Safe Haskell	None
Language	Haskell2010

Crypto.PubKey.ECC.ECDSA

Description

WARNING: Signature operations may leak the private key. The nonce is inverted without a side channel on every curve, and on P-256 the scalar multiplication is the constant-time C implementation, but what surrounds them is Integer arithmetic, whose cost follows the values it is given, and on every other curve the multiplication follows the nonce as well. Signature verification takes only public values and should be safe.

Synopsis

data Signature = Signature {
- sign_r :: Integer
- sign_s :: Integer
}
data ExtendedSignature = ExtendedSignature {
- index :: Integer
- parity :: Bool
- signature :: Signature
}
type PublicPoint = Point
data PublicKey = PublicKey {
- public_curve :: Curve
- public_q :: PublicPoint
}
type PrivateNumber = Integer
data PrivateKey = PrivateKey {
- private_curve :: Curve
- private_d :: PrivateNumber
}
data KeyPair = KeyPair Curve PublicPoint PrivateNumber
toPublicKey :: KeyPair -> PublicKey
toPrivateKey :: KeyPair -> PrivateKey
signWith :: (ByteArrayAccess msg, HashAlgorithm hash) => Integer -> PrivateKey -> hash -> msg -> Maybe Signature
signDigestWith :: HashAlgorithm hash => Integer -> PrivateKey -> Digest hash -> Maybe Signature
signExtendedDigestWith :: HashAlgorithm hash => Integer -> PrivateKey -> Digest hash -> Maybe ExtendedSignature
sign :: (ByteArrayAccess msg, HashAlgorithm hash, MonadRandom m) => PrivateKey -> hash -> msg -> m Signature
signDigest :: (HashAlgorithm hash, MonadRandom m) => PrivateKey -> Digest hash -> m Signature
signExtendedDigest :: (HashAlgorithm hash, MonadRandom m) => PrivateKey -> Digest hash -> m ExtendedSignature
verify :: (ByteArrayAccess msg, HashAlgorithm hash) => hash -> PublicKey -> Signature -> msg -> Bool
verifyDigest :: HashAlgorithm hash => PublicKey -> Signature -> Digest hash -> Bool
recover :: (ByteArrayAccess msg, HashAlgorithm hash) => hash -> Curve -> ExtendedSignature -> msg -> Maybe PublicKey
recoverDigest :: HashAlgorithm hash => Curve -> ExtendedSignature -> Digest hash -> Maybe PublicKey
deterministicNonce :: (HashAlgorithm hashDRG, HashAlgorithm hashDigest) => hashDRG -> PrivateKey -> Digest hashDigest -> (Integer -> Maybe a) -> a

Documentation

data Signature Source #

Represent a ECDSA signature namely R and S.

Constructors

Signature
Fields sign_r :: Integer ECDSA r sign_s :: Integer ECDSA s

Instances

Instances details

Data Signature Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Signature -> c Signature # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Signature # toConstr :: Signature -> Constr # dataTypeOf :: Signature -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c Signature) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Signature) # gmapT :: (forall b. Data b => b -> b) -> Signature -> Signature # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Signature -> r # gmapQr :: forall r r'. (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Signature -> r # gmapQ :: (forall d. Data d => d -> u) -> Signature -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> Signature -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> Signature -> m Signature # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Signature -> m Signature # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Signature -> m Signature #
Read Signature Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods readsPrec :: Int -> ReadS Signature # readList :: ReadS [Signature] # readPrec :: ReadPrec Signature # readListPrec :: ReadPrec [Signature] #
Show Signature Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods showsPrec :: Int -> Signature -> ShowS # show :: Signature -> String # showList :: [Signature] -> ShowS #
Eq Signature Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods (==) :: Signature -> Signature -> Bool # (/=) :: Signature -> Signature -> Bool #

data ExtendedSignature Source #

ECDSA signature with public key recovery information.

Constructors

ExtendedSignature
Fields index :: Integer Index of the X coordinate parity :: Bool Parity of the Y coordinate signature :: Signature Inner signature

Instances

Instances details

Data ExtendedSignature Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> ExtendedSignature -> c ExtendedSignature # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c ExtendedSignature # toConstr :: ExtendedSignature -> Constr # dataTypeOf :: ExtendedSignature -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c ExtendedSignature) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c ExtendedSignature) # gmapT :: (forall b. Data b => b -> b) -> ExtendedSignature -> ExtendedSignature # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> ExtendedSignature -> r # gmapQr :: forall r r'. (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> ExtendedSignature -> r # gmapQ :: (forall d. Data d => d -> u) -> ExtendedSignature -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> ExtendedSignature -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> ExtendedSignature -> m ExtendedSignature # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> ExtendedSignature -> m ExtendedSignature # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> ExtendedSignature -> m ExtendedSignature #
Read ExtendedSignature Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods readsPrec :: Int -> ReadS ExtendedSignature # readList :: ReadS [ExtendedSignature] # readPrec :: ReadPrec ExtendedSignature # readListPrec :: ReadPrec [ExtendedSignature] #
Show ExtendedSignature Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods showsPrec :: Int -> ExtendedSignature -> ShowS # show :: ExtendedSignature -> String # showList :: [ExtendedSignature] -> ShowS #
Eq ExtendedSignature Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods (==) :: ExtendedSignature -> ExtendedSignature -> Bool # (/=) :: ExtendedSignature -> ExtendedSignature -> Bool #

type PublicPoint = Point Source #

ECC Public Point

data PublicKey Source #

ECDSA Public Key.

