Struct RootTag 

pub struct RootTag { /* private fields */ }

Root cryptographic tag with hierarchical derivation capability.

Implementations

impl RootTag

pub fn new(hex: impl AsRef<str>) -> Result<Self>

Create from hex-encoded string with comprehensive validation.

pub fn generate() -> Result<Self>

Generate cryptographically secure root tag using OS RNG.

Errors

Returns error if the OS RNG produces invalid entropy (catastrophic system failure).

pub fn derive_host_tag_bytes(&self, hostname: &str) -> [u8; 64]

Derive host-specific tag bytes using SHA3-512 (no heap allocation).

pub fn derive_host_tag(&self, hostname: &str) -> Vec<u8>

Derive host-specific tag using SHA3-512.

pub fn derive_artifact_tag_bytes( &self, hostname: &str, artifact_id: &str, ) -> [u8; 64]

Derive artifact-specific tag bytes using SHA3-512 (no heap allocation).

pub fn derive_artifact_tag_hex_into( &self, hostname: &str, artifact_id: &str, out: &mut [u8; 128], )

Derive artifact-specific tag as lowercase hex bytes into caller-provided buffer.

This method performs no heap allocation.

pub fn derive_artifact_tag(&self, hostname: &str, artifact_id: &str) -> String

Derive artifact-specific tag using SHA3-512.

pub fn hash(&self) -> &[u8; 64]

Get SHA3-512 hash for comparison without exposing secret.

pub fn hash_eq_ct(&self, other: &Self) -> bool

Constant-time comparison of root tag hashes.

Trait Implementations

impl Clone for RootTag

fn clone(&self) -> RootTag

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RootTag

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RootTag

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Drop for RootTag

fn drop(&mut self)

Executes the destructor for this type.

impl Serialize for RootTag

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl Zeroize for RootTag

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.