README
Tr
Clock
Tr
DigestBinding
Tr
KeyResolver
Tr
NonceStore
Tr
SignatureAlgorithm
- ::contextHsError::context
- ::kindHsError::kind
- ::kind_nameHsError::kind_name
- ::offsetHsError::offset
- ::stageHsError::stage
- ::stage_nameHsError::stage_name
- ::to_debug_stringHsError::to_debug_string
- ::newAcceptSignature::new
T
AcceptSignatureEntry
T
AcceptSignatureRequest
- ::newCallbackDigestBinding::new
- ::defaultComponentParameters::default
- ::as_derivedCoveredComponent::as_derived
- ::as_fieldCoveredComponent::as_field
- ::field_parametersCoveredComponent::field_parameters
- ::identifierCoveredComponent::identifier
- ::query_param_nameCoveredComponent::query_param_name
- ::to_component_stringCoveredComponent::to_component_string
T
DerivedComponent
T
FieldComponent
- ::newFixedClock::new
- ::timestampFixedClock::timestamp
T
HeaderField
- ::algorithm_nameHmacSha256::algorithm_name
- ::newHmacSha256::new
- ::sign_hmacHmacSha256::sign_hmac
- ::verify_hmacHmacSha256::verify_hmac
T
HsErrorKind
T
HsErrorStage
- ::addInMemoryKeyResolver::add
- ::getInMemoryKeyResolver::get
- ::lengthInMemoryKeyResolver::length
- ::newInMemoryKeyResolver::new
- ::removeInMemoryKeyResolver::remove
- ::lengthInMemoryNonceStore::length
- ::newInMemoryNonceStore::new
- ::pruneInMemoryNonceStore::prune
T
KeyMaterial
T
KeyRecord
- ::check_body_size_for_digestLimits::check_body_size_for_digest
- ::check_keyid_lengthLimits::check_keyid_length
- ::check_nonce_lengthLimits::check_nonce_length
- ::check_signature_field_sizeLimits::check_signature_field_size
- ::check_tag_lengthLimits::check_tag_length
- ::defaultLimits::default
- ::permissive_for_testsLimits::permissive_for_tests
- ::strictLimits::strict
T
MultiSignaturePolicy
- ::newNoDigestBinding::new
T
NonceEntry
- ::appendOrderedHeaders::append
- ::append_fieldOrderedHeaders::append_field
- ::append_trailerOrderedHeaders::append_trailer
- ::combined_valueOrderedHeaders::combined_value
- ::combined_value_withOrderedHeaders::combined_value_with
- ::containsOrderedHeaders::contains
- ::entriesOrderedHeaders::entries
- ::get_allOrderedHeaders::get_all
- ::get_firstOrderedHeaders::get_first
- ::header_valuesOrderedHeaders::header_values
- ::lengthOrderedHeaders::length
- ::newOrderedHeaders::new
- ::removeOrderedHeaders::remove
- ::setOrderedHeaders::set
- ::trailer_valuesOrderedHeaders::trailer_values
- ::generate_requestPrng::generate_request
- ::generate_sign_optionsPrng::generate_sign_options
- ::newPrng::new
- ::next_boolPrng::next_bool
- ::next_intPrng::next_int
- ::next_u32Prng::next_u32
- ::pickPrng::pick
- ::pick_componentsPrng::pick_components
T
RejectedSignature
- ::authority_componentRequestContext::authority_component
- ::has_queryRequestContext::has_query
- ::newRequestContext::new
- ::new_defaultRequestContext::new_default
- ::path_componentRequestContext::path_component
- ::query_componentRequestContext::query_component
- ::raw_queryRequestContext::raw_query
- ::request_targetRequestContext::request_target
- ::target_uriRequestContext::target_uri
- ::newRequireCoveredContentDigest::new
- ::newResponseContext::new
- ::new_defaultResponseContext::new_default
T
SfBareItem
T
SfDictionaryEntry
T
SfInnerList
- ::parameterSfItem::parameter
T
SfMember
T
SfParameter
T
SignOptions
T
SignTarget
T
SignatureAlgorithmProvider
T
SignatureBase
T
SignatureEntry
- ::lengthSignatureField::length
- ::newSignatureField::new
- ::newSignatureInput::new
T
SignatureInputEntry
- ::newSignatureParameters::new
T
SignedFields
- ::newSystemClock::new
- ::algorithm_nameUnsupportedAlgorithm::algorithm_name
- ::newUnsupportedAlgorithm::new
- ::signUnsupportedAlgorithm::sign
- ::verifyUnsupportedAlgorithm::verify
- ::allows_algorithmVerificationPolicy::allows_algorithm
- ::hmac_onlyVerificationPolicy::hmac_only
- ::permissiveVerificationPolicy::permissive
T
VerificationReport
T
VerifiedSignature
V
algorithm_provider
V
append_signature
V
append_signature_input
V
assert_bytes_eq
V
base64_decode_bytes
V
base64_encode_bytes
V
buffer_to_string
V
build_request_signature_base
V
build_response_signature_base
V
build_signature_base
V
check_key_algorithm
V
components_cover
V
constant_time_equal
V
contains_cr_or_lf
V
covered_component_to_sf_item
V
covered_derived
V
covered_derived_with_params
V
covered_field
V
covered_field_with_params
V
empty_report
V
get_signature
V
get_signature_input
V
hex_decode_bytes
V
hex_encode_bytes
V
hmac_sha256
V
hs_error
V
hs_error_at
V
is_tchar
V
is_valid_field_name
V
library_version
V
make_minimal_request
V
make_test_key
V
make_test_request
V
make_verify_ctx
V
parse_accept_request_parameters
V
parse_accept_signature
V
parse_component_parameters
V
parse_covered_component
V
parse_covered_components
V
parse_int64_cli
V
parse_sf_dictionary_string
V
parse_sf_inner_list_string
V
parse_sf_item_string
V
parse_signature_field
V
parse_signature_input
V
parse_signature_parameters
V
resolve_component
V
resolve_derived_component
V
resolve_field_component
V
serialize_accept_signature
V
serialize_component_parameters
V
serialize_sf_bare_item
V
serialize_sf_boolean
V
serialize_sf_byte_sequence
V
serialize_sf_dictionary
V
serialize_sf_inner_list
V
serialize_sf_integer
V
serialize_sf_item
V
serialize_sf_string
V
serialize_sf_token
V
serialize_signature_field
V
serialize_signature_input
V
serialize_signature_parameters
V
sf_boolean
V
sf_bytes
V
sf_integer
V
sf_param
V
sf_string
V
sf_token
V
sha256_raw
V
sign_request
V
sign_response
V
sign_target
V
sign_test_request
V
strip_ows
V
validate_content_digest
V
validate_signature_input
V
validate_signature_labels
V
verify_label
V
verify_label_outcome
V
verify_label_with_ctx
V
verify_outcome
V
verify_request
V
verify_response
V
verify_target
V
verify_test_request
V
verify_with_ctx

#replay_policy

Demonstrates nonce-based replay protection: a signature carrying a nonce is accepted once, a second presentation is rejected, and the same nonce under a different keyid is allowed. The in-memory store is single-process only.

Run: