Struct p256::NistP256

pub struct NistP256;

NIST P-256 elliptic curve.

This curve is also known as prime256v1 (ANSI X9.62) and secp256r1 (SECG) and is specified in FIPS 186-4: Digital Signature Standard (DSS):

https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf

It’s included in the US National Security Agency’s “Suite B” and is widely used in protocols like TLS and the associated X.509 PKI.

Its equation is y² = x³ - 3x + b over a ~256-bit prime field where b is the “verifiably random”† constant:

b = 41058363725152142129326129780047268409114441015993725554835256314039467401291

† NOTE: the specific origins of this constant have never been fully disclosed (it is the SHA-1 digest of an inexplicable NSA-selected constant)

Trait Implementations

impl AffineArithmetic for NistP256

type AffinePoint = AffinePoint

Elliptic curve point in affine coordinates.

impl AffineXCoordinate<NistP256> for AffinePoint

fn x(&self) -> FieldBytes

Get the affine x-coordinate as a serialized field element.

impl AssociatedOid for NistP256

const OID: ObjectIdentifier = pkcs8::ObjectIdentifier::new_unwrap("1.2.840.10045.3.1.7")

The OID associated with this type.

impl Clone for NistP256

fn clone(&self) -> NistP256

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Curve for NistP256

type UInt = UInt<{_: usize}>

256-bit integer type used for internally representing field elements.

const ORDER: U256 = U256::from_be_hex("ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551")

Order of NIST P-256’s elliptic curve group (i.e. scalar modulus).

n = FFFFFFFF 00000000 FFFFFFFF FFFFFFFF BCE6FAAD A7179E84 F3B9CAC2 FC632551

Calculating the order

One way to calculate the order is with GP/PARI:

p = (2^224) * (2^32 - 1) + 2^192 + 2^96 - 1
b = 41058363725152142129326129780047268409114441015993725554835256314039467401291
E = ellinit([Mod(-3, p), Mod(b, p)])
default(parisize, 120000000)
n = ellsea(E)
isprime(n)

impl Debug for NistP256

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl DecompactPoint<NistP256> for AffinePoint

fn decompact(x_bytes: &FieldBytes) -> CtOption<Self>

Attempt to decompact an elliptic curve point

impl DecompressPoint<NistP256> for AffinePoint

fn decompress(x_bytes: &FieldBytes, y_is_odd: Choice) -> CtOption<Self>

Attempt to decompress an elliptic curve point.

impl Default for NistP256

fn default() -> NistP256

Returns the “default value” for a type.

impl DigestPrimitive for NistP256

Available on crate features ecdsa-core and sha256 only.

type Digest = CoreWrapper<CtVariableCoreWrapper<Sha256VarCore, UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>>>

Preferred digest to use when computing ECDSA signatures for this elliptic curve. This should be a member of the SHA-2 family.

impl FromEncodedPoint<NistP256> for AffinePoint

fn from_encoded_point(encoded_point: &EncodedPoint) -> CtOption<Self>

Attempts to parse the given EncodedPoint as an SEC1-encoded AffinePoint.

Returns

None value if encoded_point is not on the secp256r1 curve.

impl FromEncodedPoint<NistP256> for ProjectivePoint

fn from_encoded_point(p: &EncodedPoint) -> CtOption<Self>

Deserialize the type this trait is impl’d on from an EncodedPoint.

impl GroupDigest for NistP256

type FieldElement = FieldElement

The field element representation for a group value with multiple elements

fn hash_from_bytes<'a, X>(
    msgs: &[&[u8]],
    dst: &'a [u8]
) -> Result<Self::ProjectivePoint, Error> where
    X: ExpandMsg<'a>, 

Computes the hash to curve routine.

fn encode_from_bytes<'a, X>(
    msgs: &[&[u8]],
    dst: &'a [u8]
) -> Result<Self::ProjectivePoint, Error> where
    X: ExpandMsg<'a>, 

Computes the encode to curve routine.

fn hash_to_scalar<'a, X>(
    msgs: &[&[u8]],
    dst: &'a [u8]
) -> Result<Self::Scalar, Error> where
    X: ExpandMsg<'a>,
    Self::Scalar: FromOkm, 

Computes the hash to field routine according to https://www.ietf.org/archive/id/draft-irtf-cfrg-hash-to-curve-13.html#section-5 and returns a scalar.

impl JwkParameters for NistP256

Available on crate feature jwk only.

const CRV: &'static str = "P-256"

The crv parameter which identifies a particular elliptic curve as defined in RFC 7518 Section 6.2.1.1: https://tools.ietf.org/html/rfc7518#section-6.2.1.1

impl Ord for NistP256

fn cmp(&self, other: &NistP256) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

