#include <rfc6979.h>

Public Member Functions
BigInt	nonce_for (const BigInt &group_order, const BigInt &m)
RFC6979_Nonce_Generator &	operator= (const RFC6979_Nonce_Generator &other)=delete
RFC6979_Nonce_Generator &	operator= (RFC6979_Nonce_Generator &&other) noexcept
	RFC6979_Nonce_Generator (const RFC6979_Nonce_Generator &other)=delete
	RFC6979_Nonce_Generator (RFC6979_Nonce_Generator &&other) noexcept
	RFC6979_Nonce_Generator (std::string_view hash, size_t order_bits, const BigInt &x)
	~RFC6979_Nonce_Generator ()

Detailed Description

Definition at line 24 of file rfc6979.h.

Constructor & Destructor Documentation

◆ RFC6979_Nonce_Generator() [1/3]

Botan::RFC6979_Nonce_Generator::RFC6979_Nonce_Generator	(	std::string_view	hash,
		size_t	order_bits,
		const BigInt &	x )

Definition at line 22 of file rfc6979.cpp.

                                                                                                        :
      m_qlen(order_bits), m_rlen((m_qlen + 7) / 8), m_rng_in(m_rlen * 2), m_rng_out(m_rlen) {
   m_hmac_drbg = std::make_unique<HMAC_DRBG>(MessageAuthenticationCode::create_or_throw(fmt("HMAC({})", hash)));
 
   x.serialize_to(std::span{m_rng_in}.first(m_rlen));
}

References Botan::MessageAuthenticationCode::create_or_throw(), Botan::fmt(), and Botan::BigInt::serialize_to().

Referenced by operator=(), operator=(), RFC6979_Nonce_Generator(), and RFC6979_Nonce_Generator().

◆ RFC6979_Nonce_Generator() [2/3]

Botan::RFC6979_Nonce_Generator::RFC6979_Nonce_Generator ( const RFC6979_Nonce_Generator & other )

delete

References RFC6979_Nonce_Generator().

◆ RFC6979_Nonce_Generator() [3/3]

Botan::RFC6979_Nonce_Generator::RFC6979_Nonce_Generator ( RFC6979_Nonce_Generator && other )

defaultnoexcept

References RFC6979_Nonce_Generator().

◆ ~RFC6979_Nonce_Generator()

Botan::RFC6979_Nonce_Generator::~RFC6979_Nonce_Generator ( )

default

Member Function Documentation

◆ nonce_for()

BigInt Botan::RFC6979_Nonce_Generator::nonce_for	(	const BigInt &	group_order,
		const BigInt &	m )

Definition at line 29 of file rfc6979.cpp.

                                                                              {
   BOTAN_DEBUG_ASSERT(order.bits() == m_qlen);
 
   m.serialize_to(std::span{m_rng_in}.last(m_rlen));
 
   m_hmac_drbg->initialize_with(m_rng_in);
 
   const size_t shift = 8 * m_rlen - m_qlen;
   BOTAN_ASSERT_NOMSG(shift < 8);
 
   BigInt k;
 
   for(;;) {
      m_hmac_drbg->randomize(m_rng_out);
      k._assign_from_bytes(m_rng_out);
 
      if(shift > 0) {
         k >>= shift;
      }
 
      if(k > 0 && k < order) {
         break;
      }
   }
 
   return k;
}