Struct P256EcImpl 

pub struct P256EcImpl;

The global P256Ec implementation.

Implementations

impl P256EcImpl

pub fn generate_keypair( rng: &mut dyn Rng, ) -> Result<(P256Scalar, P256AffinePoint), CryptoError>

Generate a fresh keypair: d uniform in [1, n-1], Q = d * G.

Used for TLS 1.3 ECDHE keygen and BLE LE-SC keygen.

pub fn public_key(k: P256Scalar) -> Result<P256AffinePoint, CryptoError>

Derive the public key k * G from a known private scalar.

No RNG: used for persistent keys (e.g. a TLS static ECDSA identity loaded from flash, or deriving a BLE public key from a stored secret) where the caller already holds k.

pub fn validate_point(p: &P256AffinePoint) -> bool

Validate that p is a non-identity point on the P-256 curve.

pub fn ecdh_shared_secret( k: P256Scalar, peer: P256AffinePoint, ) -> Result<[u8; 32], CryptoError>

ECDH shared secret: X coordinate of k * peer, big-endian.

This is the TLS 1.3 ecdhe_shared_secret (fed into HKDF via HmacSha256) and the BLE LE-SC DHKey.

pub fn ecdsa_sign( k: P256Scalar, digest: &[u8; 32], rng: &mut dyn Rng, ) -> Result<P256Signature, CryptoError>

ECDSA sign a pre-hashed message (ecdsa_secp256r1_sha256).

The nonce is drawn from rng unless the hardware mandates an internal entropy source. Returns a low-S normalized signature.

pub fn ecdsa_verify( q: P256AffinePoint, digest: &[u8; 32], sig: &P256Signature, ) -> Result<(), CryptoError>

ECDSA verify a pre-hashed message. All inputs public; may be variable-time. Err(CryptoError::InvalidSignature) on failure.

Trait Implementations

impl P256Ec for P256EcImpl

fn generate_keypair( rng: &mut dyn Rng, ) -> Result<(P256Scalar, P256AffinePoint), CryptoError>

Generate a fresh keypair: d uniform in [1, n-1], Q = d * G.

fn public_key(k: P256Scalar) -> Result<P256AffinePoint, CryptoError>

Derive the public key k * G from a known private scalar.

fn validate_point(p: &P256AffinePoint) -> bool

Validate that p is a non-identity point on the P-256 curve.

fn ecdh_shared_secret( k: P256Scalar, peer: P256AffinePoint, ) -> Result<[u8; 32], CryptoError>

ECDH shared secret: X coordinate of k * peer, big-endian.

fn ecdsa_sign( k: P256Scalar, digest: &[u8; 32], rng: &mut dyn Rng, ) -> Result<P256Signature, CryptoError>

ECDSA sign a pre-hashed message (ecdsa_secp256r1_sha256).

fn ecdsa_verify( q: P256AffinePoint, digest: &[u8; 32], sig: &P256Signature, ) -> Result<(), CryptoError>

ECDSA verify a pre-hashed message. All inputs public; may be variable-time. Err(CryptoError::InvalidSignature) on failure.