Struct StorageCommitment 

pub struct StorageCommitment {
    pub root: [u8; 32],
    pub key_count: u32,
    pub sender_peer_id: [u8; 32],
    pub sender_public_key: Vec<u8>,
    pub signature: Vec<u8>,
}

Signed storage commitment.

Piggybacked on neighbour-sync gossip. The signature commits to the Merkle root, key count, sender peer ID, and the sender’s ML-DSA-65 public key under DOMAIN_COMMITMENT.

Embedding the public key lets any receiver verify the signature without an external PeerId → MlDsaPublicKey lookup. Binding the public key in the signed payload prevents a key-swap attack where an adversary keeps the message body but re-signs it under a different key to claim a different identity. The peer-id binding (gate 2a in verify_commitment_bound_response) still ensures the embedded key belongs to the gossiping peer.

Wire size

One commitment is approximately 5.3 KiB:

• root: 32 B
• key_count: 4 B
• sender_peer_id: 32 B
• sender_public_key: 1952 B (ML-DSA-65 public key)
• signature: 3293 B (ML-DSA-65 signature)

Piggybacked on every NeighborSyncRequest/Response (~1 h interval per close-group peer at the neighbour-sync cooldown cadence). At a realistic close-group size of 8 with bidirectional sync, that’s roughly 8 × 2 × 5.3 KiB / hour = ~85 KiB/h of additional gossip per node. Negligible against typical chunk-transfer bandwidth.

Fields

root: [u8; 32]

Merkle root over the responder’s claimed keys.

key_count: u32

Number of leaves committed over.

sender_peer_id: [u8; 32]

Sender peer ID, bound to the signature.

sender_public_key: Vec<u8>

Sender’s ML-DSA-65 public key bytes (1952 bytes). Embedded so receivers can verify the signature without a separate pubkey directory. Bound by the signature.

signature: Vec<u8>

ML-DSA-65 signature over canonical commitment fields. 3293 bytes.

Trait Implementations

impl Clone for StorageCommitment

fn clone(&self) -> StorageCommitment

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StorageCommitment

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for StorageCommitment

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for StorageCommitment

impl PartialEq for StorageCommitment

fn eq(&self, other: &StorageCommitment) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for StorageCommitment

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for StorageCommitment