Struct Keychain 

pub(super) struct Keychain {
    aes: HashMap<String, AesKey>,
    rsa: HashMap<String, RsaKey>,
}

A store of AES and RSA keys keyed by their kid.

Fields

aes: HashMap<String, AesKey>

rsa: HashMap<String, RsaKey>

Implementations

impl Keychain

pub(super) fn new() -> Keychain

pub(super) fn add_aes(&mut self, key: AesKey)

pub(super) fn add_rsa(&mut self, key: RsaKey)

pub(super) fn decrypt( &self, encrypted: &Encrypted, ) -> Result<Vec<u8>, OnePasswordError>

Decrypts an envelope by dispatching on its scheme to the AES or RSA key named by its kid.

pub(super) fn can_decrypt( &self, encrypted: &Encrypted, ) -> Result<bool, OnePasswordError>

Whether the keychain currently holds the key needed to decrypt this envelope.

A scheme this module does not implement is an error, not a false: the caller cannot tell “we lack the key” from “we cannot read this format” otherwise, and would silently drop data.

pub(super) fn decrypt_json<T: DeserializeOwned>( &self, envelope: &EncryptedEnvelope, ) -> Result<T, OnePasswordError>

Decrypts an envelope and parses its JSON plaintext.

pub(super) fn decrypt_keysets( &mut self, keysets: &[KeysetInfo], username: &str, password: &str, account_key: &AccountKey, ) -> Result<(), OnePasswordError>

Derives the master key from the credentials, then decrypts every keyset into the keychain.

fn decrypt_reachable( &mut self, keysets: &[KeysetInfo], root_key: AesKey, ) -> Result<(), OnePasswordError>

Seeds root_key and decrypts everything reachable from it.

fn decrypt_keyset( &mut self, keyset: &KeysetInfo, ) -> Result<(), OnePasswordError>

Decrypts a keyset’s symmetric key then its private key into the keychain.

pub(super) fn decrypt_aes_key( &mut self, envelope: &EncryptedEnvelope, ) -> Result<(), OnePasswordError>

Decrypts an encrypted AES key and adds it to the keychain.

fn decrypt_rsa_key( &mut self, envelope: &EncryptedEnvelope, ) -> Result<(), OnePasswordError>

Decrypts an encrypted RSA key and adds it to the keychain.

Trait Implementations

impl Default for Keychain

fn default() -> Keychain

Returns the “default value” for a type.