Struct EcdsaSigningKey 

struct EcdsaSigningKey {
    key: Arc<EcdsaKeyPair>,
    scheme: SignatureScheme,
}

A SigningKey that uses exactly one TLS-level SignatureScheme and one ring-level signature::SigningAlgorithm.

Compare this to RsaSigningKey, which for a particular key is willing to sign with several algorithms. This is quite poor cryptography practice, but is necessary because a given RSA key is expected to work in TLS1.2 (PKCS#1 signatures) and TLS1.3 (PSS signatures) – nobody is willing to obtain certificates for different protocol versions.

Currently this is only implemented for ECDSA keys.

Fields

key: Arc<EcdsaKeyPair>

scheme: SignatureScheme

Implementations

impl EcdsaSigningKey

fn new( der: &PrivateKeyDer<'_>, scheme: SignatureScheme, sigalg: &'static EcdsaSigningAlgorithm, ) -> Result<Self, ()>

Make a new ECDSASigningKey from a DER encoding in PKCS#8 or SEC1 format, expecting a key usable with precisely the given signature scheme.

Trait Implementations

impl Debug for EcdsaSigningKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SigningKey for EcdsaSigningKey

fn choose_scheme(&self, offered: &[SignatureScheme]) -> Option<Box<dyn Signer>>

Choose a SignatureScheme from those offered.

fn public_key(&self) -> Option<SubjectPublicKeyInfoDer<'_>>

Get the RFC 5280-compliant SubjectPublicKeyInfo (SPKI) of this SigningKey if available.

fn algorithm(&self) -> SignatureAlgorithm

What kind of key we have.