Struct SigningIdentity 

pub struct SigningIdentity { /* private fields */ }

An implementation-owned signing identity with both required private keys.

No runtime randomness is needed to use this type. Applications may derive or securely load the two signing keys according to their own key-management policy before constructing the identity.

Implementations

impl SigningIdentity

pub fn new( classical: SigningKey, post_quantum: MlDsaSigningKey<MlDsa65>, ) -> Self

Combines application-managed Ed25519 and ML-DSA-65 signing keys.

Examples found in repository

examples/wire_benchmark.rs (lines 24-27)

fn signed_wire(body: Body) -> Vec<u8> {
    let signer = SigningIdentity::new(
        SigningKey::from_bytes(&[41; 32]),
        MlDsaSigningKey::<MlDsa65>::from_seed(&B32::from([41; 32])),
    );
    let recipient = SigningIdentity::new(
        SigningKey::from_bytes(&[42; 32]),
        MlDsaSigningKey::<MlDsa65>::from_seed(&B32::from([42; 32])),
    );
    Envelope::sign(
        &signer,
        FederationId::from_bytes([1; 32]),
        AttemptId::from_bytes([2; 16]),
        recipient.endpoint(),
        body,
    )
    .expect("bounded test envelope")
    .encode()
    .expect("canonical wire")
}

pub fn endpoint(&self) -> EndpointIdentity

Returns the stable public endpoint identity corresponding to these keys.

Examples found in repository

examples/wire_benchmark.rs (line 36)

fn signed_wire(body: Body) -> Vec<u8> {
    let signer = SigningIdentity::new(
        SigningKey::from_bytes(&[41; 32]),
        MlDsaSigningKey::<MlDsa65>::from_seed(&B32::from([41; 32])),
    );
    let recipient = SigningIdentity::new(
        SigningKey::from_bytes(&[42; 32]),
        MlDsaSigningKey::<MlDsa65>::from_seed(&B32::from([42; 32])),
    );
    Envelope::sign(
        &signer,
        FederationId::from_bytes([1; 32]),
        AttemptId::from_bytes([2; 16]),
        recipient.endpoint(),
        body,
    )
    .expect("bounded test envelope")
    .encode()
    .expect("canonical wire")
}

Trait Implementations

impl EndpointSigner for SigningIdentity

fn endpoint(&self) -> EndpointIdentity

Returns the complete identity used to address and authenticate envelopes.

fn sign_classical(&self, message: &[u8]) -> [u8; 64]

Produces the canonical Ed25519 signature for the supplied transcript.

fn sign_post_quantum(&self, message: &[u8]) -> [u8; 3309]

Produces the canonical ML-DSA-65 signature for the supplied transcript.