Struct EcdsaP521 

pub struct EcdsaP521;

ECDSA signature scheme using NIST P-521 curve (secp521r1)

Implements ECDSA as specified in FIPS 186-4, Section 6, with SHA-512 as specified in FIPS 186-5 for P-521.

Trait Implementations

impl Signature for EcdsaP521

fn keypair<R: CryptoRng + RngCore>(rng: &mut R) -> ApiResult<Self::KeyPair>

Generate an ECDSA key pair

Generates a random private key d ∈ [1, n-1] and computes the corresponding public key Q = d·G where G is the base point.

Reference: FIPS 186-4, Appendix B.4.1

fn sign( message: &[u8], secret_key: &Self::SecretKey, ) -> ApiResult<Self::SignatureData>

Sign a message using ECDSA

Implements the ECDSA signature generation algorithm as specified in FIPS 186-4, Section 6.3, with deterministic nonce generation per RFC 6979 hedged with additional entropy (FIPS 186-5, Section 6.4).

Algorithm:

1. e = HASH(M), where HASH is SHA-512
2. z = the leftmost min(N, bitlen(e)) bits of e, where N = 521
3. Generate k deterministically per RFC 6979 with extra entropy
4. (x₁, y₁) = k·G
5. r = x₁ mod n; if r = 0, go back to step 3
6. s = k⁻¹(z + rd) mod n; if s = 0, go back to step 3
7. Return signature (r, s)

fn verify( message: &[u8], signature: &Self::SignatureData, public_key: &Self::PublicKey, ) -> ApiResult<()>

Verify an ECDSA signature

Implements the ECDSA signature verification algorithm as specified in FIPS 186-4, Section 6.4.

Algorithm:

1. Verify that r and s are integers in [1, n-1]
2. e = HASH(M), where HASH is SHA-512
3. z = the leftmost min(N, bitlen(e)) bits of e, where N = 521
4. w = s⁻¹ mod n
5. u₁ = zw mod n and u₂ = rw mod n
6. (x₁, y₁) = u₁·G + u₂·Q
7. If (x₁, y₁) = O, reject the signature
8. v = x₁ mod n
9. Accept the signature if and only if v = r

type PublicKey = EcdsaP521PublicKey

Public key type for this algorithm

type SecretKey = EcdsaP521SecretKey

Secret key type - must be zeroizable but not byte-accessible

type SignatureData = EcdsaP521Signature

Signature data type

type KeyPair = (<EcdsaP521 as Signature>::PublicKey, <EcdsaP521 as Signature>::SecretKey)

Key pair type (typically a tuple of public and secret keys)

fn name() -> &'static str

Returns the name of this signature algorithm

fn public_key(keypair: &Self::KeyPair) -> Self::PublicKey

Extract the public key from a key pair

fn secret_key(keypair: &Self::KeyPair) -> Self::SecretKey

Extract the secret key from a key pair