Enum KernelSigningBackendError 

pub enum KernelSigningBackendError {
    HybridFloorRequiresPqKey {
        floor: &'static str,
    },
    PqKeyImportFailed {
        reason: String,
    },
}

Errors raised when the kernel boot path constructs a receipt-signing backend from a configured crypto_floor and provisioned key material.

These errors fire at signer construction time, before any receipt is signed. The kernel boot path MUST surface the error and refuse to start. Threat model row pq_signature_downgrade is the surface this guards.

Variants

HybridFloorRequiresPqKey

crypto_floor=allow_hybrid or crypto_floor=pq_required was configured but no ML-DSA-65 key was provisioned. Fail-closed.

Fields

floor: &'static str

The floor that triggered the rejection.

PqKeyImportFailed

The provisioned PQ key material could not be loaded into a signing backend.

Fields

reason: String

The reason the key import failed.

Trait Implementations

impl Debug for KernelSigningBackendError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for KernelSigningBackendError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for KernelSigningBackendError

impl Error for KernelSigningBackendError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<KernelSigningBackendError> for KernelBootError

fn from(source: KernelSigningBackendError) -> Self

Converts to this type from the input type.

impl PartialEq for KernelSigningBackendError

fn eq(&self, other: &KernelSigningBackendError) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KernelSigningBackendError