Struct ContentDigest 

pub struct ContentDigest(/* private fields */);

Cryptographic digest of an image attachment’s bytes at grant time.

Stored on ContentPart::Image so the provider adapter can detect same-path replacement attacks: when the adapter re-reads the file at request time, it recomputes the digest and compares. A mismatch means the file was replaced between grant and read, and the part MUST be omitted (Owner P1-B security rework, 2026-07-21).

Backed by SHA-256 ([u8; 32]). The hash itself is computed in talos_cli::image_validation; talos-core only carries the typed digest so it has no sha2 dependency. Serde uses a lowercase hex string so TLOG dumps remain human-readable.

The default is the all-zero “unverified” sentinel: a freshly constructed ContentPart that has not yet been through validate_image_path carries this. Provider adapters treat the default as “verification intentionally skipped” — only test fixtures and unverified in-memory parts use this path.

Implementations

impl ContentDigest

pub const fn from_raw(bytes: [u8; 32]) -> Self

Wrap an existing raw SHA-256 digest.

pub const fn as_bytes(&self) -> &[u8; 32]

Returns the raw 32-byte digest.

pub fn to_hex(&self) -> String

Returns the digest formatted as a lowercase hex string.

pub fn from_hex(s: &str) -> Result<Self, String>

Parses a 64-char lowercase hex string into a digest.

Trait Implementations

impl Clone for ContentDigest

fn clone(&self) -> ContentDigest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContentDigest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ContentDigest

fn default() -> ContentDigest

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ContentDigest

fn deserialize<D: Deserializer<'de>>(d: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Display for ContentDigest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ContentDigest

impl PartialEq for ContentDigest

fn eq(&self, other: &ContentDigest) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ContentDigest

fn serialize<S: Serializer>(&self, s: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ContentDigest