A subpacket that has passed basic safety checks (does not guarantee it's critical-safe; use CriticalSubpacket for that)

Create a safe subpacket from a payload and criticality flag Basic validation that the payload is well-formed

Extract the payload from a safe subpacket

Extract the underlying SigSubPacket from a safe subpacket

A subpacket that is guaranteed to be both well-formed AND can be safely marked critical Used to prevent accidentally marking non-critical-safe types as critical

Create a critical subpacket only if the payload type allows it RFC9580 section 5.2.3.5: only certain subpacket types can be marked critical

RFC9580 §5.2.3.5 lists which subpacket types can be marked critical

Controls how text payload is normalized for CanonicalTextSig.

RFC 9580 §5.2.1.2 requires only CRLF normalization for type 0x01 signatures. Trailing-whitespace stripping is only mandated by §7 (Cleartext Signature Framework). Use CleartextCompat for GnuPG-compatible behaviour when producing cleartext-armored signatures; use RFC9580Strict for inline text signatures.

Staged signature builder that enforces completion order

Usage pattern: builder <- sigBuilderInit SigTypeBinary RSA SHA256 builder' <- addHashedSubs hashedList builder finalPayload <- buildSigV4 sigMPIs (addUnhashedSubs unhashedList builder')

Legal subpackets encoded by placement and signature-version constraints. This expands compile-time legality beyond bare hashed/unhashed staging.

Normalization mode for CanonicalTextSig payloads. Defaults to CleartextCompat for backward compatibility.

Build a v4 signature from a completed builder and MPI values

Build a v6 signature from a completed builder and MPI values

Initialize a builder for a v4 signature Starts with no subpackets and must call addHashedSubs and addUnhashedSubs

Initialize a builder for a v4 signature with compile-time RFC/hash policy enforcement.

Initialize a v4 builder from runtime RFC/hash inputs with policy validation and witness promotion at the API boundary.

Initialize a builder for a v6 signature

Initialize a builder for a v6 signature with compile-time RFC/hash policy enforcement.

Initialize a v6 builder from runtime RFC/hash inputs with policy validation and witness promotion at the API boundary.

Add hashed subpackets to a builder Must be called before addUnhashedSubs

Add unhashed subpackets to a builder Must be called after addHashedSubs

Wrapper GADT for algorithm-specific private keys Encodes the algorithm at the type level to ensure type-safe key/builder matching

Type alias for readability: hashed subpacket list

Type alias for readability: unhashed subpacket list

Prepend a subpacket to a hashed subpacket list

Construct a single hashed subpacket into a hashed subpacket list

Construct a single unhashed subpacket into an unhashed subpacket list

Convert a list to a hashed subpacket list Used to bridge between list-based and phantom-typed APIs

Convert a list to an unhashed subpacket list Used to bridge between list-based and phantom-typed APIs