vta-sdk 0.18.13

SDK for Verifiable Trust Agents operating in Verifiable Trust Communities
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

//! Errors for the sealed transfer module.

use thiserror::Error;

/// Errors produced by sealed-transfer operations.
#[derive(Debug, Error)]
pub enum SealedTransferError {
    #[error("hpke error: {0}")]
    Hpke(String),

    #[error("cbor encode error: {0}")]
    CborEncode(String),

    #[error("cbor decode error: {0}")]
    CborDecode(String),

    #[error("base64 decode error: {0}")]
    Base64(String),

    #[error("armor parse error: {0}")]
    Armor(String),

    #[error("crc24 mismatch: expected {expected:06x}, got {got:06x}")]
    Crc24Mismatch { expected: u32, got: u32 },

    #[error("invalid wire format: {0}")]
    Wire(String),

    #[error("unsupported version: {0}")]
    UnsupportedVersion(u8),

    #[error("missing chunk(s) for bundle: have {have}, expected {expected}")]
    MissingChunks { have: usize, expected: usize },

    #[error("duplicate chunk index {0}")]
    DuplicateChunk(u16),

    #[error("chunk header mismatch: {0}")]
    ChunkMismatch(String),

    #[error("digest mismatch: expected {expected}, got {got}")]
    DigestMismatch { expected: String, got: String },

    #[error("nonce store: bundle_id already used")]
    NonceReplay,

    #[error("nonce store error: {0}")]
    NonceStore(String),

    #[error("missing producer assertion in chunk 0")]
    MissingAssertion,

    #[error("producer pubkey mismatch (chunk 0 declared {declared}, expected {expected})")]
    ProducerMismatch { declared: String, expected: String },

    #[error("assertion verification failed: {0}")]
    AssertionVerification(String),

    #[error(
        "producer uses PinnedOnly assertion but no expect_digest was supplied — \
         PinnedOnly has no in-band integrity anchor, so the OOB digest MUST be \
         pinned. Either use a DidSigned or Attested producer, or call \
         open_bundle with the digest communicated out-of-band."
    )]
    PinnedOnlyRequiresDigest,

    #[error("io error: {0}")]
    Io(#[from] std::io::Error),

    #[error("{0}")]
    Other(String),
}

impl SealedTransferError {
    pub(crate) fn hpke<E: std::fmt::Display>(e: E) -> Self {
        Self::Hpke(e.to_string())
    }
}