Struct MlDsa65PrivateKey 

pub struct MlDsa65PrivateKey { /* private fields */ }

Available on crate feature mldsa65 only.

The 32-byte FIPS 204 seed plus the key expanded from it.

Only the seed is serialized (keystore, suiprivkey); the expanded key is kept so signing does not re-expand. Both zeroize on drop.

Implementations

impl MlDsa65PrivateKey

pub const LENGTH: usize = mldsa::SEED_LENGTH

The length of the seed in bytes.

pub fn new(seed: [u8; 32]) -> Self

pub fn scheme(&self) -> SignatureScheme

pub fn verifying_key(&self) -> MlDsa65VerifyingKey

pub fn public_key(&self) -> MlDsa65PublicKey

pub fn seed(&self) -> &[u8; 32]

pub fn generate<R>(rng: R) -> Self

where R: RngCore + CryptoRng,

pub fn from_suiprivkey(s: &str) -> Result<Self, SignatureError>

Available on crate feature bech32 only.

Decode a Bech32 suiprivkey string produced by the Sui CLI; the payload is 0x07 || seed.

pub fn to_suiprivkey(&self) -> Result<String, SignatureError>

Available on crate feature bech32 only.

Encode this private key as a Bech32 suiprivkey string.

pub fn from_base64(s: &str) -> Result<Self, SignatureError>

Decode a Base64 flag || seed string, the legacy keystore format used for entries of the Sui CLI’s sui.keystore file.

pub fn to_base64(&self) -> String

Encode this private key as a Base64 flag || seed string, the legacy keystore format used for entries of the Sui CLI’s sui.keystore file.

Trait Implementations

impl Clone for MlDsa65PrivateKey

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MlDsa65PrivateKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<MlDsa65PrivateKey> for SimpleKeypair

Available on (crate features ed25519 or mldsa65 or secp256k1 or secp256r1) and (crate features ed25519 or mldsa65 or secp256k1 or secp256r1 or zklogin) only.

fn from(private_key: MlDsa65PrivateKey) -> Self

Converts to this type from the input type.

impl RandomizedSigner<MlDsa65Signature> for MlDsa65PrivateKey

fn try_sign_with_rng( &self, rng: &mut impl CryptoRngCore, msg: &[u8], ) -> Result<MlDsa65Signature, SignatureError>

Hedged per FIPS 204: 32 bytes from rng enter the commitment, so repeated signatures differ. A weak rng only degrades to the deterministic variant’s security.

fn sign_with_rng(&self, rng: &mut impl CryptoRngCore, msg: &[u8]) -> S

Sign the given message and return a digital signature

impl RandomizedSigner<SimpleSignature> for MlDsa65PrivateKey

fn try_sign_with_rng( &self, rng: &mut impl CryptoRngCore, msg: &[u8], ) -> Result<SimpleSignature, SignatureError>

Attempt to sign the given message, returning a digital signature on success, or an error if something went wrong.

fn sign_with_rng(&self, rng: &mut impl CryptoRngCore, msg: &[u8]) -> S

Sign the given message and return a digital signature

impl RandomizedSigner<UserSignature> for MlDsa65PrivateKey

fn try_sign_with_rng( &self, rng: &mut impl CryptoRngCore, msg: &[u8], ) -> Result<UserSignature, SignatureError>

Attempt to sign the given message, returning a digital signature on success, or an error if something went wrong.

fn sign_with_rng(&self, rng: &mut impl CryptoRngCore, msg: &[u8]) -> S

Sign the given message and return a digital signature