Struct sequoia_openpgp::parse::stream::GoodChecksum
source · pub struct GoodChecksum<'a> {
pub sig: &'a Signature,
pub ka: ValidErasedKeyAmalgamation<'a, PublicParts>,
}
Expand description
A good signature.
Represents the result of a successful signature verification. It includes the signature and the signing key with all the necessary context (i.e. certificate, time, policy) to evaluate the trustworthiness of the signature using a trust model.
GoodChecksum
is used in VerificationResult
. See also
VerificationError
.
A signature is considered good if and only if all of the following conditions are met:
-
The signature has a Signature Creation Time subpacket.
-
The signature is alive at the specified time (the time parameter passed to, e.g.,
VerifierBuilder::with_policy
). -
The certificate is alive and not revoked as of the signature’s creation time.
-
The signing key is alive, not revoked, and signing capable as of the signature’s creation time.
-
The signature was generated by the signing key.
Note: This doesn’t mean that the key that generated the
signature is in anyway trustworthy in the sense that it
belongs to the person or entity that the user thinks it
belongs to. This property can only be evaluated within a
trust model, such as the web of trust (WoT). This policy is
normally implemented in the VerificationHelper::check
method.
Fields§
§sig: &'a Signature
The signature.
ka: ValidErasedKeyAmalgamation<'a, PublicParts>
The signing key that made the signature.
The amalgamation of the signing key includes the necessary context (i.e. certificate, time, policy) to evaluate the trustworthiness of the signature using a trust model.