Struct Keystore 

pub struct Keystore { /* private fields */ }

A robust Key Management Keystore for Ed25519 signing and verification.

Implementations

impl Keystore

pub fn generate() -> Self

Generate a fresh random key pair.

pub fn from_seed(seed: &[u8; 32]) -> Self

Create from a raw seed bytes array.

pub fn from_bytes(bytes: &[u8]) -> Result<Self, KeyManagementError>

Create from a seed slice.

pub fn load_from_file<P: AsRef<Path>>( path: P, ) -> Result<Self, KeyManagementError>

Load primary key from file containing raw 32 seed bytes.

pub fn save_to_file<P: AsRef<Path>>( &self, path: P, ) -> Result<(), KeyManagementError>

Save primary key seed to file.

pub fn to_bytes(&self) -> [u8; 32]

Returns the raw 32 seed bytes of the primary key.

pub fn verifying_key(&self) -> VerifyingKey

Returns the VerifyingKey of the primary key pair.

pub fn sign_hash(&self, hash: &Blake3Hash) -> [u8; 64]

Sign a payload hash using the primary key.

pub fn sign_receipt(&self, receipt: &mut CryptographicReceipt)

Sign a CryptographicReceipt in place using the primary key.

pub fn register_trusted_key(&self, id: Uuid, key: VerifyingKey)

Register a trusted verifying public key associated with a Uuid.

pub fn get_trusted_key(&self, id: &Uuid) -> Option<VerifyingKey>

Retrieve a trusted verifying public key.

pub fn verify_signature( verifying_key: &VerifyingKey, hash: &Blake3Hash, signature_bytes: &[u8; 64], ) -> Result<(), KeyManagementError>

Verify a signature against a payload hash.

pub fn verify_receipt( &self, receipt: &CryptographicReceipt, ) -> Result<(), KeyManagementError>

Verify a CryptographicReceipt’s signature using the verifying key registered for its discipline_id, or fallback to the primary verifying key if no specific key is registered.