Class SlhDsaKeyGenSpec

java.lang.Object

zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

All Implemented Interfaces:

AlgorithmKeySpec

public final class SlhDsaKeyGenSpec
extends Object
implements AlgorithmKeySpec

Specification for generating SLH-DSA key pairs (FIPS 205).

SLH-DSA is parameterized by hash family (SHA2 or SHAKE), a security strength (128/192/256), and a variant (fast vs small). Additionally, Bouncy Castle exposes pre-hash variants (e.g., "with SHA-256") as separate parameter specs.

This spec intentionally restricts the available choices to SLH-DSA parameters (i.e., no Haraka and no SPHINCS+ "simple/robust" split).

Since:

1.0

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	SlhDsaKeyGenSpec.Hash	SLH-DSA hash families (FIPS 205).
static enum	SlhDsaKeyGenSpec.PreHash	Optional pre-hash variant selection.
static enum	SlhDsaKeyGenSpec.Security	Security levels as defined by NIST PQC (L1, L3, L5).
static enum	SlhDsaKeyGenSpec.Variant	Variant trading performance against signature size.

Method Summary

Modifier and Type	Method	Description
static SlhDsaKeyGenSpec	defaultSpec()	Returns the default SLH-DSA key generation spec.
String	explicitParamConstant()	Returns the explicit parameter constant override, if set.
SlhDsaKeyGenSpec.Hash	hash()	Returns the SLH-DSA hash family.
static SlhDsaKeyGenSpec	of(String providerName, SlhDsaKeyGenSpec.Hash hash, SlhDsaKeyGenSpec.Security security, SlhDsaKeyGenSpec.Variant variant, SlhDsaKeyGenSpec.PreHash preHash)	Creates a new specification with explicit algorithm parameters.
SlhDsaKeyGenSpec.PreHash	preHash()	Returns the pre-hash selection.
String	providerName()	Returns the provider name used for key generation.
SlhDsaKeyGenSpec.Security	security()	Returns the security level.
SlhDsaKeyGenSpec.Variant	variant()	Returns the variant.
SlhDsaKeyGenSpec	withExplicitParamConstant(String name)	Returns a copy of this specification with an explicit Bouncy Castle parameter constant override.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

defaultSpec

public static SlhDsaKeyGenSpec defaultSpec()

Returns the default SLH-DSA key generation spec.

Returns:

a singleton default specification (SHAKE, L5, SMALL, no pre-hash)

of

public static SlhDsaKeyGenSpec of(String providerName,
 SlhDsaKeyGenSpec.Hash hash,
 SlhDsaKeyGenSpec.Security security,
 SlhDsaKeyGenSpec.Variant variant,
 SlhDsaKeyGenSpec.PreHash preHash)

Creates a new specification with explicit algorithm parameters.

Parameters:

providerName - JCA provider name (e.g., "BC", "BCPQC")

hash - hash family (SHA2 or SHAKE)

security - security level

variant - variant (FAST vs SMALL)

preHash - optional pre-hash selection

Returns:

a new SlhDsaKeyGenSpec

withExplicitParamConstant

public SlhDsaKeyGenSpec withExplicitParamConstant(String name)

Returns a copy of this specification with an explicit Bouncy Castle parameter constant override.

This bypasses automatic mapping. The name must match a static field in org.bouncycastle.jcajce.spec.SLHDSAParameterSpec.

Parameters:

name - field name in SLHDSAParameterSpec

Returns:

a new SlhDsaKeyGenSpec with the override

providerName

public String providerName()

Returns the provider name used for key generation.

Returns:

provider name (never null)

hash

public SlhDsaKeyGenSpec.Hash hash()

Returns the SLH-DSA hash family.

Returns:

hash family

security

public SlhDsaKeyGenSpec.Security security()

Returns the security level.

Returns:

security level

variant

public SlhDsaKeyGenSpec.Variant variant()

Returns the variant.

Returns:

variant

preHash

public SlhDsaKeyGenSpec.PreHash preHash()

Returns the pre-hash selection.

Returns:

pre-hash selection

explicitParamConstant

public String explicitParamConstant()

Returns the explicit parameter constant override, if set.

Returns:

constant name, or null if automatic mapping is used