Skip to main content

load_operator_signing_key

Function load_operator_signing_key 

Source
pub fn load_operator_signing_key(path: &Path) -> Result<SigningKey>
Expand description

Load the operator signing key from path (32 raw bytes, mode 0600 on Unix). This is the public helper exposed for tests and the L1-6 sign-seed pipeline.

§Errors

  • Returns a clear error mentioning 0600 when the file mode is anything other than 0o600 on Unix.
  • Returns an error when the file length is not exactly 32 bytes.
  • On non-Unix targets the mode check is skipped (file ACL applies instead; the OSS layer does not enforce hardware-backed storage — see src/identity/keypair.rs “Hardware-backed key storage” section).