Struct SeedAuthority 

pub struct SeedAuthority { /* private fields */ }

Private seed material and pinned exact genesis, validated against package authority. Construction alone is not durable. The host must save before making a request.

Implementations

impl SeedAuthority

pub fn sign_authenticated_publication( &self, descriptor: &[u8], key: &LocalSharedStatePackageKey, ) -> Result<Publication>

Signs publication intent for a descriptor whose package the caller has already authenticated under key against this genesis.

impl SeedAuthority

pub fn generate( context: LocalSharedStatePackageContext, key: &LocalSharedStatePackageKey, setup: [u8; 32], ) -> Result<Self>

pub fn genesis(&self) -> &Genesis

pub fn protected_signing_seed(&self) -> &Secret

Borrows signing material only for authenticated device operations or protected storage. Never place these bytes in logs, task data or ordinary backups.

pub fn protected_recipient_key(&self) -> &Secret

Borrows recipient material only for authenticated device operations or protected storage. Never place these bytes in logs, task data or ordinary backups.

pub fn bearer(&self) -> &Secret

pub fn protected_storage_bytes(&self) -> Zeroizing<Vec<u8>>

Exact protected-storage representation, never SQLite or ordinary backups.

pub fn from_protected_storage( raw: &[u8], context: LocalSharedStatePackageContext, key: &LocalSharedStatePackageKey, ) -> Result<Self>

pub fn validate( &self, context: LocalSharedStatePackageContext, key: &LocalSharedStatePackageKey, ) -> Result<()>

Trait Implementations

impl Debug for SeedAuthority

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.