Expand description
§4.3. OPRF(P-256, SHA-256)
This ciphersuite uses P-256 [NISTCurves] for the Group and SHA-256 for the Hash function. The value of the ciphersuite identifier is “P256-SHA256”.
Functions§
- deserialize_
element - hash_
to_ group - HashToGroup(): Use hash_to_curve with suite P256_XMD:SHA-256_SSWU_RO_ [I-D.irtf-cfrg-hash-to-curve] and DST = “HashToGroup-” || contextString.
- hash_
to_ scalar - HashToScalar(): Use hash_to_field from [I-D.irtf-cfrg-hash-to-curve] using L = 48, expand_message_xmd with SHA-256, DST = “HashToScalar-” || contextString, and prime modulus equal to Group.Order().
- hash_
to_ scalar_ dst - identity
- scalar_
inverse - serialize_
element - SerializeElement(A): Implemented using the compressed Elliptic- Curve-Point-to-Octet-String method according to [SEC1]; Ne = 33.