Struct KeyRing 

pub struct KeyRing { /* private fields */ }

Public keys, by the identity the evidence names.

The smallest thing that resolves a SigningKeyId to a PublicKey, and deliberately no more: whether keys arrive from a config file, a KMS, or a transparency log is a deployment question, and this type is what all three end up producing.

Implementations

impl KeyRing

pub fn new() -> Self

An empty ring, which trusts nothing.

pub fn with(self, id: impl Into<String>, key: PublicKey) -> Self

Trust key under the identity id.

pub fn trusting(self, key: &LocalKey) -> Self

Trust the public half of a local key under its own identity.

pub fn get(&self, id: &SigningKeyId) -> Option<&PublicKey>

The public key for an identity, if the ring holds one.

pub fn len(&self) -> usize

How many keys are trusted.

pub fn is_empty(&self) -> bool

Whether the ring trusts nothing.

pub fn verify(&self, evidence: &Evidence) -> Result<(), VerifyError>

Check evidence against whichever key it names.

Errors

VerifyError::UnknownKey if the ring does not hold the named key — distinct from VerifyError::Invalid, because an incomplete key ring is the auditor’s problem and a bad signature is the evidence’s.

Trait Implementations

impl Clone for KeyRing

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyRing

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyRing

fn default() -> Self

Returns the “default value” for a type.

impl Eq for KeyRing

impl PartialEq for KeyRing

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KeyRing