Struct AuthenticatedProofEnvelope 

pub struct AuthenticatedProofEnvelope {
    pub algorithm: String,
    pub key_id: Vec<u8>,
    pub proof_bundle: Vec<u8>,
    pub context: Vec<u8>,
    pub issued_at_millis: Option<u64>,
    pub expires_at_millis: Option<u64>,
    pub nonce: Vec<u8>,
    pub signature: Vec<u8>,
}

HMAC-authenticated envelope for any proof bundle.

The envelope does not change proof semantics: proof_bundle is still decoded by KeyProof::from_bundle_bytes, MultiKeyProof::from_bundle_bytes, RangeProof::from_bundle_bytes, or RangePageProof::from_bundle_bytes. The envelope adds provenance fields and an HMAC-SHA256 signature so a peer can reject tampered bundles before decoding them.

Fields

algorithm: String

Signature algorithm. Version 1 supports hmac-sha256.

key_id: Vec<u8>

Caller-defined identifier used to select the shared secret.

proof_bundle: Vec<u8>

Canonical proof bundle bytes from one of the proof to_bundle_bytes methods.

context: Vec<u8>

Application-defined domain bytes, such as tenant, snapshot, endpoint, or authorization scope.

issued_at_millis: Option<u64>

Optional issue time in Unix milliseconds.

expires_at_millis: Option<u64>

Optional expiration time in Unix milliseconds.

nonce: Vec<u8>

Caller-provided nonce to make envelopes unique across repeated proofs.

signature: Vec<u8>

HMAC-SHA256 over the canonical signing payload.

Implementations

impl AuthenticatedProofEnvelope

pub fn to_bytes(&self) -> Result<Vec<u8>, Error>

Serialize this envelope as deterministic, versioned binary bytes.

pub fn from_bytes(bytes: &[u8]) -> Result<Self, Error>

Decode an envelope from bytes produced by AuthenticatedProofEnvelope::to_bytes.

pub fn verify( &self, secret: &[u8], now_millis: Option<u64>, ) -> AuthenticatedProofEnvelopeVerification

Verify this envelope with the shared secret. Passing None for now_millis skips issue/expiration checks.

Trait Implementations

impl Clone for AuthenticatedProofEnvelope

fn clone(&self) -> AuthenticatedProofEnvelope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthenticatedProofEnvelope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuthenticatedProofEnvelope

impl PartialEq for AuthenticatedProofEnvelope

fn eq(&self, other: &AuthenticatedProofEnvelope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthenticatedProofEnvelope