public class SPSAGHO11SignatureScheme extends java.lang.Object implements MultiMessageStructurePreservingSignatureScheme
MessageBlocks;
one containing GroupElementPlainTexts of elements in G_1 and the other GroupElementPlainTexts
of elements in G_2.
The message vectors are padded with the neutral element of they respective groups.
The key generation function accounts for this edge-case automatically by calculating the extra elements
that are required as a consequence of the padding.
From a user perspective, any positive length tuple of two message-vectors (M \in G_1,N \in G_2) may be passed
without the need for additional precautions.| Modifier and Type | Field and Description |
|---|---|
protected SPSAGHO11PublicParameters |
pp
The public parameters used by the scheme
|
| Modifier | Constructor and Description |
|---|---|
protected |
SPSAGHO11SignatureScheme() |
|
SPSAGHO11SignatureScheme(org.cryptimeleon.math.serialization.Representation repr) |
|
SPSAGHO11SignatureScheme(SPSAGHO11PublicParameters pp) |
| Modifier and Type | Method and Description |
|---|---|
boolean |
equals(java.lang.Object o) |
SignatureKeyPair<SPSAGHO11VerificationKey,SPSAGHO11SigningKey> |
generateKeyPair(int... messageBlockLengths)
Generates a key pair for signing n blocks of messages with
messageBlockLengths
with each signature. |
SignatureKeyPair<SPSAGHO11VerificationKey,SPSAGHO11SigningKey> |
generateKeyPair(int numberOfMessages)
Generates a key pair for signing a block of
numberOfMessages messages
with each signature. |
int |
getMaxNumberOfBytesForMapToPlaintext()
Returns the maximal number of bytes that can be mapped injectively to a
PlainText by
SignatureScheme.mapToPlaintext(byte[], SigningKey) and SignatureScheme.mapToPlaintext(byte[], VerificationKey). |
org.cryptimeleon.math.serialization.Representation |
getRepresentation() |
int |
hashCode() |
MessageBlock |
mapToPlaintext(byte[] bytes,
SigningKey sk)
Provides an injective mapping of the given bytes to a
PlainText usable with this scheme (which may be a
MessageBlock). |
MessageBlock |
mapToPlaintext(byte[] bytes,
VerificationKey pk)
Provides an injective mapping of the given bytes to a
PlainText usable with this scheme (which may be a
MessageBlock). |
PlainText |
restorePlainText(org.cryptimeleon.math.serialization.Representation repr) |
Signature |
restoreSignature(org.cryptimeleon.math.serialization.Representation repr) |
SigningKey |
restoreSigningKey(org.cryptimeleon.math.serialization.Representation repr) |
VerificationKey |
restoreVerificationKey(org.cryptimeleon.math.serialization.Representation repr) |
Signature |
sign(PlainText plainText,
SigningKey secretKey)
Signs the giving plaintext using the given signing key.
|
java.lang.Boolean |
verify(PlainText plainText,
Signature signature,
VerificationKey publicKey)
Verifies the given signature for the given plaintext using the given verification key.
