Enum SignatureAlgorithm 

#[non_exhaustive]
pub enum SignatureAlgorithm {
    DsaSha1,
    DsaSha256,
    HmacSha1,
    HmacSha224,
    HmacSha256,
    HmacSha384,
    HmacSha512,
    RsaSha1,
    RsaSha224,
    RsaSha256,
    RsaSha384,
    RsaSha512,
    RsaPssSha1,
    RsaPssSha224,
    RsaPssSha256,
    RsaPssSha384,
    RsaPssSha512,
    RsaPssSha3_224,
    RsaPssSha3_256,
    RsaPssSha3_384,
    RsaPssSha3_512,
    RsaPss(RsaPssParameters),
    EcdsaSha1,
    EcdsaSha224,
    EcdsaSha256,
    EcdsaSha384,
    EcdsaSha512,
    EcdsaSha3_224,
    EcdsaSha3_256,
    EcdsaSha3_384,
    EcdsaSha3_512,
    Ed25519,
    Ed25519Ctx,
    Ed25519Ph,
    Ed448,
    Ed448Ph,
    PostQuantum(PqAlgorithm),
}

Signature algorithms supported for signing and verification.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

DsaSha1

DSA with SHA-1. Legacy algorithm disabled for signing by default.

DsaSha256

DSA with SHA-256 as defined by XMLDSig 1.1.

HmacSha1

HMAC with SHA-1. Legacy algorithm disabled for signing by default.

HmacSha224

HMAC with SHA-224.

HmacSha256

HMAC with SHA-256.

HmacSha384

HMAC with SHA-384.

HmacSha512

HMAC with SHA-512.

RsaSha1

RSA with SHA-1. Legacy algorithm disabled for signing by default.

RsaSha224

RSA with SHA-224.

RsaSha256

RSA with SHA-256 (most common in SAML).

RsaSha384

RSA with SHA-384.

RsaSha512

RSA with SHA-512.

RsaPssSha1

RSA-PSS with SHA1, matching MGF1 and digest-sized salt.

RsaPssSha224

RSA-PSS with SHA224, matching MGF1 and digest-sized salt.

RsaPssSha256

RSA-PSS with SHA256, matching MGF1 and digest-sized salt.

RsaPssSha384

RSA-PSS with SHA384, matching MGF1 and digest-sized salt.

RsaPssSha512

RSA-PSS with SHA512, matching MGF1 and digest-sized salt.

RsaPssSha3_224

RSA-PSS with SHA3-224, matching MGF1 and digest-sized salt.

RsaPssSha3_256

RSA-PSS with SHA3-256, matching MGF1 and digest-sized salt.

RsaPssSha3_384

RSA-PSS with SHA3-384, matching MGF1 and digest-sized salt.

RsaPssSha3_512

RSA-PSS with SHA3-512, matching MGF1 and digest-sized salt.

RsaPss(RsaPssParameters)

Parameterized RSA-PSS under RFC 9231 section 2.3.9.

EcdsaSha1

ECDSA with SHA-1; the key selects the elliptic curve.

EcdsaSha224

ECDSA with SHA-224; the key selects the elliptic curve.

EcdsaSha256

ECDSA with SHA-256; the key selects the elliptic curve.

EcdsaSha384

ECDSA with SHA-384; the key selects the elliptic curve.

EcdsaSha512

ECDSA with SHA-512; the key selects the elliptic curve.

EcdsaSha3_224

ECDSA with SHA3-224; the key selects the elliptic curve.

EcdsaSha3_256

ECDSA with SHA3-256; the key selects the elliptic curve.

EcdsaSha3_384

ECDSA with SHA3-384; the key selects the elliptic curve.

EcdsaSha3_512

ECDSA with SHA3-512; the key selects the elliptic curve.

Ed25519

Pure Ed25519 (RFC 8032), without external prehash or context.

Ed25519Ctx

Ed25519 with RFC 8032 domain-separation context, without prehash.

Ed25519Ph

Ed25519ph with SHA-512 prehash and RFC 8032 domain separation.

Ed448

Pure Ed448 (RFC 8032), with an optional domain-separation context.

Ed448Ph

Ed448ph with SHAKE256 prehash and RFC 8032 domain separation.

PostQuantum(PqAlgorithm)

Experimental post-quantum method; compile capability does not grant permission.

Implementations

impl SignatureAlgorithm

pub const ALL: [Self; 45]

Every signature algorithm recognized by this release.

pub fn rsa_pss_parameters(self) -> Option<RsaPssParameters>

Effective PSS parameters for fixed and parameterized method identifiers.

pub fn uses_legacy_pss_hash(self) -> bool

Whether either PSS hash needs explicit historical-algorithm permission.

pub const fn ecdsa_digest(self) -> Option<DigestAlgorithm>

Digest selected by an ECDSA method, independently of its key’s curve.

pub const fn hmac_output_bits(self) -> Option<usize>

Return the full HMAC output width for HMAC algorithms.

pub fn from_uri(uri: &str) -> Option<Self>

Parse from an XML algorithm URI.

pub fn uri(self) -> &'static str

Return the XML namespace URI.

pub fn signing_allowed(self) -> bool

Whether this algorithm is allowed for signing (not just verification).

pub const fn requires_explicit_permission(self) -> bool

Whether this optional historical method requires explicit policy permission.

pub const fn is_rsa(self) -> bool

Whether this method uses an RSA key and PKCS#1 signature encoding.

Trait Implementations

impl Clone for SignatureAlgorithm

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SignatureAlgorithm

impl Debug for SignatureAlgorithm

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SignatureAlgorithm

impl Hash for SignatureAlgorithm

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for SignatureAlgorithm

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SignatureAlgorithm