Struct PrivateKey 

pub struct PrivateKey { /* private fields */ }

An owned private key.

Private key bytes are zeroized on drop to prevent key material from lingering in heap memory. Clone is deliberately not derived — cloning private keys should be an explicit operation via from_bytes.

Implementations

impl PrivateKey

pub fn new(algorithm: Algorithm, bytes: Vec<u8>) -> Result<Self>

Creates a new PrivateKey from an owned Vec<u8> after validating key size.

pub fn from_bytes(algorithm: Algorithm, bytes: &[u8]) -> Result<Self>

Creates a new PrivateKey by copying the provided bytes after validation.

pub fn algorithm(&self) -> Algorithm

Returns the algorithm.

pub fn bytes(&self) -> &[u8]

Returns the raw key bytes.

pub fn key_type(&self) -> KeyType

Returns the key type (always Private).

pub fn into_bytes(self) -> Zeroizing<Vec<u8>>

Extracts the inner byte vector wrapped in Zeroizing so the key material is automatically zeroized when the returned value is dropped.

pub fn from_pkcs8(der: &[u8]) -> Result<Self>

Decode a PKCS8 DER-encoded private key into an owned PrivateKey.

pub fn encode_pkcs8_to(&self, out: &mut Vec<u8>)

Encode this private key as PKCS8 DER into the given buffer.

pub fn encode_der_to(&self, out: &mut Vec<u8>)

Encode this private key as DER into the given buffer.

pub fn to_pkcs8(&self) -> Zeroizing<Vec<u8>>

Encode this private key as PKCS8 DER, returning a Zeroizing<Vec<u8>>. The returned wrapper automatically zeroizes the DER bytes on drop.

pub fn to_der(&self) -> Zeroizing<Vec<u8>>

Encode this private key as DER, returning a Zeroizing<Vec<u8>>. The returned wrapper automatically zeroizes the DER bytes on drop.

pub fn from_pem(pem: &str) -> Result<Self>

Decode a PEM-encoded private key into an owned PrivateKey.

pub fn to_pem(&self) -> Zeroizing<String>

Encode this private key as PEM, returning a Zeroizing<String>. The returned wrapper automatically zeroizes the PEM string on drop.

pub fn as_key_ref(&self) -> PrivateKeyRef<'_>

Returns a borrowed PrivateKeyRef.

Trait Implementations

impl AsRef<[u8]> for PrivateKey

fn as_ref(&self) -> &[u8]

Converts this type into a shared reference of the (usually inferred) input type.

impl Clone for PrivateKey

fn clone(&self) -> Self

Explicitly clone a private key. The cloned copy is also zeroized on drop.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrivateKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for PrivateKey

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Eq for PrivateKey

impl From<PrivateKey> for Key

fn from(key: PrivateKey) -> Self

Converts to this type from the input type.

impl<'a> From<PrivateKeyRef<'a>> for PrivateKey

fn from(key: PrivateKeyRef<'a>) -> Self

Converts to this type from the input type.

impl PartialEq for PrivateKey

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Zeroize for PrivateKey

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.