Struct yubihsm::authentication::key::Key

pub struct Key(_);

YubiHSM 2 authentication keys (2 * AES-128 symmetric PSK) from which session keys are derived.c

Implementations

impl Key

pub fn random() -> Self

Generate a random Key using OsRng.

pub fn derive_from_password(password: &[u8]) -> Self

Available on crate feature passwords only.

Derive an auth key from a password (using PBKDF2 + static salt). This method is designed to be compatible with yubihsm-shell. Ensure you use a long, random password when using this method as the key derivation algorithm used does little to prevent brute force attacks.

pub fn from_slice(key_slice: &[u8]) -> Result<Self, Error>

Create an authentication::Key from a 32-byte slice, returning an error if the key is the wrong length

pub fn new(key_bytes: [u8; 32]) -> Self

Create a new Key from the given byte array

pub fn as_secret_slice(&self) -> &[u8]

Borrow the secret authentication keys

Trait Implementations

impl Clone for Key

fn clone(&self) -> Key

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Key

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Key

Available on crate feature passwords only.

Derive the default authentication key for all YubiHSM 2s

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Key

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Key, D::Error>

Deserialize this value from the given Serde deserializer.

impl Drop for Key

fn drop(&mut self)

Executes the destructor for this type.

impl From<[u8; 32]> for Key

fn from(key_bytes: [u8; 32]) -> Key

Converts to this type from the input type.

impl Serialize for Key

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.