Enum AttestationType 

pub enum AttestationType {
    None,
    SelfAttestation,
    Basic,
    BasicVerified,
}

The level of attestation the authenticator provided.

Variants

None

The authenticator explicitly provided no attestation ("fmt": "none"). The credential is still usable, but device provenance cannot be verified.

SelfAttestation

The attestation was signed by the same key used for authentication (self-attestation). Proves the credential is fresh but not the device model.

Basic

The attestation was signed by a separate attestation key with an x5c certificate chain present. The chain order has been verified (each cert is signed by the next), but the root has not been checked against a trust anchor because none were configured on crate::RelyingParty. Device provenance is structurally plausible but not cryptographically anchored.

BasicVerified

Same as Basic but the root certificate was additionally verified to be signed by one of the trust anchors configured via crate::RelyingParty::trust_anchors. Device provenance is cryptographically anchored to the configured CA set.

Trait Implementations

impl Debug for AttestationType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AttestationType

impl PartialEq for AttestationType

fn eq(&self, other: &AttestationType) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AttestationType