Skip to contents

Assemble a standardised key from raw key material

Source: R/sign.R
fips_key.Rd

Wraps key bytes that came from somewhere else – another implementation, a key store, a file written by an earlier session – in the object capsule_sign() and capsule_verify() expect. The lengths are checked against the parameter set, so material for the wrong scheme is refused here rather than producing a signature nothing can verify.

Usage

fips_key(scheme, public, secret = NULL)

Arguments

scheme

Scheme name, as in fips_keygen().

public

Public key, hex or raw.

secret

Secret key, hex or raw. Omit for a verification-only key.

Value

A bricklayer_fips_key when secret is given, otherwise a bricklayer_fips_public_key.

Details

The byte layouts are the standards' own, which is what makes this interoperable: an ML-DSA secret key is rho || K || tr || s1 || s2 || t0 and an SLH-DSA one is SK.seed || SK.prf || PK.seed || PK.root, exactly as FIPS 204 and FIPS 205 encode them.

See also

fips_keygen(), fips_sizes().

Examples

key <- fips_keygen("ML-DSA-44")
# the round trip through raw material changes nothing
again <- fips_key("ML-DSA-44", key$public, key$secret)
identical(again$secret, key$secret)
#> [1] TRUE

sig <- capsule_sign("m", again)
capsule_verify("m", sig, fips_key("ML-DSA-44", key$public))
#> [1] TRUE

# material of the wrong length is refused
try(fips_key("ML-DSA-65", key$public, key$secret))
#> Error : `public` must be 1952 bytes of key material for ML-DSA-65