Struct OnionAuthenticatedPayload 

pub struct OnionAuthenticatedPayload {
    pub return_id: OnionReturnId,
    pub nonce: OnionBackwardNonce,
    pub sequence: OnionBackwardSequence,
    pub authentication: MessageVerification,
    pub payload: OnionCircuitPayload,
}

Client-decrypted backward payload plus the exit session proof that authenticated it.

Fields

return_id: OnionReturnId

Client/exit-only return id encrypted in the exit layer.

nonce: OnionBackwardNonce

Random transcript nonce signed by the exit for ciphertext and signature freshness.

sequence: OnionBackwardSequence

Monotonic sequence in the exit-to-client direction for this circuit.

authentication: MessageVerification

Exit session signature over the backward payload transcript.

payload: OnionCircuitPayload

Application payload signed by the exit and encrypted to the client.

Implementations

impl OnionAuthenticatedPayload

pub fn new_signed( return_id: OnionReturnId, payload: OnionCircuitPayload, signer: &SessionSk, ) -> Result<Self>

Sign one backward payload with a fresh replay nonce.

pub fn new_signed_at_sequence( return_id: OnionReturnId, sequence: OnionBackwardSequence, payload: OnionCircuitPayload, signer: &SessionSk, ) -> Result<Self>

Sign one backward payload at a caller-owned monotonic circuit sequence.

pub fn into_verified_payload( self, return_id: OnionReturnId, expected_exit: &OnionExitDescriptor, ) -> Result<OnionVerifiedPayload>

Verify that a client-decrypted backward payload was signed by the selected exit session.

Invariant: accepted backward payloads satisfy all three identity equalities: signer account DID equals descriptor DID, signer account public key equals descriptor public key, and signer session DID equals the descriptor session encryption key DID. The signed transcript also binds the client/exit return id, per-frame nonce, exit session public key, and payload.

Trait Implementations

impl Clone for OnionAuthenticatedPayload

fn clone(&self) -> OnionAuthenticatedPayload

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OnionAuthenticatedPayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OnionAuthenticatedPayload

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for OnionAuthenticatedPayload

impl PartialEq for OnionAuthenticatedPayload

fn eq(&self, other: &OnionAuthenticatedPayload) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for OnionAuthenticatedPayload

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for OnionAuthenticatedPayload