Enum SshKeyType 

pub enum SshKeyType {
    Ed25519,
    Rsa,
}

Supported SSH key types for vault unlock.

Only key types that produce deterministic signatures are supported, because the KEK is derived from the raw signature bytes — a different signature on each unlock would produce a different KEK and fail to unwrap the enrollment blob.

• Ed25519: deterministic by specification (RFC 8032).
• RSA (PKCS#1 v1.5): deterministic — the padding scheme uses no randomness. The ssh-agent-client-rs crate hard-codes RSA sign requests to SHA-512, which is stable.

Excluded:

• ECDSA: non-deterministic — uses a random k value per signature.
• RSA-PSS: non-deterministic — uses a random salt per signature.

Variants

Ed25519

Rsa

Implementations

impl SshKeyType

pub fn from_wire_name(name: &str) -> Result<Self, AuthError>

Parse from the SSH wire format key type string.

Errors

Returns AuthError::UnsupportedKeyType for key types with non-deterministic signatures (ECDSA, RSA-PSS) or unrecognized type strings.

pub fn from_algorithm(algo: &Algorithm) -> Result<Self, AuthError>

Convert from ssh_key::Algorithm, accepting only deterministic types.

Only Ed25519 (RFC 8032, deterministic) and RSA PKCS#1 v1.5 (deterministic padding) are accepted. ECDSA (random k) and RSA-PSS (random salt) are rejected because their non-deterministic signatures would produce different KEKs on each unlock attempt.

Errors

Returns AuthError::UnsupportedKeyType for non-deterministic key types.

pub fn wire_name(&self) -> &'static str

SSH wire format key type string.

Trait Implementations

impl Clone for SshKeyType

fn clone(&self) -> SshKeyType

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SshKeyType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SshKeyType

fn eq(&self, other: &SshKeyType) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for SshKeyType

impl Eq for SshKeyType

impl StructuralPartialEq for SshKeyType