Struct WrappedStoreKey 

pub struct WrappedStoreKey {
    pub author_pubkey: String,
    pub generation: u64,
    pub sealed: String,
    pub signature: String,
}

A Store encryption keyring sealed to one member and signed by an Owner.

Membership authority names the immutable exact object through WrappedStoreKeyRef. The sealed box authenticates no sender, so the Owner signature additionally binds the Store, recipient, generation, author, and sealed bytes. The reader verifies both the exact reference and that signature before opening the keyring.

recipient_pubkey is part of the signed payload and exact path rather than duplicated in this value, so a wrap cannot be relocated to another member.

Fields

author_pubkey: String

Hex-encoded Ed25519 public key of the Owner that signed this wrapped key.

generation: u64

The keyring’s current generation, covered by the Owner signature and the exact reference.

sealed: String

Hex-encoded sealed box (seal_box_encrypt output) carrying the store key.

signature: String

Hex-encoded detached signature over WrappedKeyFields, produced by the owner.

Implementations

impl WrappedStoreKey

pub fn seal_keyring( store_id: &str, recipient_pubkey: &str, recipient_x25519_pk: &[u8; 32], encryption: &EncryptionService, owner: &UserKeypair, ) -> Result<Self, EncryptionError>

pub fn signed( store_id: &str, recipient_pubkey: &str, generation: u64, sealed: Vec<u8>, owner: &UserKeypair, ) -> Self

Wrap sealed (a sealed box of the store key, already encrypted to recipient_pubkey) and sign the binding with owner: fills signature with the owner’s detached signature over the canonical payload.

pub fn verify_and_unwrap<'a>( &self, store_id: &str, recipient_pubkey: &str, expected_owners: impl IntoIterator<Item = &'a str>, ) -> Result<Vec<u8>, WrappedKeyError>

Verify this wrapped key was authentically produced by one of expected_owners for recipient_pubkey in store_id, and return the sealed-box bytes to decrypt. Verifies the signature against the authorized Owner set for this context over the binding (store_id, recipient_pubkey, author_pubkey, sealed). Fails closed, naming why, if the signature doesn’t verify against that set (a substituted, forged, replayed, or relocated key) or the sealed box is malformed; neither must be adopted.

pub fn verify_and_open_keyring<'a>( &self, store_id: &str, recipient_pubkey: &str, expected_owners: impl IntoIterator<Item = &'a str>, expected_generation: u64, recipient: &dyn IdentityKeyAuthority, ) -> Result<EncryptionService, WrappedKeyringError>

Trait Implementations

impl Clone for WrappedStoreKey

fn clone(&self) -> WrappedStoreKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WrappedStoreKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for WrappedStoreKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for WrappedStoreKey

fn eq(&self, other: &WrappedStoreKey) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for WrappedStoreKey

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for WrappedStoreKey

impl StructuralPartialEq for WrappedStoreKey