org.bouncycastle.crypto.signers

Class MLDSASigner

java.lang.Object

org.bouncycastle.crypto.signers.MLDSASigner

All Implemented Interfaces:

Signer

public class MLDSASigner
extends java.lang.Object
implements Signer

ML-DSA (FIPS 204) signer/verifier.

verifySignature(byte[]) (and verifyMuSignature(byte[], byte[])) return false uniformly for a cryptographically wrong signature and for one that is structurally malformed per FIPS 204 Algorithm 8 (wrong length, an out-of-order or duplicate hint index, or a hint weight exceeding the parameter set's omega) - the two cases are not distinguished, and neither ever throws for a decode failure. This differs from some other implementations (e.g. the JDK's own SUN ML-DSA provider), which signal a decode failure separately from a cryptographic mismatch; see github #2367.

Constructor Summary

Constructors

Constructor and Description
MLDSASigner()

Method Summary

Modifier and Type	Method and Description
byte[]	generateMu()
byte[]	generateMuSignature(byte[] mu)
byte[]	generateSignature() generate a signature for the message we've been loaded with using the key we were initialised with.
void	init(boolean forSigning, CipherParameters param) Initialise the signer for signing or verification.
protected byte[]	internalGenerateSignature(byte[] message, byte[] random)
protected boolean	internalVerifySignature(byte[] message, byte[] signature)
void	reset() reset the internal state
void	update(byte b) update the internal digest with the byte b
void	update(byte[] in, int off, int len) update the internal digest with the byte array in
boolean	verifyMu(byte[] mu)
boolean	verifyMuSignature(byte[] mu, byte[] signature)
boolean	verifySignature(byte[] signature) return true if the internal state represents the signature described in the passed in array.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MLDSASigner

public MLDSASigner()

Method Detail

init

public void init(boolean forSigning,
                 CipherParameters param)

Description copied from interface: Signer

Initialise the signer for signing or verification.

Specified by:

init in interface Signer

Parameters:

forSigning - true if for signing, false otherwise

param - necessary parameters.

update

public void update(byte b)

Description copied from interface: Signer

update the internal digest with the byte b

Specified by:

update in interface Signer

update

public void update(byte[] in,
                   int off,
                   int len)

Description copied from interface: Signer

update the internal digest with the byte array in

Specified by:

update in interface Signer

generateMu

public byte[] generateMu()
                  throws CryptoException,
                         DataLengthException

Throws:

CryptoException

DataLengthException

generateMuSignature

public byte[] generateMuSignature(byte[] mu)
                           throws CryptoException,
                                  DataLengthException

Throws:

CryptoException

DataLengthException

generateSignature

public byte[] generateSignature()
                         throws CryptoException,
                                DataLengthException

Description copied from interface: Signer

generate a signature for the message we've been loaded with using the key we were initialised with.

Specified by:

generateSignature in interface Signer

Throws:

CryptoException

DataLengthException

verifyMu

public boolean verifyMu(byte[] mu)

verifySignature

public boolean verifySignature(byte[] signature)

Description copied from interface: Signer

return true if the internal state represents the signature described in the passed in array.

Specified by:

verifySignature in interface Signer

verifyMuSignature

public boolean verifyMuSignature(byte[] mu,
                                 byte[] signature)

reset

public void reset()

Description copied from interface: Signer

reset the internal state

Specified by:

reset in interface Signer

internalGenerateSignature

protected byte[] internalGenerateSignature(byte[] message,
                                           byte[] random)

internalVerifySignature

protected boolean internalVerifySignature(byte[] message,
                                          byte[] signature)