Crate hekate_rsa 

RSA-2048 PKCS#1 v1.5 signature verification for Hekate, the Rust zero-knowledge proof engine.

Pkcs1Statement builds the program, instance and witness that prove s^65537 mod N equals the RFC 8017 §9.2 encoding of H, SHA-256 chained over committed block words with FIPS 180-4 padding left to the caller. N is public, and the signature and the message are in the witness. encode_sha256 computes that encoding natively.

• RSA-2048 PKCS#1 v1.5 Verification: what the proof states and how the tables split the work

Re-exports

pub use pkcs1::DIGEST_INFO_SHA256;

pub use pkcs1::encode_sha256;

pub use pkcs1::padding_limbs;

pub use statement::Pkcs1Statement;

Modules

pkcs1

RSA PKCS#1 v1.5 signature encoding for SHA-256 (RFC 8017 §9.2), as base-2^32 limbs.

statement

s^65537 mod N == PKCS1-v1_5(H), H chained over committed block words; FIPS 180-4 padding is the caller’s, not the AIR’s.