Enum CapabilityCryptoFloor 

pub enum CapabilityCryptoFloor {
    AllowClassical,
    AllowHybrid,
    PqRequired,
}

Minimum cryptographic posture enforced by the capability validator.

Mirrors the wire form of chio_policy::CryptoFloor and the kernel-side KernelCryptoFloor. Defined locally in chio-core-types so the portable verifier (no_std builds, edge runtimes) can branch on the configured floor without taking a dependency on chio-policy or chio-kernel. Operators that load a HushSpec policy translate the parsed floor into this enum at the kernel boundary.

Variants

AllowClassical

Accept classical-only Ed25519/P-256/P-384 envelopes. Default.

AllowHybrid

Accept either classical-only or hybrid classical-plus-ML-DSA-65 envelopes.

PqRequired

Reject classical-only envelopes; require hybrid signing on every signed capability token.

Implementations

impl CapabilityCryptoFloor

pub fn allows_hybrid(&self) -> bool

Whether the floor permits hybrid envelopes on the wire.

pub fn allows_classical_only(&self) -> bool

Whether the floor permits classical-only envelopes on the wire.

pub fn as_str(&self) -> &'static str

Stable wire-format identifier for diagnostics.

Trait Implementations

impl Clone for CapabilityCryptoFloor

fn clone(&self) -> CapabilityCryptoFloor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for CapabilityCryptoFloor

impl Debug for CapabilityCryptoFloor

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for CapabilityCryptoFloor

fn default() -> CapabilityCryptoFloor

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CapabilityCryptoFloor

fn deserialize<__D>( __deserializer: __D, ) -> Result<CapabilityCryptoFloor, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CapabilityCryptoFloor

impl Hash for CapabilityCryptoFloor

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for CapabilityCryptoFloor

fn eq(&self, other: &CapabilityCryptoFloor) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CapabilityCryptoFloor

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CapabilityCryptoFloor