Struct FakeDevice 

pub struct FakeDevice { /* private fields */ }

A configurable stand-in for a hardware trusted component.

Implementations

impl FakeDevice

pub fn working(kind: HardwareKind, device_id: u8) -> Self

An honest, working device of kind, keyed by device_id.

Two devices with different device_ids stand for two different machines.

pub fn last_wrapped_content_key(&self) -> Option<[u8; 32]>

The last content key this device was asked to wrap, if any.

Test-only observability: it is what makes “the content key never appears in the stored bytes” an assertion about the actual key rather than about a value the test invented.

pub fn absent(kind: HardwareKind) -> Self

A host with definitively no hardware.

pub fn indeterminate(kind: HardwareKind, detail: &str) -> Self

A host whose hardware could not be inspected.

pub fn with_probe(self, probe: HardwareProbe) -> Self

Override the probe outcome.

pub fn with_custody(self, custody: KeyCustody) -> Self

Override the reported custody.

pub fn with_behaviour(self, behaviour: WrapBehaviour) -> Self

Override the wrap/unwrap behaviour.

pub fn with_kind(self, kind: HardwareKind) -> Self

Override the advertised kind independently of the probed kind, so the double can contradict itself.

pub fn rotate_device_key(&self, device_id: u8)

Replace this device’s key material, as a TPM clear / re-enrolment does.

Blobs sealed before the rotation become unopenable by this device, which is precisely what a user sees after a firmware update clears the TPM. Clones share the slot, so a backend already holding this provider sees the change.

pub fn failing_unwrap_after(self, n: usize) -> Self

Succeed at n more unwraps, then fail every one after that.

Models a component that is healthy when inspected and unusable moments later. The constructor self-test spends exactly one unwrap, so failing_unwrap_after(1) yields a device that resolves a genuine hardware tier and then cannot reopen the next thing it seals.

Trait Implementations

impl Clone for FakeDevice

fn clone(&self) -> FakeDevice

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FakeDevice

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl HardwareProvider for FakeDevice

fn kind(&self) -> HardwareKind

Which hardware class this provider binds to.

fn probe(&self) -> HardwareProbe

Inspect the host for usable hardware.

fn custody(&self) -> KeyCustody

Where this provider’s wrapping key lives.

fn wrap_key(&self, content_key: &ContentKey) -> Result<Vec<u8>>

Encrypt content_key to the hardware wrapping key.

fn unwrap_key(&self, wrapped: &[u8]) -> Result<ContentKey>

Decrypt a previously wrapped content key using the hardware key.