Struct PasswordOwnerSetup 

pub struct PasswordOwnerSetup {
    pub envelope: Option<PasswordOwnerEnvelopeV1>,
    pub auth_salt: Vec<u8>,
    pub auth_verifier_public_key: Vec<u8>,
    pub auth_memory_kib: u32,
    pub auth_iterations: u32,
    pub auth_parallelism: u32,
    pub auth_kdf_id: u32,
    pub format_version: u32,
    pub auth_verifier_possession_signature: Vec<u8>,
}

Public authentication metadata, stored separately from the encrypted seed. Client input is UTF8(NFC(password)), preserving case and all spaces. Client guidance is 15+ Unicode characters and at most 1024 UTF-8 bytes; the server cannot enforce strength without seeing the password. The independent inputs are UTF8(“heddle-password-auth-v1”) || 0x00 || UTF8(NFC(password)) with auth_salt, and UTF8(“heddle-owner-wrap-v1”) || 0x00 || UTF8(NFC(password)) with wrap_salt. Both use the recorded Argon2id costs and 32-byte output. Only the Ed25519 public key derived from auth_seed crosses the network. Discard unknown fields, including nested envelope fields, and persist only the canonical re-encoding of known fields (<= 4608 bytes). The verifier and owner keys MUST be canonical, decompressible, and non-small-order. Ed25519 signatures use strict verification: canonical R and S, non-small-order points, and the standard group equation. Rust uses verify_strict; WebCrypto callers MUST precheck these conditions before its verify operation.

Fields

envelope: Option<PasswordOwnerEnvelopeV1>

Required; <= 4096 encoded bytes.

auth_salt: Vec<u8>

Exactly 16 bytes, different from wrap_salt.

auth_verifier_public_key: Vec<u8>

Exactly 32-byte Ed25519 public key, never an auth seed.

auth_memory_kib: u32

Exactly 65536 in v1.

auth_iterations: u32

Exactly 3 in v1.

auth_parallelism: u32

Exactly 4 in v1.

auth_kdf_id: u32

Exactly 1 = Argon2id in v1.

format_version: u32

Exactly 1 in v1.

auth_verifier_possession_signature: Vec<u8>

Future cost policies use a monotone floor, never below the pinned v1 minimum. Existing envelopes remain readable at their recorded costs. At signup, Ed25519 signs SHA-256(“heddle-password-verifier-possession-v1” || RegistrationChallenge.challenge[32]); on PUT it signs the setup- authorization digest. The server verifies this with auth_verifier_public_key before persisting; the signature is excluded from setup_sha256 to avoid a circular transcript.

Exactly 64 bytes.

Trait Implementations

impl Clone for PasswordOwnerSetup

fn clone(&self) -> PasswordOwnerSetup

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PasswordOwnerSetup

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for PasswordOwnerSetup

fn default() -> PasswordOwnerSetup

Returns the “default value” for a type.

impl Eq for PasswordOwnerSetup

impl Hash for PasswordOwnerSetup

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for PasswordOwnerSetup

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for PasswordOwnerSetup

fn eq(&self, other: &PasswordOwnerSetup) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PasswordOwnerSetup