Class MldsaAlgorithm

java.lang.Object

zeroecho.core.CryptoAlgorithm

zeroecho.core.alg.AbstractCryptoAlgorithm

zeroecho.core.alg.mldsa.MldsaAlgorithm

public final class MldsaAlgorithm
extends AbstractCryptoAlgorithm

ML-DSA (FIPS 204) signature algorithm binding for the ZeroEcho framework.

This binding exposes ML-DSA as a first-class algorithm identity while relying on the provider's ML-DSA JCA implementations.

This algorithm registers two roles:

• KeyUsage.SIGN: produces ML-DSA signatures using a PrivateKey.
• KeyUsage.VERIFY: verifies ML-DSA signatures using a PublicKey.

Both roles are configured with VoidSpec, as ML-DSA requires no runtime context parameters beyond the key material.

Since:

1.0

Constructor Summary

Constructors

Constructor	Description
MldsaAlgorithm()	Creates a new ML-DSA algorithm instance and registers its capabilities.

Method Summary

Modifier and Type	Method	Description
List<ParameterSetDescriptor<? extends AlgorithmKeySpec>>	parameterSets()	Returns the discoverable parameter sets (or parameterized templates) supported by this algorithm.

Methods inherited from class AbstractCryptoAlgorithm

capability

Methods inherited from class CryptoAlgorithm

addCapability, asymmetricKeyPairGenerator, bindContext, createContext, displayName, id, keyOperations, listCapabilities, priority, privateKeyImporter, providerName, publicKeyImporter, registerAsymmetricKeyPairGenerator, registerPrivateKeyImporter, registerPublicKeyImporter, registerSymmetricKeyGenerator, registerSymmetricKeyImporter, requiresStatefulSigning, roles, supports, symmetricKeyGenerator, symmetricKeyImporter

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

MldsaAlgorithm

public MldsaAlgorithm()

Creates a new ML-DSA algorithm instance and registers its capabilities.

Throws:

IllegalArgumentException - if a signature context cannot be initialized due to provider errors

Method Details

parameterSets

public List<ParameterSetDescriptor<? extends AlgorithmKeySpec>> parameterSets()

Description copied from class: CryptoAlgorithm

Returns the discoverable parameter sets (or parameterized templates) supported by this algorithm.

Callers (UIs, provisioning tools, policy engines) use this list to present users with valid, named key-generation options without prior knowledge of the concrete algorithm. Each entry is either a pre-built ParameterSetDescriptor.Concrete (ready spec) or a ParameterSetDescriptor.Template (user-supplied arguments produce the spec).

The default implementation returns an empty list. Algorithms with finite, enumerable parameter sets should override this method. Overrides must return immutable lists in stable order, with unique nonblank descriptor identifiers. Registry loading validates a snapshot; external providers remain responsible for maintaining the contract on subsequent calls. Implementations may use ParameterSetDescriptor.snapshot(List) to validate and copy their list.

Overrides:

parameterSets in class CryptoAlgorithm

Returns:

immutable list of parameter set descriptors; never null