Struct SigningKey 

pub struct SigningKey {
    ed: SigningKey,
    ml: PqdsaKeyPair,
    ml_seed: Zeroizing<[u8; 32]>,
    vk: VerifyingKey,
}

Hybrid signing key, the ‘private key’. Generate using SigningKey::generate.

Fields

ed: SigningKey

ml: PqdsaKeyPair

ml_seed: Zeroizing<[u8; 32]>

The 32-byte ML-DSA seed. Kept because PqdsaKeyPair does not retain it, yet we need it to encode the key compactly.

vk: VerifyingKey

Precomputed VerifyingKey. Constructing one parses the ML-DSA public key, so we do that once here and hand out shared references via verifying_key.

Implementations

impl SigningKey

pub fn generate() -> Result<Self, Opaque>

Generates a SigningKey. Expensive.

pub fn verifying_key(&self) -> &VerifyingKey

Returns the associated VerifyingKey. Cheap: it is precomputed at construction, and we return a shared reference rather than cloning — cloning an ML-DSA key calls EVP_PKEY_up_ref under a global lock, whereas verifying through & is lock-free and safe to share across threads.

pub fn encode(&self) -> SigningKeyBytes

Encodes for storage. Cheap.

pub fn ed25519_signing_key(&self) -> &SigningKey

The ed25519 component, for producing a classical EdDSA signature (alg: "EdDSA").

Used only for the backwards-compatible HHPP that pre-hybrid hubs verify with the constellation’s phc_jwt_key (= VerifyingKey::ed25519_bytes). This signs the raw JWS input.

fn from_parts(ed_seed: [u8; 32], ml_seed: [u8; 32]) -> Result<Self, Opaque>

Assembles a SigningKey from the two 32-byte seeds — the ed25519 secret key and the ML-DSA seed — deriving both component keys (so neither call site repeats that) and precomputing the VerifyingKey (parsing the ML-DSA public key once here, not on every verifying_key).

Trait Implementations

impl Debug for SigningKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Key for SigningKey

const ALG: &'static str = ALG

value for alg in the JWT header

fn check_alg(alg: &str) -> Result<(), Error>

Checks that alg equals Self::ALG.

impl SigningKey for SigningKey

type Signature = Vec<u8>

The result of signing, e.g. [u8; 32].

fn sign(&self, message: &[u8]) -> Result<Vec<u8>>

Returns a (non-base64-encoded) signature on s.

fn jwk(&self) -> Value

Returns JSON Web Key description of the associated public key.