Module trust_proof 

Trust proofs: how the caller knows that a key belongs to the intended recipient.

Org Membership V1 encapsulates a shared key to the recipient’s public encryption key, so whoever holds the matching private key gets the shared key. A public key that the server supplies can be swapped by the server, so the caller must trust the public key before the key is shared. In V1, the trust is manual: a person compared the fingerprint phrase of the public key, or the caller has the thumbprint of the public key from a trusted source. In some cases the trust is cryptographic, because the caller holds the matching private key.

Org Membership V2 seals keys between identities, which authenticates the sender. An identity that the caller has not trusted before still needs a manual check, such as a comparison of the fingerprint phrase.

Structs

FingerprintPhrase

The fingerprint phrase of a public key, as shown to a person.

Enums

CryptographicProof

The kinds of cryptographic proof.

TrustProof

The proof that the caller trusts the recipient’s public key.

TrustProofError 🔒

The ways a public key can fail its trust proof.