Struct GenericSigningKey 

pub struct GenericSigningKey<D, T, M>
where
    D: Digest,
    T: UnsignedModularInt + Zeroize,
    M: ModulusParams<Modulus = T>,
{ /* private fields */ }

Signing key for RSASSA-PKCS1-v1_5 signatures — heapless variant.

Generic over the digest D, integer type T, and Montgomery parameters M. Holds a GenericRsaPrivateKey<T, M> plus the precomputed DigestInfo prefix for D.

Implementations

impl<D, T, M> GenericSigningKey<D, T, M>

where D: Digest + AssociatedOid, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>,

pub fn new(key: GenericRsaPrivateKey<T, M>) -> Self

Create a new signing key with a precomputed prefix for digest D.

impl<D, T, M> GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>,

pub fn new_unprefixed(key: GenericRsaPrivateKey<T, M>) -> Self

Create a new signing key with an empty prefix (raw signatures, no DigestInfo wrapper). Unusual — most callers want [new] instead.

impl<D, T, M> GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, T::Bytes: Zeroize, M: ModulusParams<Modulus = T> + CtModulusParams, M::MontgomeryForm: Pow<M> + PowBoundedExp<M>,

pub fn try_sign_into<'sig>( &self, msg: &[u8], em_storage: &mut [u8], sig_storage: &'sig mut [u8], ) -> Result<&'sig [u8]>

Sign msg (hashed internally with D) into sig_storage. Uses em_storage as scratch for the EM encoding.

Both buffers must be at least self.inner.size() bytes. Mirrors the shape of crate::traits::RandomizedEncryptor::encrypt_with_rng_into on the encrypt side: caller owns storage, returned slice borrows from sig_storage with the same lifetime.

pub fn try_sign_prehash_into<'sig>( &self, prehash: &[u8], em_storage: &mut [u8], sig_storage: &'sig mut [u8], ) -> Result<&'sig [u8]>

Sign a precomputed prehash (D::output_size() bytes) into sig_storage. The caller is responsible for the hash; this skips the internal D::digest(msg) step.

Returns [Error::InputNotHashed] if prehash.len() doesn’t match D::output_size() — a mismatch would silently produce malformed PKCS#1 v1.5 padding rather than a usable signature.

impl<D, T, M> GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize + TryRandomMod, T::Bytes: Zeroize, M: ModulusParams<Modulus = T> + CtModulusParams, M::MontgomeryForm: Pow<M> + PowBoundedExp<M> + InvertCt<M> + MulCt<M>,

pub fn try_sign_with_rng_into<'sig, R: TryCryptoRng + ?Sized>( &self, rng: &mut R, msg: &[u8], em_storage: &mut [u8], sig_storage: &'sig mut [u8], ) -> Result<&'sig [u8]>

RNG-driven blinded variant of Self::try_sign_into. Uses rng to sample a fresh blinding factor per signature.

pub fn try_sign_prehash_with_rng_into<'sig, R: TryCryptoRng + ?Sized>( &self, rng: &mut R, prehash: &[u8], em_storage: &mut [u8], sig_storage: &'sig mut [u8], ) -> Result<&'sig [u8]>

RNG-driven blinded variant of Self::try_sign_prehash_into.

impl<D, T, M> GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>,

pub fn to_verifying_key(&self) -> GenericVerifyingKey<D, T, M>

where GenericRsaPublicKey<T, M>: Clone,

Derive the matching GenericVerifyingKey from this signing key, preserving the existing DigestInfo prefix (so unprefixed signing keys yield unprefixed verifying keys). Not named verifying_key because that would shadow signature::Keypair::verifying_key for callers using method-call syntax.

impl<D> GenericSigningKey<D, BoxedUint, BoxedMontyParams>

where D: Digest + AssociatedOid,

pub fn random<R: CryptoRng + ?Sized>( rng: &mut R, bit_size: usize, ) -> Result<Self>

Available on crate features alloc and keygen only.

Generate a new signing key with a prefix for the digest D.

impl<D> GenericSigningKey<D, BoxedUint, BoxedMontyParams>

where D: Digest,

pub fn random_unprefixed<R: CryptoRng + ?Sized>( rng: &mut R, bit_size: usize, ) -> Result<Self>

Available on crate features alloc and keygen only.

Generate a new signing key with an empty prefix.

Trait Implementations

impl<D, T, M> AsRef<GenericRsaPrivateKey<T, M>> for GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>,

fn as_ref(&self) -> &GenericRsaPrivateKey<T, M>

Converts this type into a shared reference of the (usually inferred) input type.

impl<D, T, M> Clone for GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize + Clone, M: ModulusParams<Modulus = T> + Clone, M::MontgomeryForm: Clone,

Available on crate feature alloc only.

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<D, T, M> Debug for GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>, GenericRsaPrivateKey<T, M>: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<D> From<GenericSigningKey<D, BoxedUint, BoxedMontyParams>> for RsaPrivateKey

where D: Digest,

Available on crate feature alloc only.

fn from(key: SigningKey<D>) -> Self

Converts to this type from the input type.

impl<D, T, M> Zeroize for GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>,

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.