Struct VerifyingKey 

pub struct VerifyingKey<C>
where
    C: EcdsaCurve + CurveArithmetic,
{
    pub(crate) inner: PublicKey<C>,
}

ECDSA public key used for verifying signatures. Generic over prime order elliptic curves (e.g. NIST P-curves).

Requires an elliptic_curve::CurveArithmetic impl on the curve.

Usage

The signature crate defines the following traits which are the primary API for verifying:

• Verifier: verify a message against a provided key and signature
• DigestVerifier: verify a message digest against a provided key and signature
• PrehashVerifier: verify the low-level raw output bytes of a message digest

See the p256 crate for examples of using this type with a concrete elliptic curve.

serde support

When the serde feature of this crate is enabled, it provides support for serializing and deserializing ECDSA signatures using the Serialize and Deserialize traits.

The serialization leverages the encoding used by the PublicKey type, which is a binary-oriented ASN.1 DER encoding.

Fields

inner: PublicKey<C>

Implementations

impl<C> VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, AffinePoint<C>: DecompressPoint<C> + FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize, SignatureSize<C>: ArraySize,

pub fn recover_from_msg( msg: &[u8], signature: &Signature<C>, recovery_id: RecoveryId, ) -> Result<Self>

where C: DigestAlgorithm,

Recover a VerifyingKey from the given message, signature, and RecoveryId.

The message is first hashed using this curve’s DigestAlgorithm.

pub fn recover_from_digest<D>( msg_digest: D, signature: &Signature<C>, recovery_id: RecoveryId, ) -> Result<Self>

where D: Digest,

Recover a VerifyingKey from the given message Digest, signature, and RecoveryId.

pub fn recover_from_prehash( prehash: &[u8], signature: &Signature<C>, recovery_id: RecoveryId, ) -> Result<Self>

Recover a VerifyingKey from the given prehash of a message, the signature over that prehashed message, and a RecoveryId.

Security Warning

The prehash argument must be the output of a secure digest function, e.g. Keccak256 or SHA-256.

Failure to use such a digest algorithm to compute prehash allows an attacker to solve for it in a system of linear equations that can cause the recovery function to output any public key the attacker wants.

impl<C> VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

pub fn from_sec1_bytes(bytes: &[u8]) -> Result<Self>

Initialize VerifyingKey from a SEC1-encoded public key.

pub fn from_affine(affine: AffinePoint<C>) -> Result<Self>

Initialize VerifyingKey from an affine point.

Returns an Error if the given affine point is the additive identity (a.k.a. point at infinity).

pub fn from_sec1_point(public_key: &Sec1Point<C>) -> Result<Self>

Initialize VerifyingKey from an Sec1Point.

pub fn to_sec1_point(&self, compress: bool) -> Sec1Point<C>

Serialize this VerifyingKey as a SEC1 Sec1Point, optionally applying point compression.

pub fn to_sec1_bytes(&self) -> Box<[u8]>

where C: PointCompression,

Convert this VerifyingKey into the Elliptic-Curve-Point-to-Octet-String encoding described in SEC 1: Elliptic Curve Cryptography (Version 2.0) section 2.3.3 (page 10).

http://www.secg.org/sec1-v2.pdf

pub fn as_affine(&self) -> &AffinePoint<C>

Borrow the inner AffinePoint for this public key.

Trait Implementations

impl<C> AsRef<<C as CurveArithmetic>::AffinePoint> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

fn as_ref(&self) -> &AffinePoint<C>

Converts this type into a shared reference of the (usually inferred) input type.

impl<C> AsRef<VerifyingKey<C>> for SigningKey<C>

where C: EcdsaCurve + CurveArithmetic, Scalar<C>: Invert<Output = CtOption<Scalar<C>>>, SignatureSize<C>: ArraySize,

Available on crate feature algorithm only.

fn as_ref(&self) -> &VerifyingKey<C>

Converts this type into a shared reference of the (usually inferred) input type.

impl<C> AssociatedAlgorithmIdentifier for VerifyingKey<C>

where C: EcdsaCurve + AssociatedOid + CurveArithmetic, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

Available on crate feature pkcs8 only.

