Struct EnrollmentBlob 

pub struct EnrollmentBlob {
    pub version: u8,
    pub key_fingerprint: String,
    pub key_type: SshKeyType,
    pub nonce: [u8; 12],
    pub ciphertext: Vec<u8>,
}

Parsed enrollment blob.

Binary format:

Version byte (1 byte): 0x01
Key fingerprint length (2 bytes, BE): N
Key fingerprint (N bytes): SHA256:... (ASCII)
Key type length (1 byte): M
Key type (M bytes): "ssh-ed25519" or "ssh-rsa" (ASCII)
Nonce (12 bytes): random
Ciphertext + GCM tag (48 bytes): AES-256-GCM(kek, master_key)

Fields

version: u8

key_fingerprint: String

key_type: SshKeyType

nonce: [u8; 12]

ciphertext: Vec<u8>

32 bytes master key + 16 bytes GCM tag = 48 bytes.

Implementations

impl EnrollmentBlob

pub fn serialize(&self) -> Vec<u8>

Serialize to the binary wire format.

pub fn deserialize(data: &[u8]) -> Result<Self, AuthError>

Deserialize from the binary wire format.

Errors

Returns AuthError::InvalidBlob if the data is truncated, has an unsupported version, or contains an invalid key type.