Struct VerificationMiddleware 

pub struct VerificationMiddleware { /* private fields */ }

Middleware that verifies bytecode signatures before allowing execution.

Implementations

impl VerificationMiddleware

pub fn new(trusted_keys: Vec<[u8; 32]>) -> Self

Create a new middleware with at least one trusted public key.

pub fn with_strict(self, strict: bool) -> Self

Toggle strict mode. When strict (default), unsigned bytecode is rejected.

pub fn add_trusted_key(&mut self, public_key: [u8; 32])

Add a new trusted public key (for key rotation).

pub fn remove_trusted_key(&mut self, public_key: &[u8; 32])

Remove a trusted public key (e.g., revoke a compromised key).

pub fn trusted_key_count(&self) -> usize

Number of currently trusted keys.

pub fn verify( &self, bytecode: &[u8], signature: &Signature, ) -> VerificationResult

Verify bytecode against all trusted public keys.

Returns Ok(VerificationResult) if any trusted key validates the signature. Returns an error result if none match or if the bytecode is tampered.

pub fn verify_or_reject( &self, bytecode: &[u8], signature: &Signature, ) -> Result<usize, String>

Verify bytecode or return an error message suitable for API responses.

pub fn allow_unsigned(&self) -> bool

Check whether unsigned bytecode should be allowed (depends on strict mode).