Struct HybridSigningConfig

Source

pub struct HybridSigningConfig {
    pub crypto_floor: KernelCryptoFloor,
    pub pq_signing_seed: Option<[u8; 32]>,
}

Expand description

Boot-time configuration for the kernel-side hybrid signing path.

Mirrors the wire form of chio_policy::CryptoFloor (allow_classical, allow_hybrid, pq_required) and pairs the floor with the operator’s 32-byte ML-DSA-65 keygen seed. Construct one of these from a parsed HushSpec policy plus the boot-loaded PQ seed and pass it to ChioKernel::with_hybrid_signing_backend with a verified self-quote port to obtain a Box<dyn SigningBackend> for hybrid receipt signing.

A separate input from KernelConfig: the hybrid fields are not folded into KernelConfig, so its wire form is unaffected.

Fields§

§crypto_floor: KernelCryptoFloor

Minimum cryptographic posture enforced on receipts, capability tokens, and compliance certificates. Default KernelCryptoFloor::AllowClassical.

§pq_signing_seed: Option<[u8; 32]>

Optional 32-byte ML-DSA-65 keygen seed. Required when crypto_floor is KernelCryptoFloor::AllowHybrid or KernelCryptoFloor::PqRequired; ignored under KernelCryptoFloor::AllowClassical.

HybridSigningConfig

Struct HybridSigningConfig Copy item path

Fields§

Trait Implementations§

impl Clone for HybridSigningConfig

fn clone(&self) -> HybridSigningConfig

fn clone_from(&mut self, source: &Self)

impl Debug for HybridSigningConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

impl Default for HybridSigningConfig

fn default() -> HybridSigningConfig

Auto Trait Implementations§

impl Freeze for HybridSigningConfig

impl RefUnwindSafe for HybridSigningConfig

impl Send for HybridSigningConfig

impl Sync for HybridSigningConfig

impl Unpin for HybridSigningConfig

impl UnsafeUnpin for HybridSigningConfig

impl UnwindSafe for HybridSigningConfig

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<'a, T, E> AsTaggedExplicit<'a, E> for Twhere T: 'a,

fn explicit(self, class: Class, tag: u32) -> TaggedParser<'a, Explicit, Self, E>

impl<'a, T, E> AsTaggedImplicit<'a, E> for Twhere T: 'a,

fn implicit( self, class: Class, constructed: bool, tag: u32, ) -> TaggedParser<'a, Implicit, Self, E>

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<T> CloneToUninit for Twhere T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

impl<T> DynClone for Twhere T: Clone,

fn __clone_box(&self, _: Private) -> *mut ()

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self>

fn in_current_span(self) -> Instrumented<Self>

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> IntoEither for T

fn into_either(self, into_left: bool) -> Either<Self, Self>

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>where F: FnOnce(&Self) -> bool,

impl<T> PolicyExt for Twhere T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>where T: Sized + Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>where T: Sized + Policy<B, E>, P: Policy<B, E>,

impl<T> Same for T

type Output = T

impl<T> ToOwned for Twhere T: Clone,

type Owned = T

fn to_owned(&self) -> T

fn clone_into(&self, target: &mut T)

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

type Error = Infallible

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

impl<V, T> VZip<V> for Twhere V: MultiLane<T>,

fn vzip(self) -> V

impl<T> WithSubscriber for T

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>where S: Into<Dispatch>,

fn with_current_subscriber(self) -> WithDispatch<Self>

Struct HybridSigningConfig

impl<T> Any for T
where T: 'static + ?Sized,

impl<'a, T, E> AsTaggedExplicit<'a, E> for T
where T: 'a,

impl<'a, T, E> AsTaggedImplicit<'a, E> for T
where T: 'a,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<T> CloneToUninit for T
where T: Clone,

impl<T> DynClone for T
where T: Clone,

impl<T, U> Into<U> for T
where U: From<T>,

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

impl<T> PolicyExt for T
where T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

impl<T> ToOwned for T
where T: Clone,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,