| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is needed to encode the OpenSSH private key format from the
SigningKey returned by generate_signing_key(). Otherwise, we would
have to re-parse the PKCS#8 DER (which was already encoded when
generating the key) and extract the private key from there.
private_key() is currently used only in the --generate path, so not
all backends necessarily need to implement it. So it has a default
implementation that fails with Unspecified.
Also, Curve25519SeedBin and EcPrivateKeyBin from aws-lc-rs need no
extra Zeroizing wrapper, since the underlying Buffer zeroizes on
drop (verified against aws-lc-rs 1.18.0).
|