Struct WinternitzSignatureScheme 

pub struct WinternitzSignatureScheme { /* private fields */ }

Winternitz signatures, as described in Section 14.3 in the textbook by Boneh & Shoup.

To create a one-time signature, the scheme hashes secret key values a number of times, as determined by the domination_free_function. The parameter d trades off signature size (the higher, the smaller the signature) and computation time (the higher, the longer the time).

Examples

use hash_based_signatures::signature::SignatureScheme;
use hash_based_signatures::signature::winternitz::d::D;
use hash_based_signatures::signature::winternitz::WinternitzSignatureScheme;

let mut signature_scheme = WinternitzSignatureScheme::new([0u8; 32], D::new(15));
let signature0 = signature_scheme.sign([0u8; 32]);
assert!(WinternitzSignatureScheme::verify(
    signature_scheme.public_key(),
    [0u8; 32],
    &signature0
));

Implementations

impl WinternitzSignatureScheme

pub fn new(seed: [u8; 32], d: D) -> Self

Builds a Winternitz signature scheme from the given seed.

pub fn public_key_from_message_and_signature( message: HashType, signature: &WinternitzSignature, ) -> Result<WinternitzKey>

Given a message and signature, computes the public key belonging to the private key that signed the message.

Trait Implementations

impl Clone for WinternitzSignatureScheme

fn clone(&self) -> WinternitzSignatureScheme

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl SignatureScheme<Vec<[u8; 32]>, [u8; 32], (u64, Vec<[u8; 32]>)> for WinternitzSignatureScheme

fn public_key(&self) -> WinternitzKey

Returns a copy of the public key

fn sign(&mut self, message: HashType) -> WinternitzSignature

Signs a message

fn verify( pk: WinternitzKey, message: HashType, signature: &WinternitzSignature, ) -> bool

Verifies a signature. Note that this function does not require need self, hence does not need an instance of the signature scheme. This is because an instance of a signature scheme contains the signing key which is typically not available for the verifier.