Struct SecretKey 

pub struct SecretKey { /* private fields */ }

P-256 (secp256r1) ECDSA secret key.

Supports signing and ECDH key agreement.

Signing

use crypto::p256::PrivateKey;

let key = PrivateKey::generate().unwrap();
let signature = key.sign(b"message").unwrap();

ECDH key exchange

use crypto::p256::PrivateKey;

let alice = PrivateKey::generate().unwrap();
let bob = PrivateKey::generate().unwrap();
let alice_shared = alice.ecdh(&bob.public_key()).unwrap();
let bob_shared = bob.ecdh(&alice.public_key()).unwrap();
assert_eq!(alice_shared, bob_shared);

Security

The raw shared secret from ecdh must not be used directly as an encryption key. Apply a KDF (e.g. HKDF) first.

Implementations

impl SecretKey

pub fn generate() -> Result<SecretKey, EllipticCurveError>

pub fn from_bytes(key: &[u8; 32]) -> Result<SecretKey, EllipticCurveError>

pub fn public_key(&self) -> PublicKey

pub fn sign(&self, message: &[u8]) -> Result<[u8; 64], EllipticCurveError>

pub fn ecdh( &self, peer_public: &PublicKey, ) -> Result<[u8; 32], EllipticCurveError>

pub fn to_bytes(&self) -> [u8; 32]

Trait Implementations

impl Clone for SecretKey

fn clone(&self) -> SecretKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SecretKey

impl Debug for SecretKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SecretKey

impl PartialEq for SecretKey

fn eq(&self, other: &SecretKey) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SecretKey