Production signer. Signs bytes with Ed25519 so an auditor can confirm a checkpoint wasn't
rewritten using only the published public key.
sign always uses the current key. verify accepts a signature from the current key or any
prior key passed in, so a checkpoint signed under the old key still verifies across a key
rotation.
Both work on raw bytes. Hex encoding of keys and stored signatures happens at the storage
boundary, not here.
Production signer. Signs bytes with Ed25519 so an auditor can confirm a checkpoint wasn't rewritten using only the published public key.
signalways uses the current key.verifyaccepts a signature from the current key or any prior key passed in, so a checkpoint signed under the old key still verifies across a key rotation.Both work on raw bytes. Hex encoding of keys and stored signatures happens at the storage boundary, not here.