const ALGORITHM_IDENTIFIER: AlgorithmIdentifier<ObjectIdentifier> = PublicKey<C>::ALGORITHM_IDENTIFIER

AlgorithmIdentifier for this structure.

type Params = ObjectIdentifier

Algorithm parameters.

impl<C> Clone for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic + Clone,

fn clone(&self) -> VerifyingKey<C>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<C> Debug for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic + Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<C, D> DigestVerifier<D, Signature<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, D: Digest + Update, SignatureSize<C>: ArraySize,

fn verify_digest<F: Fn(&mut D) -> Result<()>>( &self, f: F, signature: &Signature<C>, ) -> Result<()>

Verify the signature against the received Digest output, by updating it with the message.

impl<C, D> DigestVerifier<D, Signature<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, D: Digest + Update, SignatureSize<C>: ArraySize, MaxSize<C>: ArraySize, <FieldBytesSize<C> as Add>::Output: Add<MaxOverhead> + ArraySize,

Available on crate feature der only.

fn verify_digest<F: Fn(&mut D) -> Result<()>>( &self, f: F, signature: &Signature<C>, ) -> Result<()>

Verify the signature against the received Digest output, by updating it with the message.

impl<C> EncodePublicKey for VerifyingKey<C>

where C: EcdsaCurve + AssociatedOid + CurveArithmetic + PointCompression, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

Available on crate features alloc and pkcs8 only.

fn to_public_key_der(&self) -> Result<Document>

Serialize a Document containing a SPKI-encoded public key.

fn to_public_key_pem(&self, line_ending: LineEnding) -> Result<String, Error>

Serialize this public key as PEM-encoded SPKI with the given LineEnding.

fn write_public_key_der_file(&self, path: impl AsRef<Path>) -> Result<(), Error>

Write ASN.1 DER-encoded public key to the given path.

fn write_public_key_pem_file( &self, path: impl AsRef<Path>, line_ending: LineEnding, ) -> Result<(), Error>

Write ASN.1 PEM-encoded public key to the given path.

impl<C> From<&PublicKey<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic,

fn from(public_key: &PublicKey<C>) -> VerifyingKey<C>

Converts to this type from the input type.

impl<C> From<&SigningKey<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, Scalar<C>: Invert<Output = CtOption<Scalar<C>>>, SignatureSize<C>: ArraySize,

Available on crate feature algorithm only.

fn from(signing_key: &SigningKey<C>) -> VerifyingKey<C>

Converts to this type from the input type.

impl<C> From<&VerifyingKey<C>> for CompressedPoint<C>

where C: EcdsaCurve + CurveArithmetic + PointCompression, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

fn from(verifying_key: &VerifyingKey<C>) -> CompressedPoint<C>

Converts to this type from the input type.

impl<C> From<&VerifyingKey<C>> for Sec1Point<C>

where C: EcdsaCurve + CurveArithmetic + PointCompression, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

fn from(verifying_key: &VerifyingKey<C>) -> Sec1Point<C>

Converts to this type from the input type.

impl<C> From<&VerifyingKey<C>> for PublicKey<C>

where C: EcdsaCurve + CurveArithmetic,

fn from(verifying_key: &VerifyingKey<C>) -> PublicKey<C>

Converts to this type from the input type.

impl<C> From<PublicKey<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic,

fn from(public_key: PublicKey<C>) -> VerifyingKey<C>

Converts to this type from the input type.

impl<C> From<SigningKey<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, Scalar<C>: Invert<Output = CtOption<Scalar<C>>>, SignatureSize<C>: ArraySize,

Available on crate feature algorithm only.

fn from(signing_key: SigningKey<C>) -> VerifyingKey<C>

Converts to this type from the input type.

impl<C> From<VerifyingKey<C>> for CompressedPoint<C>

where C: EcdsaCurve + CurveArithmetic + PointCompression, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

fn from(verifying_key: VerifyingKey<C>) -> CompressedPoint<C>

Converts to this type from the input type.

impl<C> From<VerifyingKey<C>> for Sec1Point<C>

where C: EcdsaCurve + CurveArithmetic + PointCompression, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

fn from(verifying_key: VerifyingKey<C>) -> Sec1Point<C>

Converts to this type from the input type.

