Struct FiduciaryCrypto 

pub struct FiduciaryCrypto { /* private fields */ }

Fiduciary cryptographic operations

Implementations

impl FiduciaryCrypto

pub fn new() -> Self

Create new fiduciary crypto system

pub fn generate_key(&mut self, key_id: String) -> Result<(), MlDsaError>

Generate new key

pub fn sign( &self, message: &[u8], key_id: Option<&str>, domain: String, purpose: String, ) -> Result<MlDsaSignature, MlDsaError>

Sign message using the internal MlDsaSigner for the given key.

NOTE: The signing context uses timestamp=0 and nonce=[0] so that a matching verify() call (which reconstructs the same deterministic context) will succeed. A future upgrade to FIPS-204 ML-DSA should embed the context in the signature.

pub fn verify( &self, message: &[u8], signature: &MlDsaSignature, key_id: Option<&str>, domain: String, purpose: String, ) -> Result<bool, MlDsaError>

Verify a signature produced by sign() using the internal MlDsaSigner.

pub fn hash_token(&self, token: &[u8]) -> Result<[u8; 32], MlDsaError>

Hash a token into a 32-byte digest using SHA3-512 (first 32 bytes).

pub fn list_keys(&self) -> Vec<String>

List all keys

pub fn get_audit_log(&self) -> Vec<AuditEntry>

Get audit log

pub fn sign_with_managed_context( &mut self, message: &[u8], key_id: Option<&str>, domain: String, purpose: String, ) -> Result<(MlDsaSignature, CryptoContext), MlDsaError>

Sign a message using a context managed by the internal ContextManager. Creates a fresh cryptographic context for the given domain/purpose and uses it to bind the signature.

pub fn should_rotate_key( &self, key_id: &str, signature_count: u64, key_age_seconds: u64, ) -> bool

Check if a key should be rotated according to the key manager’s policy.

pub fn check_quantum_readiness(&self) -> bool

Check quantum readiness of the compliance checker

pub fn context_manager(&self) -> &ContextManager

Get context manager reference for inspection