Struct SigningKey 

pub struct SigningKey { /* private fields */ }

A private key. sign is one-shot on the immutable key, mirroring mac-key.sign. The extractability contract in README.md applies.

Implementations

impl SigningKey

pub async fn sign(&self, data: StreamReader<u8>) -> Result<Vec<u8>, Error>

Sign an entire byte stream. A success resolves only after the stream is fully drained (its writer dropped). The minting interface documents the signature’s wire format.

Fails only for operational reasons (error.other).

impl SigningKey

pub fn algorithm_name(&self) -> String

See verifying-key.algorithm-name.

impl SigningKey

pub fn algorithm_curve(&self) -> Option<String>

See verifying-key.algorithm-curve.

impl SigningKey

pub fn algorithm_hash(&self) -> Option<String>

See verifying-key.algorithm-hash.

impl SigningKey

pub fn algorithm_length(&self) -> Option<u32>

See verifying-key.algorithm-length.

impl SigningKey

pub fn algorithm_public_exponent(&self) -> Option<Vec<u8>>

See verifying-key.algorithm-public-exponent.

impl SigningKey

pub fn extractable(&self) -> bool

Whether the export functions may return this key’s material. Mint-time recorded policy, which platform-backed key storage also honors.

impl SigningKey

pub fn can_sign(&self) -> bool

Whether this key permits sign. A refused operation fails error.not-permitted.

impl SigningKey

pub async fn export_key_jwk(&self) -> Result<String, Error>

The private key as a JWK (an RFC 8037 OKP private key for Ed25519, an EC private key for ECDSA). Fails error.not-extractable unless the key was minted extractable; fallible beyond the gate like every export (README.md, “Extractability”). See mac-key.export-key-jwk for the package-wide JWK contract.

impl SigningKey

pub async fn export_key_pkcs8(&self) -> Result<Vec<u8>, Error>

The private key as a PKCS#8 PrivateKeyInfo (DER), behind the same extractability gate as export-key-jwk.

impl SigningKey

pub async fn to_wrap_input_jwk(&self) -> Result<WrapInput, Error>

The private-key JWK serialization as a wrap-input, for wrapping under another key (see the wrapping interface). Behind the same extractability gate as export-key-jwk, and fallible beyond it like every export; the material itself never reaches the caller.

impl SigningKey

pub async fn to_wrap_input_pkcs8(&self) -> Result<WrapInput, Error>

The PKCS#8 serialization as a wrap-input, behind the same gate.

Trait Implementations

impl Debug for SigningKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<SigningKey> for SigningKey

fn from(raw: SigningKey) -> Self

Converts to this type from the input type.