Crypto.PubKey.RSA.PSS

cryptonite-0.13: Cryptography Primitives sink

License | BSD-style
Maintainer | Vincent Hanquez <vincent@snarc.org>
Stability | experimental
Portability | Good
Safe Haskell | None
Language | Haskell2010

Crypto.PubKey.RSA.PSS

Contents

- Sign and verify functions

Description

Synopsis

- data PSSParams hash seed output = PSSParams {
  - pssHash :: hash
  - pssMaskGenAlg :: MaskGenAlgorithm seed output
  - pssSaltLength :: Int
  - pssTrailerField :: Word8
  }
- defaultPSSParams :: (ByteArrayAccess seed, ByteArray output, HashAlgorithm hash) => hash -> PSSParams hash seed output
- defaultPSSParamsSHA1 :: PSSParams SHA1 ByteString ByteString
- signWithSalt :: HashAlgorithm hash => ByteString -> Maybe Blinder -> PSSParams hash ByteString ByteString -> PrivateKey -> ByteString -> Either Error ByteString
- sign :: (HashAlgorithm hash, MonadRandom m) => Maybe Blinder -> PSSParams hash ByteString ByteString -> PrivateKey -> ByteString -> m (Either Error ByteString)
- signSafer :: (HashAlgorithm hash, MonadRandom m) => PSSParams hash ByteString ByteString -> PrivateKey -> ByteString -> m (Either Error ByteString)
- verify :: HashAlgorithm hash => PSSParams hash ByteString ByteString -> PublicKey -> ByteString -> ByteString -> Bool

# Documentation

data PSSParams hash seed output

Parameters for PSS signature/verification.

Constructors

PSSParams |
Fields pssHash :: hash Hash function to use pssMaskGenAlg :: MaskGenAlgorithm seed output Mask Gen algorithm to use pssSaltLength :: Int Length of salt. need to be <= to hLen. pssTrailerField :: Word8 Trailer field, usually 0xbc

defaultPSSParams :: (ByteArrayAccess seed, ByteArray output, HashAlgorithm hash) => hash -> PSSParams hash seed output

Default Params with a specified hash function

defaultPSSParamsSHA1 :: PSSParams SHA1 ByteString ByteString

Default Params using SHA1 algorithm.

# Sign and verify functions

signWithSalt

Arguments

:: HashAlgorithm hash |
=> ByteString | Salt to use
-> Maybe Blinder | optional blinder to use
-> PSSParams hash ByteString ByteString | PSS Parameters to use
-> PrivateKey | RSA Private Key
-> ByteString | Message to sign
-> Either Error ByteString |

Sign using the PSS parameters and the salt explicitely passed as parameters.

the function ignore SaltLength from the PSS Parameters

sign

Arguments

:: (HashAlgorithm hash, MonadRandom m) |
=> Maybe Blinder | optional blinder to use
-> PSSParams hash ByteString ByteString | PSS Parameters to use
-> PrivateKey | RSA Private Key
-> ByteString | Message to sign
-> m (Either Error ByteString) |

Sign using the PSS Parameters

signSafer

Arguments

:: (HashAlgorithm hash, MonadRandom m) |
=> PSSParams hash ByteString ByteString | PSS Parameters to use
-> PrivateKey | private key
-> ByteString | message to sign
-> m (Either Error ByteString) |

Sign using the PSS Parameters and an automatically generated blinder.

verify

Arguments

:: HashAlgorithm hash |
=> PSSParams hash ByteString ByteString | PSS Parameters to use to verify, this need to be identical to the parameters when signing
-> PublicKey | RSA Public Key
-> ByteString | Message to verify
-> ByteString | Signature
-> Bool |

Verify a signature using the PSS Parameters