Struct SecureStorageLocation 

pub struct SecureStorageLocation {
    pub namespace: String,
    pub key: String,
    pub sub_key: Option<String>,
}

Location within secure storage

Fields

namespace: String

Namespace for organizing secure data

key: String

Unique key within the namespace

sub_key: Option<String>

Optional sub-key for hierarchical organization

Implementations

impl SecureStorageLocation

pub fn new( namespace: impl Into<String>, key: impl Into<String>, ) -> SecureStorageLocation

Create a new secure storage location

pub fn with_sub_key( namespace: impl Into<String>, key: impl Into<String>, sub_key: impl Into<String>, ) -> SecureStorageLocation

Create with a sub-key for hierarchical organization

pub fn full_path(&self) -> String

Get the full key path as a string

pub fn guardian_share( account_authority: &AuthorityId, guardian_authority: &AuthorityId, ) -> SecureStorageLocation

Create a location for storing a guardian’s FROST share.

Guardian shares are stored by:

• namespace: “guardian_shares”
• key: account authority being protected
• sub_key: guardian authority holding the share

Security Note

Guardian shares MUST be encrypted with the guardian’s public key before storage. The share data stored here is the encrypted share bytes, not the raw FROST SigningShare.

pub fn authority_keys( authority: &AuthorityId, epoch: u64, ) -> SecureStorageLocation

Create a location for storing authority FROST keys.

Authority keys are stored by:

• namespace: “authority_keys”
• key: authority ID
• sub_key: epoch number

Security Note

This stores the SigningShare and PublicKeyPackage for the authority. The SigningShare is the secret key material that must never leave secure storage unencrypted.

impl SecureStorageLocation

Helper functions for common secure storage operations

pub fn frost_nonce( session_id: &str, participant_id: u16, ) -> SecureStorageLocation

Create a location for storing FROST nonces

pub fn signing_share( account_id: &str, epoch: u64, participant_id: u16, ) -> SecureStorageLocation

Create a location for storing signing shares

pub fn device_attestation(device_id: &str) -> SecureStorageLocation

Create a location for device attestation certificates

pub fn biscuit_authority(authority_id: &AuthorityId) -> SecureStorageLocation

Create a location for storing Biscuit token authority data.

Stores the serialized Biscuit token and root public key for an authority:

• namespace: “biscuit”
• key: authority ID
• sub_key: “token_authority”

pub fn amp_bootstrap_key( context: &ContextId, channel: &ChannelId, bootstrap_id: &Hash32, ) -> SecureStorageLocation

Create a location for AMP channel bootstrap keys.

Trait Implementations

impl Clone for SecureStorageLocation

fn clone(&self) -> SecureStorageLocation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecureStorageLocation

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecureStorageLocation

fn deserialize<__D>( __deserializer: __D, ) -> Result<SecureStorageLocation, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for SecureStorageLocation

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for SecureStorageLocation

fn eq(&self, other: &SecureStorageLocation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecureStorageLocation

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for SecureStorageLocation

impl StructuralPartialEq for SecureStorageLocation