mesur-io / dilithium Goto Github PK

currently:

      const privateKeyJwk = await api.generate();
      const message = "hello";
      const signature = await api.sign(message, privateKeyJwk);
      const verified = await api.verify(message, signature, privateKeyJwk);

in the future:

message needs to be a Uint8Array.
publicKey and privateKey also need to be Uint8Array

publicKey = base64url.decode(privateKeyJwk.x)
privateKey = base64url.decode(privateKeyJwk.d)

lowest level crypto should avoid passing around string encoded keys, signatures... serialization to string should happen only at an app boundary.

ideally these interface would also be type checked.

 async generate() {
    const keyPtr = this.instance._dilithiumGenerate();
    const keyPair = this.getCString(keyPtr, KEYPAIR_BYTES_B64 * 2, true);
    return JSON.parse(keyPair);
  }

it would be nice to be able to pass a secureRandom function that we could link up to mnemonics or other dangerous sources of low entropy... for testing purposes.

transmute-industries/verifiable-data#159

Need to use base64url.. but handle normal base64 safely as well.

ideally there would be a cross test that hows issuance and verification working, where one side if base64url and the other is base64.