Enum VerifyError 

pub enum VerifyError {
    UnknownSchemaVersion {
        found: u16,
        expected: u16,
    },
    KeyIdMismatch {
        preimage: String,
        expected: String,
    },
    BadSignature,
    MalformedSignature,
}

Errors raised by verify and the rotation-envelope verifier.

Variants are deliberately distinct so audit code can log why a signature failed (unknown schema vs key-id mismatch vs bad signature) without having to parse a free-form string.

Variants

UnknownSchemaVersion

Preimage carried a schema_version this build does not understand. Per ADR 0010 §1b this is a hard, fail-closed error.

Fields

found: u16

Version observed in the preimage.

expected: u16

Version this build understands.

KeyIdMismatch

The key_id in the preimage did not match the verifying public key’s expected fingerprint. Defends against signature substitution across keys.

Fields

preimage: String

key_id declared in the preimage.

expected: String

key_id the verifier was configured with.

BadSignature

Ed25519 signature verification failed (wrong key, wrong bytes, truncated signature, …). Catch-all for cryptographic failure.

MalformedSignature

Signature bytes could not be parsed as Ed25519 (e.g. wrong length).

Trait Implementations

impl Clone for VerifyError

fn clone(&self) -> VerifyError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for VerifyError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for VerifyError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for VerifyError

fn eq(&self, other: &VerifyError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for VerifyError

impl StructuralPartialEq for VerifyError