1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
// xed25519.h - written and placed in public domain by Jeffrey Walton
// Crypto++ specific implementation wrapped around Adam
// Langley's curve25519-donna.
// Typically the key agreement classes encapsulate their data more
// than x25519 does below. We made them a little more accessible
// due to crypto_box operations. Once the library cuts-in the
// crypto_box operations the x25519 class will be more restricted.
#ifndef CRYPTOPP_XED25519_H
#define CRYPTOPP_XED25519_H
#include "cryptlib.h"
NAMESPACE_BEGIN(CryptoPP)
class Integer;
/// \brief x25519 with key validation
/// \since Crypto++ 8.0
class x25519 : public SimpleKeyAgreementDomain, public CryptoParameters
{
public:
/// \brief Test if a key is clamped
/// \param x private key
static bool IsClamped(const byte x[32]);
/// \brief Test if a key has small order
/// \param y public key
static bool IsSmallOrder(const byte y[32]);
/// \brief Test if a key is clamped
/// \param x private key
static void ClampKey(byte x[32]);
/// \brief Create a x25519 object
/// \param y public key
/// \param x private key
/// \details This constructor creates a x25519 object using existing parameters.
/// \note The public key is not validated.
x25519(const byte y[32], const byte x[32]);
/// \brief Create a x25519 object
/// \param x private key
/// \details This constructor creates a x25519 object using existing parameters.
/// The public key is calculated from the private key.
x25519(const byte x[32]);
/// \brief Create a x25519 object
/// \param y public key
/// \param x private key
/// \details This constructor creates a x25519 object using existing parameters.
/// \note The public key is not validated.
x25519(const Integer &y, const Integer &x);
/// \brief Create a x25519 object
/// \param x private key
/// \details This constructor creates a x25519 object using existing parameters.
/// The public key is calculated from the private key.
x25519(const Integer &x);
/// \brief Create a x25519 object
/// \param rng RandomNumberGenerator derived class
/// \details This constructor creates a new x25519 using the random number generator.
x25519(RandomNumberGenerator &rng);
/// \brief Create a x25519 object
/// \param params public and private key
/// \details This constructor creates a x25519 object using existing parameters.
/// The <tt>params</tt> can be created with <tt>DEREncode</tt>.
/// \note The public key is not validated.
x25519(BufferedTransformation ¶ms);
/// \brief Decode a x25519 object
/// \param params serialized object
/// \details DEREncode() writes the public and private key as an ASN.1 structure.
/// The private key is written first as a <tt>BIT_STRING</tt>. The public key
/// is written second as an <tt>OCTET_STRING</tt>.
void DEREncode(BufferedTransformation ¶ms) const;
bool Validate(RandomNumberGenerator &rng, unsigned int level) const;
bool GetVoidValue(const char *name, const std::type_info &valueType, void *pValue) const;
void AssignFrom(const NameValuePairs &source);
CryptoParameters & AccessCryptoParameters() {return *this;}
unsigned int AgreedValueLength() const {return 32;}
unsigned int PrivateKeyLength() const {return 32;}
unsigned int PublicKeyLength() const {return 32;}
void GeneratePrivateKey(RandomNumberGenerator &rng, byte *privateKey) const;
void GeneratePublicKey(RandomNumberGenerator &rng, const byte *privateKey, byte *publicKey) const;
bool Agree(byte *agreedValue, const byte *privateKey, const byte *otherPublicKey, bool validateOtherPublicKey=true) const;
private:
FixedSizeSecBlock<byte, 32> m_sk, m_pk;
};
NAMESPACE_END // CryptoPP
#endif // CRYPTOPP_XED25519_H
|