Seed is used to feed an extendable output function.

Key represents a X25519 key.

Key represents a X448 key.

[]byte but is encoded in hex for JSON

[ID] identifies the supported parameter sets of SLH-DSA. Note that the zero value is not a valid identifier.

PublicKey is the type of Ed448 public keys.

PublicShare must be distributed to each of the Aggregators. Its content depends on whether joint randomness is required for the underlying FLP. If joi

A Scheme represents a specific instance of a KEM.

state encapsulates common data for performing a public operation.

See FIPS 205 -- Section 6 eXtended Merkle Signature Scheme (XMSS) extends the WOTS+ signature scheme into one that can sign multiple messages.

ACVP is a decoded pair of ACVP test vector files: the prompt file, holding the test groups, and the expectedResults file, holding the results indexed

AggShare represents the following structure. struct { Prio3Field agg_share[F * prio3.flp.OUTPUT_LEN]; } Prio3AggShare;

AuthScheme represents a KEM that supports authenticated key encapsulation.

CustomPublicKey is similar to rsa.PrivateKey, containing information needed for a private key used in the partially blind signature protocol.

BigPublicKey is the same as an rsa.PublicKey struct, except the public key is represented as a big integer as opposed to an int. For the partially bli

Binary is used for And, Or

Additional methods when the signature scheme is supported in X509.

Client is a type that implements the client side of the blind RSA protocol, described in https://www.rfc-editor.org/rfc/rfc9474.html#name-rsabssa-vari

Context defines the capabilities of an HPKE context.

Count is a verifiable distributed aggregation function in which each measurement is either one or zero and the aggregate result is the sum of the meas

Curve is used to provide the extended functionality and performance of elliptic.Curve interface.

Curve is the Goldilocks curve x^2+y^2=z^2-39081x^2y^2.

Stores curve projective parameters equivalent to A/C. Meaning of the values depends on the context. When working with isogenies over subgroup that are

CurveParams contains the parameters of the elliptic curve.

Cyclo6 represents an element of the 6th cyclotomic group.

See NIST's PQCgenKAT.c.

Element represents an element of a prime-order group.

Elt is any type that stores a prime field element.

Elt is a prime field element.

Elt is a prime field element.

EltG is a group element.

EltP is a precomputed group element.

Encoder allows to convert integers into valid powers.

Evaluation contains a list of elements produced during server's evaluation, and for verifiable modes it also includes a proof.

EvaluationRequest contains the blinded elements to be evaluated by the Server.

FLP is an instance of a FLP by Boneh et al. Crypto, 2019 paper "Zero-Knowledge Proofs on Secret-Shared Data via Fully Linear PCPs", https://ia.cr/2019

FinalizeData encapsulates data needed for Finalize step.

Formula represents a monotone boolean circuit with Inputs not repeated. The representation is as follows: for n Gates there n+1 input wires, 1 output

Fp lists the functionality that a prime field element must have denoting methods with a pointer receiver. This interface considers the modulus is an N

Fp represents prime field elements as positive integers less than FpOrder.

Fp is an element (in littleEndian order) of prime field GF(2^127-1).

Fp represents a prime field element as a positive integer less than Order.

Fp represents a prime field element as a positive integer less than Order.

Representation of an element of the base field F_p. No particular meaning is assigned to the representation -- it could represent an element in Montg

Fp12 represents an element of the field Fp12 = Fp6[w]/(w^2-v)., where v in Fp6.

Fp12Cubic represents elements of Fp4[w]/w^3-t

Represents an element of the extended field Fp^2 = Fp(x+i)

Fp4 is obtained by adjoining t, the square root of u+1 to Fp2

Represents an intermediate product of two elements of the base field F_p.

Fq implements operations of a field of size q=p^2 as a quadratic extension of the base field where i^2=-1. An element in Fq is represented as f[0]+f[1

G1 is a point in the BLS12 curve over Fp.

G1 group used for keys defined in pairing group G1.

G2 is a point in the twist of the BLS12 curve over Fp2.

G2 group used for keys defined in pairing group G2.

PolyEval gadget for p(x) = x^2-x.

Gate is a Gate in a monotone boolean formula.

Group represents an additive prime-order group based on elliptic curves.

Group defines the operations required by MLSBSet exponentiation method.

Grouping is used for LeftParen, RightParen

Gt represents an element of the output (multiplicative) group of a pairing.

Histogram is a verifiable distributed aggregation function in which each measurement increments by one the histogram bucket, out of a set of fixed buc

InputShare is a generic struct that stores shares for the leader or helper.

InputShareHelper represents one of these two structures. struct { Prio3Seed share; } Prio3HelperShare; struct { Prio3HelperShare inner;

InputShareLeader represents one of these two structures. struct { Prio3Field meas_share[F * prio3.flp.MEAS_LEN]; Prio3Field proofs_share[F

SIKE KEM interface. Deprecated: not cryptographically secure.