Struct Ed25519DidKeyStore 

pub struct Ed25519DidKeyStore { /* private fields */ }

Production DidKeyStore: Ed25519 signatures, X25519 ECDH, and ChaCha20-Poly1305 authenticated payload encryption.

Implementations

impl Ed25519DidKeyStore

pub fn new() -> Self

Create an empty key store.

pub fn with_key(self, did: Did, key: Ed25519DidKey) -> Self

Add a key pair for a DID.

pub fn rotate_key( &mut self, did: &Did, key: Ed25519DidKey, ) -> Result<u64, DidError>

Rotate a DID to a new active key version.

Existing non-retired versions remain in the DID document for in-flight envelope verification until explicitly retired.

pub fn retire_key(&mut self, did: &Did, version: u64) -> Result<(), DidError>

Retire an old key version.

Retired authentication methods are omitted from newly generated DID documents and are rejected by this store’s verifier.

pub fn active_key_version(&self, did: &Did) -> Result<u64, DidError>

Active signing/encryption version for did.

pub fn document(&self, did: &Did) -> Result<DidDocument, DidError>

Build a rotation-aware DID document for one local DID.

Trait Implementations

impl Clone for Ed25519DidKeyStore

fn clone(&self) -> Ed25519DidKeyStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Ed25519DidKeyStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Ed25519DidKeyStore

fn default() -> Ed25519DidKeyStore

Returns the “default value” for a type.

impl DidKeyStore for Ed25519DidKeyStore

fn sign(&self, signer: &Did, message: &[u8]) -> Result<String, DidError>

Sign bytes as signer.

fn verify( &self, method: &VerificationMethod, message: &[u8], signature: &str, ) -> Result<(), DidError>

Verify a signature with the public key in method.

fn encrypt_for( &self, sender: &Did, recipient_public_key: &[u8], plaintext: &[u8], nonce: &[u8], associated_data: &[u8], ) -> Result<String, DidError>

Encrypt bytes from sender to the recipient public key.

fn decrypt_for( &self, recipient: &Did, sender_public_key: &[u8], nonce: &[u8], ciphertext_hex: &str, associated_data: &[u8], ) -> Result<Vec<u8>, DidError>

Decrypt bytes addressed to recipient from the sender public key.