moonbitstack/mooncrypt/sign/ecdsa

sign

moonbitstack/mooncrypt/sign/ecdsa does not have a README file

Curve

using @moonbitstack/mooncrypt/curve { type Curve }

Which curve a key lives on: the three NIST primes TLS and JOSE speak, and secp256k1, which Bitcoin and Ethereum speak.

PrivateKey

source

type PrivateKey

An ECDSA signing key: a scalar less than the group order.

impl Signer for PrivateKey

fn sign(self : PrivateKey, msg : BytesView) -> Bytes

source

Sign a message (FIPS 186-4 §6.4.1), returning r ∥ s — two fixed-width big-endian integers, which is the encoding JOSE and most wire protocols use. The ASN.1 DER wrapper that OpenSSL writes is a separate concern and belongs with the other DER.

The nonce is derived from the key and the message by RFC 6979, not drawn from an entropy source. A repeated or guessable nonce hands over the private key outright — it is how the PlayStation 3 and several Bitcoin wallets were emptied — so removing the entropy source removes the failure.

PrivateKey::bytes

source

fn PrivateKey::bytes(self : PrivateKey) -> Bytes

The scalar this key is written as, big-endian and fixed-width.

PrivateKey::curve

source

fn PrivateKey::curve(self : PrivateKey) -> @moonbitstack/mooncrypt/curve.Curve
Curve

Which curve this key is on.

PrivateKey::new

source

fn PrivateKey::new(scalar : BytesView, curve? : @moonbitstack/mooncrypt/curve.Curve
Curve) -> PrivateKey raise @moonbitstack/mooncrypt/spec.Broken
Broken

Read a signing key from its scalar, big-endian and fixed-width.

PrivateKey::public

source

fn PrivateKey::public(self : PrivateKey) -> PublicKey

The verification key that matches this signing key: Q = [d]G.

PrivateKey::sign

source

fn PrivateKey::sign(self : PrivateKey, msg : BytesView) -> Bytes

PrivateKey::with_hash

source

fn PrivateKey::with_hash(scalar : BytesView, hash : () -> &@moonbitstack/mooncrypt/spec.Hash
Hash, curve? : @moonbitstack/mooncrypt/curve.Curve
Curve) -> PrivateKey raise @moonbitstack/mooncrypt/spec.Broken
Broken

A signing key read against a digest of the caller's choosing.

PublicKey

source

type PublicKey

An ECDSA verification key: a point on the curve.

impl Verifier for PublicKey

PublicKey::bytes

source

fn PublicKey::bytes(self : PublicKey) -> Bytes

The key as an uncompressed SEC 1 point, 04 ∥ X ∥ Y.

PublicKey::curve

source

fn PublicKey::curve(self : PublicKey) -> @moonbitstack/mooncrypt/curve.Curve
Curve

Which curve this key is on.

PublicKey::new

source

fn PublicKey::new(point : BytesView, curve? : @moonbitstack/mooncrypt/curve.Curve
Curve) -> PublicKey raise @moonbitstack/mooncrypt/spec.Broken
Broken

Read a public key from a SEC 1 §2.3.3 encoded point.

Both forms are accepted: 04 ∥ X ∥ Y uncompressed, and 02/03 ∥ X compressed, where the prefix gives the parity of Y and the rest is recovered from the curve equation.

The digest is the one the curve is standardly paired with — SHA-256 for the 256-bit curves, SHA-384 for P-384, SHA-512 for P-521 — which is what ES256, ES384 and ES512 mean. Use [PublicKey::with_hash] for any other pairing.

PublicKey::of_xy

source

fn PublicKey::of_xy(x : BytesView, y : BytesView, curve? : @moonbitstack/mooncrypt/curve.Curve
Curve) -> PublicKey raise @moonbitstack/mooncrypt/spec.Broken
Broken

Read a public key from its two affine coordinates — the shape a JWK carries.

PublicKey::verify

source

fn PublicKey::verify(self : PublicKey, msg : BytesView, sig : BytesView) -> Bool

PublicKey::with_hash

source

fn PublicKey::with_hash(point : BytesView, hash : () -> &@moonbitstack/mooncrypt/spec.Hash
Hash, curve? : @moonbitstack/mooncrypt/curve.Curve
Curve) -> PublicKey raise @moonbitstack/mooncrypt/spec.Broken
Broken

A public key read against a digest of the caller's choosing.

PublicKey::xy

source

fn PublicKey::xy(self : PublicKey) -> (Bytes, Bytes)

The two affine coordinates, each fixed-width — the shape a JWK wants.

Source Files

ecdsa.mbt

Install

Download zip

mooncrypt — cryptographic algorithms for MoonBit, one algorithm per package: SHA-1, SHA-2, MD5, HMAC, HKDF, PBKDF2, Ed25519, ECDSA P-256 and RSA PKCS#1 v1.5, on a small set of traits so a third algorithm drops in without touching the library.

cryptocryptographyhashsha256hmaced25519ecdsarsajwtmoonbit