Expand description
rsa-pss-verify key creation (RFC 8017 §8.1), plus — behind the
rsa-sign cargo feature — rsa-pss-sign.
Functions§
- import_
verifying_ key_ jwk - Import a public key as an RSA public JWK (
kty: "RSA", withnande, as JSON text); seeimport_verifying_key_spkiforsalt_length. Analgmember, when present, must be the variant’s JOSE alg ("PS256","PS384", or"PS512"). See the WITmac-key.export-key-jwkdoc for the package-wide JWK contract. - import_
verifying_ key_ spki - Import a public key as an X.509 SubjectPublicKeyInfo (DER). The
declared variant binds the digest at mint, and
salt_length— the PSS salt length in bytes — binds there too: the minted key verifies exactly one PSS parameterization, and a signature made under any other salt length failsError::AuthenticationFailed. Admission follows the RSA family contract (see the WITrsainterface).