Struct yubihsm::auth_key::AuthKey

pub struct AuthKey(_);

YubiHSM2 authentication keys (2 * AES-128 symmetric PSK) from which session keys are derived.c

Methods

impl AuthKey

pub fn random() -> Self

Generate a random AuthKey using OsRng.

pub fn derive_from_password(password: &[u8]) -> Self

Derive an auth key from a password (using PBKDF2 + static salt). This method is designed to be compatible with yubihsm-shell. Ensure you use a long, random password when using this method as the key derivation algorithm used does little to prevent brute force attacks.

pub fn from_slice(key_slice: &[u8]) -> Result<Self, AuthKeyError>

Create an AuthKey from a 32-byte slice, returning an error if the key is the wrong length

pub fn new(key_bytes: [u8; 32]) -> Self

Create a new AuthKey from the given byte array

Important traits for &'a [u8]

impl<'a> Read for &'a [u8]impl<'a> Write for &'a mut [u8]

pub fn as_secret_slice(&self) -> &[u8]

Borrow the secret authentication keys

Trait Implementations

impl Clone for AuthKey

fn clone(&self) -> AuthKey

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthKey

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl Default for AuthKey

Derive the default authentication key for all YubiHSM2s

fn default() -> Self

Returns the "default value" for a type.

impl Drop for AuthKey

fn drop(&mut self)

Executes the destructor for this type.

impl From<[u8; 32]> for AuthKey

fn from(key_bytes: [u8; 32]) -> AuthKey

Performs the conversion.

impl Serialize for AuthKey

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl<'de> Deserialize<'de> for AuthKey

fn deserialize<D: Deserializer<'de>>(     deserializer: D ) -> Result<AuthKey, D::Error>

Deserialize this value from the given Serde deserializer.