org.bouncycastle.pqc.crypto.faest

Class FaestSigner

java.lang.Object

org.bouncycastle.pqc.crypto.faest.FaestSigner

All Implemented Interfaces:

MessageSigner

public class FaestSigner
extends java.lang.Object
implements MessageSigner

FAEST signature generation and verification engine.

Exposes the standard MessageSigner interface by delegating to the core Faest.sign(byte[], byte[], byte[], byte[], byte[], byte[], org.bouncycastle.pqc.crypto.faest.FaestParameters) and Faest.verify(byte[], byte[], byte[], byte[], org.bouncycastle.pqc.crypto.faest.FaestParameters) routines. For signing, a fresh salt (rho) is drawn from the supplied (or default) random source on each invocation; the OWF output needed by the signing algorithm is re‑derived internally from the private key.

References:

• FAEST Official Website
• FAEST v2.0 Specification Document (NIST Round 2)
• FAEST Reference Implementation (C)

Constructor Summary

Constructors

Constructor and Description
FaestSigner()

Method Summary

Modifier and Type	Method and Description
byte[]	generateSignature(byte[] message) sign the passed in message (usually the output of a hash function).
void	init(boolean forSigning, CipherParameters param) initialise the signer for signature generation or signature verification.
boolean	verifySignature(byte[] message, byte[] signature) verify the message message against the signature value.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

FaestSigner

public FaestSigner()

Method Detail

init

public void init(boolean forSigning,
                 CipherParameters param)

Description copied from interface: MessageSigner

initialise the signer for signature generation or signature verification.

Specified by:

init in interface MessageSigner

Parameters:

forSigning - true if we are generating a signature, false otherwise.

param - key parameters for signature generation.

generateSignature

public byte[] generateSignature(byte[] message)

Description copied from interface: MessageSigner

sign the passed in message (usually the output of a hash function).

Specified by:

generateSignature in interface MessageSigner

Parameters:

message - the message to be signed.

Returns:

the signature of the message

verifySignature

public boolean verifySignature(byte[] message,
                               byte[] signature)

Description copied from interface: MessageSigner

verify the message message against the signature value.

Specified by:

verifySignature in interface MessageSigner

Parameters:

message - the message that was supposed to have been signed.

signature - the signature of the message