pub struct AttesterKey {
pub key_id: String,
pub algorithm: String,
pub public_key: String,
}Expand description
A public key a provider publishes at the handshake, so a verifier can check
the attestations it goes on to
serve (SPEC.md §6.5.4).
A construction anchor, not a trust anchor. A key handed over by the party
being audited says nothing about who signed; it is enough to decide whether
an attestation is built the way §6.5 requires, which is the half F6–F9 make
mandatory. A deployment that cares who signed resolves
key_id in its own trust store and ignores this field.
It rides the handshake rather than the answer for a reason: a key republished with every response could be swapped by the same forgery that swapped the signature, and a wrong-key signature would then verify. Declared once, before any frame moves, it cannot be.
Fields§
§key_id: StringThe key’s id, matching ProvenanceAttestation::key_id. Rotation is a
new id, never a reused one.
algorithm: StringThe scheme this key is for, e.g.
ALGORITHM_ED25519.
public_key: StringThe raw public key, lowercase hex — the encoding
ProvenanceAttestation::signature already uses.
Trait Implementations§
Source§impl Clone for AttesterKey
impl Clone for AttesterKey
Source§fn clone(&self) -> AttesterKey
fn clone(&self) -> AttesterKey
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more