blob: 54134a682fa5a7f264937ed7c2d0edc75f322da4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
/*
* RFC 6979 Deterministic Nonce Generator
* (C) 2014,2015 Jack Lloyd
*
* Botan is released under the Simplified BSD License (see license.txt)
*/
#ifndef BOTAN_RFC6979_GENERATOR_H_
#define BOTAN_RFC6979_GENERATOR_H_
#include <botan/bigint.h>
#include <string>
#include <memory>
BOTAN_FUTURE_INTERNAL_HEADER(rfc6979.h)
namespace Botan {
class HMAC_DRBG;
class BOTAN_PUBLIC_API(2,0) RFC6979_Nonce_Generator final
{
public:
/**
* Note: keeps persistent reference to order
*/
RFC6979_Nonce_Generator(const std::string& hash,
const BigInt& order,
const BigInt& x);
~RFC6979_Nonce_Generator();
const BigInt& nonce_for(const BigInt& m);
private:
const BigInt& m_order;
BigInt m_k;
size_t m_qlen, m_rlen;
std::unique_ptr<HMAC_DRBG> m_hmac_drbg;
secure_vector<uint8_t> m_rng_in, m_rng_out;
};
/**
* @param x the secret (EC)DSA key
* @param q the group order
* @param h the message hash already reduced mod q
* @param hash the hash function used to generate h
*/
BigInt BOTAN_PUBLIC_API(2,0) generate_rfc6979_nonce(const BigInt& x,
const BigInt& q,
const BigInt& h,
const std::string& hash);
}
#endif
|
