Struct DeviceKey 

pub struct DeviceKey(/* private fields */);

The P-256 public key the Attestation Gateway attested, from the token’s cnf.jwk.

Implementations

impl DeviceKey

pub const fn new(key: VerifyingKey) -> Self

Wraps a P-256 verifying key.

pub const fn verifying_key(&self) -> &VerifyingKey

The underlying P-256 verifying key.

pub fn thumbprint(&self) -> String

The RFC 7638 JWK thumbprint (base64url SHA-256): a stable identifier for this device key, for example to rate limit on.

pub fn verify( &self, platform: Platform, client_data_hash: &[u8; 32], signature: &[u8], ) -> Result<(), PlatformSignatureError>

Verifies a platform signature over client_data_hash, which is SHA-256(signature base).

Android keys sign the hash directly. App Attest signs SHA-256(authenticatorData ‖ clientDataHash) and wraps the signature in a CBOR assertion. The rpId and counter inside authenticatorData are not checked: App Attest keys are app-scoped, the Attestation Gateway verified the app when it attested this key, and freshness comes from created.

Errors

Returns a PlatformSignatureError when the signature is malformed or does not verify.

Trait Implementations

impl Clone for DeviceKey

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DeviceKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for DeviceKey

impl PartialEq for DeviceKey

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for DeviceKey