pub struct VerificationKey { /* private fields */ }
Expand description

A valid Ed25519 verification key.

This is also called a public key by other implementations.

This type holds decompressed state used in signature verification; if the verification key may not be used immediately, it is probably better to use VerificationKeyBytes, which is a refinement type for [u8; 32].

Zcash-specific consensus properties

Ed25519 checks are described in §5.4.5 of the Zcash protocol specification and in [ZIP 215]. The verification criteria for an (encoded) verification key A_bytes are:

  • A_bytes MUST be an encoding of a point A on the twisted Edwards form of Curve25519, and non-canonical encodings MUST be accepted;

Implementations

Verify a purported signature on the given msg.

Zcash-specific consensus properties

Ed25519 checks are described in §5.4.5 of the Zcash protocol specification and in ZIP215. The verification criteria for an (encoded) signature (R_bytes, s_bytes) with (encoded) verification key A_bytes are:

  • A_bytes and R_bytes MUST be encodings of points A and R respectively on the twisted Edwards form of Curve25519, and non-canonical encodings MUST be accepted;

  • s_bytes MUST represent an integer s less than l, the order of the prime-order subgroup of Curve25519;

  • the verification equation [8][s]B = [8]R + [8][k]A MUST be satisfied;

  • the alternate verification equation [s]B = R + [k]A, allowed by RFC 8032, MUST NOT be used.

Trait Implementations

Converts this type into a shared reference of the (usually inferred) input type.
Returns a copy of the value. Read more
Performs copy-assignment from source. Read more
Formats the value using the given formatter. Read more
Deserialize this value from the given Serde deserializer. Read more
Converts to this type from the input type.
Converts to this type from the input type.
Converts to this type from the input type.
Serialize this value into the given Serde serializer. Read more
The type returned in the event of a conversion error.
Performs the conversion.
The type returned in the event of a conversion error.
Performs the conversion.
The type returned in the event of a conversion error.
Performs the conversion.

Auto Trait Implementations

Blanket Implementations

Gets the TypeId of self. Read more
Immutably borrows from an owned value. Read more
Mutably borrows from an owned value. Read more

Returns the argument unchanged.

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Should always be Self
Encode the hex strict representing self into the result. Lower case letters are used (e.g. f9b4ca) Read more
Encode the hex strict representing self into the result. Upper case letters are used (e.g. F9B4CA) Read more
The resulting type after obtaining ownership.
Creates owned data from borrowed data, usually by cloning. Read more
Uses borrowed data to replace owned data, usually by cloning. Read more
The type returned in the event of a conversion error.
Performs the conversion.
The type returned in the event of a conversion error.
Performs the conversion.