Struct KeyCertStatement 

pub struct KeyCertStatement {
    pub agora_governance_key_cert: u32,
    pub key: PublicKeyHex,
    pub purpose: CertPurpose,
    pub from_seq: u64,
    pub prev_hash: Option<Sha256Hex>,
    pub last_trusted: Option<TrustedHead>,
}

What a root key signs: key holds the chain from from_seq.

Every field is always serialized, null when absent, and unknown fields are refused: the bytes a verifier rebuilds are exactly the bytes the Steward read before touching the device.

Fields

agora_governance_key_cert: u32

Always KEY_CERT_VERSION

key: PublicKeyHex

The online signing key being certified

purpose: CertPurpose

from_seq: u64

The first chain_seq key signs

prev_hash: Option<Sha256Hex>

The rotation entry’s own prev_hash, so a certificate is good at one position of one chain. null for CertPurpose::Genesis.

last_trusted: Option<TrustedHead>

CertPurpose::Compromise only: the last entry trusted under the outgoing key. The root says where the window opens, not the online key that may be the thief’s.

Implementations

impl KeyCertStatement

pub fn genesis(key: PublicKeyHex) -> Self

key is the key the chain started under

pub fn routine( key: PublicKeyHex, seq: u64, prev_hash: Option<Sha256Hex>, ) -> Self

key takes over after the routine rotation appended at seq, whose prev_hash is prev_hash

pub fn compromise( key: PublicKeyHex, seq: u64, prev_hash: Option<Sha256Hex>, last_trusted: TrustedHead, ) -> Self

key signs the compromise declaration appended at seq and everything after it

pub fn signed_bytes(&self) -> Vec<u8>

The exact bytes a root key signs

Trait Implementations

impl Clone for KeyCertStatement

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyCertStatement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for KeyCertStatement

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for KeyCertStatement

impl PartialEq for KeyCertStatement

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for KeyCertStatement

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for KeyCertStatement