Struct VerificationPolicy 

pub struct VerificationPolicy {

    pub validity: Option<PolicyValidity>,
    pub signature_constraints: SignatureConstraints,
    pub key_establishment: KeyEstablishmentPolicy,
    pub parameterized_rsa_pss: RsaPssPermission,
    pub signature_algorithms: Option<HashSet<SignatureAlgorithm>>,
    pub digest_algorithms: Option<HashSet<DigestAlgorithm>>,
    pub hmac: HmacPolicy,
    pub ecdsa_signature_value_encoding: EcdsaSignatureValueEncoding,
    pub key_trust: KeyTrustPolicy,
    pub key_sources: KeySourcePolicy,
    pub uris: UriPolicy,
    pub transforms: TransformPolicy,
    pub manifest_processing: ManifestProcessing,
    pub xml: XmlInputPolicy,
    pub resources: ResourcePolicy,
}

Immutable policy snapshot for XMLDSig verification.

Fields

validity: Option<PolicyValidity>

Explicitly authorized lifetime; checked again at operation entry.

signature_constraints: SignatureConstraints

XML Security requirements, not application protocol validation.

key_establishment: KeyEstablishmentPolicy

Shared key-establishment permissions and cumulative operation limits.

parameterized_rsa_pss: RsaPssPermission

Family permission selected by the caller, never derived from document input. Legacy hashes additionally require the independent key-trust permission.

signature_algorithms: Option<HashSet<SignatureAlgorithm>>

Exact signature methods, supplemented by parameterized_rsa_pss. None accepts every implemented method subject to independent gates such as KeyTrustPolicy::allowed_legacy_signature_algorithms.

digest_algorithms: Option<HashSet<DigestAlgorithm>>

Allowed reference digest methods; None accepts every implemented method.

hmac: HmacPolicy

HMAC secret and output-length requirements.

ecdsa_signature_value_encoding: EcdsaSignatureValueEncoding

Required ECDSA SignatureValue wire representation.

key_trust: KeyTrustPolicy

Key and certificate trust rules.

key_sources: KeySourcePolicy

KeyInfo source permissions.

uris: UriPolicy

Reference and key-retrieval URI permissions.

transforms: TransformPolicy

Transform and canonicalization permissions.

manifest_processing: ManifestProcessing

Whether authenticated Manifest references are processed.

xml: XmlInputPolicy

XML parser rules.

resources: ResourcePolicy

Resource ceilings.

Implementations

impl VerificationPolicy

pub fn validate(&self) -> Result<(), PolicyViolation>

Validate the complete snapshot against implementation hard ceilings.

pub fn check_signature_algorithm( &self, algorithm: SignatureAlgorithm, ) -> Result<(), PolicyViolation>

Enforce the signature algorithm after key resolution.

Trait Implementations

impl Clone for VerificationPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerificationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VerificationPolicy

fn default() -> Self

Returns the “default value” for a type.

impl XmlDocumentPolicy for VerificationPolicy