Restrict a value to a certain interval.

impl PartialEq<NistP256> for NistP256

fn eq(&self, other: &NistP256) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=.

impl PartialOrd<NistP256> for NistP256

fn partial_cmp(&self, other: &NistP256) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

This method tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

This method tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

This method tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

This method tests greater than or equal to (for self and other) and is used by the >= operator.

impl PointCompaction for NistP256

const COMPACT_POINTS: bool = false

NIST P-256 points are typically uncompressed.

impl PointCompression for NistP256

const COMPRESS_POINTS: bool = false

NIST P-256 points are typically uncompressed.

impl PrimeCurveArithmetic for NistP256

type CurveGroup = ProjectivePoint

Prime order elliptic curve group.

impl ProjectiveArithmetic for NistP256

type ProjectivePoint = ProjectivePoint

Elliptic curve point in projective coordinates.

impl ScalarArithmetic for NistP256

type Scalar = Scalar

Scalar field type.

impl SignPrimitive<NistP256> for Scalar

Available on crate feature ecdsa-core only.

fn try_sign_prehashed<K>(
    &self,
    k: K,
    z: GenericArray<u8, <<C as Curve>::UInt as ArrayEncoding>::ByteSize>
) -> Result<(Signature<C>, Option<RecoveryId>), Error> where
    K: Borrow<Self> + Invert<Output = CtOption<Self>>, 

Try to sign the prehashed message.

fn try_sign_prehashed_rfc6979<D>(
    &self,
    z: GenericArray<u8, <<C as Curve>::UInt as ArrayEncoding>::ByteSize>,
    ad: &[u8]
) -> Result<(Signature<C>, Option<RecoveryId>), Error> where
    Self: From<ScalarCore<C>>,
    D: CoreProxy + FixedOutput<OutputSize = <<C as Curve>::UInt as ArrayEncoding>::ByteSize>,
    <C as Curve>::UInt: for<'a> From<&'a Self>,
    <D as CoreProxy>::Core: BlockSizeUser,
    <D as CoreProxy>::Core: BufferKindUser,
    <D as CoreProxy>::Core: Clone,
    <D as CoreProxy>::Core: Default,
    <D as CoreProxy>::Core: FixedOutputCore,
    <D as CoreProxy>::Core: HashMarker,
    <D as CoreProxy>::Core: OutputSizeUser,
    <<D as CoreProxy>::Core as BlockSizeUser>::BlockSize: IsLess<UInt<UInt<UInt<UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>, B0>, B0>, B0>>,
    <<<D as CoreProxy>::Core as BlockSizeUser>::BlockSize as IsLess<UInt<UInt<UInt<UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>, B0>, B0>, B0>>>::Output: NonZero,
    <<D as CoreProxy>::Core as BufferKindUser>::BufferKind == Eager,
    <<D as CoreProxy>::Core as OutputSizeUser>::OutputSize == <D as OutputSizeUser>::OutputSize, 

Try to sign the given message digest deterministically using the method described in RFC6979 for computing ECDSA ephemeral scalar k.

impl ToCompactEncodedPoint<NistP256> for AffinePoint

fn to_compact_encoded_point(&self) -> CtOption<EncodedPoint>

Serialize this value as a SEC1 compact EncodedPoint

impl ToEncodedPoint<NistP256> for AffinePoint

fn to_encoded_point(&self, compress: bool) -> EncodedPoint

Serialize this value as a SEC1 EncodedPoint, optionally applying point compression.

impl ToEncodedPoint<NistP256> for ProjectivePoint

fn to_encoded_point(&self, compress: bool) -> EncodedPoint

Serialize this value as a SEC1 EncodedPoint, optionally applying point compression.

impl VerifyPrimitive<NistP256> for AffinePoint

Available on crate feature ecdsa-core only.

fn verify_prehashed(
    &self,
    z: GenericArray<u8, <<C as Curve>::UInt as ArrayEncoding>::ByteSize>,
    sig: &Signature<C>
) -> Result<(), Error>

Verify the prehashed message against the provided signature

impl VoprfParameters for NistP256

Available on crate feature voprf only.

const ID: u16 = 3u16

See https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-08.html#section-4.3-1.3.

type Hash = CoreWrapper<CtVariableCoreWrapper<Sha256VarCore, UInt<UInt<UInt<UInt<UInt<UInt<UTerm, B1>, B0>, B0>, B0>, B0>, B0>>>

See https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-08.html#section-4.3-1.2.

impl Copy for NistP256

impl Eq for NistP256

impl PrimeCurve for NistP256

impl StructuralEq for NistP256

impl StructuralPartialEq for NistP256