Class Ed448Algorithm

java.lang.Object

zeroecho.core.CryptoAlgorithm

zeroecho.core.alg.AbstractCryptoAlgorithm

zeroecho.core.alg.ed448.Ed448Algorithm

public final class Ed448Algorithm
extends AbstractCryptoAlgorithm

Ed448 Digital Signature Algorithm

Implementation of the Edwards-curve Digital Signature Algorithm over the Curve448 curve, commonly referred to as Ed448.

Ed448 is a modern elliptic curve signature scheme standardized in RFC 8032. It provides high security margins (224-bit classical strength) and is designed for simplicity, determinism, and resilience against common implementation pitfalls such as malleability.

Roles

• KeyUsage.SIGN: Contexts that sign messages using a private key, producing fixed-length Ed448 signatures.
• KeyUsage.VERIFY: Contexts that verify Ed448 signatures using the corresponding public key.

Key material

• Ed448KeyGenSpec: Generation of new key pairs with defined parameters.
• Ed448PublicKeySpec: Encoded form of Ed448 public keys (X.509 format).
• Ed448PrivateKeySpec: Encoded form of Ed448 private keys (PKCS#8 format).

Thread-safety

Instances of this class are immutable and safe to reuse across threads. Context objects created through capabilities are not necessarily thread-safe.

// Example: generate a key pair and sign data
CryptoAlgorithm ed448 = new Ed448Algorithm();
KeyPair kp = ed448.asymmetricKeyPairGenerator(Ed448KeyGenSpec.class)
                   .generateKeyPair(Ed448KeyGenSpec.defaultSpec());

SignatureContext signer = ed448.createContext(KeyUsage.SIGN, kp.getPrivate(), null);
byte[] sig = signer.sign(data);

SignatureContext verifier = ed448.createContext(KeyUsage.VERIFY, kp.getPublic(), null);
boolean ok = verifier.verify(data, sig);

Since:

1.0

Constructor Summary

Constructors

Constructor	Description
Ed448Algorithm()	Constructs and wires the Ed448 algorithm definition.

Method Summary

Modifier and Type	Method	Description
List<ParameterSetDescriptor<? extends AlgorithmKeySpec>>	parameterSets()	Returns the discoverable parameter sets (or parameterized templates) supported by this algorithm.

Methods inherited from class AbstractCryptoAlgorithm

capability

Methods inherited from class CryptoAlgorithm

addCapability, asymmetricKeyPairGenerator, bindContext, createContext, displayName, id, keyOperations, listCapabilities, priority, privateKeyImporter, providerName, publicKeyImporter, registerAsymmetricKeyPairGenerator, registerPrivateKeyImporter, registerPublicKeyImporter, registerSymmetricKeyGenerator, registerSymmetricKeyImporter, requiresStatefulSigning, roles, supports, symmetricKeyGenerator, symmetricKeyImporter

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Ed448Algorithm

public Ed448Algorithm()

Constructs and wires the Ed448 algorithm definition.

The constructor registers:

• Roles:
  • KeyUsage.SIGN using SignatureContext with a PrivateKey and VoidSpec (no additional parameters).
  • KeyUsage.VERIFY using SignatureContext with a PublicKey and VoidSpec.
• Asymmetric key builders:
  • Ed448KeyGenSpec via Ed448KeyGenBuilder, defaulting to Ed448KeyGenSpec.defaultSpec().
  • Ed448PublicKeySpec via Ed448PublicKeyBuilder.
  • Ed448PrivateKeySpec via Ed448PrivateKeyBuilder.

No exceptions are thrown by this constructor. Any provider initialization needed for signing or verification is deferred to the creation of SignatureContext instances.

// Example: instantiate and obtain a signer
CryptoAlgorithm ed448 = new Ed448Algorithm();
SignatureContext signer = ed448.createContext(KeyUsage.SIGN, privateKey, null);

Method Details

parameterSets

public List<ParameterSetDescriptor<? extends AlgorithmKeySpec>> parameterSets()

Description copied from class: CryptoAlgorithm

Returns the discoverable parameter sets (or parameterized templates) supported by this algorithm.

Callers (UIs, provisioning tools, policy engines) use this list to present users with valid, named key-generation options without prior knowledge of the concrete algorithm. Each entry is either a pre-built ParameterSetDescriptor.Concrete (ready spec) or a ParameterSetDescriptor.Template (user-supplied arguments produce the spec).

The default implementation returns an empty list. Algorithms with finite, enumerable parameter sets should override this method. Overrides must return immutable lists in stable order, with unique nonblank descriptor identifiers. Registry loading validates a snapshot; external providers remain responsible for maintaining the contract on subsequent calls. Implementations may use ParameterSetDescriptor.snapshot(List) to validate and copy their list.

Overrides:

parameterSets in class CryptoAlgorithm

Returns:

immutable list of parameter set descriptors; never null