pub struct VerificationKey {
    pub(crate) A_bytes: VerificationKeyBytes,
    pub(crate) minus_A: EdwardsPoint,
}
Expand description

A valid Ed25519 verification key.

This is also called a public key by other implementations.

This type holds decompressed state used in signature verification; if the verification key may not be used immediately, it is probably better to use VerificationKeyBytes, which is a refinement type for [u8; 32].

§Consensus properties

Ed25519 checks are described in §5.4.5 of the Zcash protocol specification and in [ZIP 215]. The verification criteria for an (encoded) verification key A_bytes are:

  • A_bytes MUST be an encoding of a point A on the twisted Edwards form of Curve25519, and non-canonical encodings MUST be accepted;

Fields§

§A_bytes: VerificationKeyBytes§minus_A: EdwardsPoint

Implementations§

source§

impl VerificationKey

source

pub fn to_bytes(&self) -> [u8; 32]

Returns the byte encoding of the verification key.

This is the same as .into(), but does not require type inference.

source

pub fn as_bytes(&self) -> &[u8; 32]

View the byte encoding of the verification key.

source

pub fn verify(&self, signature: &Signature, msg: &[u8]) -> Result<(), Error>

Verify a purported signature on the given msg.

§Consensus properties

Ed25519 checks are described in §5.4.5 of the Zcash protocol specification and in ZIP215. The verification criteria for an (encoded) signature (R_bytes, s_bytes) with (encoded) verification key A_bytes are:

  • A_bytes and R_bytes MUST be encodings of points A and R respectively on the twisted Edwards form of Curve25519, and non-canonical encodings MUST be accepted;

  • s_bytes MUST represent an integer s less than l, the order of the prime-order subgroup of Curve25519;

  • the verification equation [8][s]B = [8]R + [8][k]A MUST be satisfied;

  • the alternate verification equation [s]B = R + [k]A, allowed by RFC 8032, MUST NOT be used.

Trait Implementations§

source§

impl AsRef<[u8]> for VerificationKey

source§

fn as_ref(&self) -> &[u8]

Converts this type into a shared reference of the (usually inferred) input type.
source§

impl Clone for VerificationKey

source§

fn clone(&self) -> VerificationKey

Returns a copy of the value. Read more
1.0.0 · source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
source§

impl Debug for VerificationKey

source§

fn fmt(&self, fmt: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter. Read more
source§

impl<'de> Deserialize<'de> for VerificationKey

source§

fn deserialize<__D>( __deserializer: __D ) -> Result<VerificationKey, <__D as Deserializer<'de>>::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
source§

impl<'a> From<&'a SigningKey> for VerificationKey

source§

fn from(sk: &'a SigningKey) -> VerificationKey

Converts to this type from the input type.
source§

impl Hash for VerificationKey

source§

fn hash<H>(&self, state: &mut H)
where H: Hasher,

Feeds this value into the given Hasher. Read more
1.3.0 · source§

fn hash_slice<H>(data: &[Self], state: &mut H)
where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher. Read more
source§

impl Ord for VerificationKey

source§

fn cmp(&self, other: &VerificationKey) -> Ordering

This method returns an Ordering between self and other. Read more
1.21.0 · source§

fn max(self, other: Self) -> Self
where Self: Sized,

Compares and returns the maximum of two values. Read more
1.21.0 · source§

fn min(self, other: Self) -> Self
where Self: Sized,

Compares and returns the minimum of two values. Read more
1.50.0 · source§

fn clamp(self, min: Self, max: Self) -> Self
where Self: Sized + PartialOrd,

Restrict a value to a certain interval. Read more
source§

impl PartialEq for VerificationKey

source§

fn eq(&self, other: &VerificationKey) -> bool

This method tests for self and other values to be equal, and is used by ==.
1.0.0 · source§

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
source§

impl PartialOrd for VerificationKey

source§

fn partial_cmp(&self, other: &VerificationKey) -> Option<Ordering>

This method returns an ordering between self and other values if one exists. Read more
1.0.0 · source§

fn lt(&self, other: &Rhs) -> bool

This method tests less than (for self and other) and is used by the < operator. Read more
1.0.0 · source§

fn le(&self, other: &Rhs) -> bool

This method tests less than or equal to (for self and other) and is used by the <= operator. Read more
1.0.0 · source§

fn gt(&self, other: &Rhs) -> bool

This method tests greater than (for self and other) and is used by the > operator. Read more
1.0.0 · source§

fn ge(&self, other: &Rhs) -> bool

This method tests greater than or equal to (for self and other) and is used by the >= operator. Read more
source§

impl Serialize for VerificationKey

source§

fn serialize<__S>( &self, __serializer: __S ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more
source§

impl TryFrom<&[u8]> for VerificationKey

§

type Error = Error

The type returned in the event of a conversion error.
source§

fn try_from(slice: &[u8]) -> Result<VerificationKey, Error>

Performs the conversion.
source§

impl TryFrom<[u8; 32]> for VerificationKey

§

type Error = Error

The type returned in the event of a conversion error.
source§

fn try_from( bytes: [u8; 32] ) -> Result<VerificationKey, <VerificationKey as TryFrom<[u8; 32]>>::Error>

Performs the conversion.
source§

impl TryFrom<VerificationKeyBytes> for VerificationKey

§

type Error = Error

The type returned in the event of a conversion error.
source§

fn try_from( bytes: VerificationKeyBytes ) -> Result<VerificationKey, <VerificationKey as TryFrom<VerificationKeyBytes>>::Error>

Performs the conversion.
source§

impl Copy for VerificationKey

source§

impl Eq for VerificationKey

source§

impl StructuralPartialEq for VerificationKey

Auto Trait Implementations§

Blanket Implementations§

source§

impl<T> Any for T
where T: 'static + ?Sized,

source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
source§

impl<T> Borrow<T> for T
where T: ?Sized,

source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
source§

impl<T> From<T> for T

source§

fn from(t: T) -> T

Returns the argument unchanged.

source§

impl<T, U> Into<U> for T
where U: From<T>,

source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

source§

impl<T> Same for T

§

type Output = T

Should always be Self
source§

impl<T> ToHex for T
where T: AsRef<[u8]>,

source§

fn encode_hex<U>(&self) -> U
where U: FromIterator<char>,

Encode the hex strict representing self into the result. Lower case letters are used (e.g. f9b4ca)
source§

fn encode_hex_upper<U>(&self) -> U
where U: FromIterator<char>,

Encode the hex strict representing self into the result. Upper case letters are used (e.g. F9B4CA)
source§

impl<T> ToOwned for T
where T: Clone,

§

type Owned = T

The resulting type after obtaining ownership.
source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

§

type Error = Infallible

The type returned in the event of a conversion error.
source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,