pub struct Subpacket { /* private fields */ }
Expand description
Signature subpackets.
Most of a signature’s attributes are not stored in fixed fields,
but in so-called subpackets. These subpackets are stored in a
Signature
’s so-called subpacket areas, which are effectively
small key-value stores. The keys are subpacket tags
(SubpacketTag
). The values are well-structured
(SubpacketValue
).
In addition to their key and value, subpackets also include a critical flag. When set, this flag indicates to the OpenPGP implementation that if it doesn’t understand the subpacket, it must consider the signature to be invalid. (Likewise, if it isn’t set, then it means that it is safe for the implementation to ignore the subpacket.) This enables forward compatibility with security-relevant extensions.
It is possible to control how Sequoia’s higher-level functionality
handles unknown, critical subpackets using a Policy
object.
Depending on the degree of control required, it may be sufficient
to customize a StandardPolicy
object using, for instance, the
StandardPolicy::accept_critical_subpacket
method.
The subpacket system is extensible in two ways. First, although
limited, the subpacket name space is not exhausted. So, it is
possible to introduce new packets. Second, one of the subpackets,
the Notation Data
subpacket (NotationData
), is explicitly
designed for adding arbitrary data to signatures.
Subpackets are described in Section 5.2.3.1 of RFC 4880.
Implementations§
source§impl Subpacket
impl Subpacket
sourcepub fn new(value: SubpacketValue, critical: bool) -> Result<Subpacket>
pub fn new(value: SubpacketValue, critical: bool) -> Result<Subpacket>
Creates a new Subpacket.
sourcepub fn tag(&self) -> SubpacketTag
pub fn tag(&self) -> SubpacketTag
Returns the Subpacket’s tag.
sourcepub fn value(&self) -> &SubpacketValue
pub fn value(&self) -> &SubpacketValue
Returns the Subpacket’s value.
sourcepub fn authenticated(&self) -> bool
pub fn authenticated(&self) -> bool
Returns whether the information in this subpacket has been authenticated.
There are three ways a subpacket can be authenticated:
- It is in the hashed subpacket area and the signature has been verified.
- It is in the unhashed subpacket area and the information is self-authenticating and has been authenticated by Sequoia. This is can be done for issuer information and embedded Signatures.
- The subpacket has been authenticated by the user and
marked as such using
Subpacket::set_authenticated
.
Note: The authentication is only valid in the context of the
signature the subpacket is in. If the an authenticated
Subpacket
is is added to a SubpacketArea
, the flag is
cleared.
sourcepub fn set_authenticated(&self, authenticated: bool) -> bool
pub fn set_authenticated(&self, authenticated: bool) -> bool
Marks the information in this subpacket as authenticated or not.
See Subpacket::authenticated
for more information.
Trait Implementations§
source§impl MarshalInto for Subpacket
impl MarshalInto for Subpacket
source§fn serialized_len(&self) -> usize
fn serialized_len(&self) -> usize
source§fn serialize_into(&self, buf: &mut [u8]) -> Result<usize>
fn serialize_into(&self, buf: &mut [u8]) -> Result<usize>
source§impl Ord for Subpacket
impl Ord for Subpacket
source§impl PartialEq for Subpacket
impl PartialEq for Subpacket
source§impl PartialOrd for Subpacket
impl PartialOrd for Subpacket
1.0.0 · source§fn le(&self, other: &Rhs) -> bool
fn le(&self, other: &Rhs) -> bool
self
and other
) and is used by the <=
operator. Read moreimpl Eq for Subpacket
Auto Trait Implementations§
impl !Freeze for Subpacket
impl RefUnwindSafe for Subpacket
impl Send for Subpacket
impl Sync for Subpacket
impl Unpin for Subpacket
impl UnwindSafe for Subpacket
Blanket Implementations§
source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
source§default unsafe fn clone_to_uninit(&self, dst: *mut T)
default unsafe fn clone_to_uninit(&self, dst: *mut T)
clone_to_uninit
)