Crate secure_device_trust 

secure_device_trust — typed native-client device trust policy decisions.

This crate models bootstrap identity, client type, platform, attestation rollout mode, trust-tier decisions, and short-lived session certificate lifecycle policy.

Re-exports

pub use session::CsrExtensionRequest;

pub use session::CsrRejectionReason;

pub use session::NoRevocations;

pub use session::RevocationChecker;

pub use session::RevocationHandle;

pub use session::SessionCertificateBundle;

pub use session::SessionCertificateError;

pub use session::SessionCertificateIssuer;

pub use session::SessionCertificatePolicy;

pub use session::SessionCertificateProfile;

pub use session::SessionCertificateRequest;

pub use session::SessionCertificateSigner;

pub use session::SessionCsrProfile;

pub use session::SessionExtendedKeyUsage;

pub use session::SessionSubjectAltName;

pub use session::SignedSessionCertificate;

Modules

session

Session certificate lifecycle policy for native device trust.

Structs

BootstrapIdentity

Bootstrap certificate metadata needed by device trust policy.

DeviceAttestationEvidence

Normalised attestation evidence.

DeviceTrustDecision

Result of evaluating a device trust request.

DeviceTrustPolicy

Device trust policy evaluator.

DeviceTrustRequest

Device trust evaluation input.

Enums

AttestationMode

Backend-owned platform attestation rollout mode.

BootstrapBinding

Whether the bootstrap credential is per-install or a shared app credential.

BootstrapStatus

Whether bootstrap identity is currently authorised.

ClientType

Native client shape presenting device trust evidence.

DeviceTrustError

Errors returned by policy evaluation.

DeviceTrustOutcome

High-level device trust outcome.

DeviceTrustReason

Stable reason codes for trust decisions.

EvidenceFreshness

Attestation freshness state.

Platform

Operating system or runtime platform for a native client.

ReleaseChannel

Release channel for the requesting app.

TrustTier

Trust tier assigned to a device.