Struct Keychain 

pub struct Keychain { /* private fields */ }

A keychain managing trusted author keys and module signature verification.

Implementations

impl Keychain

pub fn new(require_signatures: bool) -> Self

Create a new keychain.

When require_signatures is true, unsigned modules are rejected.

pub fn add_trusted(&mut self, author: TrustedAuthor)

Add or replace a trusted author in the keychain.

pub fn remove_trusted(&mut self, public_key: &[u8; 32]) -> Option<TrustedAuthor>

Remove a trusted author by public key.

Returns the removed author, or None if the key was not in the keychain.

pub fn is_trusted( &self, public_key: &[u8; 32], module_name: &str, manifest_hash: &[u8; 32], ) -> bool

Check whether the given public key is trusted for a module with the specified name and manifest hash.

pub fn verify_module( &self, module_name: &str, manifest_hash: &[u8; 32], signature: Option<&ModuleSignatureData>, ) -> VerifyResult

Verify a module’s signature against the keychain trust policy.

Checks:

1. If no signature is present, passes only when signatures are not required.
2. Cryptographic validity of the Ed25519 signature.
3. The signing key is in the keychain and trusted for this module.

pub fn requires_signatures(&self) -> bool

Whether this keychain requires all modules to be signed.

Trait Implementations

impl Clone for Keychain

fn clone(&self) -> Keychain

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.