Struct ed25519_dalek::hazmat::ExpandedSecretKey

pub struct ExpandedSecretKey {
    pub scalar: Scalar,
    pub hash_prefix: [u8; 32],
}

Contains the secret scalar and domain separator used for generating signatures.

This is used internally for signing.

In the usual Ed25519 signing algorithm, scalar and hash_prefix are defined such that scalar || hash_prefix = H(sk) where sk is the signing key and H is SHA-512. WARNING: Deriving the values for these fields in any other way can lead to full key recovery, as documented in raw_sign and [raw_sign_prehashed].

Instances of this secret are automatically overwritten with zeroes when they fall out of scope.

Fields

scalar: Scalar

The secret scalar used for signing

hash_prefix: [u8; 32]

The domain separator used when hashing the message to generate the pseudorandom r value

Implementations

impl ExpandedSecretKey

pub fn from_bytes(bytes: &[u8; 64]) -> Self

Construct an ExpandedSecretKey from an array of 64 bytes. In the spec, the bytes are the output of a SHA-512 hash. This clamps the first 32 bytes and uses it as a scalar, and uses the second 32 bytes as a domain separator for hashing.

pub fn from_slice(bytes: &[u8]) -> Result<Self, SignatureError>

Construct an ExpandedSecretKey from a slice of 64 bytes.

Returns

A Result whose okay value is an EdDSA ExpandedSecretKey or whose error value is an SignatureError describing the error that occurred, namely that the given slice’s length is not 64.

Trait Implementations

impl Drop for ExpandedSecretKey

fn drop(&mut self)

Executes the destructor for this type.

impl From<&[u8; 32]> for ExpandedSecretKey

The spec-compliant way to define an expanded secret key. This computes SHA512(sk), clamps the first 32 bytes and uses it as a scalar, and uses the second 32 bytes as a domain separator for hashing.

fn from(secret_key: &SecretKey) -> ExpandedSecretKey

Converts to this type from the input type.

impl From<&ExpandedSecretKey> for VerifyingKey

fn from(expanded_secret_key: &ExpandedSecretKey) -> VerifyingKey

Derive this public key from its corresponding ExpandedSecretKey.

impl TryFrom<&[u8]> for ExpandedSecretKey

type Error = Error

The type returned in the event of a conversion error.

fn try_from(bytes: &[u8]) -> Result<Self, Self::Error>

Performs the conversion.

impl ZeroizeOnDrop for ExpandedSecretKey