ReadonlypublicThe signing key, embedded in the signature.
ReadonlynamespaceThe application namespace the signature was made in.
ReadonlyreservedThe reserved field (empty in every signature OpenSSH writes).
ReadonlyhashThe hash the message was digested with.
ReadonlysignatureThe algorithm name inside the signature blob: the key's wire name for
Ed25519, DSA and ECDSA keys, and rsa-sha2-256 / rsa-sha2-512 (the
hash the RSA signature was made with) for RSA keys.
ReadonlysignatureRaw signature bytes specific to the algorithm:
ed25519 → 64-byte concatenation r || s
ecdsa → fixed-width r || s (64 / 96 / 132 bytes; the SSH mpint
sign bytes are stripped on parse and re-added on serialize)
dsa → 40-byte r || s
rsa → the RSASSA-PKCS1-v1_5 signature as stored
StaticfromParses the PEM-armoured sshsig text, as ssh_key::SshSig::from_pem.
StaticfromParses the binary sshsig blob (the base64 payload of the text form).
The PEM-armoured text, wrapped at 70 columns like OpenSSH.
The binary sshsig blob, byte for byte as OpenSSH writes it.
StaticsignedBuild the message that gets signed/verified: the signed-data blob
defined by PROTOCOL.sshsig §3.1.
"SSHSIG" magic
string namespace
string reserved
string hash_algorithm
string H(message) ← *digest*, not the raw message
StaticfromConstruct from already-decoded parts (used by the sign path).
signatureAlgorithm defaults to the key's wire name; for an RSA key it
defaults to rsa-sha2-512, the algorithm ssh-key's RSA signer names.
OptionalsignatureAlgorithm: stringFixed-string mirror of the reference's summarizer for TAG_SSH_TEXT_SIGNATURE.
SHA-256 digest of canonical PEM bytes — kept for parity with key types.
An OpenSSH
sshsigsignature (-----BEGIN SSH SIGNATURE-----), version 1.