Enum SigningKey 

pub enum SigningKey {
    Ed25519(Box<SigningKey>),
    MlDsa44((Box<MLDSA44SigningKey>, Hash)),
    MlDsa65((Box<MLDSA65SigningKey>, Hash)),
    MlDsa87((Box<MLDSA87SigningKey>, Hash)),
}

Private key for creating digital signatures supporting multiple algorithms.

This enum provides a unified interface for signing messages across different cryptographic algorithms, supporting both classical and post-quantum schemes.

Security Considerations

• Keep private keys secure: Never transmit or store signing keys in plaintext
• Use appropriate key sizes: ML-DSA keys are larger but provide post-quantum security
• Match key types: Ensure the signing key matches the expected verifying key type

Examples

use zoe_wire_protocol::{KeyPair, SigningKey, VerifyingKey};
use rand::rngs::OsRng;

// Generate a keypair
let keypair = KeyPair::generate(&mut OsRng);

// Sign a message
let message = b"Important message";
let signature = keypair.sign(message);

// Verify with corresponding public key
let verifying_key = keypair.public_key();
let is_valid = verifying_key.verify(message, &signature)?;
assert!(is_valid);

Variants

Ed25519(Box<SigningKey>)

Ed25519 private key (32 bytes)

MlDsa44((Box<MLDSA44SigningKey>, Hash))

ML-DSA-44 private key - for TLS certificates

MlDsa65((Box<MLDSA65SigningKey>, Hash))

ML-DSA-65 private key - for message signatures

MlDsa87((Box<MLDSA87SigningKey>, Hash))

ML-DSA-87 private key - for high security

Implementations

impl SigningKey

pub fn sign(&self, message: &[u8]) -> Signature

Sign a message with this signing key

Trait Implementations

impl Clone for SigningKey

fn clone(&self) -> SigningKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SigningKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SigningKey

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.