pkg/

Package algebra provides algebraic interfaces and generic helpers for groups, rings, fields, modules, and related algebraic structures.

Package fields provides low-level field element traits used by generated finite field implementations.

Package base58 implements base58 encoding and decoding.

Package bf128 implements arithmetic over the binary field GF(2^128).

Package bitvec implements a mutable bit vector with insertion, deletion, and indexing operations.

Package boring wraps a small subset of BoringSSL BigNum APIs for internal use.

Package ct provides constant-time operations for cryptographic implementations, helping to prevent timing-based side-channel attacks.

Package curves provides implementation of various elliptic curves.

Package curve25519 implements Curve25519 group operations, field elements, scalars, and encoding helpers.

Package edwards25519 implements the Edwards25519 curve, its scalar and base fields, and point encoding.

Package impl contains low-level Edwards25519 field and point implementations plus hash-to-curve parameters.

Package points provides point arithmetic implementations for short Weierstrass and twisted Edwards curves.

Package rfc9380 implements hash-to-curve helpers from RFC 9380.

Package expanders implements XMD and XOF expanders for RFC 9380.

Package elligator2 implements Elligator 2 mappings for Curve25519 and Edwards25519.

Package sswu implements simplified SWU mapping and related helpers for RFC 9380.

Package traits provides reusable traits for field and curve wrappers.

Package k256 implements the secp256k1 curve, field, scalar, and point types.

Package impl contains low-level secp256k1 field arithmetic and point operations.

Package p256 implements the NIST P-256 curve, field, scalar, and point types.

Package impl contains low-level P-256 field arithmetic and point operations.

Package pairable provides exposes pairing-friendly curve families and shared interfaces.

Package bls12381 implements the BLS12-381 curve groups, fields, and pairing interfaces.

Package impl contains low-level BLS12-381 field arithmetic, points, and pairing engine code.

Package pasta implements the Pallas and Vesta curves and their field types.

Package impl contains low-level Pallas and Vesta field arithmetic and point operations.

Package datastructures provides generic data structure interfaces and implementations for Go.

Package bimap provides bidirectional map implementations for the datastructures interfaces.

Package hashmap provides hash-based map implementations for the datastructures interfaces.

Package hashset provides hash-based set implementations for the datastructures interfaces.

Package nt provides foundational number theory primitives for cryptographic applications.

Package cardinal provides representations for cardinal numbers (cardinalities) used to express the size of algebraic structures such as groups, rings, and fields.

Package crt provides Chinese Remainder Theorem (CRT) reconstruction and decomposition for cryptographic applications.

Package modular provides CRT-accelerated modular arithmetic for cryptographic applications such as RSA and Paillier.

Package num provides arbitrary-precision arithmetic for cryptographic applications.

Package numct provides constant-time arbitrary-precision arithmetic for cryptographic applications.

Package znstar provides multiplicative groups of units modulo n, denoted (Z/nZ)*, for cryptographic applications such as RSA and Paillier encryption.

Package polynomials provides polynomial rings and modules over algebraic structures with helpers for sampling, evaluation, and serialisation.

Package lagrange provides Lagrange interpolation utilities over finite fields and modules.

Package csprng defines interfaces and helpers for cryptographically secure PRNGs, including a threadsafe wrapper.

Package fkechacha20 implements a cryptographically-secure pseudo-random number generator based on a fork of the ChaCha20 with fast key erasure.

Package nist implements a cryptographically-secure pseudo-random number generator i.e Deterministic Random Bit Generator (DRBG) definition of NIST spec, based on AES (AES128 or AES256) as block cipher in counter mode.

Package rfc8937 provides a randomness wrapper that ties the security of the CSPRNG to a deterministic signing key.

Package pcg provides a seedable PCG-based PRNG for tests and non-cryptographic randomness.

Package serde provides serialisation and deserialization utilities using CBOR (Concise Binary Object Representation) format.

Package utils provides common utility functions and helpers for working with Go primitives and data structures.

Package algebrautils provides utilities for working with algebraic structures such as monoids, groups, rings, and fields.

Package ioutils provides I/O helpers for Readers and Writers.

Package iterutils provides functional utilities for working with Go 1.23+ iterators (iter.Seq and iter.Seq2), enabling lazy evaluation and efficient data processing.

Package maputils provides utilities for working with Go maps, providing functional transformations and map operations.

Package mathutils provides mathematical utility functions for cryptographic and numerical operations.

Package nocopy provides types to prevent copying of structs after first use, useful for ensuring proper handling of sensitive data structures.

Package sliceutils provides functional utilities for working with slices in Go, providing a rich set of operations for transforming, filtering, and manipulating slice data.

Package hash_comm provides a simple, non-homomorphic commitment scheme built from a keyed BLAKE2b-256 hash (HMAC-style).

Package indcpacom implements a commitment scheme based on IND-CPA secure encryption.

Package pedersen provides pedersen commitments are perfectly hiding and computationally binding.

Package hpke implements Hybrid Public Key Encryption as specified in RFC 9180.

Package paillier implements the Paillier cryptosystem, an additive homomorphic public-key encryption scheme.

Package bip340 provides bIP-340 tagged hash implementation for Schnorr signatures.

Package kmac provides kMAC (Keccak Message Authentication Code) implementation per NIST SP 800-185.

Package poseidon provides poseidon hash function over the Pallas base field, designed for efficient use in zero-knowledge proof systems.

Package dh implements ECSVDP (Elliptic Curve Secret Value Derivation Primitive) as specified in IEEE 1363-2000.

