Struct DeviceAuthenticator 

pub struct DeviceAuthenticator { /* private fields */ }

Device authenticator manages challenge-response authentication.

Overview

The authenticator uses Ed25519 signatures for mutual authentication:

1. Generate a challenge with random nonce and timestamp
2. Peer signs the challenge and returns their public key
3. Verify signature and cache the verified peer identity

Example

use peat_protocol::security::{DeviceKeypair, DeviceAuthenticator};

let keypair = DeviceKeypair::generate();
let authenticator = DeviceAuthenticator::new(keypair);

// Generate challenge for peer
let challenge = authenticator.generate_challenge();

// Peer creates response
let response = peer_authenticator.respond_to_challenge(&challenge)?;

// Verify response
let peer_id = authenticator.verify_response(&response)?;
println!("Authenticated peer: {}", peer_id);

Implementations

impl DeviceAuthenticator

pub fn new(keypair: DeviceKeypair) -> Self

Create a new authenticator with the given keypair.

pub fn with_timeout(keypair: DeviceKeypair, challenge_timeout: Duration) -> Self

Create an authenticator with a custom challenge timeout.

pub fn device_id(&self) -> DeviceId

Get this device’s ID.

pub fn public_key_bytes(&self) -> [u8; 32]

Get this device’s public key bytes.

pub fn generate_challenge(&self) -> Challenge

Generate a challenge for authenticating a peer.

The challenge contains:

• Random 32-byte nonce
• Current timestamp
• This device’s ID
• Expiration timestamp

pub fn respond_to_challenge( &self, challenge: &Challenge, ) -> Result<SignedChallengeResponse, SecurityError>

Create a signed response to a challenge.

Signs the challenge data with this device’s private key.

pub fn verify_response( &self, response: &SignedChallengeResponse, ) -> Result<DeviceId, SecurityError>

Verify a peer’s challenge response.

On success, caches the peer’s identity and returns their DeviceId.

pub fn is_verified(&self, device_id: &DeviceId) -> bool

Check if a peer is verified.

pub fn get_verified_peer(&self, device_id: &DeviceId) -> Option<VerifiedPeer>

Get a verified peer’s info.

pub fn remove_peer(&self, device_id: &DeviceId)

Remove a peer from the verified cache.

pub fn clear_verified_peers(&self)

Clear all verified peers.

pub fn verified_peer_count(&self) -> usize

Get number of verified peers.

Trait Implementations

impl Debug for DeviceAuthenticator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.