Struct SealingIdentity 

pub struct SealingIdentity { /* private fields */ }

The local identity dig-peer uses to seal directed RPCs and open sealed responses.

It holds this node’s BLS-G1 identity secret key (the machine identity that signed its mTLS cert binding) and the key epoch. The DID fields for the seal are derived from the connection’s peer_ids, so this type is just the secret material plus the receive-side replay guard.

Implementations

impl SealingIdentity

pub fn new(secret_key: SecretKey, epoch: u32) -> Self

Create a sealing identity from this node’s BLS-G1 identity secret key and key epoch.

The secret key MUST be the same identity key that signed this node’s mTLS cert binding, so that the peer resolves this node’s sender key from the binding it captured at the handshake.

pub fn public_key(&self) -> [u8; 48]

This identity’s BLS-G1 public key (48-byte compressed) — the value a peer must capture from this node’s cert binding to open messages this identity seals.

pub fn seal_request( &mut self, sender: PeerId, recipient: PeerId, recipient_pub: &[u8; 48], payload: &[u8], ) -> Result<(Vec<u8>, Bytes32)>

Seal payload as a directed request to recipient (their BLS-G1 key), authored by sender.

Returns the byte-serialized sealed DigMessageEnvelope to write on the wire, plus the correlation_id the caller matches the response against. Advances the send counter.

Errors

DigPeerError::Seal if the recipient key fails the subgroup check or the AEAD/compression step fails.

pub fn open_response( &mut self, sender_pub: &[u8; 48], expected_correlation: Bytes32, bytes: &[u8], ) -> Result<Vec<u8>>

Open a sealed response, verifying it was authored by sender (their captured BLS-G1 key), sealed to this identity, and correlates with expected_correlation.

Errors

DigPeerError::Seal if authenticated-open / signature / replay / freshness verification fails; DigPeerError::Misdelivered if the response’s correlation_id does not match.

Trait Implementations

impl Debug for SealingIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.