ed25519-dalek 2.2.0

Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

use curve25519_dalek::edwards::CompressedEdwardsY;
use sha2::Sha512;

use crate::verifying::RCompute;
use crate::{signature::InternalSignature, InternalError, SignatureError, VerifyingKey};

/// An IUF verifier for ed25519.
///
/// Created with [`VerifyingKey::verify_stream()`] or [`SigningKey::verify_stream()`].
///
/// [`SigningKey::verify_stream()`]: super::SigningKey::verify_stream()
#[allow(non_snake_case)]
pub struct StreamVerifier {
    cr: RCompute<Sha512>,
    sig_R: CompressedEdwardsY,
}

impl StreamVerifier {
    /// Constructs new stream verifier.
    ///
    /// Seeds hash state with public key and signature components.
    pub(crate) fn new(public_key: VerifyingKey, signature: InternalSignature) -> Self {
        Self {
            cr: RCompute::new(&public_key, signature, None),
            sig_R: signature.R,
        }
    }

    /// Digest message chunk.
    pub fn update(&mut self, chunk: impl AsRef<[u8]>) {
        self.cr.update(chunk.as_ref());
    }

    /// Finalize verifier and check against candidate signature.
    #[allow(non_snake_case)]
    pub fn finalize_and_verify(self) -> Result<(), SignatureError> {
        let expected_R = self.cr.finish();

        if expected_R == self.sig_R {
            Ok(())
        } else {
            Err(InternalError::Verify.into())
        }
    }
}