Skip to main content

Checkpoint

Struct Checkpoint 

Source
pub struct Checkpoint {
    pub created_at: u64,
    pub segment_seq: u64,
    pub record_count: u64,
    pub tree_size: u64,
    pub merkle_root: Hash,
    pub key_version: u32,
    pub signature: Vec<u8>,
}
Expand description

One signed integrity checkpoint of the audit-log Merkle tree. See the module docs for the threat it addresses.

Fields§

§created_at: u64

UTC micros at signing time.

§segment_seq: u64

Sequence number of the logs segment that was active at checkpoint time.

§record_count: u64

Log records on disk at checkpoint time (decreases after retention).

§tree_size: u64

Total records ever appended at checkpoint time — the Merkle tree size the merkle_root is taken over. Never decreases (the spine is not purged), so the current tree is always an extension of any past checkpoint.

§merkle_root: Hash

Merkle root over the first tree_size leaves at checkpoint time.

§key_version: u32

crate::crypto::KeyVersion of the RSA key that signed this checkpoint — after a rotation, old checkpoints still verify against the retained public key of their own version.

§signature: Vec<u8>

RSA PKCS#1 v1.5 / SHA-256 signature over the fields above.

Implementations§

Source§

impl Checkpoint

Source

pub fn verify(&self, keys: &KeyRing) -> Result<()>

Verify the signature with the ring’s public key.

Source

pub fn merkle_root_hex(&self) -> String

Hex form of the Merkle root — the value to hand to external anchors.

Trait Implementations§

Source§

impl Clone for Checkpoint

Source§

fn clone(&self) -> Checkpoint

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for Checkpoint

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Eq for Checkpoint

Source§

impl PartialEq for Checkpoint

Source§

fn eq(&self, other: &Checkpoint) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 (const: unstable) · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl StructuralPartialEq for Checkpoint

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> Read<Exclusive, BecauseExclusive> for T
where T: ?Sized,

Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V