Struct ProofSigner 

pub struct ProofSigner { /* private fields */ }

Ed25519 signer + verifier for Proofs. Owns a keypair stored on disk at <state_dir>/identity-key and provides the only path Shield uses to mint or validate proofs.

Implementations

impl ProofSigner

pub fn load_or_create(state_dir: &Path) -> Result<Self>

Load the existing key from <state_dir>/identity-key, or generate one and persist it if absent.

pub fn sign(&self, proof: Proof) -> Result<Proof>

Sign a proof in-place, returning the now-fully-populated value.

pub fn verify(&self, proof: &Proof) -> Result<()>

Verify a previously-minted proof. Returns Ok(()) if the signature matches; an error otherwise.

pub fn public_key_hex(&self) -> String

Hex-encoded public key – useful for surfacing in audit logs so a fleet admin can confirm two laptops are running independent shields.