Enum Authenticity 

pub enum Authenticity {
    Verified,
    IntegrityOnly,
}

What is known about the config’s authenticity.

Three states, and the third is the point: an EMPTY auth.signature is not a failed signature and not a passed one. A failure is not in this enum at all — it is an Err out of verify, which the caller turns into an absent config.

Variants

Verified

An ed25519 signature over the domain-separated body digest verified against the enrolled root key.

IntegrityOnly

The body’s blake3 matches what is written beside it, and nothing else is claimed. Integrity, not authenticity: anyone who can write the plaintext ESP can rewrite the body and its digest together. This is the state every appliance built today is in.

Implementations

impl Authenticity

pub fn word(self) -> &'static str

The words the console prints — the same words the installer’s console prints, so an admin comparing the two is not left wondering whether they mean the same thing.

pub fn is_verified(self) -> bool

Only Authenticity::Verified. An unsigned config is never presented as verified.

Trait Implementations

impl Clone for Authenticity

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Authenticity

impl Debug for Authenticity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Authenticity

impl PartialEq for Authenticity

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Authenticity