Struct MemberIdentity 

pub struct MemberIdentity { /* private fields */ }

This device’s member: the stable id and every private pair it holds (E1, E11). Identity custody keeps it; the id never derives from the keys. The active pair is the one the last installed binding made current. A self-replacement keeps its candidate here before publishing it, and every pair a kept replacement retired stays held, because copies name the exact credential they open with (§12.1). Which pair may sign is replay’s decision, never this record’s (§12.3).

Implementations

impl MemberIdentity

pub fn new(member: MemberId, keys: MemberKeys) -> Self

Bind a private pair to the stable id its admin entry names.

pub fn generate(member: MemberId) -> Result<Self, CryptoError>

Make both key pairs for an independently generated id (§10).

pub fn member(&self) -> MemberId

The stable member id.

pub fn keys(&self) -> &MemberKeys

The active private pair: the one this device signs with and a restore code exports.

pub fn candidate(&self) -> Option<&MemberKeys>

A self-replacement’s fresh pair, kept before its binding is published.

pub fn credential(&self, sealing: &SealingKey) -> Option<&MemberKeys>

The held private pair whose sealing key is sealing. A copy names the exact credential it is sealed to, and opens only with that one, never with whichever pair is latest (§12.1).

pub fn holds(&self, keys: &MemberPublicKeys) -> bool

Whether some held pair is exactly keys.

pub fn with_candidate(&self, candidate: MemberKeys) -> Self

This identity keeping candidate for a self-replacement. A candidate already held stays held as a retired credential: its copies may exist.

pub fn activate(&self, current: &MemberPublicKeys) -> Option<Self>

This identity with the held pair current active, as replay’s current binding selects it (§12.3). The previously active pair and any other candidate stay held as retired credentials. None when no held pair is current.

pub fn retire_candidate(&self) -> Self

This identity with its candidate retired: a replacement that never became current leaves its copies, so its pair stays held (§12.4).

pub fn without_candidate(&self) -> Self

This identity without its candidate: a self-replacement cancelled before reserving anything never sent a copy to it.

pub fn to_secret_bytes(&self) -> SecretBytes

Encode the id and every held private pair for identity custody: the active pair, the retired ones, then the candidate if any. This custody encoding is not a restore code (D13).

pub fn from_secret_bytes(bytes: &[u8]) -> Result<Self, MaterialError>

Restore the id and every held pair from identity custody.

Trait Implementations

impl Clone for MemberIdentity

fn clone(&self) -> MemberIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MemberIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl KeyMaterial for MemberIdentity

const ENTRY: &'static str = "member-keys"

The keychain entry and passphrase file entry it is kept under.

const FILE: StoreFile = StoreFile::MemberKeys

The store file a passphrase custody seals it in.

fn to_secret_bytes(&self) -> SecretBytes

Encode it for custody.

fn from_secret_bytes(bytes: &[u8]) -> Result<Self, MaterialError>

Decode what to_secret_bytes encoded.