ConvertHashFunction converts a crypto.Hash function to an equivalent hash.Hash type.

DecryptAndCheck checks that the private key operation is consistent (fault attack detection).

EncodeMessageEMSAPSS hashes the input message and then encodes it using PSS encoding.

GenerateBlindingFactor generates a blinding factor and its multiplicative inverse to use for RSA blinding.

NewBigPrivateKey creates a BigPrivateKey from a rsa.PrivateKey.

NewBigPublicKey creates a BigPublicKey from a rsa.PublicKey.

NewSigner creates a new Signer for the blind RSA protocol using an RSA private key.

VerifyBlindSignature verifies the signature of the hashed and encoded message against the input public key.

VerifyMessageSignature verifies the input message signature against the expected public key.

RSABSSA-SHA384_PSS_Deterministic.

RSABSSA-SHA384_PSS_Randomized.

ErrInvalidBlind is the error used if the blind generated by the Verifier fails.

ErrInvalidMessageLength is the error used if the size of a protocol message does not match its expected value.

ErrInvalidRandomness is the error used if caller did not provide randomness to the Blind() function.

ErrInvalidVariant is the error used if the variant request does not exist.

ErrUnexpectedSize is the error used if the size of a parameter does not match its expected value.

ErrUnsupportedHashFunction is the error used if the specified hash is not supported.

CustomPublicKey is similar to rsa.PrivateKey, containing information needed for a private key used in the partially blind signature protocol.

BigPublicKey is the same as an rsa.PublicKey struct, except the public key is represented as a big integer as opposed to an int.

Client is a type that implements the client side of the blind RSA protocol, described in https://www.rfc-editor.org/rfc/rfc9474.html#name-rsabssa-variants.

Signer structure represents the signing server in the blind RSA protocol.