hash_to_point

fn_dsa_comm

Function hash_to_point 

Source 
pub fn hash_to_point(
    nonce: &[u8],
    hashed_vrfy_key: &[u8],
    ctx: &DomainContext<'_>,
    id: &HashIdentifier<'_>,
    hv: &[u8],
    c: &mut [u16],
)
Expand description

Hash a message into a polynomial modulo q = 12289.

Parameters are:

  • nonce: 40-byte random nonce
  • hashed_vrfy_key: SHAKE256 hash of public (verifying) key (64 bytes)
  • ctx: domain separation context
  • id: identifier for pre-hash function
  • hv: message (pre-hashed)
  • c: output polynomial

If id is HASH_ID_RAW, then no-prehashing is applied and the message itself should be provided as hv. Otherwise, the caller is responsible for applying the pre-hashing, and hv shall be the hashed message.