pub fn ed25519_pubkey_raw_from_spki_der(
spki: &[u8],
) -> Result<[u8; 32], OpenSshParseError>Expand description
Extract the 32-byte raw ed25519 pubkey from a SubjectPublicKeyInfo DER
blob (RFC 8410, what rcgen::PublicKeyData::der_bytes() returns). Validates
the fixed 12-byte SPKI prefix so callers reject non-ed25519 CSRs cleanly
instead of silently slicing.