kcdsa

Documentation

Overview

Package kcdsa implements the KCDSA(Korean Certificate-based Digital Signature Algorithm) as defined in TTAK.KO-12.0001/R4

Index

• func GenerateKey(priv *PrivateKey, rand io.Reader) error
• func GenerateKeyWithSeed(priv *PrivateKey, rand io.Reader, xkey, upri []byte, sizes ParameterSizes) (xkeyOut, upriOut []byte, err error)
• func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes) (err error)
• func GenerateParametersTTAK(params *Parameters, rand io.Reader, sizes ParameterSizes) (err error)
• func RegenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes) error
• func Sign(rand io.Reader, priv *PrivateKey, sizes ParameterSizes, data []byte) (r, s *big.Int, err error)
• func SignASN1(rand io.Reader, priv *PrivateKey, sizes ParameterSizes, data []byte) (sig []byte, err error)
• func Verify(pub *PublicKey, sizes ParameterSizes, data []byte, R, S *big.Int) bool
• func VerifyASN1(pub *PublicKey, sizes ParameterSizes, data []byte, sig []byte) bool
• type GenerationParameters
  • func (params *GenerationParameters) Equal(xx GenerationParameters) bool
  • func (params *GenerationParameters) IsValid() bool
• type ParameterSizes
  • func (ps ParameterSizes) Hash() hash.Hash
• type Parameters
  • func (params Parameters) Equal(xx Parameters) bool
• type PrivateKey
  • func FromDSA(dpk *dsa.PrivateKey) *PrivateKey
  • func (priv *PrivateKey) Equal(x crypto.PrivateKey) bool
  • func (priv *PrivateKey) Public() crypto.PublicKey
  • func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)
  • func (kpk *PrivateKey) ToDSA() *dsa.PrivateKey
• type PublicKey
  • func (pub *PublicKey) Equal(x crypto.PublicKey) bool
• type SignerOpts
  • func (opts *SignerOpts) HashFunc() crypto.Hash

Functions

func GenerateKey

func GenerateKey(priv *PrivateKey, rand io.Reader) error

func GenerateKeyWithSeed

func GenerateKeyWithSeed(priv *PrivateKey, rand io.Reader, xkey, upri []byte, sizes ParameterSizes) (xkeyOut, upriOut []byte, err error)

func GenerateParameters

func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes) (err error)

Generate the parameters without Key Generation Parameters (J, Seed, Count)

func GenerateParametersTTAK

func GenerateParametersTTAK(params *Parameters, rand io.Reader, sizes ParameterSizes) (err error)

Generate the parameters using Key Generation Parameters (J, Seed, Count)

func RegenerateParameters

func RegenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes) error

TTAKParameters -> P, Q, G(randomly)

func Sign

func Sign(rand io.Reader, priv *PrivateKey, sizes ParameterSizes, data []byte) (r, s *big.Int, err error)

func SignASN1

func SignASN1(rand io.Reader, priv *PrivateKey, sizes ParameterSizes, data []byte) (sig []byte, err error)

Sign data using K generated randomly like in crypto/ecdsa packages. returns the ASN.1 encoded signature.

func Verify

func Verify(pub *PublicKey, sizes ParameterSizes, data []byte, R, S *big.Int) bool

func VerifyASN1

func VerifyASN1(pub *PublicKey, sizes ParameterSizes, data []byte, sig []byte) bool

VerifyASN1 verifies the ASN.1 encoded signature, sig, M, of hash using the public key, pub. Its return value records whether the signature is valid.

Types

type GenerationParameters

type GenerationParameters struct {
	J     *big.Int
	Seed  []byte
	Count int
}

func (*GenerationParameters) Equal

func (params *GenerationParameters) Equal(xx GenerationParameters) bool

Equal reports whether p, q, g and sizes have the same value.

func (*GenerationParameters) IsValid

func (params *GenerationParameters) IsValid() bool

type ParameterSizes

type ParameterSizes int

const (
	A2048B224SHA224 ParameterSizes = kcdsainternal.A2048B224SHA224 // len(P) = 2048, len(Q) = 224, SHA-224, Recommended
	A2048B224SHA256 ParameterSizes = kcdsainternal.A2048B224SHA256 // len(P) = 2048, len(Q) = 256, SHA-256
	A2048B256SHA256 ParameterSizes = kcdsainternal.A2048B256SHA256 // len(P) = 2048, len(Q) = 256, SHA-256
	A3072B256SHA256 ParameterSizes = kcdsainternal.A3072B256SHA256 // len(P) = 3072, len(Q) = 256, SHA-256, Recommended
	A1024B160HAS160 ParameterSizes = kcdsainternal.A1024B160HAS160 // Deprecated: unsafe. lagacy use only
)

const (
	L2048N224SHA224 ParameterSizes = kcdsainternal.A2048B224SHA224 // Deprecated: use A2048B224SHA224
	L2048N224SHA256 ParameterSizes = kcdsainternal.A2048B224SHA256 // Deprecated: use A2048B224SHA256
	L2048N256SHA256 ParameterSizes = kcdsainternal.A2048B256SHA256 // Deprecated: use A2048B256SHA256
	L3072N256SHA256 ParameterSizes = kcdsainternal.A3072B256SHA256 // Deprecated: use A3072B256SHA256
)

func (ParameterSizes) Hash

func (ps ParameterSizes) Hash() hash.Hash

type Parameters

type Parameters struct {
	P, Q, G *big.Int

	GenParameters GenerationParameters
}

func (Parameters) Equal

func (params Parameters) Equal(xx Parameters) bool

Equal reports whether p, q, g and sizes have the same value.

type PrivateKey

type PrivateKey struct {
	PublicKey
	X *big.Int
}

PrivateKey represents a KCDSA private key.

func FromDSA

func FromDSA(dpk *dsa.PrivateKey) *PrivateKey

func (*PrivateKey) Equal

func (priv *PrivateKey) Equal(x crypto.PrivateKey) bool

Equal reports whether priv and x have the same value.

func (*PrivateKey) Public

func (priv *PrivateKey) Public() crypto.PublicKey

Public returns the public key corresponding to priv.

func (*PrivateKey) Sign

func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)

crypto.Signer

func (*PrivateKey) ToDSA

func (kpk *PrivateKey) ToDSA() *dsa.PrivateKey

type PublicKey

type PublicKey struct {
	Parameters
	Y *big.Int
}

PublicKey represents a KCDSA public key.

func (*PublicKey) Equal

func (pub *PublicKey) Equal(x crypto.PublicKey) bool

Equal reports whether pub and y have the same value.

type SignerOpts

type SignerOpts struct {
	Sizes ParameterSizes
}

SignerOpts contains options for creating and verifying EC-KCDSA signatures.

func (*SignerOpts) HashFunc

func (opts *SignerOpts) HashFunc() crypto.Hash

HashFunc returns opts.Hash so that SignerOpts implements crypto.SignerOpts.