Struct SignatureVerifier 

pub struct SignatureVerifier { /* private fields */ }

Signature verifier for RVF packages.

Implements ML-DSA-65 signature verification per NIST FIPS 204.

Implementations

impl SignatureVerifier

pub fn new(public_key: &[u8]) -> Self

Creates a new signature verifier with the given public key.

Panics

Panics if the public key has wrong length.

pub fn verify(&self, manifest: &[u8], signature: &[u8]) -> VerifyResult

Verifies the signature of an RVF manifest.

Returns

Returns VerifyResult::Valid if the signature is valid, or an error result describing the failure.

pub fn verify_boot_signature(&self, manifest: &[u8], signature: &[u8])

Verifies the boot signature and PANICS on failure (SEC-001).

SECURITY CRITICAL: This function MUST panic on any verification failure. There is NO fallback boot path.

Panics

Panics if signature verification fails for ANY reason.