List of all items

Structs

• agent_cli::ConfigOverrides
• agent_cli::DoctorArgs
• agent_cli::ExplainArgs
• agent_cli::RunArgs
• bundle_cli::AddSlotArgs
• bundle_cli::AllowArgs
• bundle_cli::BackendArg
• bundle_cli::CreateArgs
• bundle_cli::DepositArgs
• bundle_cli::DepositKeyArgs
• bundle_cli::OpenArg
• bundle_cli::PromoteArgs
• bundle_cli::SetBackendArgs
• bundle_cli::ShowArgs
• bundle_cli::SlotArg
• bundle_cli::VerifyArgs
• core::actor::AuthenticatedActor
• core::actor::PresenterInfo
• core::actor::ProofSummary
• core::actor::TransportInfo
• core::audit::AuditLog
• core::backend::KeyMetadata
• core::backend::KvSecret
• core::backend::KvValue
• core::backend::NewKey
• core::backend::PublicKey
• core::backend::X509Bundle
• core::backend::X509CertRequest
• core::backend::X509Svid
• core::backend::spiffe::SpiffeConfig
• core::backend::spiffe::SpiffeVaultBackend
• core::backend::vault::VaultBackend
• core::capability::CapabilityError
• core::capability::CapabilityGap
• core::capability::CapabilitySummary
• core::catalog::loader::RawPolicy
• core::catalog::loader::RawRule
• core::catalog::loader::RawSubjectDefinition
• core::catalog::pdp::EffectiveGrant
• core::catalog::pdp::Explanation
• core::catalog::pdp::MatchedRule
• core::catalog::pdp::Pdp
• core::catalog::policy::Config
• core::catalog::policy::Grant
• core::catalog::policy::NameTable
• core::catalog::policy::ResolvedPolicy
• core::catalog::policy::ResolvedRule
• core::catalog::policy::Rule
• core::catalog::policy::SubjectDefinition
• core::catalog::schema::BackendRef
• core::catalog::schema::Catalog
• core::catalog::schema::KeyEntry
• core::catalog::schema::Labels
• core::catalog::schema::PinnedParties
• core::catalog::schema::SealingPin
• core::crypto_provider::BackendCryptoProvider
• core::crypto_provider::DecapsulateRequest
• core::crypto_provider::EncapsulateRequest
• core::crypto_provider::Encapsulation
• core::crypto_provider::Envelope
• core::crypto_provider::GenerateKey
• core::crypto_provider::GenerateSealingKey
• core::crypto_provider::ImportKey
• core::crypto_provider::LocalSoftwareProvider
• core::crypto_provider::ProviderAuditEvent
• core::crypto_provider::ProviderMetadata
• core::crypto_provider::SignRequest
• core::crypto_provider::UnwrapEnvelopeRequest
• core::crypto_provider::VerifyRequest
• core::crypto_provider::WrapEnvelopeRequest
• core::decision::DecisionRecord
• core::event::BrokerEvent
• core::event::EventSource
• core::manager::BackendManager
• core::manager::KeyProviderDescriptor
• core::manager::MlKemEnvelopeParts
• core::manager::ProviderDispatch
• core::manager::ProviderGate
• core::manager::Routed
• core::minter::ReservedClaim
• core::minter::SignNatsJwtSpec
• core::ml_kem_envelope::MlKemEnvelope
• core::peer::PeerInfo
• core::reconcile::CheckReport
• core::reconcile::KeyCheck
• core::reconcile::ReconcileSummary
• core::reload::ReloadInputs
• core::reload::ReloadOutcome
• core::revocation::JwtRevocationStore
• core::seal::MasterKek
• core::seal::MethodRegistry
• core::seal::SlotSpec
• core::seal::cred::CredBundle
• core::seal::cred::DepositContributor
• core::seal::cred::DepositMaterial
• core::seal::deposit::DepositReview
• core::seal::format::Argon2Params
• core::seal::format::B64Bytes
• core::seal::format::BundleBody
• core::seal::format::DepositRecord
• core::seal::format::DepositSealedCred
• core::seal::format::Header
• core::seal::format::KekWrap
• core::seal::format::ParsedBundle
• core::seal::format::SealedPayload
• core::seal::format::Slot
• core::seal::format::Suite
• core::seal::format::TpmPcrSelection
• core::seal::unlock::age_yubikey::AgeYubikeyMethod
• core::seal::unlock::bip39::Bip39Method
• core::seal::unlock::passphrase::PassphraseMethod
• core::seal::unlock::tpm::TpmMethod
• core::state::BrokerLimits
• core::state::BrokerState
• core::state::CachedJwks
• core::state::Generation
• core::state::ReadinessOutcome
• core::x25519_seal::SealedEnvelope
• doctor::CheckResult
• doctor::DoctorInputs
• doctor::DoctorReport
• doctor::DoctorSummary
• doctor::EnabledFeatures
• init::InitArgs
• service::broker::BrokerGrpc
• service::broker::BrokerIdentityRuntimeConfig
• service::broker::InvocationRuntimeConfig
• service::jwks::JwksHttpConfig
• service::jwks::JwksTlsConfig
• service::sds::EnvoySdsGrpc
• service::spiffe::SpiffeWorkloadGrpc
• transport::grpc_server::ServerConfig
• unlock::UnlockArgs

