Modulecrypton-2.1.7Haskell2010

Crypto.PubKey.RSA.OAEP

RSA OAEP mode http://en.wikipedia.org/wiki/Optimal_asymmetric_encryption_padding

1 type
5 values

Packagecrypton-2.1.7
Exports6
LanguageHaskell2010
LicenceBSD-3-Clause AND MIT AND ISC
SourceOAEP.hs

datadata OAEPParams hash seed output

Parameters for OAEP encryption/decryption

Constructors

OAEPParams
- oaepHash :: hash
  Hash function to use.
- oaepMaskGenAlg :: MaskGenAlgorithm seed output
  Mask Gen algorithm to use.
- oaepLabel :: Maybe ByteString
  Optional label prepended to message.

valuedefaultOAEPParams

:: (ByteArrayAccess seed, ByteArray output, HashAlgorithm hash)
=> hash
-> OAEPParams hash seed output

Default Params with a specified hash function

OAEP encryption

2 declarations

valueencryptWithSeed

:: HashAlgorithm hash
=> ByteString
Seed
-> OAEPParams hash ByteString ByteString
OAEP params to use for encryption
-> PublicKey
Public key.
-> ByteString
Message to encrypt
-> Either Error ByteString

Encrypt a message using OAEP with a predefined seed.

valueencrypt

:: (HashAlgorithm hash, MonadRandom m)
=> OAEPParams hash ByteString ByteString
OAEP params to use for encryption.
-> PublicKey
Public key.
-> ByteString
Message to encrypt
-> m (Either Error ByteString)

Encrypt a message using OAEP

OAEP decryption

2 declarations

valuedecrypt

:: HashAlgorithm hash
=> Maybe Blinder
Optional blinder
-> OAEPParams hash ByteString ByteString
OAEP params to use for decryption
-> PrivateKey
Private key
-> ByteString
Cipher text
-> Either Error ByteString

Decrypt a ciphertext using OAEP

The blinder is optional and Nothing is accepted, but see Blinder for what it covers and when leaving it out is a decision rather than a default. decryptSafer generates one for you.

Following RFC 8017, the ciphertext is rejected unless it is exactly as long as the modulus (section 7.1.2, step 1) and its integer representative is below the modulus (RSADP, section 5.1.2, step 1). The decryption primitive normalises any multiple of the modulus away, so without the second check c + n would decrypt to the same message as c, and a ciphertext would not be unique to its plaintext. Both checks are made on the ciphertext alone, which is public, and report MessageSizeIncorrect.

valuedecryptSafer

:: (HashAlgorithm hash, MonadRandom m)
=> OAEPParams hash ByteString ByteString
OAEP params to use for decryption
-> PrivateKey
Private key
-> ByteString
Cipher text
-> m (Either Error ByteString)

Decrypt a ciphertext using OAEP and by automatically generating a blinder.