|
clone, finalize, getClass, notify, notifyAll, toString, wait, wait, waitsign, sign, verify, verifygenerateKeyPairsign, sign, verify, verifyrestoreFromRepresentation, sign, verifyprotected SPSAGHO11PublicParameters pp
protected SPSAGHO11SignatureScheme()
public SPSAGHO11SignatureScheme(SPSAGHO11PublicParameters pp)
public SPSAGHO11SignatureScheme(org.cryptimeleon.math.serialization.Representation repr)
public SignatureKeyPair<SPSAGHO11VerificationKey,SPSAGHO11SigningKey> generateKeyPair(int numberOfMessages)
StandardMultiMessageSignatureSchemenumberOfMessages messages
with each signature.generateKeyPair in interface StandardMultiMessageSignatureSchemenumberOfMessages - the number of messages as input to sign supported by this key pairpublic SignatureKeyPair<SPSAGHO11VerificationKey,SPSAGHO11SigningKey> generateKeyPair(int... messageBlockLengths)
messageBlockLengths
with each signature.messageBlockLengths - the length of the individual MessageBlocks this scheme accepts as input.public Signature sign(PlainText plainText, SigningKey secretKey)
SignatureSchemesign in interface SignatureSchemeplainText - the message to signsecretKey - the secret signing keyplainText computed using secretKeypublic java.lang.Boolean verify(PlainText plainText, Signature signature, VerificationKey publicKey)
SignatureSchemeverify in interface SignatureSchemeplainText - the plaintext the signature should validate againstsignature - the signature to verifypublicKey - the verification key to verify withpublic PlainText restorePlainText(org.cryptimeleon.math.serialization.Representation repr)
restorePlainText in interface SignatureSchemepublic Signature restoreSignature(org.cryptimeleon.math.serialization.Representation repr)
restoreSignature in interface SignatureSchemepublic SigningKey restoreSigningKey(org.cryptimeleon.math.serialization.Representation repr)
restoreSigningKey in interface SignatureSchemepublic VerificationKey restoreVerificationKey(org.cryptimeleon.math.serialization.Representation repr)
restoreVerificationKey in interface SignatureSchemepublic MessageBlock mapToPlaintext(byte[] bytes, VerificationKey pk)
SignatureSchemePlainText usable with this scheme (which may be a
MessageBlock).
It only guarantees injectivity for arrays of the same length.
Applications that would like to use mapToPlaintext with multiple different array lengths
may want to devise a padding method and then only call mapToPlaintext with
byte arrays of the same (padded) length.
The contract is that VerificationKey pk and SigningKey sk are compatible
(in the sense that verify(m,sign(m, sk),pk) == true),
then mapToPlaintext(bytes, pk)) equals mapToPlaintext(bytes, sk) for all bytes.
mapToPlaintext in interface SignatureSchemebytes - bytes to be mapped to a PlainTextpk - the verification key for which the resulting PlainText should be valid
(note that the plaintext space may differ for different verification keys).public MessageBlock mapToPlaintext(byte[] bytes, SigningKey sk)
SignatureSchemePlainText usable with this scheme (which may be a
MessageBlock).
It only guarantees injectivity for arrays of the same length.
Applications that would like to use mapToPlaintext with multiple different array lengths
may want to devise a padding method and then only call mapToPlaintext with
byte arrays of the same (padded) length.
The contract is that VerificationKey pk and SigningKey sk are compatible
(in the sense that verify(m,sign(m, sk),pk) == true),
then mapToPlaintext(bytes, pk)) equals mapToPlaintext(bytes, sk) for all bytes.
mapToPlaintext in interface SignatureSchemebytes - bytes to be mapped to a PlainTextsk - the signing key for which the resulting PlainText should be valid
(note that the plaintext space may differ for different signing keys).public int getMaxNumberOfBytesForMapToPlaintext()
SignatureSchemePlainText by
SignatureScheme.mapToPlaintext(byte[], SigningKey) and SignatureScheme.mapToPlaintext(byte[], VerificationKey).
As described in SignatureScheme.mapToPlaintext(byte[], org.cryptimeleon.craco.sig.VerificationKey) there might be no injective PlainText for some byte arrays, e.g.
if the byte array is too long. Therefore, this method provides the maximal number of bytes that can be mapped
injectively to a PlainText.
getMaxNumberOfBytesForMapToPlaintext in interface SignatureSchemeSignatureScheme.mapToPlaintext(byte[], org.cryptimeleon.craco.sig.VerificationKey).public org.cryptimeleon.math.serialization.Representation getRepresentation()
getRepresentation in interface org.cryptimeleon.math.serialization.Representablepublic boolean equals(java.lang.Object o)
equals in class java.lang.Objectpublic int hashCode()
hashCode in class java.lang.Object