Struct Ecvrf 

pub struct Ecvrf;

Classical ECVRF-edwards25519-SHA512-TAI (RFC 9381 ciphersuite 0x03), the default CONIKS VRF.

This is a thin adapter over metamorphic_crypto’s audited vrf primitive (which is itself built on the in-tree curve25519-dalek backend and locked to RFC 9381’s official test vectors). No cryptography lives here — only the opaque-byte ↔ primitive plumbing.

RFC 9381’s sibling suite ECVRF-edwards25519-SHA512-ELL2 (0x04, constant-time Elligator2 hash-to-curve) is a designed-in future addition: it lands when the released curve backend exposes a conformant hash-to-curve (curve25519-dalek 5.x). Because Vrf::suite_id is bound into CONIKS domain separation, adding it is purely additive and never invalidates a 0x03 proof. The two suites are interchangeable behind this trait; index privacy as observed by a verifier is identical.

Trait Implementations

impl Clone for Ecvrf

fn clone(&self) -> Ecvrf

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Ecvrf

impl Debug for Ecvrf

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Ecvrf

fn default() -> Ecvrf

Returns the “default value” for a type.

impl Vrf for Ecvrf

fn suite_id(&self) -> u8

A stable identifier for the construction. For RFC 9381 suites this is the ciphersuite octet (e.g. 0x03 for ECVRF-edwards25519-SHA512-TAI); a future composite/hybrid construction uses its own reserved identifier. It is mixed into CONIKS domain separation so proofs are bound to the exact VRF construction and cannot be reinterpreted under another.

fn generate_keypair(&self) -> (VrfSecretKey, VrfPublicKey)

Generate a fresh keypair from the OS CSPRNG, as (secret, public).

fn derive_public_key(&self, secret_key: &VrfSecretKey) -> Result<VrfPublicKey>

Derive the public key for a secret key.

fn prove(&self, secret_key: &VrfSecretKey, alpha: &[u8]) -> Result<VrfProof>

Produce a proof pi that binds alpha to its VRF output under secret_key.

fn verify( &self, public_key: &VrfPublicKey, alpha: &[u8], proof: &VrfProof, ) -> Result<Option<VrfOutput>>

Verify a proof and, on success, return the VRF output.

fn proof_to_output(&self, proof: &VrfProof) -> Result<VrfOutput>

Recover the VRF output from a proof without verifying it. Only safe on a proof already verified with Vrf::verify (which returns the output directly) or whose provenance is independently trusted.