Class SignatureSpi

java.lang.Object

java.security.SignatureSpi

org.bouncycastle.jcajce.provider.asymmetric.util.BaseDeterministicOrRandomSignature

org.bouncycastle.jcajce.provider.asymmetric.mldsa.SignatureSpi

Direct Known Subclasses:

SignatureSpi.MLDSA, SignatureSpi.MLDSA44, SignatureSpi.MLDSA65, SignatureSpi.MLDSA87, SignatureSpi.MLDSACalcMu, SignatureSpi.MLDSAExtMu

public class SignatureSpi
extends BaseDeterministicOrRandomSignature

JCA Signature SPI for ML-DSA (FIPS 204) and its context/pre-hash variants.

engineVerify(byte[]) returns false for a signature that is cryptographically wrong and for one that is structurally malformed per FIPS 204 Algorithm 8 (wrong length, an out-of-order or duplicate hint index, or a hint weight exceeding the parameter set's omega) - the two cases are not distinguished. This differs from some other providers (e.g. the JDK's own SUN ML-DSA implementation), which throw SignatureException for a decode failure and reserve false for a well-formed-but-wrong signature; see github #2367. Code that needs to distinguish "malformed" from "wrong" cannot rely on Signature.verify(byte[]) alone against this provider.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	SignatureSpi.MLDSA
static class	SignatureSpi.MLDSA44
static class	SignatureSpi.MLDSA65
static class	SignatureSpi.MLDSA87
static class	SignatureSpi.MLDSACalcMu
static class	SignatureSpi.MLDSAExtMu

Field Summary

Fields

Modifier and Type	Field	Description
protected MLDSAParameters	parameters
protected MLDSASigner	signer

Fields inherited from class BaseDeterministicOrRandomSignature

engineParams, isInitState, keyParams, paramSpec

Fields inherited from class SignatureSpi

appRandom

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	SignatureSpi(MLDSASigner signer)
protected	SignatureSpi(MLDSASigner signer, MLDSAParameters parameters)

Method Summary

Modifier and Type	Method	Description
protected byte[]	engineSign()
protected boolean	engineVerify(byte[] sigBytes)
protected void	reInitialize(boolean forSigning, CipherParameters params)
protected void	signInit(PrivateKey privateKey, SecureRandom random)
protected void	updateEngine(byte b)
protected void	updateEngine(byte[] b, int off, int len)
protected void	verifyInit(PublicKey publicKey)

Methods inherited from class BaseDeterministicOrRandomSignature

engineGetParameter, engineGetParameters, engineInitSign, engineInitSign, engineInitVerify, engineSetParameter, engineSetParameter, engineUpdate, engineUpdate

Methods inherited from class SignatureSpi

clone, engineSign, engineUpdate, engineVerify

Methods inherited from class Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

signer

protected MLDSASigner signer

parameters

protected MLDSAParameters parameters

Constructor Details

SignatureSpi

protected SignatureSpi(MLDSASigner signer)

SignatureSpi

protected SignatureSpi(MLDSASigner signer,
 MLDSAParameters parameters)

Method Details

verifyInit

protected void verifyInit(PublicKey publicKey)
                   throws InvalidKeyException

Specified by:

verifyInit in class BaseDeterministicOrRandomSignature

Throws:

InvalidKeyException

signInit

protected void signInit(PrivateKey privateKey,
 SecureRandom random)
                 throws InvalidKeyException

Specified by:

signInit in class BaseDeterministicOrRandomSignature

Throws:

InvalidKeyException

updateEngine

protected void updateEngine(byte b)
                     throws SignatureException

Specified by:

updateEngine in class BaseDeterministicOrRandomSignature

Throws:

SignatureException

updateEngine

protected void updateEngine(byte[] b,
 int off,
 int len)
                     throws SignatureException

Specified by:

updateEngine in class BaseDeterministicOrRandomSignature

Throws:

SignatureException

engineSign

protected byte[] engineSign()
                     throws SignatureException

Specified by:

engineSign in class SignatureSpi

Throws:

SignatureException

engineVerify

protected boolean engineVerify(byte[] sigBytes)
                        throws SignatureException

Specified by:

engineVerify in class SignatureSpi

Throws:

SignatureException

reInitialize

protected void reInitialize(boolean forSigning,
 CipherParameters params)

Specified by:

reInitialize in class BaseDeterministicOrRandomSignature