Enum PivSlot 

pub enum PivSlot {
    Authentication,
    Signature,
    KeyManagement,
    CardAuthentication,
    Retired(u8),
}

PIV key slot identifiers.

Defined by NIST SP 800-73-5 Part 1, Table 4b (“PIV Card Application Card Command Interface: Key References”). These slot assignments are fixed by the standard and MUST NOT be changed.

Standard references

• NIST SP 800-73-5 Part 1, §3.1.2: Key References
• NIST SP 800-73-5 Part 2, §3.2: GENERAL AUTHENTICATE

Variants

Authentication

Slot 9A: PIV Authentication Key. Used for card/cardholder authentication (e.g. system login). PIN required once per session. [NIST SP 800-73-5 Part 1, §3.1.2]

Signature

Slot 9C: Digital Signature Key. Used for document/code signing. PIN required before EVERY private key operation (“PIN Always” access rule). Data to be signed is hashed off-card. [NIST SP 800-73-5 Part 1, §3.1.2; Part 2, §3.2.4]

KeyManagement

Slot 9D: Key Management Key. Used for key establishment (encryption/decryption). PIN required once per session. [NIST SP 800-73-5 Part 1, §3.1.2]

CardAuthentication

Slot 9E: Card Authentication Key. Used for physical access (e.g. PIV-enabled door locks). NO PIN required for private key operations. [NIST SP 800-73-5 Part 1, §3.1.2]

Retired(u8)

Retired Key Management Key slot.

Holds a previously used Key Management key for decrypting historical documents. The inner value is an index in 0..=19, where 0 corresponds to PIV key reference 0x82 and 19 corresponds to 0x95.

Construct with PivSlot::retired to enforce the valid range. [NIST SP 800-73-5 Part 1, §3.1.2]

Implementations

impl PivSlot

pub fn retired(index: u8) -> Option<Self>

Create a retired key management slot from an index in 0..=19.

Returns None if index is out of the valid range. The 20 retired slots correspond to PIV key references 0x82–0x95.

Trait Implementations

impl Clone for PivSlot

fn clone(&self) -> PivSlot

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PivSlot

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PivSlot

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for PivSlot

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for PivSlot

fn eq(&self, other: &PivSlot) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PivSlot

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for PivSlot

impl Eq for PivSlot

impl StructuralPartialEq for PivSlot