Struct HmacSigner 

pub struct HmacSigner { /* private fields */ }

The in-process COSE_Mac0 signer: service to service inside one trust domain (§3). Its kid is the thumbprint prefix of the secret.

Implementations

impl HmacSigner

pub fn new( alg: CoseAlg, secret: impl Into<Vec<u8>>, ) -> Result<HmacSigner, CratestackError>

alg must be CoseAlg::Hmac256_64 or CoseAlg::Hmac256_256, and the secret at least 32 random bytes (see HmacSecret). Fails with CratestackError::Validation otherwise.

pub fn from_secret( alg: CoseAlg, secret: HmacSecret, ) -> Result<HmacSigner, CratestackError>

As HmacSigner::new, from an already validated secret.

pub fn verify_key(&self) -> CoseVerifyKey

The matching verification key, for a resolver. It carries this signer’s algorithm and accepts no other: a 256/256 key never accepts a 64-bit tag made with the same secret.

Trait Implementations

impl Clone for HmacSigner

fn clone(&self) -> HmacSigner

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl CoseSigner for HmacSigner

fn sign_chunks( &self, to_be_signed: &[&[u8]], ) -> Option<Result<Vec<u8>, CratestackError>>

In process, so the MAC is computed over the structure’s pieces, without the envelope building it contiguously.

fn alg(&self) -> CoseAlg

The algorithm every signature from this signer uses.

fn kid(&self) -> &[u8]

The key’s kid: the first 8 bytes of its RFC 9679 thumbprint (§3).

fn sign<'life0, 'life1, 'async_trait>( &'life0 self, to_be_signed: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>, CratestackError>> + Send + 'async_trait>>

where 'life0: 'async_trait, 'life1: 'async_trait, HmacSigner: 'async_trait,

Sign (or MAC) to_be_signed. For HMAC 256/64 this returns the truncated 8-byte tag. An error is a backend failure (a 500).

impl Debug for HmacSigner

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.