Package zeroecho.core.alg.ed448

package zeroecho.core.alg.ed448
Ed448 digital signature integration.

This package wires the Ed448 Edwards-curve Digital Signature Algorithm into the core layer. It provides the algorithm descriptor, a streaming signature context with a fixed 114-byte tag length, builders for generating and importing keys, and defensively copying key specifications with marshalling helpers.

Scope and responsibilities

  • Register the Ed448 algorithm and declare SIGN and VERIFY roles with fixed-length signatures.
  • Provide a streaming signature context that adapts JCA engines and enforces the 114-byte tag size.
  • Expose builders for key-pair generation and for importing encoded keys.
  • Define defensively copying key specifications suitable for safe cloning and simple marshalling; private-key specifications are destroyable.

Components

  • Ed448Algorithm: algorithm descriptor that binds roles to a signature context and registers builders for key generation and import.
  • Ed448SignatureContext: streaming context for signing and verification with a fixed 114-byte tag.
  • Ed448KeyGenBuilder and Ed448KeyGenSpec: generator and marker spec for producing key pairs.
  • Ed448PublicKeyBuilder / Ed448PrivateKeyBuilder: importers backed by JCA key factories.
  • Ed448PublicKeySpec / Ed448PrivateKeySpec: wrappers over X.509 and PKCS#8 encodings, with defensive copying and base64 marshalling helpers; the private-key form is destroyable.

Design notes

  • Algorithm descriptors are immutable and thread-safe.
  • Signature contexts are stateful and not thread-safe; create a new instance per operation.
  • Key specification classes never expose internal byte arrays; cloning is used on input and output.
  • Marshalling helpers use compact key-value sequences intended for configuration, transport, and testing.
Since:
1.0