Enum SecurityError 

pub enum SecurityError {
    UnsignedManifest {
        manifest_offset: u64,
    },
    InvalidSignature {
        manifest_offset: u64,
        rejection_phase: &'static str,
    },
    UnknownSigner {
        manifest_offset: u64,
        actual_signer: [u8; 16],
        expected_signer: Option<[u8; 16]>,
    },
    ContentHashMismatch {
        pointer_name: &'static str,
        expected_hash: [u8; 16],
        actual_hash: [u8; 16],
        seg_offset: u64,
    },
    EpochDriftExceeded {
        epoch_drift: u32,
        max_epoch_drift: u32,
    },
    Level1InvalidSignature {
        manifest_offset: u64,
    },
}

Structured security error with deterministic, stable error codes.

Every variant includes enough context for logging and diagnostics without exposing internal state that could aid an attacker.

Variants

UnsignedManifest

Level 0 manifest has no signature (sig_algo = 0).

Fields

manifest_offset: u64

Byte offset of the rejected manifest.

InvalidSignature

Signature is present but cryptographically invalid.

Fields

manifest_offset: u64

Byte offset of the rejected manifest.

rejection_phase: &'static str

Phase where rejection occurred.

UnknownSigner

Signature is valid but from an unknown/untrusted signer.

Fields

manifest_offset: u64

Byte offset of the rejected manifest.

actual_signer: [u8; 16]

Fingerprint of the actual signer (first 16 bytes of public key hash).

expected_signer: Option<[u8; 16]>

Fingerprint of the expected signer from trust store (if known).

ContentHashMismatch

Content hash of a hotset-referenced segment does not match.

Fields

pointer_name: &'static str

Name of the pointer that failed (e.g., “centroid_seg_offset”).

expected_hash: [u8; 16]

Content hash stored in Level 0.

actual_hash: [u8; 16]

Actual hash of the segment at the pointed offset.

seg_offset: u64

Byte offset that was followed.

EpochDriftExceeded

Centroid epoch drift exceeds maximum allowed.

Fields

epoch_drift: u32

Current epoch drift value.

max_epoch_drift: u32

Maximum allowed drift.

Level1InvalidSignature

Level 1 manifest signature invalid (Paranoid mode only).

Fields

manifest_offset: u64

Byte offset of the Level 1 manifest.

Trait Implementations

impl Clone for SecurityError

fn clone(&self) -> SecurityError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for SecurityError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SecurityError

fn eq(&self, other: &SecurityError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SecurityError

impl StructuralPartialEq for SecurityError