Struct HsmKey

struct HsmKey<'a, 'b> {
    public_key: PublicKey,
    nethsm: &'a NetHsm,
    key_id: &'b KeyId,
}

PGP-adapter for a NetHSM key.

All PGP-related operations executed on objects of this type will be forwarded to the NetHSM instance.

Fields

public_key: PublicKey

nethsm: &'a NetHsm

key_id: &'b KeyId

Implementations

impl<'a, 'b> HsmKey<'a, 'b>

fn new(nethsm: &'a NetHsm, public_key: PublicKey, key_id: &'b KeyId) -> Self

Creates a new remote signing key which will use key_id key for signing.

fn sign_mode(&self) -> Result<SignatureType>

Returns correct mode to use for signatures which depend on the public key.

Trait Implementations

impl Debug for HsmKey<'_, '_>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PublicKeyTrait for HsmKey<'_, '_>

fn verify_signature( &self, hash: HashAlgorithm, data: &[u8], sig: &SignatureBytes, ) -> Result<()>

Verify a signed message. Data will be hashed using hash, before verifying.

fn encrypt<R: CryptoRng + Rng>( &self, rng: R, plain: &[u8], esk_type: EskType, ) -> Result<PkeskBytes>

Encrypt the given plain for this key.

fn serialize_for_hashing(&self, writer: &mut impl Write) -> Result<()>

This is the data used for hashing in a signature. Only uses the public portion of the key.

fn version(&self) -> KeyVersion

fn fingerprint(&self) -> Fingerprint

fn key_id(&self) -> KeyId

Returns the Key ID of the associated primary key.

fn algorithm(&self) -> PublicKeyAlgorithm

fn created_at(&self) -> &DateTime<Utc>

fn expiration(&self) -> Option<u16>

fn public_params(&self) -> &PublicParams

fn is_signing_key(&self) -> bool

fn is_encryption_key(&self) -> bool

impl SecretKeyTrait for HsmKey<'_, '_>

type PublicKey = PublicKey

type Unlocked = HsmKey<'_, '_>

The type representing the unlocked version of this.

fn unlock<F, G, T>(&self, _pw: F, work: G) -> Result<T>

where F: FnOnce() -> String, G: FnOnce(&Self::Unlocked) -> Result<T>,

Unlock the raw data in the secret parameters.

fn create_signature<F>( &self, _key_pw: F, hash: HashAlgorithm, data: &[u8], ) -> Result<SignatureBytes>

where F: FnOnce() -> String,

fn public_key(&self) -> Self::PublicKey

fn hash_alg(&self) -> HashAlgorithm

The suggested hash algorithm to calculate the signature hash digest with, when using this key as a signer