A minimal RedDSA implementation for use in Zcash.
Two specializations of RedDSA are used in Zcash: RedJubjub and RedPallas. For each of these, two parameterizations are used, one for BindingSig and one for SpendAuthSig. This library distinguishes these in the type system, using the sealed SigType trait as a type-level enum.
In addition to the Signature, SigningKey, VerificationKey types, the library also provides VerificationKeyBytes, a refinement of a [u8; 32] indicating that bytes represent an encoding of a RedDSA verification key. This allows the VerificationKey type to cache verification checks related to the verification key encoding. For all specializations of RedDSA used in Zcash, encodings of signing and verification keys are 32 bytes.
Examples
Creating a BindingSig, serializing and deserializing it, and verifying the signature:
# use std::convert::TryFrom; use rand::thread_rng; use reddsa::*; let msg = b"Hello!"; // Generate a secret key and sign the message let sk = SigningKey::<sapling::Binding>::new(thread_rng()); let sig = sk.sign(thread_rng(), msg); // Types can be converted to raw byte arrays using From/Into let sig_bytes: [u8; 64] = sig.into(); let pk_bytes: [u8; 32] = VerificationKey::from(&sk).into(); // Deserialize and verify the signature. let sig: Signature<sapling::Binding> = sig_bytes.into(); assert!( VerificationKey::try_from(pk_bytes) .and_then(|pk| pk.verify(msg, &sig)) .is_ok() );
docs
cargo doc --features "nightly" --open
15 Dec 1, 2023
3 Sep 15, 2022
6 Oct 31, 2022
3 Nov 28, 2022
1 Jan 24, 2022
31.6k Dec 30, 2022
9 Feb 8, 2022
7 Aug 5, 2022
4 Sep 24, 2022
37 Nov 18, 2022
3 Jun 24, 2021
107 Sep 28, 2022
11 Dec 28, 2022
1 Jan 12, 2022
19 Nov 4, 2022
23 Sep 6, 2022
119 Dec 12, 2022
6 Feb 14, 2022
2 Sep 7, 2022