Struct modular_frost::curve::Secp256k1

pub struct Secp256k1;

Available on crate feature secp256k1 only.

Ciphersuite for Secp256k1.

hash_to_F is implemented via the IETF draft for hash to curve’s hash_to_field (v16).

Trait Implementations

impl Ciphersuite for Secp256k1

type F = Scalar

Scalar field element type.

type G = ProjectivePoint

Group element type.

type H = CoreWrapper<CtVariableCoreWrapper<Sha256VarCore, UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>, OidSha256>>

Hash algorithm used with this curve.

const ID: &'static [u8] = b"secp256k1"

ID for this curve.

fn generator() -> <Secp256k1 as Ciphersuite>::G

Generator for the group.

fn hash_to_F(dst: &[u8], msg: &[u8]) -> <Secp256k1 as Ciphersuite>::F

Hash the provided domain-separation tag and message to a scalar. Ciphersuites MAY naively prefix the tag to the message, enabling transpotion between the two. Accordingly, this function should NOT be used in any scheme where one tag is a valid substring of another UNLESS the specific Ciphersuite is verified to handle the DST securely.

fn random_nonzero_F<R>(rng: &mut R) -> Self::F

where R: RngCore + CryptoRng,

Generate a random non-zero scalar.

fn read_F<R>(reader: &mut R) -> Result<Self::F, Error>

where R: Read,

Available on crate features alloc or std only.

Read a canonical scalar from something implementing std::io::Read.

fn read_G<R>(reader: &mut R) -> Result<Self::G, Error>

where R: Read,

Available on crate features alloc or std only.

Read a canonical point from something implementing std::io::Read.

impl Clone for Secp256k1

fn clone(&self) -> Secp256k1

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Curve for Secp256k1

Available on crate features secp256k1 or p256 only.

const CONTEXT: &'static [u8] = b"FROST-secp256k1-SHA256-v1"

Context string for this curve.

fn hash(dst: &[u8], data: &[u8]) -> Output<Self::H>

Hash the given dst and data to a byte vector. Used to instantiate H4 and H5.

fn hash_to_F(dst: &[u8], msg: &[u8]) -> Self::F

Field element from hash. Used during key gen and by other crates under Serai as a general utility. Used to instantiate H1 and H3.

fn hash_msg(msg: &[u8]) -> Output<Self::H>

Hash the message for the binding factor. H4 from the IETF draft.

fn hash_commitments(commitments: &[u8]) -> Output<Self::H>

Hash the commitments for the binding factor. H5 from the IETF draft.

fn hash_binding_factor(binding: &[u8]) -> Self::F

Hash the commitments and message to calculate the binding factor. H1 from the IETF draft.

fn random_nonce<R: RngCore + CryptoRng>( secret: &Zeroizing<Self::F>, rng: &mut R, ) -> Zeroizing<Self::F>

Securely generate a random nonce. H3 from the IETF draft.

fn read_G<R: Read>(reader: &mut R) -> Result<Self::G>

Read a point from a reader, rejecting identity.

impl Debug for Secp256k1

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Hram<Secp256k1> for IetfSecp256k1Hram

Available on crate features secp256k1 or p256 only.

fn hram( R: &<Secp256k1 as Ciphersuite>::G, A: &<Secp256k1 as Ciphersuite>::G, m: &[u8], ) -> <Secp256k1 as Ciphersuite>::F

HRAm function to generate a challenge. H2 from the IETF draft, despite having a different argument set (not being pre-formatted).

impl PartialEq for Secp256k1

fn eq(&self, other: &Secp256k1) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Zeroize for Secp256k1

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.

impl Copy for Secp256k1

impl Eq for Secp256k1

impl StructuralPartialEq for Secp256k1