Struct CoseSigned 

pub struct CoseSigned<T> { /* private fields */ }

Generic COSE_Sign1 signed envelope wrapping a payload T.

Implementations

impl<T> CoseSigned<T>

where T: Serialize + DeserializeOwned,

pub fn sign_ed25519( payload: &T, kid: &str, signing_key: &SigningKey, ) -> Result<Self, CoseError>

Signs payload with Ed25519. Algorithm is set to EdDSA automatically.

pub fn verify_ed25519( &self, verifying_key: &VerifyingKey, ) -> Result<T, CoseError>

Verifies Ed25519 signature and returns the payload.

impl<T> CoseSigned<T>

where T: Serialize + DeserializeOwned,

pub fn kid(&self) -> Option<String>

Returns the key identifier (kid) from the protected header.

The kid can be a SPIFFE ID, DID, URL, or any resolvable identifier that can be used to obtain the public key for verification.

pub fn algorithm(&self) -> Option<SigningAlgorithm>

Returns the signing algorithm from the protected header.

pub fn to_bytes(&self) -> Result<Vec<u8>, CoseError>

Serializes the signed envelope to CBOR bytes.

These are the exact signed artifact bytes: every Profile 0.2 hash (root.pca_hash, predecessor.hash) is computed over them.

pub fn from_bytes(bytes: &[u8]) -> Result<Self, CoseError>

Deserializes a signed envelope from CBOR bytes.

pub fn payload_unverified(&self) -> Result<T, CoseError>

Extracts the payload without verifying the signature.

Use only where the specification treats the artifact as untrusted input to be parsed before validation.

pub fn sign_with<F>( payload: &T, kid: &str, alg: SigningAlgorithm, sign_fn: F, ) -> Result<Self, CoseError>

where F: FnOnce(&[u8]) -> Result<Vec<u8>, CoseError>,

Signs a payload using a custom signing function (crypto-agnostic).

The closure receives the to-be-signed bytes and returns the signature.

pub fn verify_with<F>(&self, verify_fn: F) -> Result<T, CoseError>

where F: FnOnce(&[u8], &[u8]) -> Result<(), CoseError>,

Verifies the signature using a custom verification function.

The closure receives (data, signature) and returns Ok(()) if valid.

pub fn check_algorithm( &self, expected: SigningAlgorithm, ) -> Result<(), CoseError>

Validates that the envelope’s algorithm matches the expected one.

Trait Implementations

impl<T: Clone> Clone for CoseSigned<T>

fn clone(&self) -> CoseSigned<T>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T: Debug> Debug for CoseSigned<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.