Struct Ed25519Key 

pub struct Ed25519Key { /* private fields */ }

An Ed25519 private key for ed25519-sha256 signing (RFC 8463).

The signature is computed over the SHA-256 hash of the signed data, as RFC 8463 Section 3 requires.

Implementations

impl Ed25519Key

pub fn generate_pkcs8() -> Result<Vec<u8>>

Generates a new random Ed25519 key pair and returns it as PKCS #8 DER bytes, ready for from_pkcs8_der.

Errors

Returns Error::Crypto with CryptoError::Library if key generation or encoding fails.

pub fn from_pkcs8_der(pkcs8_der: &[u8]) -> Result<Self>

Loads an Ed25519 key pair from PKCS #8 v2 DER bytes (RFC 5958), checking that the embedded public key matches the private key. PKCS #8 v1 documents are rejected by ring; load them with from_pkcs8_maybe_unchecked_der.

Errors

Returns Error::Crypto with CryptoError::Library if the key cannot be decoded.

pub fn from_pkcs8_maybe_unchecked_der(pkcs8_der: &[u8]) -> Result<Self>

Loads an Ed25519 key pair from PKCS #8 v1 or v2 DER bytes. A v1 document (as produced by openssl genpkey -algorithm ED25519) carries no public key, so no consistency check is possible; v2 documents are checked as in from_pkcs8_der.

Errors

Returns Error::Crypto with CryptoError::Library if the key cannot be decoded.

pub fn from_seed_and_public_key(seed: &[u8], public_key: &[u8]) -> Result<Self>

Builds an Ed25519 key pair from its 32-byte seed (private key) and 32-byte public key.

Errors

Returns Error::Crypto with CryptoError::Library if either value has the wrong length or the public key does not match the seed.

pub fn public_key(&self) -> Vec<u8>

Returns the 32-byte raw Ed25519 public key, as published in the p= tag of a DKIM key record.

Trait Implementations

impl From<Ed25519Key> for DkimKey

Available on crate features aws-lc-rs or rust-crypto only.

fn from(key: Ed25519Key) -> Self

Converts to this type from the input type.

impl SigningKey for Ed25519Key

type Hasher = Sha256

The hash function used by the signature algorithm.

fn sign(&self, input: impl Writable) -> Result<Vec<u8>>

Signs the bytes written by input and returns the raw signature.

fn algorithm(&self) -> Algorithm

Returns the signature algorithm written to the a= tag.

fn heap_size(&self) -> usize

Approximate heap memory owned by the key, in bytes, for weighing cache entries that hold it.

fn hash(&self, data: impl Writable) -> HashOutput

Hashes the bytes written by data with Self::Hasher.