Class HashSignatureSpi

java.lang.Object

java.security.SignatureSpi

org.bouncycastle.jcajce.provider.asymmetric.util.BaseDeterministicOrRandomSignature

org.bouncycastle.jcajce.provider.asymmetric.mldsa.HashSignatureSpi

Direct Known Subclasses:

HashSignatureSpi.MLDSA, HashSignatureSpi.MLDSA44, HashSignatureSpi.MLDSA65, HashSignatureSpi.MLDSA87, HashSignatureSpi.MLDSAExtHash

public class HashSignatureSpi
extends BaseDeterministicOrRandomSignature

JCA Signature SPI for the pre-hash ("ExtHash") ML-DSA (FIPS 204) variants.

As with the plain SignatureSpi, a structurally malformed signature (wrong length, or a FIPS 204 Algorithm 8 hint-decode failure) and a well-formed-but-cryptographically-wrong signature both make engineVerify(byte[]) return false; only an invalid caller-supplied external-digest length throws SignatureException. See github #2367.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	HashSignatureSpi.MLDSA
static class	HashSignatureSpi.MLDSA44
static class	HashSignatureSpi.MLDSA44ExtHash
static class	HashSignatureSpi.MLDSA65
static class	HashSignatureSpi.MLDSA65ExtHash
static class	HashSignatureSpi.MLDSA87
static class	HashSignatureSpi.MLDSA87ExtHash
static class	HashSignatureSpi.MLDSAExtHash	External-hash form of HashML-DSA: bytes passed to Signature.update(...) are treated as the pre-computed message digest, dispatched to HashMLDSASigner.generateSignature(byte[]) / HashMLDSASigner.verifySignature(byte[], byte[]).

Field Summary

Fields

Modifier and Type	Field	Description
protected final HashMLDSASigner	signer

Fields inherited from class BaseDeterministicOrRandomSignature

engineParams, isInitState, keyParams, paramSpec

Fields inherited from class SignatureSpi

appRandom

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	HashSignatureSpi(HashMLDSASigner signer)
protected	HashSignatureSpi(HashMLDSASigner signer, MLDSAParameters parameters)

Method Summary

Modifier and Type	Method	Description
protected byte[]	engineSign()
protected boolean	engineVerify(byte[] sigBytes)
protected void	reInitialize(boolean forSigning, CipherParameters params)
protected void	signInit(PrivateKey privateKey, SecureRandom random)
protected void	updateEngine(byte b)
protected void	updateEngine(byte[] buf, int off, int len)
protected void	verifyInit(PublicKey publicKey)

Methods inherited from class BaseDeterministicOrRandomSignature

engineGetParameter, engineGetParameters, engineInitSign, engineInitSign, engineInitVerify, engineSetParameter, engineSetParameter, engineUpdate, engineUpdate

Methods inherited from class SignatureSpi

clone, engineSign, engineUpdate, engineVerify

Methods inherited from class Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

signer

protected final HashMLDSASigner signer

Constructor Details

HashSignatureSpi

protected HashSignatureSpi(HashMLDSASigner signer)

HashSignatureSpi

protected HashSignatureSpi(HashMLDSASigner signer,
 MLDSAParameters parameters)

Method Details

verifyInit

protected void verifyInit(PublicKey publicKey)
                   throws InvalidKeyException

Specified by:

verifyInit in class BaseDeterministicOrRandomSignature

Throws:

InvalidKeyException

signInit

protected void signInit(PrivateKey privateKey,
 SecureRandom random)
                 throws InvalidKeyException

Specified by:

signInit in class BaseDeterministicOrRandomSignature

Throws:

InvalidKeyException

updateEngine

protected void updateEngine(byte b)
                     throws SignatureException

Specified by:

updateEngine in class BaseDeterministicOrRandomSignature

Throws:

SignatureException

updateEngine

protected void updateEngine(byte[] buf,
 int off,
 int len)
                     throws SignatureException

Specified by:

updateEngine in class BaseDeterministicOrRandomSignature

Throws:

SignatureException

engineSign

protected byte[] engineSign()
                     throws SignatureException

Specified by:

engineSign in class SignatureSpi

Throws:

SignatureException

engineVerify

protected boolean engineVerify(byte[] sigBytes)
                        throws SignatureException

Specified by:

engineVerify in class SignatureSpi

Throws:

SignatureException

reInitialize

protected void reInitialize(boolean forSigning,
 CipherParameters params)

Specified by:

reInitialize in class BaseDeterministicOrRandomSignature