Package dhc implements ECSVDP-DHC, as per section 7.2.2 of IEEE 1363-2000.

Package echo provides three-round echo broadcast primitive that ensures all honest parties deliver the same payload.

Package exchange provides convenience functions that orchestrate broadcast and unicast communication patterns over a network.Router using correlation IDs and CBOR encoding.

Package ntu provides helpers for exercising network protocols in-memory without real transports.

Package ecbbot implements the "Batched Simplest OT", an OT protocol with endemic security defined in Figure 3 of MRR21, to run Random OTs (ROT) for a batch of choice bits in parallel.

Package vsot implements the "Verified Simplest OT", as defined in "protocol 7" of DKLs18.

Package softspoken implements of maliciously secure 1-out-of-2 Correlated Oblivious Transfer extension (COTe) protocol.

Package dlog provides helpers for sigma proofs related to discrete logarithms.

Package batch_schnorr provides batch Schnorr protocol.

Package schnorr implements the regular Schnorr proof of knowledge of dlog.

Package lp provides implementation of zero knowledge proof of valid Paillier public key.

Package lpdl provides zero-knowledge proof that a value encrypted in a given Paillier ciphertext is the discrete log of a given Elliptic curve point.

Package nthroot provides implementation of zero-knowledge proof of knowledge of Nth root.

Package pailliern provides implementation of zero knowledge proof of valid Paillier public key.

Package paillierrange provides a range proof.

Package sigma defines a generic interface for sigma protocols and interactive compiler for running it in round-based setup where:.

Package compiler provides compilers that transform interactive sigma protocols into non-interactive zero-knowledge proofs of knowledge (NIZKPoK).

Package fiatshamir implements the Fiat-Shamir transform for compiling interactive sigma protocols into non-interactive zero-knowledge proofs.

Package fischlin implements the Fischlin transform for compiling interactive sigma protocols into non-interactive zero-knowledge proofs with UC security.

Package randfischlin implements a randomised variant of Fischlin's transform for compiling interactive sigma protocols into non-interactive zero-knowledge proofs.

Package zk implements a zero-knowledge compiler that transforms honest-verifier zero-knowledge (HVZK) sigma protocols into fully zero-knowledge interactive protocols using commitment schemes.

Package sigand implements AND composition of sigma protocols.

Package sigor implements OR composition of sigma protocols.

Package bls implements BLS (Boneh-Lynn-Shacham) digital signatures as specified in draft-irtf-cfrg-bls-signature-06.

Package ecdsa implements the Elliptic Curve Digital Signature Algorithm (ECDSA) as specified in FIPS 186-5 and SEC 1, Version 2.0.

Package schnorrlike provides a generic framework for Schnorr-like signature schemes.

Package bip340 implements BIP-340 Schnorr signatures for Bitcoin.

Package mina implements Schnorr signatures for the Mina Protocol.

Package vanilla provides a configurable generic Schnorr signature implementation.

Package aor provides protocol for distributively sampling a random value: all parties contribute randomness, and everyone outputs the XOR if and only if all openings verify.

Package gennaro provides distributed key generation for threshold signatures following the Gennaro et al.

Package recovery provides protocol for reconstructing a missing party’s Feldman share as described in “Proactive Secret Sharing”.

Package refresh provides proactive share refresh protocol following “Proactive Secret Sharing”.

Package rvole_bbot implements the RVole protocol using BBOT-based multiplication.

Package rvole_softspoken implements the RVole protocol using SoftSpoken-based multiplication.

Package sharing defines interfaces and types for secret sharing schemes.

Package additive implements additive secret sharing over arbitrary groups.

Package feldman implements Feldman's verifiable secret sharing (VSS) scheme.

Package pedersen implements Pedersen's verifiable secret sharing (VSS) scheme.

Package shamir implements Shamir's (t,n) threshold secret sharing scheme.

Package hjky provides zero-sum sharing protocol.

Package przs provides pseudorandom (non-interactive) zero sharing.

Package przssetup provides commit-and-reveal setup for pairwise seeds used by the PRZS sampler.

Package tsig defines common types for threshold signature schemes.

Package tbls provides threshold BLS signature scheme implementation for pairing-friendly curves.

Package boldyreva02 provides implementation of the Boldyreva threshold BLS signature scheme.

Package keygen provides shard creation for Boldyreva threshold BLS signatures.

Package signing provides threshold BLS signing protocol for Boldyreva scheme.

Package tecdsa defines shared types and helpers for threshold ECDSA schemes.

Package dkls23 implements DKLs23 threshold ECDSA signing protocol.

Package dkg implements the DKLS23 distributed key generation protocol.

Package trusted_dealer implements DKLS23 key generation with a trusted dealer.

Package sign implements interactive DKLS23 signing.

Package sign_bbot implements interactive DKLS23 signing using BBOT multiplication.

Package sign_softspoken implements interactive DKLS23 signing using SoftSpoken multiplication.

Package lindell17 implements the Lindell 2017 threshold ECDSA protocol.

Package dkg implements Lindell17 distributed key generation.

Package trusted_dealer implements Lindell17 key generation with a trusted dealer.

Package signing implements Lindell17 threshold ECDSA signing rounds.

Package tschnorr provides threshold Schnorr signature implementation supporting multiple MPC-friendly Schnorr variants.

Package lindell22 provides implementation of the Lindell 2022 threshold Schnorr signing protocol.

Package keygen provides key generation for Lindell22 threshold Schnorr signing.

Package signing provides interactive signing protocol for Lindell22 threshold Schnorr.

Package hagrid provides a transcript implementation based on cSHAKE256 with domain separation and labelled message binding.