Struct Scheme 

pub struct Scheme { /* private fields */ }

Ed25519 signing scheme wrapper.

Implementations

impl Scheme

pub fn signer( participants: Set<PublicKey>, private_key: PrivateKey, ) -> Option<Self>

Creates a new scheme instance with the provided key material.

Participants use the same key for both identity and signing.

If the provided private key does not match any signing key in the participant set, the instance will act as a verifier (unable to generate signatures).

Returns None if the provided private key does not match any participant in the participant set.

pub const fn verifier(participants: Set<PublicKey>) -> Self

Builds a verifier that can authenticate signatures without generating them.

Participants use the same key for both identity and signing.

Trait Implementations

impl Clone for Scheme

fn clone(&self) -> Scheme

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Scheme

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Scheme for Scheme

type Subject<'a, D: Digest> = AckSubject<'a, PublicKey, D>

Subject type for signing and verification.

type PublicKey = PublicKey

Public key type for participant identity used to order and index the participant set.

type Signature = Signature

Signature emitted by individual participants.

type Certificate = Certificate

Certificate assembled from a set of attestations.

fn me(&self) -> Option<u32>

Returns the index of “self” in the participant set, if available. Returns None if the scheme is a verifier-only instance.

fn participants(&self) -> &Set<Self::PublicKey>

Returns the ordered set of participant public identity keys managed by the scheme.

fn sign<D: Digest>( &self, namespace: &[u8], subject: Self::Subject<'_, D>, ) -> Option<Attestation<Self>>

Signs a subject using the supplied namespace for domain separation. Returns None if the scheme cannot sign (e.g. it’s a verifier-only instance).

fn verify_attestation<D: Digest>( &self, namespace: &[u8], subject: Self::Subject<'_, D>, attestation: &Attestation<Self>, ) -> bool

Verifies a single attestation against the participant material managed by the scheme.

fn verify_attestations<R, D, I>( &self, rng: &mut R, namespace: &[u8], subject: Self::Subject<'_, D>, attestations: I, ) -> Verification<Self>

where R: Rng + CryptoRng, D: Digest, I: IntoIterator<Item = Attestation<Self>>,

Batch-verifies attestations and separates valid attestations from signer indices that failed verification.

fn assemble<I>(&self, attestations: I) -> Option<Self::Certificate>

where I: IntoIterator<Item = Attestation<Self>>,

Assembles attestations into a certificate, returning None if the threshold is not met.

fn verify_certificate<R: Rng + CryptoRng, D: Digest>( &self, rng: &mut R, namespace: &[u8], subject: Self::Subject<'_, D>, certificate: &Self::Certificate, ) -> bool

Verifies a certificate that was recovered or received from the network.

fn verify_certificates<'a, R, D, I>( &self, rng: &mut R, namespace: &[u8], certificates: I, ) -> bool

where R: Rng + CryptoRng, D: Digest, I: Iterator<Item = (Self::Subject<'a, D>, &'a Self::Certificate)>,

Verifies a stream of certificates, returning false at the first failure.

fn is_attributable(&self) -> bool

Returns whether per-participant fault evidence can be safely exposed.

fn certificate_codec_config(&self) -> <Self::Certificate as Read>::Cfg

Encoding configuration for bounded-size certificate decoding used in network payloads.

fn certificate_codec_config_unbounded() -> <Self::Certificate as Read>::Cfg

Encoding configuration that allows unbounded certificate decoding.