Struct RootKey 

pub struct RootKey { /* private fields */ }

A root identity key.

This is the primary key that defines an agent’s identity. It should be stored securely and used sparingly.

Security

• The inner SigningKey automatically zeroizes secret key bytes on drop (via ed25519-dalek’s zeroize feature).
• The Debug implementation only shows the DID (public info) to prevent accidental exposure of key material in logs.

Implementations

impl RootKey

pub fn generate() -> RootKey

Generate a new random root key.

pub fn from_bytes(bytes: &[u8; 32]) -> Result<RootKey, Error>

Create from existing bytes.

Security

The caller should zeroize the source bytes after this call if they are no longer needed.

pub fn did(&self) -> Did

Get the DID for this root key.

pub fn verifying_key(&self) -> VerifyingKey

Get the public verifying key.

pub fn sign(&self, message: &[u8]) -> Signature

Sign a message.

pub fn to_bytes(&self) -> [u8; 32]

Get the secret key bytes.

Security Warning

This returns raw secret key material. The caller is responsible for:

• Storing the bytes securely
• Zeroizing the bytes when no longer needed
• Not logging or printing these bytes

Trait Implementations

impl Debug for RootKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.