Enum KernelCryptoFloor 

pub enum KernelCryptoFloor {
    AllowClassical,
    AllowHybrid,
    PqRequired,
}

Minimum cryptographic posture enforced by the kernel-side signing path.

The textual encoding (allow_classical, allow_hybrid, pq_required) matches the chio_policy::CryptoFloor wire form so an operator can lift a parsed policy floor directly without re-encoding it.

Variants

AllowClassical

Accept classical-only Ed25519/P-256/P-384 envelopes. Default.

AllowHybrid

Accept hybrid classical-plus-ML-DSA-65 envelopes. Requires a PQ key.

PqRequired

Reject classical-only envelopes; require hybrid signing on every signed artifact. Requires a PQ key.

Implementations

impl KernelCryptoFloor

pub fn allows_hybrid(&self) -> bool

Whether the floor permits hybrid envelopes on the wire.

pub fn requires_pq(&self) -> bool

Whether the floor mandates hybrid envelopes (rejects classical-only).

pub fn allows_classical_only(&self) -> bool

Whether the floor permits classical-only envelopes on the wire.

pub fn as_str(&self) -> &'static str

Stable wire-format identifier for diagnostics.

Trait Implementations

impl Clone for KernelCryptoFloor

fn clone(&self) -> KernelCryptoFloor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for KernelCryptoFloor

impl Debug for KernelCryptoFloor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KernelCryptoFloor

fn default() -> KernelCryptoFloor

Returns the “default value” for a type.

impl Eq for KernelCryptoFloor

impl Hash for KernelCryptoFloor

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for KernelCryptoFloor

fn eq(&self, other: &KernelCryptoFloor) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KernelCryptoFloor