Class SignatureSpi

java.lang.Object

java.security.SignatureSpi

org.bouncycastle.jcajce.provider.asymmetric.compositesignatures.SignatureSpi

Direct Known Subclasses:

SignatureSpi.COMPOSITE, SignatureSpi.MLDSA44_ECDSA_P256_SHA256, SignatureSpi.MLDSA44_ECDSA_P256_SHA256_PREHASH, SignatureSpi.MLDSA44_Ed25519_SHA512, SignatureSpi.MLDSA44_Ed25519_SHA512_PREHASH, SignatureSpi.MLDSA44_RSA2048_PKCS15_SHA256, SignatureSpi.MLDSA44_RSA2048_PKCS15_SHA256_PREHASH, SignatureSpi.MLDSA44_RSA2048_PSS_SHA256, SignatureSpi.MLDSA44_RSA2048_PSS_SHA256_PREHASH, SignatureSpi.MLDSA65_ECDSA_brainpoolP256r1_SHA512, SignatureSpi.MLDSA65_ECDSA_brainpoolP256r1_SHA512_PREHASH, SignatureSpi.MLDSA65_ECDSA_P256_SHA512, SignatureSpi.MLDSA65_ECDSA_P256_SHA512_PREHASH, SignatureSpi.MLDSA65_ECDSA_P384_SHA512, SignatureSpi.MLDSA65_ECDSA_P384_SHA512_PREHASH, SignatureSpi.MLDSA65_Ed25519_SHA512, SignatureSpi.MLDSA65_Ed25519_SHA512_PREHASH, SignatureSpi.MLDSA65_RSA3072_PKCS15_SHA512, SignatureSpi.MLDSA65_RSA3072_PKCS15_SHA512_PREHASH, SignatureSpi.MLDSA65_RSA3072_PSS_SHA512, SignatureSpi.MLDSA65_RSA3072_PSS_SHA512_PREHASH, SignatureSpi.MLDSA65_RSA4096_PKCS15_SHA512, SignatureSpi.MLDSA65_RSA4096_PKCS15_SHA512_PREHASH, SignatureSpi.MLDSA65_RSA4096_PSS_SHA512, SignatureSpi.MLDSA65_RSA4096_PSS_SHA512_PREHASH, SignatureSpi.MLDSA87_ECDSA_brainpoolP384r1_SHA512, SignatureSpi.MLDSA87_ECDSA_brainpoolP384r1_SHA512_PREHASH, SignatureSpi.MLDSA87_ECDSA_P384_SHA512, SignatureSpi.MLDSA87_ECDSA_P384_SHA512_PREHASH, SignatureSpi.MLDSA87_ECDSA_P521_SHA512, SignatureSpi.MLDSA87_ECDSA_P521_SHA512_PREHASH, SignatureSpi.MLDSA87_Ed448_SHAKE256, SignatureSpi.MLDSA87_Ed448_SHAKE256_PREHASH, SignatureSpi.MLDSA87_RSA3072_PSS_SHA512, SignatureSpi.MLDSA87_RSA3072_PSS_SHA512_PREHASH, SignatureSpi.MLDSA87_RSA4096_PSS_SHA512, SignatureSpi.MLDSA87_RSA4096_PSS_SHA512_PREHASH

public class SignatureSpi
extends SignatureSpi

Signature class for composite signatures. Selected algorithm is set by the "subclasses" at the end of this file.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	SignatureSpi.COMPOSITE
static final class	SignatureSpi.MLDSA44_ECDSA_P256_SHA256
static final class	SignatureSpi.MLDSA44_ECDSA_P256_SHA256_PREHASH
static final class	SignatureSpi.MLDSA44_Ed25519_SHA512
static final class	SignatureSpi.MLDSA44_Ed25519_SHA512_PREHASH
static final class	SignatureSpi.MLDSA44_RSA2048_PKCS15_SHA256
static final class	SignatureSpi.MLDSA44_RSA2048_PKCS15_SHA256_PREHASH
static final class	SignatureSpi.MLDSA44_RSA2048_PSS_SHA256
static final class	SignatureSpi.MLDSA44_RSA2048_PSS_SHA256_PREHASH
static final class	SignatureSpi.MLDSA65_ECDSA_brainpoolP256r1_SHA512
static final class	SignatureSpi.MLDSA65_ECDSA_brainpoolP256r1_SHA512_PREHASH
static final class	SignatureSpi.MLDSA65_ECDSA_P256_SHA512
static final class	SignatureSpi.MLDSA65_ECDSA_P256_SHA512_PREHASH
static final class	SignatureSpi.MLDSA65_ECDSA_P384_SHA512
static final class	SignatureSpi.MLDSA65_ECDSA_P384_SHA512_PREHASH
static final class	SignatureSpi.MLDSA65_Ed25519_SHA512
static final class	SignatureSpi.MLDSA65_Ed25519_SHA512_PREHASH
static final class	SignatureSpi.MLDSA65_RSA3072_PKCS15_SHA512
static final class	SignatureSpi.MLDSA65_RSA3072_PKCS15_SHA512_PREHASH
static final class	SignatureSpi.MLDSA65_RSA3072_PSS_SHA512
static final class	SignatureSpi.MLDSA65_RSA3072_PSS_SHA512_PREHASH
static final class	SignatureSpi.MLDSA65_RSA4096_PKCS15_SHA512
static final class	SignatureSpi.MLDSA65_RSA4096_PKCS15_SHA512_PREHASH
static final class	SignatureSpi.MLDSA65_RSA4096_PSS_SHA512
static final class	SignatureSpi.MLDSA65_RSA4096_PSS_SHA512_PREHASH
static final class	SignatureSpi.MLDSA87_ECDSA_brainpoolP384r1_SHA512
static final class	SignatureSpi.MLDSA87_ECDSA_brainpoolP384r1_SHA512_PREHASH
static final class	SignatureSpi.MLDSA87_ECDSA_P384_SHA512
static final class	SignatureSpi.MLDSA87_ECDSA_P384_SHA512_PREHASH
static final class	SignatureSpi.MLDSA87_ECDSA_P521_SHA512
static final class	SignatureSpi.MLDSA87_ECDSA_P521_SHA512_PREHASH
static final class	SignatureSpi.MLDSA87_Ed448_SHAKE256
static final class	SignatureSpi.MLDSA87_Ed448_SHAKE256_PREHASH
static final class	SignatureSpi.MLDSA87_RSA3072_PSS_SHA512
static final class	SignatureSpi.MLDSA87_RSA3072_PSS_SHA512_PREHASH
static final class	SignatureSpi.MLDSA87_RSA4096_PSS_SHA512
static final class	SignatureSpi.MLDSA87_RSA4096_PSS_SHA512_PREHASH

