Struct HostSide 

pub struct HostSide<R: Read, W: Write> { /* private fields */ }

Host side of the wire, an encrypted transport for issuing protobuf requests to a connected Ark. It initiates sessions by signaling a transport reset and driving the handshake, afterward encrypting outbound and decrypting inbound messages.

The device attestation presented in the handshake is not interpreted by the wire, it is handed to a Verifier deciding whether to trust the Ark.

Implementations

impl<R: Read, W: Write> HostSide<R, W>

pub fn new(reader: R, writer: W) -> Self

Creates a new host side around a low level reader and writer. Reads block per the transport’s semantics, so a timeout for an unresponsive Ark must be configured on the reader passed in.

pub fn handshake<V: Verifier>(&mut self, verifier: &V) -> Result<V::Info, Error>

Sends a session reset and drives the encrypted handshake with the Ark:

1. Host -> Ark: HostHello { host_signer, host_crypto } (plain CBOR)
2. Ark -> Host: ArkHello { ark_attest, ark_crypto, a2h_encap } (cose::seal)
3. Host -> Ark: HostAck { h2a_encap } (cose::seal)

The verifier receives the raw device attestation from the Ark’s hello and its accepted info is returned once the session is established.

pub fn next_message(&mut self) -> Result<ArkToHost, Error>

Reads the next ark-to-host message, decrypting and protobuf decoding it. A frame that cannot be decoded or a packet that cannot be decrypted drops the session, as the Ark’s HPKE sequence can no longer be followed; only a fresh handshake recovers from that.

pub fn send_message(&mut self, req: HostToArk) -> Result<(), Error>

Protobuf encodes a host-to-ark message, seals it with the session and sends it. Fails without an active session, and a failure after sealing drops the session, as the Ark’s HPKE sequence can no longer be caught up with.