Constructors

PublicKey
Fields public_curve :: Curve public_q :: PublicPoint

Instances

Instances details

Data PublicKey Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> PublicKey -> c PublicKey # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c PublicKey # toConstr :: PublicKey -> Constr # dataTypeOf :: PublicKey -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c PublicKey) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c PublicKey) # gmapT :: (forall b. Data b => b -> b) -> PublicKey -> PublicKey # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> PublicKey -> r # gmapQr :: forall r r'. (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> PublicKey -> r # gmapQ :: (forall d. Data d => d -> u) -> PublicKey -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> PublicKey -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> PublicKey -> m PublicKey # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> PublicKey -> m PublicKey # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> PublicKey -> m PublicKey #
Read PublicKey Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods readsPrec :: Int -> ReadS PublicKey # readList :: ReadS [PublicKey] # readPrec :: ReadPrec PublicKey # readListPrec :: ReadPrec [PublicKey] #
Show PublicKey Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods showsPrec :: Int -> PublicKey -> ShowS # show :: PublicKey -> String # showList :: [PublicKey] -> ShowS #
Eq PublicKey Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods (==) :: PublicKey -> PublicKey -> Bool # (/=) :: PublicKey -> PublicKey -> Bool #

type PrivateNumber = Integer Source #

ECC Private Number

data PrivateKey Source #

ECDSA Private Key.

Constructors

PrivateKey
Fields private_curve :: Curve private_d :: PrivateNumber

Instances

Instances details

Data PrivateKey Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> PrivateKey -> c PrivateKey # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c PrivateKey # toConstr :: PrivateKey -> Constr # dataTypeOf :: PrivateKey -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c PrivateKey) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c PrivateKey) # gmapT :: (forall b. Data b => b -> b) -> PrivateKey -> PrivateKey # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> PrivateKey -> r # gmapQr :: forall r r'. (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> PrivateKey -> r # gmapQ :: (forall d. Data d => d -> u) -> PrivateKey -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> PrivateKey -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> PrivateKey -> m PrivateKey # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> PrivateKey -> m PrivateKey # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> PrivateKey -> m PrivateKey #
Read PrivateKey Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods readsPrec :: Int -> ReadS PrivateKey # readList :: ReadS [PrivateKey] # readPrec :: ReadPrec PrivateKey # readListPrec :: ReadPrec [PrivateKey] #
Show PrivateKey Source #	The curve is shown; `private_d` is not. Use `debugShow` to see it.
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods showsPrec :: Int -> PrivateKey -> ShowS # show :: PrivateKey -> String # showList :: [PrivateKey] -> ShowS #
DebugShow PrivateKey Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods debugShow :: PrivateKey -> String Source #
Eq PrivateKey Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods (==) :: PrivateKey -> PrivateKey -> Bool # (/=) :: PrivateKey -> PrivateKey -> Bool #

data KeyPair Source #

ECDSA Key Pair.

Constructors

KeyPair Curve PublicPoint PrivateNumber

Instances

Instances details

Data KeyPair Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> KeyPair -> c KeyPair # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c KeyPair # toConstr :: KeyPair -> Constr # dataTypeOf :: KeyPair -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c KeyPair) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c KeyPair) # gmapT :: (forall b. Data b => b -> b) -> KeyPair -> KeyPair # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> KeyPair -> r # gmapQr :: forall r r'. (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> KeyPair -> r # gmapQ :: (forall d. Data d => d -> u) -> KeyPair -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> KeyPair -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> KeyPair -> m KeyPair # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyPair -> m KeyPair # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyPair -> m KeyPair #
Read KeyPair Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods readsPrec :: Int -> ReadS KeyPair # readList :: ReadS [KeyPair] # readPrec :: ReadPrec KeyPair # readListPrec :: ReadPrec [KeyPair] #
Show KeyPair Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods showsPrec :: Int -> KeyPair -> ShowS # show :: KeyPair -> String # showList :: [KeyPair] -> ShowS #
DebugShow KeyPair Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods debugShow :: KeyPair -> String Source #
Eq KeyPair Source #
Instance details Defined in Crypto.PubKey.ECC.ECDSA Methods (==) :: KeyPair -> KeyPair -> Bool # (/=) :: KeyPair -> KeyPair -> Bool #

toPublicKey :: KeyPair -> PublicKey Source #

Public key of a ECDSA Key pair.

toPrivateKey :: KeyPair -> PrivateKey Source #

Private key of a ECDSA Key pair.

signWith Source #

Arguments

:: (ByteArrayAccess msg, HashAlgorithm hash)
=> Integer	k random number
-> PrivateKey	private key
-> hash	hash function
-> msg	message to sign
-> Maybe Signature

Sign message using the private key and an explicit k number.