Struct modular_frost::curve::Ed448

pub struct Ed448;

Available on crate feature ed448 only.

Ciphersuite for Ed448, inspired by RFC-8032. This is not recommended for usage.

hash_to_F is implemented with a naive concatenation of the dst and data, allowing transposition between the two. This means dst: b"abc", data: b"def", will produce the same scalar as dst: "abcdef", data: b"". Please use carefully, not letting dsts be substrings of each other.

Trait Implementations

impl Ciphersuite for Ed448

type F = Scalar

Scalar field element type.

type G = Point

Group element type.

type H = Shake256_114

Hash algorithm used with this curve.

const ID: &'static [u8] = b"ed448"

ID for this curve.

fn generator() -> <Ed448 as Ciphersuite>::G

Generator for the group.

fn hash_to_F(dst: &[u8], data: &[u8]) -> <Ed448 as Ciphersuite>::F

Hash the provided domain-separation tag and message to a scalar. Ciphersuites MAY naively prefix the tag to the message, enabling transpotion between the two. Accordingly, this function should NOT be used in any scheme where one tag is a valid substring of another UNLESS the specific Ciphersuite is verified to handle the DST securely.

fn random_nonzero_F<R>(rng: &mut R) -> Self::F

where R: RngCore + CryptoRng,

Generate a random non-zero scalar.

fn read_F<R>(reader: &mut R) -> Result<Self::F, Error>

where R: Read,

Available on crate features alloc or std only.

Read a canonical scalar from something implementing std::io::Read.

fn read_G<R>(reader: &mut R) -> Result<Self::G, Error>

where R: Read,

Available on crate features alloc or std only.

Read a canonical point from something implementing std::io::Read.

impl Clone for Ed448

fn clone(&self) -> Ed448

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Curve for Ed448

const CONTEXT: &'static [u8] = CONTEXT

Context string for this curve.

fn hash(dst: &[u8], data: &[u8]) -> Output<Self::H>

Hash the given dst and data to a byte vector. Used to instantiate H4 and H5.

fn hash_to_F(dst: &[u8], msg: &[u8]) -> Self::F

Field element from hash. Used during key gen and by other crates under Serai as a general utility. Used to instantiate H1 and H3.

fn hash_msg(msg: &[u8]) -> Output<Self::H>

Hash the message for the binding factor. H4 from the IETF draft.

fn hash_commitments(commitments: &[u8]) -> Output<Self::H>

Hash the commitments for the binding factor. H5 from the IETF draft.

fn hash_binding_factor(binding: &[u8]) -> Self::F

Hash the commitments and message to calculate the binding factor. H1 from the IETF draft.

fn random_nonce<R: RngCore + CryptoRng>( secret: &Zeroizing<Self::F>, rng: &mut R, ) -> Zeroizing<Self::F>

Securely generate a random nonce. H3 from the IETF draft.

fn read_G<R: Read>(reader: &mut R) -> Result<Self::G>

Read a point from a reader, rejecting identity.

impl Debug for Ed448

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Hram<Ed448> for IetfEd448Hram

fn hram(R: &Point, A: &Point, m: &[u8]) -> Scalar

HRAm function to generate a challenge. H2 from the IETF draft, despite having a different argument set (not being pre-formatted).

impl PartialEq for Ed448

fn eq(&self, other: &Ed448) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Zeroize for Ed448

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.

impl Copy for Ed448

impl Eq for Ed448

impl StructuralPartialEq for Ed448