Enum IntegrityMode 

pub enum IntegrityMode {
    Sidecar,
    TrustAnchor,
}

How the tamper-evident handle enforces integrity.

Choose based on the number of files you need to protect:

• Sidecar (default): One platform secure-store entry per app (the HMAC key). Each file gets a .hmac sidecar that IS the authoritative integrity check. Scales to any number of files. Suitable for directories with thousands of entries.

• TrustAnchor: One platform secure-store entry per app (HMAC key) plus one per protected file (the HMAC tag itself). The sidecar is a forensic cache; the platform secure store is authoritative. Deleting a sidecar cannot bypass verification. Use only for low-volume, high-value files.

Variants

Sidecar

HMAC sidecar is the authoritative integrity check. One secure-store entry per app. Scales to any file count.

TrustAnchor

Per-file trust anchor in the platform secure store (Keychain / DPAPI / Secret Service). One secure-store entry per protected file in addition to the per-app HMAC key.

Trait Implementations

impl Clone for IntegrityMode

fn clone(&self) -> IntegrityMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IntegrityMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IntegrityMode

fn default() -> IntegrityMode

Returns the “default value” for a type.

impl PartialEq for IntegrityMode

fn eq(&self, other: &IntegrityMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for IntegrityMode

impl Eq for IntegrityMode

impl StructuralPartialEq for IntegrityMode