Field Summary

Fields inherited from class SignatureSpi

appRandom

Method Summary

Modifier and Type	Method	Description
protected Object	engineGetParameter(String s)
protected final AlgorithmParameters	engineGetParameters()
protected void	engineInitSign(PrivateKey privateKey)
protected void	engineInitSign(PrivateKey privateKey, SecureRandom random)	The JCA base class only records the SecureRandom in appRandom, where nothing would consult it, so the composite has to override this to hand the random down to each component signer.
protected void	engineInitVerify(PublicKey publicKey)
protected void	engineSetParameter(String s, Object o)
protected void	engineSetParameter(AlgorithmParameterSpec algorithmParameterSpec)	Set the signature context, either before or after engineInitSign / engineInitVerify.
protected byte[]	engineSign()	Method which calculates each component signature over the composite message representative M' and returns their concatenation, mldsaSig || tradSig, as the CompositeSignatureValue of draft-ietf-lamps-pq-composite-sigs sec.
protected void	engineUpdate(byte b)
protected void	engineUpdate(byte[] bytes, int off, int len)
protected boolean	engineVerify(byte[] signature)	Corresponding verification method to the engineSign method.
static byte[][]	splitCompositeSignature(byte[] compositeSignature, int mldsaSigLen)

Methods inherited from class SignatureSpi

clone, engineSign, engineUpdate, engineVerify

Methods inherited from class Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

engineInitVerify

protected void engineInitVerify(PublicKey publicKey)
                         throws InvalidKeyException

Specified by:

engineInitVerify in class SignatureSpi

Throws:

InvalidKeyException

engineInitSign

protected void engineInitSign(PrivateKey privateKey)
                       throws InvalidKeyException

Specified by:

engineInitSign in class SignatureSpi

Throws:

InvalidKeyException

engineInitSign

protected void engineInitSign(PrivateKey privateKey,
 SecureRandom random)
                       throws InvalidKeyException

The JCA base class only records the SecureRandom in appRandom, where nothing would consult it, so the composite has to override this to hand the random down to each component signer.

Overrides:

engineInitSign in class SignatureSpi

Throws:

InvalidKeyException

engineUpdate

protected void engineUpdate(byte b)
                     throws SignatureException

Specified by:

engineUpdate in class SignatureSpi

Throws:

SignatureException

engineUpdate

protected void engineUpdate(byte[] bytes,
 int off,
 int len)
                     throws SignatureException

Specified by:

engineUpdate in class SignatureSpi

Throws:

SignatureException

engineSign

protected byte[] engineSign()
                     throws SignatureException

Method which calculates each component signature over the composite message representative M' and returns their concatenation, mldsaSig || tradSig, as the CompositeSignatureValue of draft-ietf-lamps-pq-composite-sigs sec. 4.2.

Specified by:

engineSign in class SignatureSpi

Returns:

composite signature bytes

Throws:

SignatureException

splitCompositeSignature

public static byte[][] splitCompositeSignature(byte[] compositeSignature,
 int mldsaSigLen)

engineVerify

protected boolean engineVerify(byte[] signature)
                        throws SignatureException

Corresponding verification method to the engineSign method. The composite signature is valid if and only if all component signatures are valid. The method verifies all component signatures even if it is already known that the composite signature is invalid.

Specified by:

engineVerify in class SignatureSpi

Parameters:

signature - the signature bytes to be verified.

Returns:

Throws:

SignatureException

engineSetParameter

protected void engineSetParameter(AlgorithmParameterSpec algorithmParameterSpec)
                           throws InvalidAlgorithmParameterException

Set the signature context, either before or after engineInitSign / engineInitVerify. Where the signature has a key already the component signatures are re-initialised with the new context at once; where it does not the context is recorded and applied when the key arrives, as the base ML-DSA and SLH-DSA engines do (see github #2396). Calling this first used to let a NullPointerException out of a method declared to throw InvalidAlgorithmParameterException, from dereferencing the key that was not there yet (github #2412).

Overrides:

engineSetParameter in class SignatureSpi

Throws:

InvalidAlgorithmParameterException

engineSetParameter

protected void engineSetParameter(String s,
 Object o)
                           throws InvalidParameterException

Specified by:

engineSetParameter in class SignatureSpi

Throws:

InvalidParameterException

engineGetParameter

protected Object engineGetParameter(String s)
                             throws InvalidParameterException

Specified by:

engineGetParameter in class SignatureSpi

Throws:

InvalidParameterException

engineGetParameters

protected final AlgorithmParameters engineGetParameters()

Overrides:

engineGetParameters in class SignatureSpi