Enum PivPinPolicy 

#[non_exhaustive]
pub enum PivPinPolicy {
    Default,
    Never,
    Once,
    Always,
}

PIN access policy for PIV private key operations.

Standard PIV defines fixed PIN policies per slot (see PivSlot docs). YubiKey extends this with per-key configurable policies.

Standard references

• NIST SP 800-73-5 Part 2, §3.2: access rules per key reference
• Yubico PIV documentation: configurable PIN policies (vendor extension)

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Default

Use the slot’s default policy per NIST SP 800-73.

Never

No PIN required (vendor extension, not standard PIV).

Once

PIN verified once per session.

Always

PIN verified before every private key operation (“PIN Always”).

Trait Implementations

impl Clone for PivPinPolicy

fn clone(&self) -> PivPinPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PivPinPolicy

impl Debug for PivPinPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PivPinPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PivPinPolicy

impl PartialEq for PivPinPolicy

fn eq(&self, other: &PivPinPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PivPinPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PivPinPolicy