net.i2p.crypto.eddsa

Class EdDSAEngine

java.lang.Object

java.security.SignatureSpi

java.security.Signature

net.i2p.crypto.eddsa.EdDSAEngine

Direct Known Subclasses:

RedDSAEngine

public class EdDSAEngine
extends Signature

EdDSA signature engine implementing the Java Signature API. Supports both standard streaming and one-shot operation modes for efficiency.

Field Summary

Fields

Modifier and Type	Field and Description
protected MessageDigest	digest
static AlgorithmParameterSpec	ONE_SHOT_MODE To efficiently sign or verify data in one shot, pass this to setParameters() after initSign() or initVerify() but BEFORE THE FIRST AND ONLY update(data) or update(data, off, len).
static String	SIGNATURE_ALGORITHM

Fields inherited from class java.security.Signature

SIGN, state, UNINITIALIZED, VERIFY

Fields inherited from class java.security.SignatureSpi

appRandom

Constructor Summary

Constructors

Constructor and Description
EdDSAEngine() No specific EdDSA-internal hash requested, allows any EdDSA key.
EdDSAEngine(MessageDigest digest) Specific EdDSA-internal hash requested, only matching keys will be allowed.

Method Summary

Modifier and Type	Method and Description
protected void	digestInitSign(EdDSAPrivateKey privKey)
protected void	engineInitSign(PrivateKey privateKey)
protected void	engineInitVerify(PublicKey publicKey)
protected void	engineSetParameter(AlgorithmParameterSpec spec)
protected byte[]	engineSign()
protected void	engineUpdate(byte b)
protected void	engineUpdate(byte[] b, int off, int len)
protected boolean	engineVerify(byte[] sigBytes)
byte[]	signOneShot(byte[] data) To efficiently sign all the data in one shot, if it is available, use this method, which will avoid copying the data.
byte[]	signOneShot(byte[] data, int off, int len) To efficiently sign all the data in one shot, if it is available, use this method, which will avoid copying the data.
boolean	verifyOneShot(byte[] data, byte[] signature) To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data.
boolean	verifyOneShot(byte[] data, byte[] signature, int sigoff, int siglen) To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data.
boolean	verifyOneShot(byte[] data, int off, int len, byte[] signature) To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data.
boolean	verifyOneShot(byte[] data, int off, int len, byte[] signature, int sigoff, int siglen) To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data.

Methods inherited from class java.security.Signature

clone, getAlgorithm, getInstance, getInstance, getInstance, getParameter, getParameters, getProvider, initSign, initSign, initVerify, initVerify, setParameter, setParameter, sign, sign, toString, update, update, update, update, verify, verify

Methods inherited from class java.security.SignatureSpi

engineGetParameter, engineGetParameters, engineInitSign, engineSetParameter, engineSign, engineUpdate, engineVerify

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

digest

protected MessageDigest digest

ONE_SHOT_MODE

public static final AlgorithmParameterSpec ONE_SHOT_MODE

To efficiently sign or verify data in one shot, pass this to setParameters() after initSign() or initVerify() but BEFORE THE FIRST AND ONLY update(data) or update(data, off, len). The data reference will be saved and then used in sign() or verify() without copying the data. Violate these rules and you will get a SignatureException.

SIGNATURE_ALGORITHM

public static final String SIGNATURE_ALGORITHM

See Also:

Constant Field Values

Constructor Detail

EdDSAEngine

public EdDSAEngine()

No specific EdDSA-internal hash requested, allows any EdDSA key.

EdDSAEngine

public EdDSAEngine(MessageDigest digest)

Specific EdDSA-internal hash requested, only matching keys will be allowed.

Parameters:

digest - the hash algorithm that keys must have to sign or verify.

