Enum SigningKey 

#[non_exhaustive]
pub enum SigningKey {
    Ed25519(Ed25519SigningKey),
    Rsa(RsaSigningKey),
}

A key capable of producing detached signatures.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Ed25519(Ed25519SigningKey)

Ed25519 backend.

Rsa(RsaSigningKey)

RSA PKCS#1 v1.5 backend.

Implementations

impl SigningKey

pub fn generate_ed25519() -> Self

Generates a fresh Ed25519 signing key using the system RNG.

Panics

Panics if aws-lc-rs cannot draw bytes from the operating system. Every platform we support (Linux, macOS, Windows, the major BSDs) guarantees this succeeds, so a panic here indicates a broken host. Callers that prefer to handle this failure gracefully can call Ed25519SigningKey::generate directly.

pub fn generate_rsa(bits: RsaBits) -> Result<Self, Error>

Generates a fresh RSA signing key of the requested width.

Errors

Returns Error::KeyGeneration on RNG or key-scheduling failure.

pub fn from_pem(pem_text: &str) -> Result<Self, Error>

Loads a signing key from a PEM document, autodetecting the algorithm from the embedded OID.

Errors

Returns Error::InvalidPem, Error::UnexpectedPemLabel or Error::UnsupportedAlgorithm as appropriate.

pub fn to_pem(&self) -> String

Encodes the signing key as a PKCS#8 PRIVATE KEY PEM.

pub const fn algorithm(&self) -> Algorithm

Returns the algorithm identifier for this key.

pub fn verifying_key(&self) -> VerifyingKey

Returns the verifying half of this key pair.

pub fn sign(&self, message: &[u8]) -> Result<Vec<u8>, Error>

Signs message and returns the raw signature bytes.

Errors

Returns Error::Crypto if the underlying primitive fails.

Trait Implementations

impl Debug for SigningKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.