Struct SecurityPolicy 

pub struct SecurityPolicy {
    pub constant_time: ConstantTimePolicy,
    pub allow_legacy_algorithms: bool,
    pub allow_sha1_signatures: bool,
}

User-tunable security policy switches paired with a Profile.

Fields

constant_time: ConstantTimePolicy

Timing-hardening mode derived from Cargo features or parsed configuration.

allow_legacy_algorithms: bool

Whether legacy algorithms may be used when allowed by build policy.

allow_sha1_signatures: bool

Whether SHA-1 signatures may be accepted when allowed by build policy.

Implementations

impl SecurityPolicy

pub fn compiled() -> Self

Builds a SecurityPolicy from active Cargo feature flags at compile time.

Arguments

This function takes no parameters.

Returns

A policy struct whose fields reflect cfg!(feature = ...) for constant-time, legacy, and SHA-1 modes.

Panics

This function does not panic.

pub fn validate(self) -> Result<()>

Ensures policy flags are internally consistent (for example, strict constant-time vs legacy modes).

Arguments

• self — Policy snapshot to validate.

Returns

Ok(()) when all invariants hold.

Errors

Returns Error::UnsupportedFeature when strict constant-time is combined with disallowed legacy or SHA-1 modes.

Panics

This function does not panic.

Trait Implementations

impl Clone for SecurityPolicy

fn clone(&self) -> SecurityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SecurityPolicy

fn eq(&self, other: &SecurityPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for SecurityPolicy

impl Eq for SecurityPolicy

impl StructuralPartialEq for SecurityPolicy