Package zeroecho.core.alg.mldsa
package zeroecho.core.alg.mldsa
ML-DSA (FIPS 204) signature algorithm binding.
This package provides the ZeroEcho binding for ML-DSA (Module-Lattice-Based Digital Signature Algorithm), standardized by NIST as FIPS 204. ML-DSA is derived from CRYSTALS-Dilithium and is exposed here as a standards-compliant algorithm identity with a restricted parameter space.
Algorithm identity
- JCA algorithm name:
"ML-DSA" - ZeroEcho algorithm id:
"MLDSA" - Provider: Bouncy Castle core provider (
"BC")
Supported parameter sets
The supported parameter sets are those defined by FIPS 204: ML-DSA-44,
ML-DSA-65, and ML-DSA-87. Bouncy Castle exposes these via
org.bouncycastle.jcajce.spec.MLDSAParameterSpec.
Streaming signature model
- In
KeyUsage.SIGNmode, the signature is appended as a fixed-length trailer to the output stream. - In
KeyUsage.VERIFYmode, the wrapped stream emits only the message body and performs verification at end-of-stream against a caller-supplied expected signature.
Security considerations
- No sensitive material (private keys, signatures, message contents) is logged by this package.
- All externally returned byte arrays are defensive copies.
- Since:
- 1.0
-
ClassDescriptionML-DSA (FIPS 204) signature algorithm binding for the ZeroEcho framework.Key pair builder for ML-DSA (FIPS 204) using the Bouncy Castle provider.Specification for generating ML-DSA key pairs (FIPS 204).ML-DSA parameter sets as defined by FIPS 204.Optional pre-hash variant selection.Builder for importing ML-DSA private keys from encoded specifications.Encoded representation of an ML-DSA private key.Builder for importing ML-DSA public keys from encoded specifications.Encoded representation of an ML-DSA public key.Streaming signature context for ML-DSA (FIPS 204).