Struct VerificationKey 

pub struct VerificationKey {
    pub algorithm: SignatureAlgorithm,
    pub public_key_bytes: Vec<u8>,
    pub certificate_der: Option<Vec<u8>>,
    pub name: Option<String>,
}

A public verification key available to key resolvers.

Fields

algorithm: SignatureAlgorithm

Signature algorithm this key is configured to verify.

public_key_bytes: Vec<u8>

DER-encoded SubjectPublicKeyInfo bytes.

certificate_der: Option<Vec<u8>>

DER certificate from which the key was extracted, when applicable.

name: Option<String>

Name used to register this key for <KeyName> resolution.

Trait Implementations

impl Clone for VerificationKey

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerificationKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for VerificationKey

impl PartialEq for VerificationKey

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for VerificationKey

impl VerifyingKey for VerificationKey

fn verification_spki( &self, algorithm: SignatureAlgorithm, ) -> Result<Option<&[u8]>, DsigError>

Borrow public SPKI for native verification, validating method/key binding. Opaque external keys may return None; native providers then fail closed.

fn verify_with_context( &self, algorithm: SignatureAlgorithm, context: &SignatureContext, data: &[u8], signature: &[u8], ) -> Result<bool, DsigError>

Verify with validated domain separation, rejecting unsupported contexts.

fn validate_policy(&self, policy: &VerificationPolicy) -> Result<(), DsigError>

Validate this key against the operation’s immutable trust policy.

fn validate_signature_value( &self, algorithm: SignatureAlgorithm, signature_value: &[u8], ) -> Result<bool, DsigError>

Check that signature_value has the wire framing required by the declared algorithm and this key before provider dispatch.

fn validate_signature_value_with_policy( &self, policy: &VerificationPolicy, algorithm: SignatureAlgorithm, signature_value: &[u8], ) -> Result<bool, DsigError>

Validate wire framing under the operation’s immutable compatibility policy.

fn verify( &self, algorithm: SignatureAlgorithm, signed_data: &[u8], signature_value: &[u8], ) -> Result<bool, DsigError>

Verify signature_value over signed_data with the declared algorithm.

fn verify_with_policy( &self, policy: &VerificationPolicy, algorithm: SignatureAlgorithm, signed_data: &[u8], signature_value: &[u8], ) -> Result<bool, DsigError>

Verify after applying operation-scoped compatibility semantics.

fn verify_candidate_keys( &self, _verify: &mut dyn FnMut(&dyn VerifyingKey) -> Result<bool, DsigError>, ) -> Result<Option<bool>, DsigError>

Composite resolvers may try individual keys through the selected engine. None identifies a leaf handle. Wrappers must preserve per-key policy when forwarding the visitor; no public/private key copy is required.

fn ecdsa_encoding(&self) -> EcdsaSignatureValueEncoding

Wire encoding already selected by the immutable verification policy.