Struct GenericSigningKey 

pub struct GenericSigningKey<D, T, M>
where
    D: Digest,
    T: UnsignedModularInt + Zeroize,
    M: ModulusParams<Modulus = T>,
{ /* private fields */ }

Signing key for RSASSA-PSS — heapless variant.

Generic over the digest D, integer type T, and Montgomery parameters M. Holds a GenericRsaPrivateKey<T, M> plus the salt length to use when signing (caller-chosen at construction; defaults to <D as Digest>::output_size() via new).

PSS has no DigestInfo prefix — D is purely a phantom marker for the digest algorithm used by both encode and verify.

Implementations

impl<D, T, M> GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>,

pub fn new(key: GenericRsaPrivateKey<T, M>) -> Self

Construct with salt length = D::output_size() (standard choice per RFC 8017 § 8.1).

pub fn new_with_salt_len( key: GenericRsaPrivateKey<T, M>, salt_len: usize, ) -> Self

Construct with a custom salt length.

pub fn salt_len(&self) -> usize

Salt length this key will use when signing.

impl<D, T, M> GenericSigningKey<D, T, M>

where D: Digest + FixedOutputReset, T: UnsignedModularInt + Zeroize + TryRandomMod, T::Bytes: Zeroize, M: ModulusParams<Modulus = T> + CtModulusParams, M::MontgomeryForm: Pow<M> + PowBoundedExp<M> + InvertCt<M> + MulCt<M>,

pub fn try_sign_with_rng_into<'sig, R: TryCryptoRng + ?Sized>( &self, rng: &mut R, msg: &[u8], em_storage: &mut [u8], sig_storage: &'sig mut [u8], salt_storage: &mut [u8], ) -> Result<&'sig [u8]>

Sign msg (hashed internally with D) into sig_storage, drawing the PSS salt AND the RSA base-blinding factor from rng. Uses em_storage and salt_storage as scratch. All three buffers must be at least the relevant sizes (em_storage: em_bits.div_ceil(8); sig_storage: n.size(); salt_storage: self.salt_len()).

Mirrors crate::traits::RandomizedEncryptor::encrypt_with_rng_into: caller owns storage, returned slice borrows from sig_storage.

pub fn try_sign_prehash_with_rng_into<'sig, R: TryCryptoRng + ?Sized>( &self, rng: &mut R, prehash: &[u8], em_storage: &mut [u8], sig_storage: &'sig mut [u8], salt_storage: &mut [u8], ) -> Result<&'sig [u8]>

Sign a precomputed prehash (D::output_size() bytes) into sig_storage, drawing the PSS salt AND the RSA base-blinding factor from rng.

Returns Error::InputNotHashed if prehash.len() doesn’t match D::output_size(). Returns Error::OutputBufferTooSmall if salt_storage.len() < self.salt_len().

impl<D, T, M> GenericSigningKey<D, T, M>

where D: Digest + FixedOutputReset, T: UnsignedModularInt + Zeroize, T::Bytes: Zeroize, M: ModulusParams<Modulus = T> + CtModulusParams, M::MontgomeryForm: Pow<M> + PowBoundedExp<M>,

pub fn try_sign_prehash_with_salt_into<'sig>( &self, prehash: &[u8], salt: &[u8], em_storage: &mut [u8], sig_storage: &'sig mut [u8], ) -> Result<&'sig [u8]>

Sign with caller-supplied salt — useful for determinism in tests.

Returns Error::InputNotHashed if prehash.len() doesn’t match D::output_size(). Returns Error::InvalidArguments if salt.len() != self.salt_len() — a mismatch silently produces a signature that no verifier configured with the key’s advertised salt_len will accept, so we reject it up front.

impl<D> GenericSigningKey<D, BoxedUint, BoxedMontyParams>

where D: Digest,

pub fn random<R: CryptoRng + ?Sized>( rng: &mut R, bit_size: usize, ) -> Result<Self>

Available on crate features alloc and keygen only.

Generate a new random RSASSA-PSS signing key. Digest output size is used as a salt length.

pub fn random_with_salt_len<R: CryptoRng + ?Sized>( rng: &mut R, bit_size: usize, salt_len: usize, ) -> Result<Self>

Available on crate features alloc and keygen only.

Generate a new random RSASSA-PSS signing key with a salt of the given length.

Trait Implementations

impl<D, T, M> AsRef<GenericRsaPrivateKey<T, M>> for GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>,

fn as_ref(&self) -> &GenericRsaPrivateKey<T, M>

Converts this type into a shared reference of the (usually inferred) input type.

impl<D, T, M> Clone for GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize + Clone, M: ModulusParams<Modulus = T> + Clone, M::MontgomeryForm: Clone,

Available on crate feature alloc only.

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<D, T, M> Debug for GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>, GenericRsaPrivateKey<T, M>: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<D> From<GenericSigningKey<D, BoxedUint, BoxedMontyParams>> for RsaPrivateKey

where D: Digest,

Available on crate feature alloc only.

fn from(key: SigningKey<D>) -> Self

Converts to this type from the input type.

impl<D, T, M> Zeroize for GenericSigningKey<D, T, M>

where D: Digest, T: UnsignedModularInt + Zeroize, M: ModulusParams<Modulus = T>,

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.