Struct CanonicalRevocationSet 

pub struct CanonicalRevocationSet { /* private fields */ }

The exact sorted revocation identifiers bound into an admission operation.

Implementations

impl CanonicalRevocationSet

pub fn canonicalize(ids: Vec<String>) -> Result<Self, SupplementalQuotaError>

Sort and bind a set of revocation identifiers by UTF-8 byte order.

This constructor proves canonicality and digest integrity only. It does not prove that the caller supplied a complete capability lineage.

pub fn from_canonical_parts( ids: Vec<String>, digest: String, ) -> Result<Self, SupplementalQuotaError>

Reconstruct a persisted or transported canonical set after checking its order, bounds, uniqueness, and digest. This does not prove semantic completeness of the identifiers.

pub fn ids(&self) -> &[String]

pub fn digest(&self) -> &str

pub fn verify_exact( &self, presented_ids: &[String], presented_digest: &str, ) -> Result<(), SupplementalQuotaError>

Recheck an exact capture-time presentation against the admission-bound set. The caller must present canonical order and the matching digest.

Trait Implementations

impl Clone for CanonicalRevocationSet

fn clone(&self) -> CanonicalRevocationSet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CanonicalRevocationSet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CanonicalRevocationSet

impl PartialEq for CanonicalRevocationSet

fn eq(&self, other: &CanonicalRevocationSet) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CanonicalRevocationSet