Struct SoftwareSigner 

pub struct SoftwareSigner { /* private fields */ }

Default impl backed by an in-process ed25519_dalek::SigningKey.

Suitable for dev and non-regulated deployments. Production tenants requiring HSM-backed signing implement SignerProvider against their vendor SDK.

Implementations

impl SoftwareSigner

pub fn new(key: SigningKey) -> Self

Build from an existing SigningKey.

pub fn from_bytes(seed: [u8; 32]) -> Self

Build deterministically from 32 bytes — convenience for tests.

pub fn generate() -> Self

Generate a fresh keypair off the OS CSPRNG.

Dev / test only. The private key lives in process memory and is lost on exit, so signatures are not reproducible and the key cannot be rotated, escrowed, or HSM-protected. For production use Self::from_bytes / Self::new with managed key material, or implement SignerProvider against an HSM / KMS adapter.

pub fn public_key_hex(&self) -> String

Lowercase hex of the 32-byte Ed25519 verifying (public) key — always 64 hex chars. Informational only at verify time (see the BundleSigner impl’s CWE-347 note); the trusted key is resolved via KeyResolver.

pub fn key_id(&self) -> String

Stable key identifier derived from the verifying-key fingerprint. Used as SignatureBytes::key_id so a verifier’s KeyResolver can resolve the trusted public key.

pub fn verify(&self, payload: &[u8], signature_hex: &str) -> bool

Verify that signature_hex is a valid Ed25519 signature over payload under this signer’s keypair.

Returns false on malformed hex, wrong-length signature bytes, or a cryptographic mismatch — never panics. This is a convenience for callers that hold the signer; bundle verification proper resolves the trusted key via a KeyResolver (see crate::SignerProvider docs and klieo_provenance::EvidenceBundle::verify).

Trait Implementations

impl BundleSigner for SoftwareSigner

fn sign<'life0, 'life1, 'async_trait>( &'life0 self, payload: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<SignatureBytes, ProvenanceError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Sign canonical payload bytes.

impl SignerProvider for SoftwareSigner

fn sign_handoff<'life0, 'life1, 'async_trait>( &'life0 self, payload: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<SignedPayload, SignerError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Sign payload and return both the signature and the verifying key.