Package org.bouncycastle.crypto.signers.xmss

package org.bouncycastle.crypto.signers.xmss

Engine for XMSS and the XMSS^MT multi-tree variant per RFC 8391 (hash-based stateful signatures), with the SP 800-208 parameter sets. The public classes here are XMSSEngine, the operations the key parameter classes in org.bouncycastle.crypto.params and the key pair generators in org.bouncycastle.crypto.generators are built on, and BDS / BDSStateMap, the opaque form of the BDS authentication-path traversal state an XMSS / XMSS^MT private key carries. Everything else - WOTS+, the hash addressing scheme, the keyed hash functions, the tree arithmetic and the signature structures - is package-private. Applications sign and verify through XMSSSigner / XMSSMTSigner.

Related Packages

Package	Description
org.bouncycastle.crypto.signers	Basic signers.
org.bouncycastle.crypto.signers.lms	Engine for LMS and the HSS multi-tree variant per RFC 8554 (hash-based stateful signatures).
org.bouncycastle.crypto.signers.mldsa	Internal ML-DSA (FIPS 204) engine backing MLDSASigner and HashMLDSASigner.
org.bouncycastle.crypto.signers.slhdsa	Internal SLH-DSA (FIPS 205) engine backing SLHDSASigner and HashSLHDSASigner.

Classes

Class	Description
BDS	BDS.
BDSStateMap	The per-layer BDS traversal states of one XMSS^MT key, keyed by layer.
XMSSEngine	The XMSS and XMSS^MT (RFC 8391) operations the key parameter classes, the key pair generators and the signers are built on: key pair generation, signature generation and verification, the WOTS+ and OID parameter derivations, and the handful of encoding helpers the key classes need.