Struct ecdsa::Signature

pub struct Signature<C: Curve> where
    SignatureSize<C>: ArrayLength<u8>,  { /* fields omitted */ }

ECDSA signatures (fixed-size).

Generic over elliptic curve types.

These signatures are serialized as fixed-sized big endian scalar values with no additional framing:

• r: field element size for the given curve, big-endian
• s: field element size for the given curve, big-endian

For example, in a curve with a 256-bit modulus like NIST P-256 or secp256k1, r and s will both be 32-bytes, resulting in a signature with a total of 64-bytes.

ASN.1 is also supported via the Signature::from_asn1 and Signature::to_asn1 methods.

Implementations

impl<C: Curve> Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

pub fn from_scalars(r: &ElementBytes<C>, s: &ElementBytes<C>) -> Self

Create a Signature from the serialized r and s components

pub fn from_asn1(bytes: &[u8]) -> Result<Self, Error> where
    C::ElementSize: Add + ArrayLength<u8>,
    MaxSize<C>: ArrayLength<u8>,
    <C::ElementSize as Add>::Output: Add<MaxOverhead> + ArrayLength<u8>, 

Parse a signature from ASN.1 DER

pub fn to_asn1(&self) -> Signature<C> where
    C::ElementSize: Add + ArrayLength<u8>,
    MaxSize<C>: ArrayLength<u8>,
    <C::ElementSize as Add>::Output: Add<MaxOverhead> + ArrayLength<u8>, 

Serialize this signature as ASN.1 DER

pub fn r(&self) -> &ElementBytes<C>

Get the r component of this signature

pub fn s(&self) -> &ElementBytes<C>

Get the s component of this signature

impl<C> Signature<C> where
    C: Curve + Arithmetic,
    C::Scalar: NormalizeLow,
    SignatureSize<C>: ArrayLength<u8>, 

pub fn normalize_s(&mut self) -> Result<bool, Error>

Normalize signature into "low S" form as described in BIP 0062: Dealing with Malleability.

Trait Implementations

impl<C: Curve> AsRef<[u8]> for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

fn as_ref(&self) -> &[u8]

Performs the conversion.

impl<C: Clone + Curve> Clone for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

fn clone(&self) -> Signature<C>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<C: Curve> Copy for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>,
    <SignatureSize<C> as ArrayLength<u8>>::ArrayType: Copy, 

impl<C: Curve> Debug for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl<C, D> DigestVerifier<D, Signature<C>> for Verifier<C> where
    C: Curve + Arithmetic,
    D: Digest<OutputSize = C::ElementSize>,
    C::AffinePoint: VerifyPrimitive<C>,
    SignatureSize<C>: ArrayLength<u8>, 

fn verify_digest(
    &self,
    digest: D,
    signature: &Signature<C>
) -> Result<(), Error>

Verify the signature against the given Digest output.

impl<C: Eq + Curve> Eq for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

impl<C> From<Signature<C>> for Signature<C> where
    C: Curve,
    C::ElementSize: Add + ArrayLength<u8>,
    MaxSize<C>: ArrayLength<u8>,
    <C::ElementSize as Add>::Output: Add<MaxOverhead> + ArrayLength<u8>, 

fn from(doc: Signature<C>) -> Signature<C>

Performs the conversion.

impl<C: PartialEq + Curve> PartialEq<Signature<C>> for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

fn eq(&self, other: &Signature<C>) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Signature<C>) -> bool

This method tests for !=.

impl<C: DigestPrimitive> PrehashSignature for Signature<C> where
    <C::ElementSize as Add>::Output: ArrayLength<u8>, 

type Digest = C::Digest

Preferred Digest algorithm to use when computing this signature type.

impl<C, D> RandomizedDigestSigner<D, Signature<C>> for Signer<C> where
    C: Curve + Arithmetic,
    D: Digest<OutputSize = C::ElementSize>,
    C::Scalar: Invert<Output = C::Scalar> + Generate + SignPrimitive<C> + Zeroize,
    SignatureSize<C>: ArrayLength<u8>, 

fn try_sign_digest_with_rng(
    &self,
    rng: impl CryptoRng + RngCore,
    digest: D
) -> Result<Signature<C>, Error>

Attempt to sign the given prehashed message Digest, returning a digital signature on success, or an error if something went wrong.

fn sign_digest_with_rng(&self, rng: impl RngCore + CryptoRng, digest: D) -> S

Sign the given prehashed message Digest, returning a signature.

impl<C> RandomizedSigner<Signature<C>> for Signer<C> where
    C: Curve + Arithmetic + DigestPrimitive,
    C::Digest: Digest<OutputSize = C::ElementSize>,
    C::Scalar: Invert<Output = C::Scalar> + Generate + SignPrimitive<C> + Zeroize,
    SignatureSize<C>: ArrayLength<u8>, 

fn try_sign_with_rng(
    &self,
    rng: impl CryptoRng + RngCore,
    msg: &[u8]
) -> Result<Signature<C>, Error>

Attempt to sign the given message, returning a digital signature on success, or an error if something went wrong.

fn sign_with_rng(&self, rng: impl RngCore + CryptoRng, msg: &[u8]) -> S

Sign the given message and return a digital signature

impl<C: Curve> Signature for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

fn from_bytes(bytes: &[u8]) -> Result<Self, Error>

Parse a signature from its byte representation

fn as_bytes(&self) -> &[u8]

Borrow a byte slice representing the serialized form of this signature

impl<C: Curve> StructuralEq for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

impl<C: Curve> StructuralPartialEq for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

impl<C: Curve, '_> TryFrom<&'_ [u8]> for Signature<C> where
    SignatureSize<C>: ArrayLength<u8>, 

type Error = Error

The type returned in the event of a conversion error.

fn try_from(bytes: &[u8]) -> Result<Self, Error>

Performs the conversion.

impl<C> Verifier<Signature<C>> for Verifier<C> where
    C: Curve + Arithmetic + DigestPrimitive,
    C::AffinePoint: VerifyPrimitive<C>,
    C::Digest: Digest<OutputSize = C::ElementSize>,
    SignatureSize<C>: ArrayLength<u8>, 

fn verify(&self, msg: &[u8], signature: &Signature<C>) -> Result<(), Error>

Use Self to verify that the provided signature for a given message bytestring is authentic.