Method Detail

digestInitSign

protected void digestInitSign(EdDSAPrivateKey privKey)

engineInitSign

protected void engineInitSign(PrivateKey privateKey)
                       throws InvalidKeyException

Specified by:

engineInitSign in class SignatureSpi

Throws:

InvalidKeyException

engineInitVerify

protected void engineInitVerify(PublicKey publicKey)
                         throws InvalidKeyException

Specified by:

engineInitVerify in class SignatureSpi

Throws:

InvalidKeyException

engineSetParameter

protected void engineSetParameter(AlgorithmParameterSpec spec)
                           throws InvalidAlgorithmParameterException

Overrides:

engineSetParameter in class SignatureSpi

Throws:

InvalidAlgorithmParameterException - if spec is ONE_SHOT_MODE and update() already called

See Also:

ONE_SHOT_MODE

engineSign

protected byte[] engineSign()
                     throws SignatureException

Specified by:

engineSign in class SignatureSpi

Throws:

SignatureException

engineUpdate

protected void engineUpdate(byte b)
                     throws SignatureException

Specified by:

engineUpdate in class SignatureSpi

Throws:

SignatureException - if in one-shot mode

engineUpdate

protected void engineUpdate(byte[] b,
                            int off,
                            int len)
                     throws SignatureException

Specified by:

engineUpdate in class SignatureSpi

Throws:

SignatureException - if one-shot rules are violated

engineVerify

protected boolean engineVerify(byte[] sigBytes)
                        throws SignatureException

Specified by:

engineVerify in class SignatureSpi

Throws:

SignatureException

signOneShot

public byte[] signOneShot(byte[] data)
                   throws SignatureException

To efficiently sign all the data in one shot, if it is available, use this method, which will avoid copying the data. Same as:

  setParameter(ONE_SHOT_MODE)
  update(data)
  sig = sign()

Parameters:

data - the message to be signed

Returns:

the signature

Throws:

SignatureException - if update() already called

See Also:

ONE_SHOT_MODE

signOneShot

public byte[] signOneShot(byte[] data,
                          int off,
                          int len)
                   throws SignatureException

To efficiently sign all the data in one shot, if it is available, use this method, which will avoid copying the data. Same as:

  setParameter(ONE_SHOT_MODE)
  update(data, off, len)
  sig = sign()

Parameters:

data - byte array containing the message to be signed

off - the start of the message inside data

len - the length of the message

Returns:

the signature

Throws:

SignatureException - if update() already called

See Also:

ONE_SHOT_MODE

verifyOneShot

public boolean verifyOneShot(byte[] data,
                             byte[] signature)
                      throws SignatureException

To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data. Same as:

  setParameter(ONE_SHOT_MODE)
  update(data)
  ok = verify(signature)

Parameters:

data - the message that was signed

signature - of the message

Returns:

true if the signature is valid, false otherwise

Throws:

SignatureException - if update() already called

See Also:

ONE_SHOT_MODE

verifyOneShot

public boolean verifyOneShot(byte[] data,
                             byte[] signature,
                             int sigoff,
                             int siglen)
                      throws SignatureException

To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data. Same as:

  setParameter(ONE_SHOT_MODE)
  update(data)
  ok = verify(signature, sigoff, siglen)

Parameters:

data - the message that was signed

signature - byte array containing the signature

sigoff - the start of the signature

siglen - the length of the signature

Returns:

true if the signature is valid, false otherwise

Throws:

SignatureException - if update() already called

See Also:

ONE_SHOT_MODE

verifyOneShot

public boolean verifyOneShot(byte[] data,
                             int off,
                             int len,
                             byte[] signature)
                      throws SignatureException

To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data. Same as:

  setParameter(ONE_SHOT_MODE)
  update(data, off, len)
  ok = verify(signature)

Parameters:

data - byte array containing the message that was signed

off - the start of the message inside data

len - the length of the message

signature - of the message

Returns:

true if the signature is valid, false otherwise

Throws:

SignatureException - if update() already called

See Also:

ONE_SHOT_MODE

verifyOneShot

public boolean verifyOneShot(byte[] data,
                             int off,
                             int len,
                             byte[] signature,
                             int sigoff,
                             int siglen)
                      throws SignatureException

To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data. Same as:

  setParameter(ONE_SHOT_MODE)
  update(data, off, len)
  ok = verify(signature, sigoff, siglen)

Parameters:

data - byte array containing the message that was signed

off - the start of the message inside data

len - the length of the message

signature - byte array containing the signature

sigoff - the start of the signature

siglen - the length of the signature

Returns:

true if the signature is valid, false otherwise

Throws:

SignatureException - if update() already called

See Also:

ONE_SHOT_MODE