>, Error>

where R: Read,

Read a SchnorrSignature from something implementing Read.

pub fn write<W>(&self, writer: &mut W) -> Result<(), Error>

where W: Write,

Write a SchnorrSignature to something implementing Read.

pub fn serialize(&self) -> Vec<u8>

Serialize a SchnorrSignature, returning a Vec<u8>.

pub fn sign( private_key: &Zeroizing<<C as Ciphersuite>::F>, nonce: Zeroizing<<C as Ciphersuite>::F>, challenge: <C as Ciphersuite>::F, ) -> SchnorrSignature<C>

Sign a Schnorr signature with the given nonce for the specified challenge.

This challenge must be properly crafted, which means being binding to the public key, nonce, and any message. Failure to do so will let a malicious adversary to forge signatures for different keys/messages.

pub fn batch_statements( &self, public_key: <C as Ciphersuite>::G, challenge: <C as Ciphersuite>::F, ) -> [(<C as Ciphersuite>::F, <C as Ciphersuite>::G); 3]

Return the series of pairs whose products sum to zero for a valid signature. This is intended to be used with a multiexp.

pub fn verify( &self, public_key: <C as Ciphersuite>::G, challenge: <C as Ciphersuite>::F, ) -> bool

Verify a Schnorr signature for the given key with the specified challenge.

This challenge must be properly crafted, which means being binding to the public key, nonce, and any message. Failure to do so will let a malicious adversary to forge signatures for different keys/messages.

pub fn batch_verify<R, I>( &self, rng: &mut R, batch: &mut BatchVerifier<I, <C as Ciphersuite>::G>, id: I, public_key: <C as Ciphersuite>::G, challenge: <C as Ciphersuite>::F, )

where R: RngCore + CryptoRng, I: Copy + Zeroize,

Queue a signature for batch verification.

This challenge must be properly crafted, which means being binding to the public key, nonce, and any message. Failure to do so will let a malicious adversary to forge signatures for different keys/messages.

Trait Implementations

impl<C> Clone for SchnorrSignature<C>

where C: Clone + Ciphersuite, <C as Ciphersuite>::G: Clone, <C as Ciphersuite>::F: Clone,

fn clone(&self) -> SchnorrSignature<C>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<C> Debug for SchnorrSignature<C>

where C: Debug + Ciphersuite, <C as Ciphersuite>::G: Debug, <C as Ciphersuite>::F: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<C> PartialEq for SchnorrSignature<C>

where C: PartialEq + Ciphersuite, <C as Ciphersuite>::G: PartialEq, <C as Ciphersuite>::F: PartialEq,

fn eq(&self, other: &SchnorrSignature<C>) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<C> Zeroize for SchnorrSignature<C>

where C: Ciphersuite,

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.

impl<C> Copy for SchnorrSignature<C>

where C: Copy + Ciphersuite, <C as Ciphersuite>::G: Copy, <C as Ciphersuite>::F: Copy,

impl<C> Eq for SchnorrSignature<C>

where C: Eq + Ciphersuite, <C as Ciphersuite>::G: Eq, <C as Ciphersuite>::F: Eq,

impl<C> StructuralPartialEq for SchnorrSignature<C>

where C: Ciphersuite,