Struct HubMacKey 

pub struct HubMacKey {
    inner: B64UU<ByteArray<32>>,
}

Symmetric key to bind the hub id, but ‘blind’ the hub id from PHC.

The HubMacKey is randomly generated by the hub for each call to EnterStartEP, stored in the hub-encrypted EnterStartResp::state — which, unlike the EnterNonce, never transits the transcryptor or PHC — and returned to the global client via EnterStartResp::hub_mac_key. The global client relays it to the transcryptor via tr::EhppReq::hub_mac_key.

The transcryptor uses the HubMacKey to HMAC the hub id it pseudonymises for (see HubMacKey::mac). The mac is passed via the sso::EncryptedHubPseudonymPackage to PHC, which includes it in the sso::HashedHubPseudonymPackage that eventually ends up back at the hub, via EnterCompleteReq. The hub can then check the mac is indeed the mac of its own hub id, using the HubMacKey recovered from its state.

This HubMacKey is known to the hub and the global client, but must remain hidden from PHC.

Fields

inner: B64UU<ByteArray<32>>

Implementations

impl HubMacKey

pub fn random() -> Self

Generates a new random key.

pub fn mac(&self, hub_id: &Id) -> Id

Macs a hub_id: returns HMAC-SHA256(self, hub_id), the hub id blinded so PHC can not see what hub is being visited.

Trait Implementations

impl Clone for HubMacKey

fn clone(&self) -> HubMacKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HubMacKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for HubMacKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Drop for HubMacKey

fn drop(&mut self)

Executes the destructor for this type.

impl PartialEq for HubMacKey

fn eq(&self, other: &HubMacKey) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for HubMacKey

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for HubMacKey

impl StructuralPartialEq for HubMacKey