Enums

• bundle_cli::BundleCommand
• core::actor::ProofKind
• core::actor::SubjectResolutionError
• core::actor::TransportKind
• core::audit::ReloadActor
• core::backend::BackendError
• core::backend::NativeAlgorithm
• core::backend::SignOptions
• core::capability::CapabilityPolicy
• core::catalog::glob::GlobError
• core::catalog::glob::GlobSeg
• core::catalog::glob::KeyGlob
• core::catalog::loader::LoadError
• core::catalog::loader::LoadWarning
• core::catalog::pdp::AllowVia
• core::catalog::pdp::Decision
• core::catalog::pdp::DenyReason
• core::catalog::policy::ActionTerm
• core::catalog::policy::ActionTermError
• core::catalog::policy::Op
• core::catalog::policy::PrincipalSpec
• core::catalog::policy::SignatureKeyAlgorithm
• core::catalog::policy::SubjectMatch
• core::catalog::schema::BackendKind
• core::catalog::schema::Capability
• core::catalog::schema::Class
• core::catalog::schema::Engine
• core::catalog::schema::GenerateSpec
• core::catalog::schema::KeyAlgorithm
• core::catalog::schema::MissingPolicy
• core::crypto_provider::CryptoProviderId
• core::crypto_provider::CustodyMode
• core::crypto_provider::EnvelopeAlgorithm
• core::crypto_provider::KemAlgorithm
• core::crypto_provider::ProviderAuditOutcome
• core::crypto_provider::ProviderError
• core::crypto_provider::ProviderPolicy
• core::crypto_provider::SignatureAlgorithm
• core::decision::Outcome
• core::ed25519_sign::SignError
• core::event::BrokerEventKind
• core::manager::ManagerError
• core::manager::SealingFailure
• core::manager::SigningFailure
• core::minter::GenericMintError
• core::minter::NatsJtiMode
• core::minter::NatsJwtKind
• core::minter::SvidAlg
• core::ml_dsa_sign::MlDsaAlgorithm
• core::ml_dsa_sign::MlDsaError
• core::ml_kem_envelope::EnvelopeAlgorithm
• core::ml_kem_envelope::KemAlgorithm
• core::ml_kem_envelope::MlKemEnvelopeError
• core::reconcile::KeyStatus
• core::reconcile::ReconcileError
• core::reload::ReloadError
• core::seal::SealError
• core::seal::cred::BackendCred
• core::seal::deposit::DepositAction
• core::seal::deposit::DepositStatus
• core::seal::format::AeadId
• core::seal::format::ContainerId
• core::seal::format::MethodKind
• core::seal::format::MethodParams
• core::seal::unlock::UnlockError
• core::state::ReadinessState
• core::x25519_seal::SealError
• doctor::CheckStatus

Traits

• core::backend::Backend
• core::crypto_provider::CryptoProvider
• core::seal::unlock::UnlockMethod

