Enum KeyCustody 

pub enum KeyCustody {
    NonExportable,
    ProcessMemory,
}

Where a provider’s wrapping key physically lives.

This is the property hardware binding actually buys, so it is reported explicitly rather than inferred from the provider’s name.

Variants

NonExportable

The wrapping key was generated inside the hardware component and cannot be exported from it. Copying the sealed blob to another machine does not let an attacker open it.

An implementation MUST NOT report this unless the key was created non-exportable and an export attempt is refused by the platform.

ProcessMemory

The wrapping key exists in process memory at some point. Offers no cross-machine binding; a provider reporting this MUST NOT be treated as a hardware tier.

Implementations

impl KeyCustody

pub const fn is_hardware_grade(self) -> bool

Whether this custody level is strong enough to claim a hardware tier.

Trait Implementations

impl Clone for KeyCustody

fn clone(&self) -> KeyCustody

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for KeyCustody

impl Debug for KeyCustody

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for KeyCustody

impl PartialEq for KeyCustody

fn eq(&self, other: &KeyCustody) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KeyCustody