Struct SigningKey 

pub struct SigningKey<D>
where
    D: Digest,
{ /* private fields */ }

Available on crate feature private-key only.

Signing key for producing RSASSA-PSS signatures as described in RFC8017 § 8.1.

Implementations

impl<D> SigningKey<D>

where D: Digest,

pub fn new(key: RsaPrivateKey) -> Self

Create a new RSASSA-PSS signing key. Digest output size is used as a salt length.

pub fn new_with_salt_len(key: RsaPrivateKey, salt_len: usize) -> Self

Create a new RSASSA-PSS signing key with a salt of the given length.

pub fn random<R: CryptoRng + ?Sized>( rng: &mut R, bit_size: usize, ) -> Result<Self>

Generate a new random RSASSA-PSS signing key. Digest output size is used as a salt length.

pub fn random_with_salt_len<R: CryptoRng + ?Sized>( rng: &mut R, bit_size: usize, salt_len: usize, ) -> Result<Self>

Generate a new random RSASSA-PSS signing key with a salt of the given length.

pub fn salt_len(&self) -> usize

Return specified salt length for this key

Trait Implementations

impl<D> AsRef<RsaPrivateKey> for SigningKey<D>

where D: Digest,

fn as_ref(&self) -> &RsaPrivateKey

Converts this type into a shared reference of the (usually inferred) input type.

impl<D> AssociatedAlgorithmIdentifier for SigningKey<D>

where D: Digest,

Available on crate feature encoding only.

const ALGORITHM_IDENTIFIER: AlgorithmIdentifierRef<'static> = pkcs1::ALGORITHM_ID

AlgorithmIdentifier for this structure.

type Params = AnyRef<'static>

Algorithm parameters.

impl<D> Clone for SigningKey<D>

where D: Digest + Clone,

fn clone(&self) -> SigningKey<D>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<D> Debug for SigningKey<D>

where D: Digest + Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de, D> Deserialize<'de> for SigningKey<D>

where D: Digest + AssociatedOid,

Available on crate feature serde only.

fn deserialize<De>(deserializer: De) -> Result<Self, De::Error>

where De: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<D> DynSignatureAlgorithmIdentifier for SigningKey<D>

where D: Digest + AssociatedOid,

Available on crate feature encoding only.

fn signature_algorithm_identifier(&self) -> Result<AlgorithmIdentifierOwned>

AlgorithmIdentifier for the corresponding signature system.

impl<D> EncodePrivateKey for SigningKey<D>

where D: Digest,

Available on crate feature encoding only.

fn to_pkcs8_der(&self) -> Result<SecretDocument>

Serialize a SecretDocument containing a PKCS#8-encoded private key.

fn to_pkcs8_pem( &self, line_ending: LineEnding, ) -> Result<Zeroizing<String>, Error>

Available on crate feature pem only.

Serialize this private key as PEM-encoded PKCS#8 with the given LineEnding.

fn write_pkcs8_der_file(&self, path: impl AsRef<Path>) -> Result<(), Error>

Available on crate feature std only.

Write ASN.1 DER-encoded PKCS#8 private key to the given path.

fn write_pkcs8_pem_file( &self, path: impl AsRef<Path>, line_ending: LineEnding, ) -> Result<(), Error>

Available on crate features pem and std only.

Write ASN.1 PEM-encoded PKCS#8 private key to the given path.

impl<D> From<RsaPrivateKey> for SigningKey<D>

where D: Digest,

fn from(key: RsaPrivateKey) -> Self

Converts to this type from the input type.

impl<D> From<SigningKey<D>> for RsaPrivateKey

where D: Digest,

fn from(key: SigningKey<D>) -> Self

Converts to this type from the input type.

impl<D> Keypair for SigningKey<D>

where D: Digest,

type VerifyingKey = GenericVerifyingKey<D, BoxedUint, BoxedMontyParams>

Verifying key type for this keypair.

fn verifying_key(&self) -> Self::VerifyingKey

Get the verifying key which can verify signatures produced by the signing key portion of this keypair.

impl<D> PartialEq for SigningKey<D>

where D: Digest,

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<D> RandomizedDigestSigner<D, GenericSignature<BoxedUint>> for SigningKey<D>

where D: Digest + FixedOutputReset + Update,

fn try_sign_digest_with_rng<R: TryCryptoRng + ?Sized, F: Fn(&mut D) -> Result<()>>( &self, rng: &mut R, f: F, ) -> Result<Signature>

Attempt to sign a message by updating the received Digest with it, returning a digital signature on success, or an error if something went wrong.

fn sign_digest_with_rng<R, F>(&self, rng: &mut R, f: F) -> S

where R: CryptoRng + ?Sized, F: Fn(&mut D),

Sign a message by updating the received Digest with it, returning a signature.

impl<D> RandomizedMultipartSigner<GenericSignature<BoxedUint>> for SigningKey<D>

where D: Digest + FixedOutputReset + Update,

fn try_multipart_sign_with_rng<R: TryCryptoRng + ?Sized>( &self, rng: &mut R, msg: &[&[u8]], ) -> Result<Signature>

Equivalent of RandomizedSigner::try_sign_with_rng() but the message is provided in non-contiguous byte slices.

fn multipart_sign_with_rng<R>(&self, rng: &mut R, msg: &[&[u8]]) -> S

where R: CryptoRng + ?Sized,

Equivalent of RandomizedSigner::sign_with_rng() but the message is provided in non-contiguous byte slices.

impl<D> RandomizedPrehashSigner<GenericSignature<BoxedUint>> for SigningKey<D>

where D: Digest + FixedOutputReset + Update,

fn sign_prehash_with_rng<R: TryCryptoRng + ?Sized>( &self, rng: &mut R, prehash: &[u8], ) -> Result<Signature>

Attempt to sign the given message digest, returning a digital signature on success, or an error if something went wrong.

impl<D> RandomizedSigner<GenericSignature<BoxedUint>> for SigningKey<D>

where D: Digest + FixedOutputReset + Update,

fn try_sign_with_rng<R: TryCryptoRng + ?Sized>( &self, rng: &mut R, msg: &[u8], ) -> Result<Signature>

Attempt to sign the given message, returning a digital signature on success, or an error if something went wrong.

fn sign_with_rng<R>(&self, rng: &mut R, msg: &[u8]) -> S

where R: CryptoRng + ?Sized,

Sign the given message and return a digital signature

impl<D> Serialize for SigningKey<D>

where D: Digest,

Available on crate feature serde only.

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl<D> TryFrom<PrivateKeyInfo<AnyRef<'_>, &OctetStringRef, BitStringRef<'_>>> for SigningKey<D>

where D: Digest + AssociatedOid,

Available on crate feature encoding only.

type Error = Error

The type returned in the event of a conversion error.

fn try_from(private_key_info: PrivateKeyInfoRef<'_>) -> Result<Self>

Performs the conversion.

impl<D> ZeroizeOnDrop for SigningKey<D>

where D: Digest,