Struct clevis::ProvisionedData

pub struct ProvisionedData<const KEYBYTES: usize> {
    pub encryption_key: EncryptionKey<KEYBYTES>,
    pub signing_thumbprint: Box<str>,
    pub meta: KeyMeta,
}

Data that is produced as a result of the provisioning (key generation) step.

Fields

encryption_key: EncryptionKey<KEYBYTES>

Use this key to encrypt data

signing_thumbprint: Box<str>

The thumbprint used for signing. Future keys can be requested using this thumbprint.

meta: KeyMeta

Metadata required to regenerate an encryption key.

Both this metadata and a connection to the Tang server are needed to recover the key for use with encryption. This data can be stored in JSON form.

⚠️WARNING: Anybody who has access to both this metadata and the Tang server can recover the encryption keys. Treat this data with respect!