Struct P256 

pub struct P256;

Available on crate feature p256 only.

Ciphersuite for P-256.

hash_to_F is implemented via the IETF draft for hash to curve’s hash_to_field (v16).

Trait Implementations

impl Ciphersuite for P256

const ID: &'static [u8] = b"P-256"

ID for this curve.

type F = Scalar

Scalar field element type.

type G = ProjectivePoint<NistP256>

Group element type.

type H = CoreWrapper<CtVariableCoreWrapper<Sha256VarCore, UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>, OidSha256>>

Hash algorithm used with this curve.

fn generator() -> <P256 as Ciphersuite>::G

Generator for the group.

fn hash_to_F(dst: &[u8], msg: &[u8]) -> <P256 as Ciphersuite>::F

Hash the provided domain-separation tag and message to a scalar. Ciphersuites MAY naively prefix the tag to the message, enabling transpotion between the two. Accordingly, this function should NOT be used in any scheme where one tag is a valid substring of another UNLESS the specific Ciphersuite is verified to handle the DST securely.

fn random_nonzero_F<R>(rng: &mut R) -> Self::F

where R: RngCore + CryptoRng,

Generate a random non-zero scalar.

fn read_F<R>(reader: &mut R) -> Result<Self::F, Error>

where R: Read,

Read a canonical scalar from something implementing std::io::Read.

fn read_G<R>(reader: &mut R) -> Result<Self::G, Error>

where R: Read,

Read a canonical point from something implementing std::io::Read.

impl Clone for P256

fn clone(&self) -> P256

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Curve for P256

Available on crate features secp256k1 or p256 only.

const CONTEXT: &'static [u8] = b"FROST-P256-SHA256-v1"

Context string for this curve.

fn hash(dst: &[u8], data: &[u8]) -> Output<Self::H>

Hash the given dst and data to a byte vector. Used to instantiate H4 and H5.

fn hash_to_F(dst: &[u8], msg: &[u8]) -> Self::F

Field element from hash. Used during key gen and by other crates under Serai as a general utility. Used to instantiate H1 and H3.

fn hash_msg(msg: &[u8]) -> Output<Self::H>

Hash the message for the binding factor. H4 from the IETF draft.

fn hash_commitments(commitments: &[u8]) -> Output<Self::H>

Hash the commitments for the binding factor. H5 from the IETF draft.

fn hash_binding_factor(binding: &[u8]) -> Self::F

Hash the commitments and message to calculate the binding factor. H1 from the IETF draft.

fn random_nonce<R: RngCore + CryptoRng>( secret: &Zeroizing<Self::F>, rng: &mut R, ) -> Zeroizing<Self::F>

Securely generate a random nonce. H3 from the IETF draft.

fn read_G<R: Read>(reader: &mut R) -> Result<Self::G>

Read a point from a reader, rejecting identity.

impl Debug for P256

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Hram<P256> for IetfP256Hram

Available on crate features secp256k1 or p256 only.

fn hram( R: &<P256 as Ciphersuite>::G, A: &<P256 as Ciphersuite>::G, m: &[u8], ) -> <P256 as Ciphersuite>::F

HRAm function to generate a challenge. H2 from the IETF draft, despite having a different argument set (not being pre-formatted).

impl PartialEq for P256

fn eq(&self, other: &P256) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Zeroize for P256

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.

impl Copy for P256

impl Eq for P256

impl StructuralPartialEq for P256