pub struct KeyPair { /* private fields */ }Expand description
An RSA key pair, used for signing.
Implementations§
source§impl KeyPair
impl KeyPair
sourcepub fn generate(size: KeySize) -> Result<Self, Unspecified>
pub fn generate(size: KeySize) -> Result<Self, Unspecified>
Generate a RSA KeyPair of the specified key-strength.
§Errors
Unspecified: Any key generation failure.
sourcepub fn from_pkcs8(pkcs8: &[u8]) -> Result<Self, KeyRejected>
pub fn from_pkcs8(pkcs8: &[u8]) -> Result<Self, KeyRejected>
Parses an unencrypted PKCS#8 DER encoded RSA private key.
Keys can be generated using KeyPair::generate.
§ring-compatibility
aws-lc-rs does not impose the same limitations that ring does for RSA keys. Thus signatures may be generated by keys that are not accepted by ring. In particular:
- RSA private keys ranging between 2048-bit keys and 8192-bit keys are supported.
- The public exponent does not have a required minimum size.
§Errors
error::KeyRejected if bytes do not encode an RSA private key or if the key is otherwise
not acceptable.
sourcepub fn from_der(input: &[u8]) -> Result<Self, KeyRejected>
pub fn from_der(input: &[u8]) -> Result<Self, KeyRejected>
sourcepub fn sign(
&self,
padding_alg: &'static dyn RsaEncoding,
_rng: &dyn SecureRandom,
msg: &[u8],
signature: &mut [u8],
) -> Result<(), Unspecified>
pub fn sign( &self, padding_alg: &'static dyn RsaEncoding, _rng: &dyn SecureRandom, msg: &[u8], signature: &mut [u8], ) -> Result<(), Unspecified>
Sign msg. msg is digested using the digest algorithm from
padding_alg and the digest is then padded using the padding algorithm
from padding_alg. The signature it written into signature;
signature’s length must be exactly the length returned by
public_modulus_len().
Many other crypto libraries have signing functions that takes a
precomputed digest as input, instead of the message to digest. This
function does not take a precomputed digest; instead, sign
calculates the digest itself.
§ring Compatibility
Our implementation ignores the SecureRandom parameter.
§Errors
error::Unspecified on error.
With “fips” feature enabled, errors if digest length is greater than u32::MAX.
sourcepub fn public_modulus_len(&self) -> usize
pub fn public_modulus_len(&self) -> usize
Returns the length in bytes of the key pair’s public modulus.
A signature has the same length as the public modulus.