Expand description
Domain encryption, signatures, epochs, and capability validation for iroh-db.
Structs§
- Authority
Checkpoint - A signed, history-compacting authority baseline for a targeted invitation.
- Capability
Certificate - A signed endpoint-targeted capability certificate.
- Control
Transition - A signed, immutable, single-successor domain authority transition.
- Domain
Descriptor - A signed immutable domain genesis descriptor.
- Domain
Key - A random symmetric key for one domain epoch.
- Domain
Seed - Sensitive bootstrap material for adding a new device to an encrypted domain.
- Invitation
- A signed endpoint-targeted domain bootstrap payload.
- Invitation
Secret - A one-time offline invitation bearer secret.
- Invitation
Ticket - An encrypted offline invitation envelope safe to store without its bearer secret.
- Iroh
Signer - The iroh endpoint signing identity used by the database protocol.
- Local
Credentials - Persistent private-domain identity and epoch-zero key material.
- Permission
Set - A validated compact set of explicit permissions.
Enums§
- Authority
Error - Checkpoint
Error - Consistency
Mode - A domain’s immutable replicated write policy.
- Invitation
Error - Permission
- One independently grantable domain permission.
- Security
Error - Cryptographic validation or commit protection failure.
Traits§
- KeyProvider
- Application-supplied durable device identity and encrypted domain-key storage.
Functions§
- open_
commit - Verifies, authenticates, decrypts, and strictly decodes a commit.
- seal_
commit - Encrypts and signs one canonical atomic commit.
- verify_
backup_ signature - Verifies a backup catalog signature under its distinct protocol context.
- verify_
gossip_ signature - Verifies a gossip hint signature under its distinct protocol context.
- verify_
snapshot_ signature - Verifies a snapshot signature under its distinct protocol context.