Format a signature component as hex.

Constant RNG for testing purposes only.

Mock RNG that just returns a pre-determined bytestring

`Address` represents a hash address as defined by FIPS-205 section 4.2

I can't think of a better name

We require modular reduction for three moduli: q, 2^d, and 2 * gamma2. All three of these are greater than sqrt(q), which means that a number reduced

`BitPack` represents range-encoding logic

Constant-time division by a compile-time constant divisor. This trait provides a constant-time alternative to the hardware division instruction, whic

Marker trait for elliptic curves intended for use with ECDSA.

A trait specifying the hash functions described in FIPS-205 section 10

Implementation of [NIST SP800-90A]'s `HMAC_DRBG` HMAC-based deterministic random bit generator. [NIST SP800-90A]: https://csrc.nist.gov/publications/

Deterministic generator for the ephemeral scalar `k` as defined by STB 34.101.45 (BIGN). - `C`: block cipher used by `belt-wbl` (`belt-block`). - `U`

Deterministic generator for the ephemeral scalar `k` as used by (EC)DSA.

AES_CTR_DRBG - based RNG used by the SPHINCS+ reference implementation KATs

Ed25519 keypair serialized as bytes. This type is primarily useful for decoding/encoding PKCS#8 private key files (either DER or PEM) encoded using t

Ed448 keypair serialized as bytes. This type is primarily useful for decoding/encoding PKCS#8 private key files (either DER or PEM) encoded using the

The error returned by `TryFrom<&[u8]>` impls

The basic trait that must be implemented for any valid LMS mode

The basic trait that must be implemented by any OTS mode.

An instance of `MlDsaParams` defines all of the parameters necessary for ML-DSA operations. Typically this is done by implementing `ParameterSet` with

A `ParameterSet` captures the parameters that describe a particular instance of ML-DSA. There are three variants, corresponding to three different se

Intentionally un-usable type

A pair of integers that describes a range

A helper trait to construct larger arrays by repeating smaller ones

ASN.1 DER-encoded signature as specified in [RFC5912 Section 6]: ```text ECDSA-Sig-Value ::= SEQUENCE { r INTEGER, s INTEGER } ``` [RFC5912 Sectio

A parsed SLH-DSA signature for a given parameter set Note that this is a large stack-allocated value and may overflow the stack on small devices. The

Opaque struct representing a LM-OTS signature

Opaque struct representing a LMS signature

A trait specifying the length of a serialized signature for a given parameter set

Opaque struct representing an LM-OTS private key. Does not implement [Clone] because OTS keys are supposed to be one time use.

Opaque struct representing a LMS private key Note: there is no requirement to map specific LMS algorithms to specific LM-OTS algorithms so it must be

A trait specifying the length of a serialized signing key for a given parameter set