Struct ic_identity_hsm::HardwareIdentity

pub struct HardwareIdentity { /* private fields */ }

An identity based on an HSM

Implementations

impl HardwareIdentity

pub fn new<P, PinFn>( pkcs11_lib_path: P, slot_index: usize, key_id: &str, pin_fn: PinFn ) -> Result<HardwareIdentity, HardwareIdentityError>

where P: AsRef<Path>, PinFn: FnOnce() -> Result<String, String>,

Create an identity using a specific key on an HSM. The filename will be something like /usr/local/lib/opensc-pkcs11.s The key_id must refer to a ECDSA key with parameters prime256v1 (secp256r1) The key must already have been created. You can create one with pkcs11-tool: $ pkcs11-tool -k –slot $SLOT -d $KEY_ID –key-type EC:prime256v1 –pin $PIN

Trait Implementations

impl Debug for HardwareIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for HardwareIdentity

fn drop(&mut self)

Executes the destructor for this type.

impl Identity for HardwareIdentity

fn sender(&self) -> Result<Principal, String>

Returns a sender, ie. the Principal ID that is used to sign a request.

fn public_key(&self) -> Option<Vec<u8>>

Produce the public key commonly returned in Signature.

fn sign(&self, content: &EnvelopeContent) -> Result<Signature, String>

Sign a request ID derived from a content map.

fn sign_delegation(&self, content: &Delegation) -> Result<Signature, String>

Sign a delegation to let another key be used to authenticate sender.

fn sign_arbitrary(&self, content: &[u8]) -> Result<Signature, String>

Sign arbitrary bytes.

fn delegation_chain(&self) -> Vec<SignedDelegation>

A list of signed delegations connecting sender to public_key, and in that order.