Struct VerifyingKey 

pub struct VerifyingKey {
    pub(crate) compressed: CompressedEdwardsY,
    pub(crate) point: EdwardsPoint,
}

Ed448 public key as defined in [RFC8032 § 5.2.5]

Fields

compressed: CompressedEdwardsY

point: EdwardsPoint

Implementations

impl VerifyingKey

pub fn to_bytes(&self) -> [u8; 57]

Convert this verifying key into byte slice

pub fn as_bytes(&self) -> &[u8; 57]

View this public key as a byte slice.

pub fn from_bytes(bytes: &[u8; 57]) -> Result<Self, Error>

Construct a VerifyingKey from a slice of bytes.

pub fn with_context<'k, 'v>( &'k self, context: &'v [u8], ) -> Context<'k, 'v, Self>

Create a context for this verifying key that can be used with signature::DigestVerifier.

pub fn to_edwards(self) -> EdwardsPoint

Return the verifying key in Edwards form.

pub fn verify_raw( &self, signature: &Signature, message: &[u8], ) -> Result<(), Error>

Verifies a signature on a message.

This is the “Ed448” mode of RFC 8032 (no pre-hashing, a context is provided). This is equivalent to verify_ctx() with an empty (zero-length) context.

Note: this function is not constant-time; it assumes that the public key and signature value are public data.

pub fn verify_ctx( self, sig: &Signature, ctx: &[u8], message: &[u8], ) -> Result<(), Error>

Verifies a signature on a message (with context).

This is the “Ed448” mode of RFC 8032 (no pre-hashing, a context is provided). The context string MUST have length at most 255 bytes. Return value is Ok on a valid signature, Error otherwise.

Note: this function is not constant-time; it assumes that the public key and signature value are public data.

pub fn verify_prehashed<D>( self, sig: &Signature, ctx: Option<&[u8]>, prehashed_message: D, ) -> Result<(), Error>

where D: PreHash,

Verifies a signature on a hashed message.

This is the “Ed448ph” mode of RFC 8032 (message is pre-hashed), also known as “HashEdDSA on Curve448”. The hashed message prehashed_message is provided (presumably, that hash value was obtained with SHAKE256 and a 64-byte output; the caller does the hashing itself). A context string ctx is also provided; it MUST have length at most 255 bytes. Return value is Ok on a valid signature, Error otherwise.

Note: this function is not constant-time; it assumes that the public key and signature value are public data.

fn verify_inner( &self, signature: &Signature, phflag: u8, ctx: &[u8], m: &[u8], ) -> Result<(), Error>

Trait Implementations

impl AsRef<[u8]> for VerifyingKey

fn as_ref(&self) -> &[u8]

Converts this type into a shared reference of the (usually inferred) input type.

impl Clone for VerifyingKey

fn clone(&self) -> VerifyingKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyingKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VerifyingKey

fn default() -> VerifyingKey

Returns the “default value” for a type.

impl<D> DigestVerifier<D, Signature> for VerifyingKey

where D: Default + FixedOutput + HashMarker + Update,

fn verify_digest<F: Fn(&mut D) -> Result<(), Error>>( &self, f: F, signature: &Signature, ) -> Result<(), Error>

Verify the signature against the received Digest output, by updating it with the message.

impl DynSignatureAlgorithmIdentifier for VerifyingKey

Available on crate features alloc and pkcs8 only.

fn signature_algorithm_identifier(&self) -> Result<AlgorithmIdentifierOwned>

AlgorithmIdentifier for the corresponding signature system.

impl EncodePublicKey for VerifyingKey

Available on crate features alloc and pkcs8 only.

fn to_public_key_der(&self) -> Result<Document>

Serialize a Document containing a SPKI-encoded public key.

fn to_public_key_pem(&self, line_ending: LineEnding) -> Result<String, Error>

Serialize this public key as PEM-encoded SPKI with the given LineEnding.

fn write_public_key_der_file(&self, path: impl AsRef<Path>) -> Result<(), Error>

Write ASN.1 DER-encoded public key to the given path.

fn write_public_key_pem_file( &self, path: impl AsRef<Path>, line_ending: LineEnding, ) -> Result<(), Error>

Write ASN.1 PEM-encoded public key to the given path.

impl From<VerifyingKey> for PublicKeyBytes

Available on crate feature pkcs8 only.

fn from(key: VerifyingKey) -> Self

Converts to this type from the input type.

impl Hash for VerifyingKey

fn hash<H: Hasher>(&self, state: &mut H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for VerifyingKey

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl TryFrom<&PublicKeyBytes> for VerifyingKey

Available on crate feature pkcs8 only.

type Error = Error

The type returned in the event of a conversion error.

fn try_from(value: &PublicKeyBytes) -> Result<Self, Self::Error>

Performs the conversion.

impl TryFrom<PublicKeyBytes> for VerifyingKey

Available on crate feature pkcs8 only.

type Error = Error

The type returned in the event of a conversion error.

fn try_from(value: PublicKeyBytes) -> Result<Self, Self::Error>

Performs the conversion.

impl TryFrom<SubjectPublicKeyInfo<AnyRef<'_>, BitStringRef<'_>>> for VerifyingKey

Available on crate feature pkcs8 only.

type Error = Error

The type returned in the event of a conversion error.

fn try_from(public_key: SubjectPublicKeyInfoRef<'_>) -> Result<Self>

Performs the conversion.

impl Verifier<Signature> for VerifyingKey

fn verify(&self, msg: &[u8], signature: &Signature) -> Result<(), Error>

Use Self (e.g. a verifying key) to verify that the provided signature is authentic for a given message bytestring.

impl Copy for VerifyingKey

impl Eq for VerifyingKey