Skip to main content

Module rsa_pss

Module rsa_pss 

Source
Expand description

rsa-pss-verify key creation (RFC 8017 §8.1), plus — behind the rsa-sign cargo feature — rsa-pss-sign.

Functions§

import_verifying_key_jwk
Import a public key as an RSA public JWK (kty: "RSA", with n and e, as JSON text); see import_verifying_key_spki for salt_length. An alg member, when present, must be the variant’s JOSE alg ("PS256", "PS384", or "PS512"). See the WIT mac-key.export-key-jwk doc for the package-wide JWK contract.
import_verifying_key_spki
Import a public key as an X.509 SubjectPublicKeyInfo (DER). The declared variant binds the digest at mint, and salt_length — the PSS salt length in bytes — binds there too: the minted key verifies exactly one PSS parameterization, and a signature made under any other salt length fails Error::AuthenticationFailed. Admission follows the RSA family contract (see the WIT rsa interface).

Type Aliases§

RsaVariant