impl<C> From<VerifyingKey<C>> for PublicKey<C>

where C: EcdsaCurve + CurveArithmetic,

fn from(verifying_key: VerifyingKey<C>) -> PublicKey<C>

Converts to this type from the input type.

impl<C> FromStr for VerifyingKey<C>

where C: EcdsaCurve + AssociatedOid + CurveArithmetic + PointCompression, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

Available on crate feature pem only.

type Err = Error

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self>

Parses a string s to return a value of this type.

impl<C> MultipartVerifier<Signature<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic + DigestAlgorithm, SignatureSize<C>: ArraySize,

fn multipart_verify( &self, msg: &[&[u8]], signature: &Signature<C>, ) -> Result<()>

Equivalent of Verifier::verify() but the message is provided in non-contiguous byte slices.

impl<C> MultipartVerifier<Signature<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic + DigestAlgorithm, SignatureSize<C>: ArraySize, MaxSize<C>: ArraySize, <FieldBytesSize<C> as Add>::Output: Add<MaxOverhead> + ArraySize,

Available on crate feature der only.

fn multipart_verify( &self, msg: &[&[u8]], signature: &Signature<C>, ) -> Result<()>

Equivalent of Verifier::verify() but the message is provided in non-contiguous byte slices.

impl<C> Ord for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl<C> PartialEq for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic,

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<C> PartialOrd for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl<C> PrehashVerifier<Signature<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, SignatureSize<C>: ArraySize,

fn verify_prehash(&self, prehash: &[u8], signature: &Signature<C>) -> Result<()>

Use Self to verify that the provided signature for a given message prehash is authentic.

impl<C> PrehashVerifier<Signature<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, SignatureSize<C>: ArraySize, MaxSize<C>: ArraySize, <FieldBytesSize<C> as Add>::Output: Add<MaxOverhead> + ArraySize,

Available on crate feature der only.

fn verify_prehash(&self, prehash: &[u8], signature: &Signature<C>) -> Result<()>

Use Self to verify that the provided signature for a given message prehash is authentic.

impl<C> SignatureAlgorithmIdentifier for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize, Signature<C>: AssociatedAlgorithmIdentifier<Params = AnyRef<'static>>,

Available on crate feature pkcs8 only.

const SIGNATURE_ALGORITHM_IDENTIFIER: AlgorithmIdentifier<Self::Params> = Signature<C>::ALGORITHM_IDENTIFIER

AlgorithmIdentifier for the corresponding signature system.

type Params = AnyRef<'static>

Algorithm parameters.

impl<C> TryFrom<&[u8]> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

type Error = Error

The type returned in the event of a conversion error.

fn try_from(bytes: &[u8]) -> Result<Self>

Performs the conversion.

impl<C> TryFrom<SubjectPublicKeyInfo<AnyRef<'_>, BitStringRef<'_>>> for VerifyingKey<C>

where C: EcdsaCurve + AssociatedOid + CurveArithmetic + PointCompression, AffinePoint<C>: FromSec1Point<C> + ToSec1Point<C>, FieldBytesSize<C>: ModulusSize,

Available on crate feature pkcs8 only.

type Error = Error

The type returned in the event of a conversion error.

fn try_from(spki: SubjectPublicKeyInfoRef<'_>) -> Result<Self>

Performs the conversion.

impl<C> Verifier<Signature<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic + DigestAlgorithm, SignatureSize<C>: ArraySize,

fn verify(&self, msg: &[u8], signature: &Signature<C>) -> Result<()>

Use Self (e.g. a verifying key) to verify that the provided signature is authentic for a given message bytestring.

impl<C> Verifier<Signature<C>> for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic + DigestAlgorithm, SignatureSize<C>: ArraySize, MaxSize<C>: ArraySize, <FieldBytesSize<C> as Add>::Output: Add<MaxOverhead> + ArraySize,

Available on crate feature der only.

fn verify(&self, msg: &[u8], signature: &Signature<C>) -> Result<()>

Use Self (e.g. a verifying key) to verify that the provided signature is authentic for a given message bytestring.

impl<C> Copy for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic,

impl<C> Eq for VerifyingKey<C>

where C: EcdsaCurve + CurveArithmetic,