Struct KeySecurityAttributes 

pub struct KeySecurityAttributes {
    pub always_sensitive: bool,
    pub never_extractable: bool,
    pub sensitive: bool,
    pub extractable: bool,
    pub wrap_with_trusted_only: bool,
    pub usages: KeyUsages,
}

PKCS#11 key security attributes read from an HSM after key generation.

Records HSM-managed attribute state as evidence of key provenance and policy compliance in the ceremony transcript.

Fields

always_sensitive: bool

Key was ALWAYS sensitive: never had CKA_SENSITIVE=false since creation. This is the primary provenance indicator for PKCS#11 keys.

never_extractable: bool

Key was NEVER extractable: never had CKA_EXTRACTABLE=true since creation.

sensitive: bool

Current value of CKA_SENSITIVE.

extractable: bool

Current value of CKA_EXTRACTABLE.

wrap_with_trusted_only: bool

Key can only be wrapped by a key with CKA_TRUSTED=true (CKA_WRAP_WITH_TRUSTED).

usages: KeyUsages

What operations this key is permitted to perform (read from key object).

Trait Implementations

impl Clone for KeySecurityAttributes

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeySecurityAttributes

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for KeySecurityAttributes

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for KeySecurityAttributes

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.