Struct CryptographicLibrary 

pub struct CryptographicLibrary { /* private fields */ }

Cryptographic Library Manager

Implementations

impl CryptographicLibrary

pub fn new() -> Self

Create new cryptographic library

pub fn initialize(&mut self) -> Result<(), CryptographicError>

Initialize the library

pub fn generate_mldsa_key_pair( &mut self, key_id: String, security_level: SecurityLevel, ) -> Result<CryptographicResult<(Key, Key)>, CryptographicError>

Generate ML-DSA key pair

pub fn sign_data( &mut self, key_id: &str, data: &[u8], ) -> Result<CryptographicResult<Signature>, CryptographicError>

Sign data with ML-DSA

pub fn verify_signature( &mut self, key_id: &str, signature: &Signature, data: &[u8], ) -> Result<CryptographicResult<bool>, CryptographicError>

Verify signature with ML-DSA

pub fn encrypt_data( &mut self, key_id: &str, data: &[u8], additional_data: Option<&[u8]>, ) -> Result<CryptographicResult<EncryptedData>, CryptographicError>

Encrypt data with AES-256-GCM

pub fn encrypt_data_with_algorithm( &mut self, key_id: &str, data: &[u8], additional_data: Option<&[u8]>, algorithm: EncryptionAlgorithm, ) -> Result<CryptographicResult<EncryptedData>, CryptographicError>

Encrypt data with an explicitly chosen AEAD algorithm (AES-256-GCM, ChaCha20-Poly1305, or XChaCha20-Poly1305).

pub fn decrypt_data( &mut self, key_id: &str, encrypted_data: &EncryptedData, ) -> Result<CryptographicResult<Vec<u8>>, CryptographicError>

Decrypt data with AES-256-GCM

pub fn compute_hash( &mut self, data: &[u8], ) -> Result<CryptographicResult<HashResult>, CryptographicError>

Compute hash with SHA-256

pub fn compute_hash_blake3( &mut self, data: &[u8], ) -> Result<CryptographicResult<HashResult>, CryptographicError>

Compute hash with BLAKE3 (32-byte digest)

pub fn derive_hkdf( &self, ikm: &[u8], info: &[u8], ) -> Result<Vec<u8>, CryptographicError>

Derive key material using HKDF-SHA256 (RFC 5869).

pub fn issue_vc_mldsa( &self, claim_quins: &[NQuin], issuer_sk_key_id: &str, issuer_did_hash: u64, context: &CryptoContext, ) -> Result<CryptographicResult<MlDsaVcProof>, CryptographicError>

Issue an ML-DSA-signed Verifiable Credential via the fiduciary VC fragment layout.

pub fn verify_vc_mldsa( &self, proof: &MlDsaVcProof, claim_quins: &[NQuin], issuer_pk_key_id: &str, context: &CryptoContext, ) -> Result<CryptographicResult<bool>, CryptographicError>

Verify an ML-DSA-signed Verifiable Credential issued via Self::issue_vc_mldsa.

pub fn generate_zk_proof( &mut self, circuit_id: &str, witness: &[Vec<u8>], public_inputs: &[Vec<u8>], ) -> Result<CryptographicResult<Proof>, CryptographicError>

Generate zero-knowledge proof

pub fn verify_zk_proof( &mut self, proof: &Proof, public_inputs: &[Vec<u8>], ) -> Result<CryptographicResult<bool>, CryptographicError>

Verify zero-knowledge proof

pub fn get_security_metrics(&self) -> SecurityMetrics

Get security metrics

pub fn list_keys(&self) -> Vec<String>

List all keys

pub fn get_key_info(&self, key_id: &str) -> Option<KeyMetadata>

Get key information

pub fn rotate_key( &mut self, key_id: &str, ) -> Result<CryptographicResult<Key>, CryptographicError>

Rotate key