Struct StatelessMerkleSignatureScheme 

pub struct StatelessMerkleSignatureScheme { /* private fields */ }

Stateless Merkle signatures, as described in Section 14.6.3 in the textbook by Boneh & Shoup.

Builds a tree of depth depth and width q. For each signature, a pseudo-random path is selected. Then, the signature contains a series of q-indexed signatures, each signing the public key of the next one. The leaf node signs the hash of the message.

Examples

use hash_based_signatures::signature::stateless_merkle::StatelessMerkleSignatureScheme;
use hash_based_signatures::signature::SignatureScheme;
use hash_based_signatures::signature::winternitz::d::D;

let mut signature_scheme = StatelessMerkleSignatureScheme::new([0; 32], 16, 5, D::new(255));
let signature0 = signature_scheme.sign([0u8; 32]);
let signature1 = signature_scheme.sign([1u8; 32]);

assert!(StatelessMerkleSignatureScheme::verify(
    signature_scheme.public_key(),
    [0u8; 32],
    &signature0
));
assert!(StatelessMerkleSignatureScheme::verify(
    signature_scheme.public_key(),
    [1u8; 32],
    &signature1
));
assert!(!StatelessMerkleSignatureScheme::verify(
    signature_scheme.public_key(),
    [2u8; 32],
    &signature1
));

Implementations

impl StatelessMerkleSignatureScheme

pub fn new(seed: HashType, q: usize, depth: usize, d: D) -> Self

Instantiates the new stateless Merkle signature scheme as a tree with width q and depth depth.

The resulting tree will have q**depth leafs. Because the scheme is broken if the same leaf is chosen for two different messages, the expected number of signed messages should not exceed sqrt(q**depth).

Panics

Panics if q is not a power of two.

pub fn from_private_key(key: &StatelessMerklePrivateKey) -> Result<Self>

pub fn private_key(&self) -> StatelessMerklePrivateKey

Trait Implementations

impl SignatureScheme<[u8; 32], [u8; 32], StatelessMerkleSignature> for StatelessMerkleSignatureScheme

fn public_key(&self) -> HashType

Returns a copy of the public key

fn sign(&mut self, message: HashType) -> StatelessMerkleSignature

Signs a message

fn verify( pk: HashType, message: HashType, signature: &StatelessMerkleSignature, ) -> bool

Verifies a signature. Note that this function does not require need self, hence does not need an instance of the signature scheme. This is because an instance of a signature scheme contains the signing key which is typically not available for the verifier.