Struct VerifyOptions

Source

pub struct VerifyOptions {
    pub expected_prev_tail: Option<[u8; 32]>,
    pub require_eof_hmac: bool,
}

Expand description

v0.8.2 #63: knobs that change how strictly verify_audit_log walks the file. Defaults preserve back-compat with v0.5 #31 callers.

Fields§

§expected_prev_tail: Option<[u8; 32]>

Operator-supplied previous-file tail HMAC. When Some(tail), any # prev_file_tail=<hex> comment in the file is ignored as authentication (it is still parsed as a sanity check, but the chain seed is the operator-supplied value). Eliminates H-3 (splice/replay): an attacker who fabricates a # prev_file_tail= comment cannot forge cross-file linkage when the operator supplies the real previous-file’s tail out-of-band.

§require_eof_hmac: bool

When true, the file MUST end with a recognized # eof_hmac=<hex> marker that verifies against the file’s final chain state; otherwise the verifier returns VerifyError::EofHmacMissing (or VerifyError::EofHmacMismatch on a malformed value). Mitigates H-2 (truncation un-detection). Off by default for back-compat with pre-v0.8.2 audit logs that don’t yet carry the marker.

VerifyOptions

Struct VerifyOptions Copy item path

Fields§

Trait Implementations§

impl Clone for VerifyOptions

fn clone(&self) -> VerifyOptions

fn clone_from(&mut self, source: &Self)

impl Debug for VerifyOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

impl Default for VerifyOptions

fn default() -> VerifyOptions

impl PartialEq for VerifyOptions

fn eq(&self, other: &VerifyOptions) -> bool

fn ne(&self, other: &Rhs) -> bool

impl Eq for VerifyOptions

impl StructuralPartialEq for VerifyOptions

Auto Trait Implementations§

impl Freeze for VerifyOptions

impl RefUnwindSafe for VerifyOptions

impl Send for VerifyOptions

impl Sync for VerifyOptions

impl Unpin for VerifyOptions

impl UnsafeUnpin for VerifyOptions

impl UnwindSafe for VerifyOptions

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<'a, T, E> AsTaggedExplicit<'a, E> for Twhere T: 'a,

fn explicit(self, class: Class, tag: u32) -> TaggedParser<'a, Explicit, Self, E>

impl<'a, T, E> AsTaggedImplicit<'a, E> for Twhere T: 'a,

fn implicit( self, class: Class, constructed: bool, tag: u32, ) -> TaggedParser<'a, Implicit, Self, E>

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<T> CloneToUninit for Twhere T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

impl<Q, K> Equivalent<K> for Qwhere Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn equivalent(&self, key: &K) -> bool

impl<Q, K> Equivalent<K> for Qwhere Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn equivalent(&self, key: &K) -> bool

impl<Q, K> Equivalent<K> for Qwhere Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn equivalent(&self, key: &K) -> bool

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> FromExt for T

fn from_<T>(t: T) -> Selfwhere Self: From<T>,

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self>

fn in_current_span(self) -> Instrumented<Self>

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> IntoExt for T

fn into_<T>(self) -> Twhere Self: Into<T>,

impl<T> Pointable for T

const ALIGN: usize

type Init = T

unsafe fn init(init: <T as Pointable>::Init) -> usize

unsafe fn deref<'a>(ptr: usize) -> &'a T

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

unsafe fn drop(ptr: usize)

impl<T> PolicyExt for Twhere T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>where T: Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>where T: Policy<B, E>, P: Policy<B, E>,

impl<T> Same for T

type Output = T

impl<T> ToOwned for Twhere T: Clone,

type Owned = T

fn to_owned(&self) -> T

fn clone_into(&self, target: &mut T)

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

type Error = Infallible

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

impl<T> TryFromExt for T

fn try_from_<T>(t: T) -> Result<Self, Self::Error>where Self: TryFrom<T>,

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

impl<T> TryIntoExt for T

fn try_into_<T>(self) -> Result<T, Self::Error>where Self: TryInto<T>,

Struct VerifyOptions

impl<T> Any for T
where T: 'static + ?Sized,

impl<'a, T, E> AsTaggedExplicit<'a, E> for T
where T: 'a,

impl<'a, T, E> AsTaggedImplicit<'a, E> for T
where T: 'a,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<T> CloneToUninit for T
where T: Clone,

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn from_<T>(t: T) -> Self
where Self: From<T>,

impl<T, U> Into<U> for T
where U: From<T>,

fn into_<T>(self) -> T
where Self: Into<T>,

impl<T> PolicyExt for T
where T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

impl<T> ToOwned for T
where T: Clone,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

fn try_from_<T>(t: T) -> Result<Self, Self::Error>
where Self: TryFrom<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

fn try_into_<T>(self) -> Result<T, Self::Error>
where Self: TryInto<T>,

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,