Struct InMemoryJournalSigner 

pub struct InMemoryJournalSigner { /* private fields */ }

Dev-only signer backed by an in-process SigningKey. Production: replace with a HW-backed signer (e.g. YubiKeyJournalSigner) so private key material never enters the process address space (docs/release-keys.md §3).

Implementations

impl InMemoryJournalSigner

pub fn new(key: SigningKey) -> Self

Wrap an in-process SigningKey. Callers must ensure the key material stays inside the process_protection boundary (Tier-0 software-kek) or is supplied exclusively via test fixtures.

pub fn verifying_key(&self) -> VerifyingKey

Verify handle — exposed mostly so tests can assert signature validity without reaching into the crate internals.

Trait Implementations

impl JournalSigner for InMemoryJournalSigner

fn sign(&self, message: &[u8]) -> [u8; 64]

Sign message and return the 64-byte Ed25519 signature.

fn public_key(&self) -> [u8; 32]

Signer’s Ed25519 public key (32 byte) — embedded in each entry for independent verification.