//! Explicit upstream canister-signature public-key formats and hashing.
//!
//! These retain upstream-authored DER/raw encodings and domain separators.
//! The imported 1.3.1 implementation omits the unexposed store and Candid import;
//! this module does not expose that store or publish certification roots.
//! Owned framing admission rejects truncated/noncanonical short-form DER before
//! the unchanged parser. Preserve consumer byte budgets and seed/issuer checks.
//! Long-form DER remains unsupported; hashing does not authenticate.
pub use crate;