Struct TrustedKey 

pub struct TrustedKey {
    pub key_id: String,
    pub public_key: String,
}

An Ed25519 public key a host trusts for one provider.

public_key is lowercase hex rather than raw bytes for the reason ProvenanceAttestation::signature is: one encoding across the whole surface, and a key an operator can paste out of a provider’s README into a config file without a base64 detour.

Fields

key_id: String

The key_id an attestation must name to be checked against this key. Rotation is a new key_id, never a reused one (SPEC.md §6.5), so a store may hold several keys for one provider at once.

public_key: String

The raw public key, lowercase hex.

Implementations

impl TrustedKey

pub fn ed25519_hex( key_id: impl Into<String>, public_key: impl Into<String>, ) -> Option<Self>

A trusted Ed25519 key from a key_id and a 64-character lowercase-hex public key.

Returns None for anything that is not a well-formed Ed25519 public key encoding, so a typo in a config file fails where a person is reading the error rather than months later as an unexplained MalformedKey in an audit.

pub fn ed25519_bytes(key_id: impl Into<String>, public_key: &[u8; 32]) -> Self

A trusted Ed25519 key from raw public-key bytes — the form contextgraph_types::public_key_for returns.

pub fn fingerprint(&self) -> Option<String>

A sha256:<hex> fingerprint over the key bytes — the short string a host shows a person next to the consent prompt, so “I consent to this provider” and “I trust this key” are one decision (ADR 0016 §2).

Over the decoded bytes, so two spellings of the same key cannot fingerprint differently. A key whose hex does not decode has no fingerprint to show.

Trait Implementations

impl Clone for TrustedKey

fn clone(&self) -> TrustedKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustedKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TrustedKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TrustedKey

impl PartialEq for TrustedKey

fn eq(&self, other: &TrustedKey) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TrustedKey

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TrustedKey