Struct TunnelIdentity 

pub struct TunnelIdentity { /* private fields */ }

What a launcher keeps to verify its VM later: its own secret, and the VM’s public pin.

Implementations

impl TunnelIdentity

pub fn from_parts( host_seed: &[u8], vm_public_key: &[u8], ) -> Result<TunnelIdentity, Error>

Rebuilds from the two values a ledger record carries.

host_seed is validated with the shared rules; the public key only for length, because a public key has no all-zero hazard — it is derived, not generated, and the zero check exists to catch a broken RNG at generation time.

pub fn vm_public_key(&self) -> [u8; 32]

The VM’s public key — the pin. Safe to store, print, and compare.

pub fn host_seed(&self) -> [u8; 32]

The host’s secret half, for a ledger record.

Exposed because the CLI’s registry must persist it (0600, beside the agent token it already holds) for tunnel --name to verify in a later process. Callers other than a persistence layer have no business with it — the initiator below is the way to use the identity.

pub fn host_seed_base64(&self) -> String

The host secret in its wire spelling — standard base64 — for a registry record.

Here rather than in each consumer, so the CLI (whose manifest deliberately carries no encoding crates) and the record it writes cannot disagree with TunnelIdentity::from_encoded_parts about alphabet or padding.

pub fn vm_public_key_base64(&self) -> String

The pin in its wire spelling.

pub fn from_encoded_parts( host_seed: &str, vm_public_key: &str, ) -> Result<TunnelIdentity, Error>

TunnelIdentity::from_parts, from the base64 spellings a record or a flag carries.

Trait Implementations

impl Clone for TunnelIdentity

fn clone(&self) -> TunnelIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TunnelIdentity

The pin is printable; the host seed is not.

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl TunnelIdentityExt for TunnelIdentity

fn initiator(&self) -> Result<HandshakeState, Error>

A Noise initiator bound to this identity: proves the host, verifies the pin.