Functions

• agent_cli::run_agent
• agent_cli::run_bundle
• agent_cli::run_doctor_command
• agent_cli::run_explain
• agent_cli::run_init
• bundle_cli::run
• core::actor::resolve_local_actor
• core::actor::resolve_unauthenticated_actor
• core::actor::resolve_unix_actor
• core::capability::enforce_capabilities
• core::catalog::loader::load
• core::crypto_provider::ml_dsa_signature_algorithm
• core::crypto_provider::select_provider
• core::decision::op_token
• core::ed25519_sign::public_from_seed
• core::ed25519_sign::public_from_slice
• core::ed25519_sign::seed_from_slice
• core::ed25519_sign::sign
• core::ed25519_sign::verify
• core::minter::jwt_svid_jwk_kid
• core::minter::jwt_svid_jwks
• core::minter::jwt_svid_jwks_from_public_key
• core::minter::jwt_svid_jwks_grace
• core::minter::jwt_svid_jwks_grace_window
• core::minter::mint_generic
• core::minter::mint_nats_account
• core::minter::mint_nats_curve
• core::minter::mint_nats_operator
• core::minter::mint_nats_server
• core::minter::mint_nats_signer
• core::minter::mint_nats_user
• core::minter::mint_svid
• core::minter::sign_nats_jwt
• core::ml_dsa_sign::public_from_seed
• core::ml_dsa_sign::sign
• core::ml_dsa_sign::verify
• core::ml_kem_envelope::decapsulate
• core::ml_kem_envelope::encapsulate
• core::ml_kem_envelope::envelope_from_parts
• core::ml_kem_envelope::open
• core::ml_kem_envelope::public_from_seed
• core::ml_kem_envelope::seal
• core::peer::detect_ssh_session
• core::peer::lineage_pids
• core::peer::read_proc_environ
• core::reload::check_reload
• core::reload::reload_generation
• core::seal::add_slot
• core::seal::aead::fresh_key
• core::seal::aead::fresh_nonce
• core::seal::aead::open
• core::seal::aead::seal
• core::seal::deposit::apply_authorized_deposits
• core::seal::deposit::contributor_public_token
• core::seal::deposit::create_signed_record
• core::seal::deposit::promote_deposits
• core::seal::deposit::public_key_from_token
• core::seal::deposit::public_key_token
• core::seal::deposit::review_deposits
• core::seal::format::decode
• core::seal::format::deposit_signing_bytes
• core::seal::format::encode
• core::seal::format::encode_with_deposits
• core::seal::open_bundle
• core::seal::remove_slot
• core::seal::reseal_payload
• core::seal::reseal_payload_bump_epoch
• core::seal::reseal_payload_bump_epoch_with_deposits
• core::seal::seal
• core::seal::verify_epoch_sidecar
• core::seal::write_epoch_sidecar
• core::tpm_device_present
• core::x25519_seal::envelope_from_parts
• core::x25519_seal::open
• core::x25519_seal::private_from_slice
• core::x25519_seal::public_from_private
• core::x25519_seal::public_from_slice
• core::x25519_seal::seal
• core::x25519_seal::seal_with_parts
• doctor::key_material_rows
• doctor::render_human
• doctor::render_json
• doctor::run_doctor
• init::run
• service::jwks::router
• service::jwks::serve
• transport::authorize
• transport::authorize_in_generation
• transport::broker_status
• transport::grpc_server::run
• transport::peer_from_request
• unlock::approle_login
• unlock::open_bundle_at_startup

Type Aliases

• core::catalog::policy::SubjectName

Constants

• DEFAULT_SOCKET_PATH
• core::catalog::pdp::ADMIN_EXPLAIN_TARGET
• core::catalog::pdp::ADMIN_RELOAD_TARGET
• core::catalog::pdp::ADMIN_REVOKE_TARGET
• core::catalog::pdp::ADMIN_WATCH_TARGET
• core::ed25519_sign::PUBLIC_KEY_LEN
• core::ed25519_sign::SEED_LEN
• core::ed25519_sign::SIGNATURE_LEN
• core::ml_dsa_sign::SEED_LEN
• core::ml_kem_envelope::NONCE_LEN
• core::ml_kem_envelope::SEED_LEN
• core::seal::aead::KEY_LEN
• core::seal::aead::NONCE_LEN
• core::seal::cred::CRED_SCHEMA_VERSION
• core::seal::format::FORMAT_VERSION
• core::seal::format::MAGIC
• core::state::DEFAULT_MAX_ENCRYPT_SIZE
• core::state::DEFAULT_MAX_PAYLOAD_SIZE
• core::state::DEFAULT_ROTATION_GRACE_VERSIONS
• core::state::DEFAULT_SVID_TTL_SECS
• core::state::INITIAL_GENERATION_ID
• core::state::JWKS_CACHE_TTL
• core::state::READINESS_CACHE_TTL
• core::x25519_seal::NONCE_LEN
• core::x25519_seal::PRIVATE_KEY_LEN
• core::x25519_seal::PUBLIC_KEY_LEN
• doctor::DOCTOR_SCHEMA_VERSION
• service::jwks::JWKS_PATH
• service::jwks::JWKS_WELL_KNOWN_PATH
• service::jwks::OIDC_DISCOVERY_PATH
• service::sds::CERTIFICATE_RESOURCE_LABEL
• service::sds::SECRET_TYPE_URL
• service::sds::VALIDATION_CONTEXT_RESOURCE_LABEL
• transport::grpc_server::DEFAULT_SOCKET_MODE