#[non_exhaustive]pub enum AlgorithmHint {
Symmetric128,
Symmetric256,
Ed25519,
X25519,
P256,
P384,
Rsa2048,
Rsa3072,
Rsa4096,
Hmac,
Other,
}Expand description
Hint about which cryptographic algorithm a stored key is intended for.
This is advisory only. The vault does not verify that the registered bytes
are actually a valid key for the named algorithm — that is the caller’s
responsibility, and the KeyFetch implementation’s
responsibility for hardware-backed sources. The variant exists so that
audit-trail records and security monitors can label events meaningfully.
Variants (Non-exhaustive)§
This enum is marked as non-exhaustive
Symmetric128
128-bit symmetric key (e.g. AES-128 KEK).
Symmetric256
256-bit symmetric key (e.g. AES-256, ChaCha20).
Ed25519
Ed25519 signing key (32-byte seed).
X25519
X25519 ECDH private key (32 bytes).
P256
NIST P-256 ECDSA private key.
P384
NIST P-384 ECDSA private key.
Rsa2048
RSA-2048 private key (DER-encoded).
Rsa3072
RSA-3072 private key.
Rsa4096
RSA-4096 private key.
Hmac
HMAC key (length given by KeyMetadata::length).
Other
Other — caller supplies their own meaning out-of-band.
Trait Implementations§
Source§impl Clone for AlgorithmHint
impl Clone for AlgorithmHint
Source§fn clone(&self) -> AlgorithmHint
fn clone(&self) -> AlgorithmHint
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for AlgorithmHint
impl Debug for AlgorithmHint
Source§impl Hash for AlgorithmHint
impl Hash for AlgorithmHint
Source§impl PartialEq for AlgorithmHint
impl PartialEq for AlgorithmHint
Source§fn eq(&self, other: &AlgorithmHint) -> bool
fn eq(&self, other: &AlgorithmHint) -> bool
self and other values to be equal, and is used by ==.