Struct RequestHashKey 

pub struct RequestHashKey { /* private fields */ }

HMAC-SHA256 key for the request_hash column (#268).

Derived from the audit key material through AuditKey::request_hash_key; never constructed from the raw signing seed by any other path. The keying is what makes an exported request_hash uncrackable: before v4 the column was one unsalted SHA-256 over the unredacted parameters, so an export let any holder brute-force low-entropy values such as a Wi-Fi passphrase offline. An HMAC keeps the preview/execute binding the daemon needs — and the opacity the offline verifier needs, since verify_rows re-signs the stored column rather than recomputing it — while removing the ability to test guesses without the key.

Debug is manual and never renders the key bytes, for the same reason AuditKey’s is.

Implementations

impl RequestHashKey

pub fn request_hash(&self, action_name: &str, canonical_params: &str) -> String

HMAC-SHA256(key, action_name || 0x00 || canonical_params), hex-encoded: 64 characters, the same width the unsigned hash had, so the column, the wire format and every length check downstream are unchanged.

The message framing is byte-identical to the pre-v4 SHA-256; only the keying changed. That is deliberate — it keeps the two schemes comparable in tests (request_hash_is_not_the_unsigned_sha256) and means no caller-visible contract beyond confidentiality moved.

Trait Implementations

impl Clone for RequestHashKey

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RequestHashKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.