Struct VerifyingKey 

pub struct VerifyingKey<P: ParameterSet> {
    rho: B32,
    t1: MaybeBox<Vector<BaseField, P::K>>,
    precomputed_values: MaybeBox<PrecomputedValues<P>>,
}

An ML-DSA verification key.

Fields

rho: B32

Public seed used to deterministically re-expand A_hat.

t1: MaybeBox<Vector<BaseField, P::K>>

High bits of the public key polynomial t.

precomputed_values: MaybeBox<PrecomputedValues<P>>

Precomputed expanded values.

Implementations

impl<P: MlDsaParams> VerifyingKey<P>

pub(crate) fn new( rho: B32, t1: Vector<BaseField, P::K>, A_hat: NttMatrix<BaseField, P::K, P::L>, enc: Option<EncodedVerifyingKey<P>>, ) -> Self

fn new_expand_a( rho: B32, t1: Vector<BaseField, P::K>, enc: Option<EncodedVerifyingKey<P>>, ) -> Self

pub fn compute_mu<F: FnOnce(&mut Shake256) -> Result<(), Error>>( &self, Mp: F, ctx: &[u8], ) -> Result<Array<u8, U64>, Error>

Computes µ according to FIPS 204 for use in ML-DSA.Sign and ML-DSA.Verify.

Errors

Returns Error if the given Mp returns one.

pub fn verify_internal(&self, M: &[u8], sigma: &Signature<P>) -> bool

where P: MlDsaParams,

Implementation of Algorithm 8: ML-DSA.Verify_internal algorithm from FIPS 204.

It does not include the domain separator that distinguishes between the normal and pre-hashed cases, and it does not separate the context string from the rest of the message.

pub(crate) fn raw_verify_mu( &self, mu: &Array<u8, U64>, sigma: &Signature<P>, ) -> bool

where P: MlDsaParams,

pub fn verify_with_context( &self, M: &[u8], ctx: &[u8], sigma: &Signature<P>, ) -> bool

Implementation of Algorithm 3: ML-DSA.Verify from FIPS 204.

pub fn verify_mu(&self, mu: &Array<u8, U64>, sigma: &Signature<P>) -> bool

Implementation of Algorithm 3: ML-DSA.Verify from FIPS 204 with a pre-computed μ.

fn raw_verify_with_context( &self, M: &[&[u8]], ctx: &[u8], sigma: &Signature<P>, ) -> bool

pub(crate) fn encode_internal( rho: &B32, t1: &Vector<BaseField, P::K>, ) -> EncodedVerifyingKey<P>

pub fn encode(&self) -> EncodedVerifyingKey<P>

Encode the key in a fixed-size byte array.

Implementation of Algorithm 22: pkEncode from FIPS 204.

pub fn decode(enc: &EncodedVerifyingKey<P>) -> Self

Decode the key from an appropriately sized byte array.

Implementation of Algorithm 23: pkDecode from FIPS 204.

Trait Implementations

impl<P: MlDsaParams> AsRef<VerifyingKey<P>> for SigningKey<P>

Available on crate feature alloc only.

fn as_ref(&self) -> &VerifyingKey<P>

Converts this type into a shared reference of the (usually inferred) input type.

impl<P: Clone + ParameterSet> Clone for VerifyingKey<P>

where P::K: Clone,

fn clone(&self) -> VerifyingKey<P>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<P: Debug + ParameterSet> Debug for VerifyingKey<P>

where P::K: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<P: MlDsaParams> DigestVerifier<Shake<136>, Signature<P>> for VerifyingKey<P>

fn verify_digest<F: Fn(&mut Shake256) -> Result<(), Error>>( &self, f: F, signature: &Signature<P>, ) -> Result<(), Error>

Verify the signature against the received Digest output, by updating it with the message.

impl<P> EncodePublicKey for VerifyingKey<P>

where P: MlDsaParams + AssociatedAlgorithmIdentifier<Params = AnyRef<'static>>,

Available on crate feature alloc only.

fn to_public_key_der(&self) -> Result<Document>

Serialize a Document containing a SPKI-encoded public key.

fn to_public_key_pem(&self, line_ending: LineEnding) -> Result<String, Error>

Serialize this public key as PEM-encoded SPKI with the given LineEnding.

fn write_public_key_der_file(&self, path: impl AsRef<Path>) -> Result<(), Error>

Write ASN.1 DER-encoded public key to the given path.

fn write_public_key_pem_file( &self, path: impl AsRef<Path>, line_ending: LineEnding, ) -> Result<(), Error>

Write ASN.1 PEM-encoded public key to the given path.

impl<P: MlDsaParams> Hash for VerifyingKey<P>

fn hash<H: Hasher>(&self, state: &mut H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl<P: MlDsaParams> KeyExport for VerifyingKey<P>

fn to_bytes(&self) -> Key<Self>

Serialize this key as a byte array.

impl<P: MlDsaParams> KeyInit for VerifyingKey<P>

fn new(key: &Key<Self>) -> Self

Create new value from fixed size key.

fn new_from_slice(key: &[u8]) -> Result<Self, InvalidLength>

Create new value from variable size key.

fn generate_key<R>(rng: &mut R) -> Array<u8, Self::KeySize>

where R: CryptoRng,

👎Deprecated since 0.2.0: use the Generate trait impl on Key instead

DEPRECATED: generate random key using the provided CryptoRng.

impl<P: MlDsaParams> KeySizeUser for VerifyingKey<P>

type KeySize = <P as VerifyingKeyParams>::VerifyingKeySize

Key size in bytes.

fn key_size() -> usize

Return key size in bytes.

impl<P: MlDsaParams> MultipartVerifier<Signature<P>> for VerifyingKey<P>

fn multipart_verify( &self, msg: &[&[u8]], signature: &Signature<P>, ) -> Result<(), Error>

Equivalent of Verifier::verify() but the message is provided in non-contiguous byte slices.

impl<P: PartialEq + ParameterSet> PartialEq for VerifyingKey<P>

where P::K: PartialEq,

fn eq(&self, other: &VerifyingKey<P>) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<P> SignatureAlgorithmIdentifier for VerifyingKey<P>

where P: MlDsaParams + AssociatedAlgorithmIdentifier<Params = AnyRef<'static>>,

const SIGNATURE_ALGORITHM_IDENTIFIER: AlgorithmIdentifier<Self::Params> = Signature<P>::ALGORITHM_IDENTIFIER

AlgorithmIdentifier for the corresponding signature system.

type Params = AnyRef<'static>

Algorithm parameters.

impl<P> TryFrom<SubjectPublicKeyInfo<AnyRef<'_>, BitStringRef<'_>>> for VerifyingKey<P>

where P: MlDsaParams + AssociatedAlgorithmIdentifier<Params = AnyRef<'static>>,

type Error = Error

The type returned in the event of a conversion error.

fn try_from(spki: SubjectPublicKeyInfoRef<'_>) -> Result<Self>

Performs the conversion.

impl<P: MlDsaParams> Verifier<Signature<P>> for VerifyingKey<P>

fn verify(&self, msg: &[u8], signature: &Signature<P>) -> Result<(), Error>

Use Self (e.g. a verifying key) to verify that the provided signature is authentic for a given message bytestring.

impl<P: ParameterSet> StructuralPartialEq for VerifyingKey<P>