mirror of
https://github.com/serai-dex/serai.git
synced 2025-12-12 22:19:26 +00:00
90bc364f9f
The prior-present `Ciphersuite::hash_to_F` was a sin. Implementations took a DST, yet were not require to securely handle it. It was also biased towards the requirements of `modular-frost` as `ciphersuite` was originally written all those years ago, when `modular-frost` had needs exceeding what `ff`, `group` satisfied. Now, the hash is bound to produce an output which can be converted to a scalar with `ff::FromUniformBytes`. A new `hash_to_F`, which accepts a single argument of the value to hash (removing the potential to insecurely handle the DST by removing the DST entirely). Due to `digest` yielding a `GenericArray`, yet `FromUniformBytes` taking a `const usize`, the `ciphersuite` crate now defines a `FromUniformBytes` trait taking an array (then implemented for all satisfiers of `ff::FromUniformBytes`). In order to get the array type from the `GenericArray`, the output of the hash, `digest` is updated to the `0.11` release candidate which moves to `flexible-array` which solves that problem. The existing, specific `hash_to_F` functions have been moved to `modular-frost` as necessary. `flexible-array` itself is patched to a fork due to https://github.com/RustCrypto/hybrid-array/issues/131.
52 lines
1.1 KiB
Rust
52 lines
1.1 KiB
Rust
#![cfg_attr(docsrs, feature(doc_auto_cfg))]
|
|
#![cfg_attr(not(feature = "std"), no_std)]
|
|
|
|
use zeroize::Zeroize;
|
|
|
|
use sha2::Sha512;
|
|
|
|
use ciphersuite::Ciphersuite;
|
|
|
|
pub use k256;
|
|
pub use p256;
|
|
|
|
macro_rules! kp_curve {
|
|
(
|
|
$feature: literal,
|
|
$lib: ident,
|
|
|
|
$Ciphersuite: ident,
|
|
$ID: literal
|
|
) => {
|
|
impl Ciphersuite for $Ciphersuite {
|
|
type F = $lib::Scalar;
|
|
type G = $lib::ProjectivePoint;
|
|
type H = Sha512;
|
|
|
|
const ID: &'static [u8] = $ID;
|
|
|
|
fn generator() -> Self::G {
|
|
$lib::ProjectivePoint::GENERATOR
|
|
}
|
|
}
|
|
};
|
|
}
|
|
|
|
/// Ciphersuite for Secp256k1.
|
|
#[derive(Clone, Copy, PartialEq, Eq, Debug, Zeroize)]
|
|
pub struct Secp256k1;
|
|
kp_curve!("secp256k1", k256, Secp256k1, b"secp256k1");
|
|
#[test]
|
|
fn test_secp256k1() {
|
|
ff_group_tests::group::test_prime_group_bits::<_, k256::ProjectivePoint>(&mut rand_core::OsRng);
|
|
}
|
|
|
|
/// Ciphersuite for P-256.
|
|
#[derive(Clone, Copy, PartialEq, Eq, Debug, Zeroize)]
|
|
pub struct P256;
|
|
kp_curve!("p256", p256, P256, b"P-256");
|
|
#[test]
|
|
fn test_p256() {
|
|
ff_group_tests::group::test_prime_group_bits::<_, p256::ProjectivePoint>(&mut rand_core::OsRng);
|
|
}
|