Struct ProvisionedKey 

#[non_exhaustive]
pub struct ProvisionedKey {
    pub principal: Principal,
    pub signing_key: SigningKey,
    pub secret_key: [u8; 64],
}

The output of a provision or rotate call — the only time cheers hands out a secret half.

secret_key is the 64-byte PASETO V4 seed || public layout. The caller (yubaba install flow) writes it to its config dir (mode 0600). Cheers retains nothing of it: the matching pubkey lives in SigningKey and a lost secret is unrecoverable — the recovery path is to rotate and accept a new keypair.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

principal: Principal

signing_key: SigningKey

secret_key: [u8; 64]

Trait Implementations

impl Clone for ProvisionedKey

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProvisionedKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.