Struct SigningKey

pub struct SigningKey<D>
where
    D: Digest,
{ /* private fields */ }

Signing key for producing RSASSA-PSS signatures as described in RFC8017 § 8.1.

Implementations

impl<D> SigningKey<D>

where D: Digest,

pub fn new(key: RsaPrivateKey) -> Self

Create a new RSASSA-PSS signing key. Digest output size is used as a salt length.

pub fn new_with_salt_len(key: RsaPrivateKey, salt_len: usize) -> Self

Create a new RSASSA-PSS signing key with a salt of the given length.

pub fn random<R: CryptoRngCore + ?Sized>( rng: &mut R, bit_size: usize, ) -> Result<Self>

Generate a new random RSASSA-PSS signing key. Digest output size is used as a salt length.

pub fn random_with_salt_len<R: CryptoRngCore + ?Sized>( rng: &mut R, bit_size: usize, salt_len: usize, ) -> Result<Self>

Generate a new random RSASSA-PSS signing key with a salt of the given length.

pub fn salt_len(&self) -> usize

Return specified salt length for this key

Trait Implementations

impl<D> AsRef<RsaPrivateKey> for SigningKey<D>

where D: Digest,

fn as_ref(&self) -> &RsaPrivateKey

Converts this type into a shared reference of the (usually inferred) input type.

impl<D> AssociatedAlgorithmIdentifier for SigningKey<D>

where D: Digest,

const ALGORITHM_IDENTIFIER: AlgorithmIdentifierRef<'static> = pkcs1::ALGORITHM_ID

AlgorithmIdentifier for this structure.

type Params = AnyRef<'static>

Algorithm parameters.

impl<D> Clone for SigningKey<D>

where D: Digest + Clone,

fn clone(&self) -> SigningKey<D>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<D> Debug for SigningKey<D>

where D: Digest + Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<D> DynSignatureAlgorithmIdentifier for SigningKey<D>

where D: Digest + AssociatedOid,

fn signature_algorithm_identifier(&self) -> Result<AlgorithmIdentifierOwned>

AlgorithmIdentifier for the corresponding singature system.

impl<D> EncodePrivateKey for SigningKey<D>

where D: Digest,

fn to_pkcs8_der(&self) -> Result<SecretDocument>

Serialize a SecretDocument containing a PKCS#8-encoded private key.

fn to_pkcs8_pem( &self, line_ending: LineEnding, ) -> Result<Zeroizing<String>, Error>

Serialize this private key as PEM-encoded PKCS#8 with the given LineEnding.

fn write_pkcs8_der_file(&self, path: impl AsRef<Path>) -> Result<(), Error>

Write ASN.1 DER-encoded PKCS#8 private key to the given path

fn write_pkcs8_pem_file( &self, path: impl AsRef<Path>, line_ending: LineEnding, ) -> Result<(), Error>

Write ASN.1 DER-encoded PKCS#8 private key to the given path

impl<D> From<RsaPrivateKey> for SigningKey<D>

where D: Digest,

fn from(key: RsaPrivateKey) -> Self

Converts to this type from the input type.

impl<D> From<SigningKey<D>> for RsaPrivateKey

where D: Digest,

fn from(key: SigningKey<D>) -> Self

Converts to this type from the input type.

impl<D> Keypair for SigningKey<D>

where D: Digest,

type VerifyingKey = VerifyingKey<D>

Verifying key type for this keypair.

fn verifying_key(&self) -> Self::VerifyingKey

Get the verifying key which can verify signatures produced by the signing key portion of this keypair.

impl<D> RandomizedDigestSigner<D, Signature> for SigningKey<D>

where D: Digest + FixedOutputReset,

fn try_sign_digest_with_rng( &self, rng: &mut impl CryptoRngCore, digest: D, ) -> Result<Signature>

Attempt to sign the given prehashed message Digest, returning a digital signature on success, or an error if something went wrong.

fn sign_digest_with_rng(&self, rng: &mut impl CryptoRngCore, digest: D) -> S

Sign the given prehashed message Digest, returning a signature.

impl<D> RandomizedPrehashSigner<Signature> for SigningKey<D>

where D: Digest + FixedOutputReset,

fn sign_prehash_with_rng( &self, rng: &mut impl CryptoRngCore, prehash: &[u8], ) -> Result<Signature>

Attempt to sign the given message digest, returning a digital signature on success, or an error if something went wrong.

impl<D> RandomizedSigner<Signature> for SigningKey<D>

where D: Digest + FixedOutputReset,

fn try_sign_with_rng( &self, rng: &mut impl CryptoRngCore, msg: &[u8], ) -> Result<Signature>

Attempt to sign the given message, returning a digital signature on success, or an error if something went wrong.

fn sign_with_rng(&self, rng: &mut impl CryptoRngCore, msg: &[u8]) -> S

Sign the given message and return a digital signature

impl<D> ZeroizeOnDrop for SigningKey<D>

where D: Digest,