Struct CryptoKeyPair 

pub struct CryptoKeyPair {
    pub public_key_pem: String,
    pub algorithm_id: String,
    /* private fields */
}

Algorithm-agnostic key pair that works with any supported signature algorithm

This struct provides a unified interface for key management across different cryptographic algorithms (RSA, Ed25519, etc.).

The private key is stored in a Zeroizing<String> wrapper that automatically clears memory when dropped, preventing key material from lingering in memory.

Fields

public_key_pem: String

The public key in PEM format

algorithm_id: String

The algorithm identifier (e.g., “RSA-SHA256”, “Ed25519”)

Implementations

impl CryptoKeyPair

pub fn private_key_pem(&self) -> &str

Get a reference to the private key PEM

pub fn generate(algorithm_id: &str) -> Result<Self>

Generate a new key pair using the specified algorithm

Arguments

• algorithm_id - The algorithm to use (e.g., “RSA-SHA256”, “Ed25519”)

Example

use licenz_core::keys::CryptoKeyPair;
use licenz_core::crypto::algorithm_ids;

let keypair = CryptoKeyPair::generate(algorithm_ids::ED25519).unwrap();

pub fn from_pem( private_key_pem: String, public_key_pem: String, algorithm_id: &str, ) -> Self

Create from existing PEM keys

Arguments

• private_key_pem - The private key in PEM format
• public_key_pem - The public key in PEM format
• algorithm_id - The algorithm identifier

pub fn load_from_files( private_path: &Path, public_path: &Path, algorithm_id: &str, ) -> Result<Self>

Load a key pair from files

On Unix, this checks that the private key file is not readable by group/other.

Arguments

• private_path - Path to the private key PEM file
• public_path - Path to the public key PEM file
• algorithm_id - The algorithm identifier

pub fn save_to_files( &self, private_path: &Path, public_path: &Path, ) -> Result<()>

Save the key pair to files

pub fn sign(&self, data: &[u8]) -> Result<Vec<u8>>

Sign data using this key pair’s private key

pub fn verify(&self, data: &[u8], signature: &[u8]) -> Result<()>

Verify a signature using this key pair’s public key

pub fn get_algorithm(&self) -> Result<&'static dyn SignatureAlgorithm>

Get the signature algorithm for this key pair

pub fn from_rsa_keypair(keypair: &KeyPair) -> Result<Self>

Convert a legacy RSA KeyPair to a CryptoKeyPair

Trait Implementations

impl Debug for CryptoKeyPair

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.