Struct RsaPrivateKey 

pub struct RsaPrivateKey {
    pub n: BigUint,
    pub d: BigUint,
    /* private fields */
}

Represents an RSA private key with arbitrary-size modulus and exponent.

Fields

n: BigUint

d: BigUint

Implementations

impl RsaPrivateKey

pub fn from_be_bytes(n: &[u8], d: &[u8]) -> Result<Self>

Creates private key from big-endian modulus and private exponent bytes.

Arguments

• n: RSA modulus encoded as big-endian bytes.
• d: RSA private exponent encoded as big-endian bytes.

Returns

Parsed RsaPrivateKey when both fields are non-empty.

Errors

Returns Error::InvalidLength when fields are empty, or when modulus size is below 2048 bits in default-safe builds (legacy-compatible hazardous mode permits smaller imports), or other RSA component validation errors from [validate_private_components].

pub fn from_u128(n: u128, d: u128) -> Self

Creates private key from small integers for compatibility tests.

Arguments

• n: RSA modulus value.
• d: RSA private exponent value.

Returns

RsaPrivateKey converted from the provided integer values.

pub fn clear(&mut self)

Clears private key material to a zeroized placeholder state.

Notes

This mirrors explicit key free/reset lifecycle flows from the C surface.

pub fn with_crt_components( self, p: &[u8], q: &[u8], dp: &[u8], dq: &[u8], qinv: &[u8], ) -> Result<Self>

Attaches RSA CRT decomposition components to this private key.

Arguments

• p: First RSA prime factor.
• q: Second RSA prime factor.
• dp: d mod (p - 1) CRT exponent.
• dq: d mod (q - 1) CRT exponent.
• qinv: q^{-1} mod p CRT coefficient.

Returns

Updated private key configured with CRT components.

pub fn sign_digest(&self, digest: &[u8]) -> Result<Vec<u8>>

Signs a representative digest interpreted as big-endian integer modulo n.

Arguments

• digest: Digest bytes to convert into an RSA message representative.

Returns

Signature bytes padded to modulus length.

pub fn sign_pkcs1_v15_sha256(&self, msg: &[u8]) -> Result<Vec<u8>>

Signs a message using RSASSA-PKCS1-v1_5 style encoding with SHA-256.

Arguments

• msg: Message bytes to hash and sign.

Returns

PKCS#1 v1.5 RSA signature bytes.

pub fn sign_pkcs1_v15_sha1(&self, msg: &[u8]) -> Result<Vec<u8>>

Signs a message using RSASSA-PKCS1-v1_5 style encoding with SHA-1.

Arguments

• msg: Message bytes to hash and sign.

Returns

PKCS#1 v1.5 RSA signature bytes.

pub fn sign_pkcs1_v15_sha384(&self, msg: &[u8]) -> Result<Vec<u8>>

Signs a message using RSASSA-PKCS1-v1_5 style encoding with SHA-384.

Arguments

• msg: Message bytes to hash and sign.

Returns

PKCS#1 v1.5 RSA signature bytes.

pub fn sign_pkcs1_v15_sha512(&self, msg: &[u8]) -> Result<Vec<u8>>

Signs a message using RSASSA-PKCS1-v1_5 style encoding with SHA-512.

Arguments

• msg: Message bytes to hash and sign.

Returns

PKCS#1 v1.5 RSA signature bytes.

pub fn sign_pss_sha256(&self, msg: &[u8], salt: &[u8]) -> Result<Vec<u8>>

Signs a message using RSASSA-PSS with SHA-256 and caller-provided salt.

Arguments

• msg: Message bytes to hash and sign.
• salt: Caller-provided random salt used by PSS encoding.

Returns

RSASSA-PSS RSA signature bytes.

pub fn sign_pss_sha384(&self, msg: &[u8], salt: &[u8]) -> Result<Vec<u8>>

Signs a message using RSASSA-PSS with SHA-384 and caller-provided salt.

Arguments

• msg: Message bytes to hash and sign.
• salt: Caller-provided random salt used by PSS encoding.

Returns

RSASSA-PSS RSA signature bytes.

pub fn decrypt_pkcs1_v15(&self, ciphertext: &[u8]) -> Result<Vec<u8>>

Decrypts RSAES-PKCS1-v1_5 ciphertext with private exponent d.

Arguments

• ciphertext: Ciphertext bytes with length equal to modulus length.

Returns

Decrypted plaintext when PKCS#1 v1.5 structure is valid.

pub fn decrypt_pkcs1_v15_crt_only(&self, ciphertext: &[u8]) -> Result<Vec<u8>>

Decrypts RSAES-PKCS1-v1_5 ciphertext using configured CRT components.

Arguments

• ciphertext: Ciphertext bytes with length equal to modulus length.

Returns

Decrypted plaintext when CRT components are configured and PKCS#1 v1.5 structure is valid.

pub fn decrypt_oaep_sha256( &self, ciphertext: &[u8], label: &[u8], ) -> Result<Vec<u8>>

Decrypts RSAES-OAEP ciphertext with SHA-256 and caller-provided label.

Arguments

• ciphertext: Ciphertext bytes with length equal to modulus length.
• label: OAEP label bytes hashed into encoding parameters.

Returns

Decrypted plaintext when OAEP structure validates.

pub fn decrypt_oaep_sha256_crt_only( &self, ciphertext: &[u8], label: &[u8], ) -> Result<Vec<u8>>

Decrypts RSAES-OAEP ciphertext using configured CRT components.

Arguments

• ciphertext: Ciphertext bytes with length equal to modulus length.
• label: OAEP label bytes hashed into encoding parameters.

Returns

Decrypted plaintext when CRT parameters are configured and OAEP structure validates.

Trait Implementations

impl Clone for RsaPrivateKey

fn clone(&self) -> RsaPrivateKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RsaPrivateKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for RsaPrivateKey

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.