Struct Attributes 

pub struct Attributes<'a> { /* private fields */ }

An original attribute set with independently retained catalogue storage.

Implementations

impl<'a> Attributes<'a>

pub fn read( parent: &Reader<'a>, element: &Element<'a>, placement: Placement, ) -> Result<Self>

Reads nonempty attributes in their trusted schema placement.

RFC5652 §5.3 requires nonempty Signed/UnsignedAttributes. Signed sets are reread under DER through the same parser, not repaired or re-encoded. Generic attributes preserve unknown instances; per-type cardinality and placement checks are separate (§§11.1–11.4, RFC6211 §2). https://www.rfc-editor.org/rfc/rfc5652#section-5.3

pub fn read_inspection( parent: &Reader<'a>, element: &Element<'a>, placement: Placement, ) -> Result<Self>

Reads original attributes while retaining a uniquely bounded empty set.

An empty outer set violates RFC5652 §5.3 and is exposed by Self::fault. This inspection recovery does not relax signed DER, member syntax or binding requirements. It preserves presence rather than treating an invalid written set as absent.

pub fn fault(&self) -> Option<Error>

The located nonempty-bound violation, without allocating diagnostics.

Original signed bytes remain available for inspection; this fault must be refused before preparing a cryptographic operation.

pub fn items(&self) -> &[Attribute<'a>]

The original attribute catalogue in encoded order.

pub fn element(&self) -> &Element<'a>

The exact range and placement supplied by the schema.

pub fn all<'s>(&'s self, kind: Oid<'s>, execution: &Memory) -> Matching<'s, 'a>

Searches every instance with the current retained-query account.

Lookup errors are yielded once, then iteration stops. Absence is returned only after the whole admitted search, including its terminal step.

pub fn all_in<'s>( &'s self, kind: Oid<'s>, parent: &'s Reader<'_>, ) -> Matching<'s, 'a, Execution<'s>>

Searches through the producing reader’s local and aggregate ceilings.

pub fn unique_in<'s>( &'s self, kind: Oid<'s>, parent: &'s Reader<'_>, ) -> Result<Option<&'s Attribute<'a>>>

Requires at most one instance for a specifically singleton attribute type.

Unknown generic types must use Self::all_in instead: RFC5652 §5.3 does not forbid every repeated attribute identifier.

pub fn singleton_inspection_in<'s>( &'s self, kind: Oid<'_>, parent: &Reader<'_>, ) -> Result<SingletonReading<'s, 'a>>

Selects one readable original singleton while reporting copied instances.

Only byte-identical copies share one inspection reading. Conflicts refuse rather than choosing a claim; original signed bytes are never normalized. This does not validate the type’s values or relax strict Self::unique_in / binding. Located registered-type violations are retained by crate::signer::SignerInfo::faults.

The producing session is checked before query work. Scanning and byte comparisons use both its local and aggregate current ceilings. The returned borrowing facts retain no query execution or scratch storage.

pub fn signed_bytes(&self) -> Option<[&'a [u8]; 2]>

Original signed octets with only the implicit identifier replaced by SET.

RFC5652 §5.4 requires the SET OF identifier, preserving original DER length/content. Unsigned sets have no such signed range.

Trait Implementations

impl<'a> Debug for Attributes<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.