Crate crypto

Expand description

Cryptographic signing for Heddle states.

Structs§

PemKind: The wire format inferred from a PEM blob’s BEGIN line, or Raw* when the input is just hex/base64 seed bytes with no PEM wrapper. Each variant maps to exactly one Signer constructor.
SignatureStatus: Signature verification result.
SignerError: Error type for signer operations.
StateSignatureError: Error type for state signature operations.

classify_pem: Classify a PEM/raw-key blob by its header (or shape, for unwrapped seed material). Pure function — no I/O, no allocation beyond what the input trim implies.
load_signer: Load a signer from a key file. When algorithm is None, the PEM header (or raw-seed shape) selects the backend via [pem_loader::load_signer_from_pem].
public_key_bytes
reject_group_or_world_readable_key: Reject a private-key file whose permissions expose it to group/world readers. The single source of the 0600-or-stricter rule: the key-file signer loader (load_signer) and the auto-signing identity loader (repo::identity) both call this so the threshold lives in one place. On unix, errors with SignerError::InsecureKeyPermissions when any of the group/world bits (0o077) are set; a no-op on platforms without a unix permission model. Propagates I/O errors (e.g. NotFound) from the stat.
signature_bytes
state_signature_from_signer
verify_payload_signature: Verify a detached signature over an arbitrary payload. Used by non-state-signature flows (e.g. ReviewSignature) that already have a canonical byte payload built upstream.
verify_state_signature: Verify a state’s signature.
verify_state_signature_bytes