Struct BrainpoolP256r1 

pub struct BrainpoolP256r1;

brainpoolP256r1 (BSI / RFC 5639).

Trait Implementations

impl Curve for BrainpoolP256r1

fn keygen(rng: &mut dyn CryptoRng) -> (PublicKey, SecretKey)

Generate a key pair on this curve.

fn ecdh(sk: &SecretKey, peer_pk: &PublicKey) -> Option<Vec<u8>>

ECDH key agreement: derive the shared secret from our secret key and the peer’s SEC1 uncompressed public key.

fn compress_pubkey(pk: &PublicKey) -> Option<Vec<u8>>

Compress a public key from SEC1 uncompressed (0x04 || X || Y) to SEC1 compressed (0x02/0x03 || X). If the input is already compressed, returns a validated clone. Returns None for malformed or off-curve input.

fn decompress_pubkey(compressed: &[u8]) -> Option<PublicKey>

Decompress a SEC1 compressed public key (0x02/0x03 || X) to uncompressed form (0x04 || X || Y), recovering Y via the field square-root. If the input is already uncompressed, acts as a validate-and-clone. Returns None if the input is malformed, if X is not a valid x-coordinate on the curve, or if the decompressed point fails the on-curve check.

fn sign_rfc6979<H: Hasher>(sk: &SecretKey, digest: &[u8]) -> Signature

Sign a precomputed digest with the deterministic RFC 6979 nonce.

fn sign_random( sk: &SecretKey, digest: &[u8], rng: &mut dyn CryptoRng, ) -> Signature

Sign a precomputed digest with a uniformly random nonce drawn from rng. The hash function is irrelevant – only the digest bytes are consumed (via bits2int). Each call must consume fresh entropy; reusing k across two signatures with the same key recovers the secret key.

fn verify(pk: &PublicKey, digest: &[u8], sig: &Signature) -> bool

Verify a signature against a precomputed digest.

fn sign_rfc6979_msg<H: Hasher>(sk: &SecretKey, msg: &[u8]) -> Signature

Convenience: hash msg with H, then call Self::sign_rfc6979.

fn sign_random_msg<H: Hasher>( sk: &SecretKey, msg: &[u8], rng: &mut dyn CryptoRng, ) -> Signature

Convenience: hash msg with H, then call Self::sign_random.

fn verify_msg<H: Hasher>(pk: &PublicKey, msg: &[u8], sig: &Signature) -> bool

Convenience: hash msg with H, then call Self::verify.