Enum PlatformKeyOperation 

#[non_exhaustive]
pub enum PlatformKeyOperation {
    Generate,
    GetPublicKey,
    Sign,
    Verify,
    DeriveSharedSecret,
    Delete,
    Attest,
}

Platform-owned key operations represented by the shared domain model.

This enum is intentionally descriptive rather than executable. Apple and Android SDK providers retain custody of platform key handles and must fail closed when an operation is unavailable; the Rust core must never substitute an exportable software key for a platform-owned key.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Generate

Generate a new non-exportable platform key.

GetPublicKey

Return the public half of an existing platform key.

Sign

Sign with an existing platform key.

Verify

Verify with an existing platform key.

DeriveSharedSecret

Derive a shared secret with an existing platform key.

Delete

Delete an existing platform key.

Attest

Request provider attestation for an existing platform key.

Implementations

impl PlatformKeyOperation

pub const fn family(self) -> OperationFamily

Returns the semantic operation family used by policy and telemetry.

pub const fn requires_existing_key(self) -> bool

Returns whether the operation requires a previously created key handle.

pub const fn produces_secret_material(self) -> bool

Returns whether successful execution can produce secret material.

Callers use this classification to require a zeroizing managed owner for the shared-secret result before crossing an SDK or FFI boundary.

Trait Implementations

impl Clone for PlatformKeyOperation

fn clone(&self) -> PlatformKeyOperation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PlatformKeyOperation

impl Debug for PlatformKeyOperation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PlatformKeyOperation

impl Hash for PlatformKeyOperation

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for PlatformKeyOperation

fn eq(&self, other: &PlatformKeyOperation) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PlatformKeyOperation