Crate structured_cms 

CMS signatures, digital envelopes and timestamps over original ASN.1 ranges.

Content acquisition, cryptographic engines, trust policy and application verdicts belong to the caller. This crate performs no implicit I/O.

Re-exports

pub use content::ContentInfo;

pub use content::Encapsulated;

pub use error::Error;

pub use error::ErrorCode;

pub use error::Result;

pub use octets::Octets;

pub use octets::Piece;

pub use signed::SignedData;

Modules

archive

CAdES archive-time-stamp-v3 and its ats-hash-index-v3 (ETSI EN 319 122-1 V1.3.1 §5.5).

attribute

Original CMS attribute values and the exact retagged signed range.

attribute_certificate

Original Attribute Certificate v2 structure (RFC5755 §4.1 / Appendix B).

binding

Signed content binding and algorithm protection before cryptographic callbacks.

cades

CAdES attribute rules of ETSI EN 319 122-1 V1.3.1 §§5.2-5.5 that narrow the generic CMS and ESS schemas.

content

CMS content envelopes, preserving original elements and producing readers.

content_source

Scoped decoding of carried encodings with explicit physical provenance.

counter

Lazy direct countersignatures without a recursive traversal or new parser.

digest

One-pass digest fan-out with one final output per resolved semantic identity.

directory

Accounted certificate hint indexes, without signer identity or trust verdicts.

enveloped

Borrowed CMS digital envelopes, with explicit provider/key selection.

error

Located processing failures, retaining the original ASN.1 diagnostic.

ess

Original ESS certificate bindings and signed validation-set restrictions.

mime

Allocation-free MIME media types and original header-field framing.

octets

Iterative BER OCTET STRING views with source spans and retained accounting.

oid

CMS identifiers used by the protocol’s schema and attribute rules.

payload

One complete source pass for resolved digest and raw-signature states.

personal

Provider-neutral personal key containers (RFC7292 / RFC5958).

prepare

Schema and selected-provider preflight before state initialization or I/O.

provider

Selected-provider identities and distinct raw versus finalized-prehash inputs.

signed

SignedData catalogues and version facts, without application trust decisions.

signer

Original signer identities, algorithms, attributes and signature ranges.

stream

One payload pass with sticky source, callback and resource refusal.

timestamp

RFC3161 timestamp facts, independent of application timelines and trust.

verify

Selected-signer arithmetic and content facts from one complete payload pass.