Struct ic_identity_hsm::HardwareIdentity

pub struct HardwareIdentity { /* fields omitted */ }

An identity based on an HSM

Implementations

impl HardwareIdentity

pub fn new<P, PinFn>(
    pkcs11_lib_path: P,
    slot_index: usize,
    key_id: &str,
    pin_fn: PinFn
) -> Result<HardwareIdentity, HardwareIdentityError> where
    P: AsRef<Path>,
    PinFn: FnOnce() -> Result<String, String>, 

Create an identity using a specific key on an HSM. The filename will be something like /usr/local/lib/opensc-pkcs11.s The key_id must refer to a ECDSA key with parameters prime256v1 (secp256r1) The key must already have been created. You can create one with pkcs11-tool: $ pkcs11-tool -k –slot $SLOT -d $KEY_ID –key-type EC:prime256v1 –pin $PIN

Trait Implementations

impl Drop for HardwareIdentity

fn drop(&mut self)

Executes the destructor for this type.

impl Identity for HardwareIdentity

fn sender(&self) -> Result<Principal, String>

Returns a sender, ie. the Principal ID that is used to sign a request. Only one sender can be used per request.

fn sign(&self, msg: &[u8]) -> Result<Signature, String>

Sign a blob, the concatenation of the domain separator & request ID, creating the sender signature.