ReadonlyPRIVATE_Private key (seed) length in bytes.
ReadonlyPUBLIC_Public key length in bytes.
ReadonlySIGNATURE_Signature length in bytes.
32 random bytes from options.rng (default secure). The reference's
ed25519_new_private_key_using draws through rand_core's fill_bytes,
so the generator's fillBytesPacked is used when it has one (the packed
stream of SeededRng), else fillBytes through rand's fillRandomBytes.
A generator's own error propagates unwrapped; a fillBytesPacked that is
present but not a function is rand's RandError InvalidGenerator.
Optionaloptions: RngOptions(publicKey, signature, message), the same order as ecdsa.verify and schnorr.verify.
Uses the reference's uncofactored verification equation (verify_strict):
false for a small-order key or R, a non-canonical R, an s ≥ L,
or a signature that does not verify. The key is decoded as the
reference's VerifyingKey::from_bytes decodes it (a non-canonical y is
reduced), and its .unwrap() on a key with no point is a panic.
The shape of the ed25519 family.