java.lang.Object
java.security.SignatureSpi
java.security.Signature
net.i2p.crypto.eddsa.EdDSAEngine
Direct Known Subclasses:
RedDSAEngine
public class EdDSAEngineextends Signature
EdDSA signature engine implementing the Java Signature API. Supports both standard streaming and one-shot operation modes for efficiency.

  • Field Details

    • SIGNATURE_ALGORITHM

      public static final String SIGNATURE_ALGORITHM
      The signature algorithm name.
      See Also:

    • digest

      protected MessageDigest digest
      The message digest used for signing/verification.

    • ONE_SHOT_MODE

      public static final AlgorithmParameterSpec ONE_SHOT_MODE
      To efficiently sign or verify data in one shot, pass this to setParameters() after initSign() or initVerify() but BEFORE THE FIRST AND ONLY update(data) or update(data, off, len). The data reference will be saved and then used in sign() or verify() without copying the data. Violate these rules and you will get a SignatureException.

  • Constructor Details

    • EdDSAEngine

      public EdDSAEngine()
      No specific EdDSA-internal hash requested, allows any EdDSA key.

    • EdDSAEngine

      public EdDSAEngine(MessageDigest digest)
      Specific EdDSA-internal hash requested, only matching keys will be allowed.
      Parameters:
      digest - the hash algorithm that keys must have to sign or verify.

  • Method Details

    • engineInitSign

      protected void engineInitSign(PrivateKey privateKey) throws InvalidKeyException
      Specified by:
      engineInitSign in class SignatureSpi
      Throws:
      InvalidKeyException

    • digestInitSign

      protected void digestInitSign(EdDSAPrivateKey privKey)
      Initialize the digest for signing.
      Parameters:
      privKey - the private key

    • engineInitVerify

      protected void engineInitVerify(PublicKey publicKey) throws InvalidKeyException
      Specified by:
      engineInitVerify in class SignatureSpi
      Throws:
      InvalidKeyException

    • engineUpdate

      protected void engineUpdate(byte b) throws SignatureException
      Update the signature with one byte.
      Specified by:
      engineUpdate in class SignatureSpi
      Throws:
      SignatureException - if in one-shot mode

    • engineUpdate

      protected void engineUpdate(byte[] b, int off, int len) throws SignatureException
      Update the signature with the given bytes.
      Specified by:
      engineUpdate in class SignatureSpi
      Throws:
      SignatureException - if one-shot rules are violated

    • engineSign

      protected byte[] engineSign() throws SignatureException
      Specified by:
      engineSign in class SignatureSpi
      Throws:
      SignatureException

    • engineVerify

      protected boolean engineVerify(byte[] sigBytes) throws SignatureException
      Specified by:
      engineVerify in class SignatureSpi
      Throws:
      SignatureException

    • signOneShot

      public byte[] signOneShot(byte[] data) throws SignatureException
      To efficiently sign all the data in one shot, if it is available, use this method, which will avoid copying the data.

      Same as:

      setParameter(ONE_SHOT_MODE)
update(data)
sig = sign()
      Parameters:
      data - the message to be signed
      Returns:
      the R and S components, 2 * b/4 bytes long
      Throws:
      SignatureException - if update() already called
      See Also:

    • signOneShot

      public byte[] signOneShot(byte[] data, int off, int len) throws SignatureException
      To efficiently sign all the data in one shot, if it is available, use this method, which will avoid copying the data.

      Same as:

      setParameter(ONE_SHOT_MODE)
update(data, off, len)
sig = sign()
      Parameters:
      data - byte array containing the message to be signed
      off - the start of the message inside data
      len - the length of the message
      Returns:
      the R and S components, 2 * b/4 bytes long
      Throws:
      SignatureException - if update() already called
      See Also:

    • verifyOneShot

      public boolean verifyOneShot(byte[] data, byte[] signature) throws SignatureException
      To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data.

      Same as:

      setParameter(ONE_SHOT_MODE)
update(data)
ok = verify(signature)
      Parameters:
      data - the message that was signed
      signature - of the message
      Returns:
      true if the signature is valid, false otherwise
      Throws:
      SignatureException - if update() already called
      See Also:

    • verifyOneShot

      public boolean verifyOneShot(byte[] data, int off, int len, byte[] signature) throws SignatureException
      To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data.

      Same as:

      setParameter(ONE_SHOT_MODE)
update(data, off, len)
ok = verify(signature)
      Parameters:
      data - byte array containing the message that was signed
      off - the start of the message inside data
      len - the length of the message
      signature - of the message
      Returns:
      true if the signature is valid, false otherwise
      Throws:
      SignatureException - if update() already called
      See Also:

    • verifyOneShot

      public boolean verifyOneShot(byte[] data, byte[] signature, int sigoff, int siglen) throws SignatureException
      To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data.

      Same as:

      setParameter(ONE_SHOT_MODE)
update(data)
ok = verify(signature, sigoff, siglen)
      Parameters:
      data - the message that was signed
      signature - byte array containing the signature
      sigoff - the start of the signature
      siglen - the length of the signature
      Returns:
      true if the signature is valid, false otherwise
      Throws:
      SignatureException - if update() already called
      See Also:

    • verifyOneShot

      public boolean verifyOneShot(byte[] data, int off, int len, byte[] signature, int sigoff, int siglen) throws SignatureException
      To efficiently verify all the data in one shot, if it is available, use this method, which will avoid copying the data.

      Same as:

      setParameter(ONE_SHOT_MODE)
update(data, off, len)
ok = verify(signature, sigoff, siglen)
      Parameters:
      data - byte array containing the message that was signed
      off - the start of the message inside data
      len - the length of the message
      signature - byte array containing the signature
      sigoff - the start of the signature
      siglen - the length of the signature
      Returns:
      true if the signature is valid, false otherwise
      Throws:
      SignatureException - if update() already called
      See Also:

    • engineSetParameter

      protected void engineSetParameter(AlgorithmParameterSpec spec) throws InvalidAlgorithmParameterException
      Only the one-shot mode parameter specification is supported.
      Overrides:
      engineSetParameter in class SignatureSpi
      Throws:
      InvalidAlgorithmParameterException - if spec is ONE_SHOT_MODE and update() already called
      See Also: