Struct PsaSoftwareBackend 

pub struct PsaSoftwareBackend { /* private fields */ }

Implements an in-process backend that mirrors PSA handle semantics for tests.

Implementations

impl PsaSoftwareBackend

pub fn new() -> Self

Constructs an empty software backend.

Arguments

• () - This constructor has no parameters.

Returns

A new empty PsaSoftwareBackend value.

pub fn register_rsa_key( &mut self, handle: PsaExternalKeyHandle, key: RsaPrivateKey, allow_sign: bool, allow_decrypt: bool, ) -> Result<()>

Registers an RSA private key with handle-level usage policy.

Arguments

• handle - Opaque key handle used for future operations.
• key - RSA private key material owned by backend.
• allow_sign - Whether sign operations are authorized for this handle.
• allow_decrypt - Whether decrypt operations are authorized for this handle.

Returns

Ok(()) after key registration succeeds.

Errors

Returns [Error::PolicyViolation] if the handle is already registered.

pub fn register_x25519_key( &mut self, handle: PsaExternalKeyHandle, key: [u8; 32], allow_derive: bool, ) -> Result<()>

Registers an X25519 private key with derive-policy controls.

Arguments

• handle - Opaque key handle used for future derive operations.
• key - X25519 private scalar bytes.
• allow_derive - Whether derive operations are authorized for this handle.

Returns

Ok(()) after key registration succeeds.

Errors

Returns [Error::PolicyViolation] if the handle is already registered.

pub fn register_p256_key( &mut self, handle: PsaExternalKeyHandle, key: P256PrivateKey, allow_sign: bool, allow_derive: bool, ) -> Result<()>

Registers a P-256 private key with derive/sign policy controls.

Arguments

• handle - Opaque key handle used for future operations.
• key - P-256 private key material.
• allow_sign - Whether sign operations are authorized for this handle.
• allow_derive - Whether derive operations are authorized for this handle.

Returns

Ok(()) after key registration succeeds.

Errors

Returns Error::StateError if the handle is already registered.

Trait Implementations

impl Clone for PsaSoftwareBackend

fn clone(&self) -> PsaSoftwareBackend

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PsaSoftwareBackend

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PsaSoftwareBackend

fn default() -> PsaSoftwareBackend

Returns the “default value” for a type.

impl PsaCryptoBackend for PsaSoftwareBackend

fn sign(&self, request: &KeySignRequest<'_>) -> Result<Vec<u8>>

Executes signing operations using software cryptographic primitives.

Arguments

• self - Software backend state containing registered keys.
• request - Sign request with handle, algorithm, and digest.

Returns

Signature bytes from RSA sign operations.

Errors

Returns policy or crypto errors for unknown handles, denied usage, or bad key type.

fn decrypt(&self, request: &KeyDecryptRequest<'_>) -> Result<Vec<u8>>

Executes decrypt operations using software cryptographic primitives.

Arguments

• self - Software backend state containing registered keys.
• request - Decrypt request with handle, algorithm, and ciphertext.

Returns

Plaintext bytes decrypted from input ciphertext.

Errors

Returns policy or crypto errors for unknown handles, denied usage, or bad key type.

fn derive(&self, request: &KeyDeriveRequest<'_>) -> Result<Vec<u8>>

Executes derive operations using software X25519 primitive.

Arguments

• self - Software backend state containing registered keys.
• request - Derive request with handle, algorithm, and peer key.

Returns

Shared secret bytes from X25519 derive operation.

Errors

Returns policy or parse errors for unknown handles, denied usage, or invalid peer key.

fn random(&self, out: &mut [u8]) -> Result<()>

Produces deterministic random bytes for validation-only posture.

Arguments

• self - Software backend state (not used by this implementation).
• out - Mutable output buffer to fill with deterministic bytes.

Returns

Ok(()) once all output bytes are filled.

Errors

This function does not return errors in the software backend.

fn sha256(&self, input: &[u8]) -> Result<[u8; 32]>

Computes SHA-256 digest with software primitive implementation.

Arguments

• self - Software backend state (not used by this implementation).
• input - Input bytes to hash.

Returns

32-byte SHA-256 digest.

Errors

Returns crypto error if digest primitive reports a failure.

fn aes_gcm_encrypt( &self, request: &AeadEncryptRequest<'_>, ) -> Result<AeadEncryptResponse>

Encrypts using AES-GCM software primitive.

Arguments

• self - Software backend state (not used by this implementation).
• request - Encryption request with key, nonce, AAD, and plaintext.

Returns

Ciphertext bytes plus 16-byte authentication tag.

Errors

Returns Error::UnsupportedFeature because software AES-GCM path is not wired here.