Expands a message into its Winternitz coefficients and checksum

Algorithm 34 ExpandMask

Algorithm 33 ExpandS We only do half of the algorithm here, because it's inconvenient to return two vectors of different sizes. So the caller has to

Generate a candidate `k` value. This may be called repeatedly in the event a particular `k` is unsuitable, e.g. the resulting `r` value is zero.

KAT is long

Initialize [`VerifyingKey`] from an affine point. # Errors Returns [`Error`] if the `affine` point is the additive identity (a.k.a. point at infinity

Parse a signature from fixed-width bytes, i.e. 2 * the size of [`FieldBytes`] for a particular curve. # Errors If the `r` and/or `s` component of the

Parse signature from DER-encoded bytes. # Errors Returns [`Error`] if `input` failed to parse as an ASN.1 DER-encoded ECDSA signature.

Initialize signing key from a raw scalar serialized as a byte array. # Errors Returns an error if `bytes` is not a valid element of the scalar field

Parse a signature from fixed-with bytes. # Errors Returns [`Error`] if [`Signature`] fails to parse, or if `D` is not a valid digest. See [`Signature

Create an ASN.1 DER encoded signature from big endian `r` and `s` scalar components.

Construct a new public key from the common components and the public component. # Errors Returns an error if `y < 2`.

Construct the common components container from its inner values (`p`, `q`, and `g`). - `p` must be odd - `g` must less than `p` # Errors Returns [`s

Construct a new private key from the public key and private component. # Errors Returns an error in the event `x` is zero or equal to or larger than

Create a [`Signature`] from the serialized `r` and `s` component values which comprise the signature.

Decodes a key pair from PKCS#8 DER bytes.

Create a [`Signature`] from the serialized `r` and `s` scalar values which comprise the signature. # Errors If the `r` and/or `s` component of the si

Initialize [`VerifyingKey`] from a SEC1-encoded public key. # Errors Returns [`Error`] if `bytes` is not a valid SEC1 encoding of a compressed or unc

Initialize [`VerifyingKey`] from an [`Sec1Point`]. # Errors Returns [`Error`] if `public_key` does not represent a valid elliptic curve point for `C`

Generates a key pair from a deterministic seed. Seed must be `P::SEED_LEN` bytes (3*n).

Parse an Ed25519 signature from a byte slice. # Errors - Returns [`Error`] if the input byte slice is not 64-bytes.

Parse a signature from a byte slice. # Errors Returns [`Error`] in the event the signature is not the expected size, i.e. 2 * the size of [`FieldByte

Initialize signing key from a raw scalar serialized as a byte slice. # Errors Returns an error if `bytes` is not the length of [`FieldBytes`] for `C`

Parse an Ed448 signature from a byte slice. # Errors - Returns [`Error`] if the input byte slice is not 114-bytes.

Parse a signature from a byte slice. # Errors Returns [`Error`] if [`Signature`] fails to parse, or if `D` is not a valid digest. See [`SignatureWith

Create a signature container from the two components in their textual hexadecimal form

Constructs an `XmssOid` from a raw XMSSMT OID value (as stored in keys).