Struct HostKey 

pub struct HostKey { /* private fields */ }

The host’s record-seal key pair. Only the mur process holds one.

ring keeps the expanded key in its own type, which does not zeroize on drop; the seed it was built from is zeroized as soon as the key pair exists.

Implementations

impl HostKey

pub fn load_or_create(murmur_home: &Path) -> Result<Arc<HostKey>, String>

The key under murmur_home, created on first use.

Ensures keys/ at 0700; opens the seed without following a link and refuses a file that is not regular, not owned by this user, or carries any group or other bit; creates a missing one from fresh randomness under a temporary name linked into place, so two racing first launches end with one key; and writes record-seal.pub when it is missing or does not match. The Err names the file and the reason, never a byte of the key.

pub fn public_key(&self) -> &PublicKey

pub fn key_id(&self) -> &str

pub fn sign_hex(&self, message: &[u8]) -> String

128 hex characters: the Ed25519 signature of message.

Trait Implementations

impl Debug for HostKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Names the key by its id and nothing that signs.