crypto

package
v0.19.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jul 13, 2026 License: GPL-3.0 Imports: 14 Imported by: 43

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var ErrCosiNonceReuse = errors.New("cosi nonce reuse with a different challenge")

Functions

func AggregateVerify added in v0.12.18 

func AggregateVerify(sig *Signature, publics []*Key, signers []int, message Hash) error

func BatchVerify added in v0.12.0 

func BatchVerify(msg Hash, keys []*Key, sigs []*Signature) bool

func HashScalar added in v0.9.8 

func HashScalar(k *edwards25519.Point, outputIndex uint64) *edwards25519.Scalar

func KeyMultPubPriv added in v0.5.0 

func KeyMultPubPriv(pub, priv *Key) *edwards25519.Point

func RandReader added in v0.17.0 

func RandReader() *randReader

func ReadRand added in v0.17.0 

func ReadRand(buf []byte)

Types

type BatchVerifier added in v0.12.1 

type BatchVerifier struct {
	// contains filtered or unexported fields
}

BatchVerifier accumulates batch entries with Add, before performing batch verification with Verify.

func NewBatchVerifier added in v0.12.1 

func NewBatchVerifier() BatchVerifier

NewBatchVerifier creates an empty BatchVerifier.

func (*BatchVerifier) Verify added in v0.12.1 

func (v *BatchVerifier) Verify() bool

Verify checks all entries in the current batch, returning true if all entries are valid and false if any one entry is invalid.

If a failure arises it is unknown which entry failed, the caller must verify each entry individually.

Calling Verify on an empty batch returns false.

type CosiNonce added in v0.19.0 

type CosiNonce struct {
	// contains filtered or unexported fields
}

CosiNonce is an opaque handle to a single-use Schnorr nonce. Copies of the handle share the same state and lock. Reusing the same nonce for two different aggregate challenges reveals the long-term private key, so the first response permanently binds this nonce to one challenge. An identical retry returns the cached response without touching the nonce again.

func CosiCommitNonce added in v0.19.0 

func CosiCommitNonce(randReader io.Reader) *CosiNonce

func (*CosiNonce) Public added in v0.19.0 

func (n *CosiNonce) Public() Key

func (*CosiNonce) Response added in v0.19.0 

func (n *CosiNonce) Response(signature *CosiSignature, private *Key, publics []*Key, message Hash) (*[32]byte, error)

type CosiSignature added in v0.5.0 

type CosiSignature struct {
	Signature Signature
	Mask      uint64
	// contains filtered or unexported fields
}

func CosiAggregateCommitment added in v0.5.0 

func CosiAggregateCommitment(randoms map[int]*Key) (*CosiSignature, error)

func (*CosiSignature) AggregateResponse added in v0.5.0 

func (c *CosiSignature) AggregateResponse(publics []*Key, responses map[int]*[32]byte, message Hash, strict bool) error

func (*CosiSignature) Challenge added in v0.5.0 

func (c *CosiSignature) Challenge(publics []*Key, message Hash) (*edwards25519.Scalar, error)

func (*CosiSignature) FullVerify added in v0.5.0 

func (c *CosiSignature) FullVerify(publics []*Key, threshold int, message Hash) error

func (*CosiSignature) Keys added in v0.5.0 

func (c *CosiSignature) Keys() []int

func (CosiSignature) MarshalJSON added in v0.5.0 

func (c CosiSignature) MarshalJSON() ([]byte, error)

func (*CosiSignature) Response added in v0.5.0 

func (c *CosiSignature) Response(privateKey, random *Key, publics []*Key, message Hash) (*[32]byte, error)

func (CosiSignature) String added in v0.5.0 

func (c CosiSignature) String() string

func (*CosiSignature) ThresholdVerify added in v0.5.0 

func (c *CosiSignature) ThresholdVerify(threshold int) bool

func (*CosiSignature) UnmarshalJSON added in v0.5.0 

func (c *CosiSignature) UnmarshalJSON(b []byte) error

func (*CosiSignature) VerifyResponse added in v0.5.0 

func (c *CosiSignature) VerifyResponse(publics []*Key, signer int, s *[32]byte, message Hash) error

type Hash 

type Hash [32]byte

func Blake3Hash added in v0.14.0 

func Blake3Hash(data []byte) Hash

func HashFromString 

func HashFromString(src string) (Hash, error)

func Sha256Hash added in v0.17.0 

func Sha256Hash(data []byte) Hash

func (Hash) ForNetwork 

func (h Hash) ForNetwork(net Hash) Hash

func (Hash) HasValue 

func (h Hash) HasValue() bool

func (Hash) MarshalJSON 

func (h Hash) MarshalJSON() ([]byte, error)

func (Hash) String 

func (h Hash) String() string

func (*Hash) UnmarshalJSON 

func (h *Hash) UnmarshalJSON(b []byte) error

type Key 

type Key [32]byte

func DeriveGhostPrivateKey 

func DeriveGhostPrivateKey(R, a, b *Key, outputIndex uint64) *Key

func DeriveGhostPublicKey 

func DeriveGhostPublicKey(r, A, B *Key, outputIndex uint64) *Key

func DeriveGhostPublicKeyForInternalVanish added in v0.18.32 

func DeriveGhostPublicKeyForInternalVanish(r, A, B *Key, outputIndex uint64) *Key

func KeyFromString added in v0.5.10 

func KeyFromString(s string) (Key, error)

func NewKeyFromSeed 

func NewKeyFromSeed(seed []byte) Key

func ViewGhostOutputKey 

func ViewGhostOutputKey(P, a, R *Key, outputIndex uint64) *Key

func (Key) CheckKey added in v0.6.0 

func (k Key) CheckKey() bool

func (Key) DeterministicHashDerive 

func (k Key) DeterministicHashDerive() Key

func (Key) HasValue added in v0.2.1 

func (k Key) HasValue() bool

func (Key) MarshalJSON 

func (k Key) MarshalJSON() ([]byte, error)

func (Key) Public 

func (k Key) Public() Key

func (*Key) Sign 

func (privateKey *Key) Sign(message Hash) Signature

func (Key) String 

func (k Key) String() string

func (*Key) UnmarshalJSON 

func (k *Key) UnmarshalJSON(b []byte) error

func (*Key) Verify 

func (publicKey *Key) Verify(message Hash, sig Signature) bool

func (*Key) VerifyWithChallenge added in v0.5.0 

func (publicKey *Key) VerifyWithChallenge(sig Signature, a *edwards25519.Scalar) bool

type Signature 

type Signature [64]byte

func AggregateSign added in v0.18.33 

func AggregateSign(privKeys []*Key, publics []*Key, signers []int, seed []byte, message Hash) (*Signature, error)

AggregateSign produces a MuSig-style aggregate Schnorr signature over the given signers and message. Each nonce is derived from the private key, at least 32 bytes of caller-supplied entropy, the complete signer transcript, aggregate public key, signer index, and message. Binding all of these values prevents nonce reuse across changed signer sets and prevents disclosure of the auxiliary seed from exposing a private key.

func (Signature) MarshalJSON 

func (s Signature) MarshalJSON() ([]byte, error)

func (*Signature) R 

func (s *Signature) R() []byte

func (*Signature) S 

func (s *Signature) S() []byte

func (Signature) String 

func (s Signature) String() string

func (*Signature) UnmarshalJSON 

func (s *Signature) UnmarshalJSON(b []byte) error

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.