pub struct SignerInfo {
pub version: u64,
pub sid: SignerIdentifier,
pub digest_algorithm_oid: Vec<u64>,
pub digest_algorithm_params: Vec<u8>,
pub signed_attrs: Vec<Attribute>,
pub signed_attrs_der: Option<Vec<u8>>,
pub signature_algorithm_oid: Vec<u64>,
pub signature_algorithm_params: Vec<u8>,
pub signature: Vec<u8>,
pub unsigned_attrs: Vec<Attribute>,
}Expand description
One SignerInfo slot inside the SignedData.signerInfos SET.
Round-19 keeps the surface inspection-only — the bytes that would feed signature verification are all surfaced (digest_algorithm OID, signature_algorithm OID, raw signature octet string), but no verify helper is implemented this round.
Fields§
§version: u64CMS SignerInfo version — 1 (IAS) or 3 (SKI).
sid: SignerIdentifierSigner identifier — IAS (v1) or SKI (v3).
digest_algorithm_oid: Vec<u64>digestAlgorithm OID arcs (e.g. SHA-256 = 2.16.840.1.101.3.4.2.1).
digest_algorithm_params: Vec<u8>digestAlgorithm raw parameter bytes (typically a NULL or
absent — we surface what was on the wire so a caller can
distinguish encodings).
signed_attrs: Vec<Attribute>OPTIONAL signed attributes ([0] IMPLICIT SET OF Attribute).
Per RFC 5652 §5.3, when present the signature is computed over
the DER encoding of the SignedAttributes SET (with universal
SET tag, NOT the implicit [0] tag — RFC 5652 §5.4).
Empty vec means “absent”.
signed_attrs_der: Option<Vec<u8>>Round-19 verification helper — when signed_attrs was
present on the wire, this carries the raw DER body of the
[0] IMPLICIT SET. The verifier needs to re-encode this with
the universal SET tag (0x31) before hashing per RFC 5652 §5.4
— to make that mechanical, we store the body bytes here and
the re-tagging happens in the verify dispatch (deferred).
None when signed_attrs was absent.
signature_algorithm_oid: Vec<u64>signatureAlgorithm OID arcs (e.g. RSAES-PKCS1-v1.5 =
1.2.840.113549.1.1.1, ECDSA-with-SHA256 = 1.2.840.10045.4.3.2).
signature_algorithm_params: Vec<u8>signatureAlgorithm raw parameter bytes.
signature: Vec<u8>signature OCTET STRING — the actual signature octets the
verifier checks against the digest of the signed bytes.
unsigned_attrs: Vec<Attribute>OPTIONAL unsigned attributes ([1] IMPLICIT SET OF Attribute).
Trait Implementations§
Source§impl Clone for SignerInfo
impl Clone for SignerInfo
Source§fn clone(&self) -> SignerInfo
fn clone(&self) -> SignerInfo
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more