Enum HardwareKind 

#[non_exhaustive]
pub enum HardwareKind {
    WindowsTpm20,
    MacSecureEnclave,
    LinuxTpm20,
}

A class of OS hardware trusted component that can hold a non-exportable wrapping key.

The discriminant is a stable wire id: it is written into the envelope header, so a blob records which hardware class sealed it. Values are append-only — never renumber or repurpose one (§5.1: a sealed blob is permanent at-rest data).

#[non_exhaustive]: append-only means this WILL grow, so a downstream match must carry a wildcard arm rather than break each time hardware is added.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

WindowsTpm20

Windows TPM 2.0, reached through the CNG Platform Crypto Provider.

MacSecureEnclave

Apple Secure Enclave (kSecAttrTokenIDSecureEnclave).

LinuxTpm20

Linux TPM 2.0 via the tpm2 software stack.

Implementations

impl HardwareKind

pub const fn wire_id(self) -> u8

Stable on-wire discriminant written into a sealed envelope header.

pub const fn from_wire_id(id: u8) -> Option<Self>

Parse a wire discriminant, or None for an id this build does not know.

An unknown id is a forward-compatibility case, not corruption: a newer writer may have sealed with hardware this build has no name for. The caller reports it as unopenable-here rather than as a bad file.

pub const fn label(self) -> &'static str

Short human label for logs and UI.

Trait Implementations

impl Clone for HardwareKind

fn clone(&self) -> HardwareKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for HardwareKind

impl Debug for HardwareKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for HardwareKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for HardwareKind

impl Hash for HardwareKind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for HardwareKind

fn eq(&self, other: &HardwareKind) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for HardwareKind