GenerateKey generates a new public/private key pair suitable for use with Sign and Open.

Open verifies a signed message produced by Sign and appends the message to out, which must not overlap the signed message.

Sign appends a signed copy of message to out, which will be Overhead bytes longer than the original and must not overlap it.

Overhead is the number of bytes of overhead when signing a message.