Module oprf::p256_sha256

4.3. OPRF(P-256, SHA-256)

This ciphersuite uses P-256 [NISTCurves] for the Group and SHA-256 for the Hash function. The value of the ciphersuite identifier is “P256-SHA256”.

Functions

• deserialize_element
• hash_to_group
  HashToGroup(): Use hash_to_curve with suite P256_XMD:SHA-256_SSWU_RO_ [I-D.irtf-cfrg-hash-to-curve] and DST = “HashToGroup-” || contextString.
• hash_to_scalar
  HashToScalar(): Use hash_to_field from [I-D.irtf-cfrg-hash-to-curve] using L = 48, expand_message_xmd with SHA-256, DST = “HashToScalar-” || contextString, and prime modulus equal to Group.Order().
• hash_to_scalar_dst
• identity
• scalar_inverse
• serialize_element
  SerializeElement(A): Implemented using the compressed Elliptic- Curve-Point-to-Octet-String method according to [SEC1]; Ne = 33.

Type Aliases

• P256SerializedPoint