Enum MethodParams 

pub enum MethodParams {
    AgeYubikey {
        recipient: String,
    },
    Bip39 {
        salt: B64Bytes,
        argon2: Argon2Params,
    },
    Passphrase {
        salt: B64Bytes,
        argon2: Argon2Params,
    },
    Tpm {
        public: B64Bytes,
        private: B64Bytes,
        pcrs: TpmPcrSelection,
        name_alg: String,
        srk_template: String,
    },
}

Non-secret, method-specific public material (§2.4).

Variants

AgeYubikey

age recipient string (public).

Fields

recipient: String

The age recipient the KEK is wrapped to.

Bip39

Argon2id salt + params for a phrase-derived slot key.

Fields

salt: B64Bytes

16-byte KDF salt (base64-nopad).

argon2: Argon2Params

Argon2id parameters.

Passphrase

Salt and KDF params for a file-sourced passphrase slot key.

Fields

salt: B64Bytes

16-byte KDF salt (base64-nopad).

argon2: Argon2Params

Argon2id parameters.

Tpm

TPM2 sealed-object slot (feature unlock-tpm, §3.1 / §9).

All fields are non-secret and safe at rest. The 32-byte slot key that AES-256-GCM-wraps the master KEK (in KekWrap) is sealed inside the TPM keyed-hash object; it never leaves the chip except transiently during TPM2_Unseal under the matching PCR policy. private is encrypted to the SRK and is meaningless off the originating TPM.

Fields

public: B64Bytes

Marshalled TPM2B_PUBLIC of the sealed object (the keyed-hash public area), base64-nopad.

private: B64Bytes

Marshalled TPM2B_PRIVATE of the sealed object: SRK-encrypted, base64-nopad. Safe at rest; only the originating TPM can load it.

pcrs: TpmPcrSelection

The PCR selection the seal is bound to (PolicyPCR).

name_alg: String

Object name hash algorithm, e.g. "sha256".

srk_template: String

Identifier of the fixed, deterministic SRK template used as the parent, so recovery regenerates the identical primary key (e.g. "ecc-p256-srk-v1").

Trait Implementations

impl Clone for MethodParams

fn clone(&self) -> MethodParams

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MethodParams

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for MethodParams

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for MethodParams

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.