Struct EncryptedUserProfile 

pub struct EncryptedUserProfile {
    pub user_id: UserId,
    pub public_key: Vec<u8>,
    pub encrypted_data: Vec<u8>,
    pub signature: Vec<u8>,
    pub ipv6_binding_proof: Option<IPv6BindingProof>,
    pub created_at: SystemTime,
}

Encrypted user profile for secure DHT storage

Contains encrypted personal information and profile data that is stored in the DHT. The encryption ensures that only authorized parties can access the full profile information while still allowing network verification.

Fields

user_id: UserId

User identifier matching the identity

public_key: Vec<u8>

Public key for verification and key exchange

encrypted_data: Vec<u8>

AES-GCM encrypted profile data containing personal information

signature: Vec<u8>

ML-DSA signature of the encrypted data for integrity verification

ipv6_binding_proof: Option<IPv6BindingProof>

Optional proof of IPv6 address binding for network verification

created_at: SystemTime

Timestamp when this profile was created

Implementations

impl EncryptedUserProfile

pub fn new( user_id: UserId, public_key: Vec<u8>, encrypted_data: Vec<u8>, signature: Vec<u8>, ) -> Self

Create new encrypted user profile from raw cryptographic data

Arguments

• user_id - User identifier matching an existing identity
• public_key - ML-DSA public key bytes for verification
• encrypted_data - ChaCha20Poly1305 encrypted profile data
• signature - ML-DSA signature of the encrypted data

Returns

New encrypted profile instance with current timestamp

pub fn new_from_identity( identity: &UserIdentity, profile: &UserProfile, secret: &MlDsaSecretKey, ipv6_binding: Option<IPv6BindingProof>, ) -> Result<Self>

Create encrypted user profile from identity and profile data

Encrypts a user profile and creates cryptographic signatures for secure storage in the DHT. Optionally includes IPv6 binding proof.

Arguments

• identity - User identity to associate with the profile
• profile - Unencrypted profile data to be secured
• secret - ML-DSA secret key for signing operations
• ipv6_binding - Optional IPv6 address binding proof

Returns

Encrypted and signed profile ready for DHT storage

Errors

Returns error if serialization or signing fails

pub fn generate_profile_key() -> [u8; 32]

Generate random 256-bit symmetric key for profile encryption

Creates a cryptographically secure random key for encrypting profile data. Each profile should have its own unique key.

Returns

32-byte key

pub fn verify_signature(&self) -> Result<bool>

Verify the cryptographic signature of the encrypted profile

Validates that the signature was created by the holder of the private key corresponding to the stored public key.

Returns

True if signature is valid, false otherwise

Errors

Returns error if signature verification fails

pub fn decrypt_profile(&self, key: &[u8]) -> Result<UserProfile>

Decrypt the encrypted profile data using provided key

Decrypts the AES-GCM encrypted profile data to recover the original UserProfile structure. Requires the correct decryption key.

Arguments

• key - AES-256 decryption key (32 bytes)

Returns

Decrypted UserProfile structure

Errors

Returns error if decryption fails or data is corrupted

pub fn get_access_grant(&self, _user_id: &str) -> Option<AccessGrant>

Retrieve access grant for a specific user

Looks up any existing access grants that have been issued to the specified user ID for accessing this profile.

Arguments

• _user_id - User ID to check for existing grants

Returns

Access grant if one exists, None otherwise

pub fn is_grant_valid(_grant: &AccessGrant) -> bool

Validate an access grant for time and signature validity

Checks if an access grant is still valid by verifying it hasn’t expired and has a valid cryptographic signature.

Arguments

• _grant - Access grant to validate

Returns

True if grant is valid and not expired

pub fn grant_access( &mut self, user_id: &str, _public_key_bytes: &[u8], permissions: ProfilePermissions, _profile_key: &[u8; 32], ) -> Result<()>

Grant profile access permissions to another user

Creates an encrypted access grant allowing another user to access specific parts of this profile based on the specified permissions.

Arguments

• user_id - User ID to grant access to
• public_key_bytes - Public key of the user for encryption (ML-DSA)
• permissions - Specific permissions to grant
• profile_key - Profile encryption key for re-encryption
• keypair - Keypair for signing the access grant

Returns

Success or error if grant creation fails

Errors

Returns error if encryption or signing fails

pub fn revoke_access(&mut self, _user_id: &str) -> Result<()>

Revoke previously granted access from a user

Removes any existing access grants for the specified user, effectively blocking their access to this profile.

Arguments

• _user_id - User ID to revoke access from

Returns

Success or error if revocation fails

Errors

Returns error if user doesn’t exist or revocation fails

Trait Implementations

impl Clone for EncryptedUserProfile

fn clone(&self) -> EncryptedUserProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptedUserProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EncryptedUserProfile

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EncryptedUserProfile

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.