Struct WasiWebcryptoCtxView 

pub struct WasiWebcryptoCtxView<'a> {
    pub ctx: &'a mut WasiWebcryptoCtx,
    pub table: &'a mut ResourceTable,
}

A borrowed view into a host’s WasiWebcryptoCtx and its [ResourceTable].

Returned by WasiWebcryptoView::webcrypto, this is the [HasData::Data] the generated host bindings operate on.

Fields

ctx: &'a mut WasiWebcryptoCtx

Mutable reference to the WebCrypto host context.

table: &'a mut ResourceTable

Mutable reference to the table used to manage host resources.

Trait Implementations

impl Host for WasiWebcryptoCtxView<'_>

fn make_digest( &mut self, variant: Sha2Variant, ) -> Result<Result<Resource<Digest>, Error>>

A digest bound to the declared SHA-2 variant. Fails with error.unsupported if this implementation does not serve the variant.

impl Host for WasiWebcryptoCtxView<'_>

fn make_rejecting_digest(&mut self) -> Result<Result<Resource<Digest>, Error>>

Mint a SHA-1 digest that rejects on a detected collision attack: compute fails with error.extension — origin "polymorph:webcrypto", name "collision-detected" — for input carrying an attack pattern, and returns the standard SHA-1 digest for everything else. Choose this posture to surface an attack as a diagnosable error.

fn make_mitigating_digest(&mut self) -> Result<Result<Resource<Digest>, Error>>

Mint a SHA-1 digest that mitigates a detected collision attack: for input carrying an attack pattern, compute returns the sha1dc safe hash — a deterministic hardened variant the attack was not engineered against — and the standard SHA-1 digest for everything else. Two parties hashing the same attacked input agree on its safe hash, so pipelines keep flowing while the colliding pair no longer collides. Choose this posture for content addressing, where an error would wedge the pipeline; the cost is that an attack surfaces as an external hash mismatch rather than a named error.

impl HostAeadKey for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<AeadKey>) -> Result<String>

The registry name of the algorithm family this key is bound to, e.g. "AES-GCM" (WebCrypto’s KeyAlgorithm.name). Parameters are separate getters, as for mac-key.algorithm-name.

fn algorithm_length(&mut self, self_: Resource<AeadKey>) -> Result<u32>

The key length in bits, e.g. 256 for AES-256-GCM (WebCrypto’s AesKeyAlgorithm.length).

fn nonce_size(&mut self, self_: Resource<AeadKey>) -> Result<u32>

The algorithm’s standard nonce size in bytes, e.g. 12 for AES-GCM. This key’s seal/open always accept it, so a component granted only the key handle can construct nonces without matching on algorithm-name. Whether other lengths are accepted is the algorithm’s contract, documented by its minting interface.

fn tag_size(&mut self, self_: Resource<AeadKey>) -> Result<u32>

The algorithm’s default tag size in bytes, e.g. 16: what a tag-size of none selects, and the framing arithmetic for default-tag messages (sealed length = plaintext length + tag-size).

fn extractable(&mut self, self_: Resource<AeadKey>) -> Result<bool>

Whether the key material may be exported.

fn can_seal(&mut self, self_: Resource<AeadKey>) -> Result<bool>

Whether this key permits seal. A refused operation fails error.not-permitted.

fn can_open(&mut self, self_: Resource<AeadKey>) -> Result<bool>

Whether this key permits open. See can-seal.

fn can_wrap(&mut self, self_: Resource<AeadKey>) -> Result<bool>

Whether this key permits wrap. A refused operation fails error.not-permitted.

fn can_unwrap(&mut self, self_: Resource<AeadKey>) -> Result<bool>

Whether this key permits unwrap. See can-wrap.

impl HostAeadKeyOptions for WasiWebcryptoCtxView<'_>

fn new(&mut self) -> Result<Resource<AeadKeyOptions>>

fn can_seal( &mut self, self_: Resource<AeadKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may seal. Disabled by default.

fn can_open( &mut self, self_: Resource<AeadKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may open. Disabled by default.

fn can_wrap( &mut self, self_: Resource<AeadKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may wrap key material. Disabled by default.

fn can_unwrap( &mut self, self_: Resource<AeadKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may unwrap key material (see can-wrap). Disabled by default.

fn extractable( &mut self, self_: Resource<AeadKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key’s material may be exported. Disabled by default.

impl HostAgreementKeyOptions for WasiWebcryptoCtxView<'_>

fn new(&mut self) -> Result<Resource<AgreementKeyOptions>>

fn can_derive_bits( &mut self, self_: Resource<AgreementKeyOptions>, allowed: bool, ) -> Result<()>

Whether inputs agreed by the minted key may yield raw bits. Disabled by default.

fn can_derive_key( &mut self, self_: Resource<AgreementKeyOptions>, allowed: bool, ) -> Result<()>

Whether inputs agreed by the minted key may mint keys. Disabled by default.

fn extractable( &mut self, self_: Resource<AgreementKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key’s material may be exported (secret-key.export-key-jwk/-pkcs8). Disabled by default.

impl HostCipherKey for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<CipherKey>) -> Result<String>

The registry name of the algorithm family this key is bound to, e.g. "AES-CBC" (WebCrypto’s KeyAlgorithm.name). Parameters are separate getters, as for mac-key.algorithm-name.

fn algorithm_length(&mut self, self_: Resource<CipherKey>) -> Result<u32>

The key length in bits, e.g. 256 (WebCrypto’s AesKeyAlgorithm.length).

fn iv_size(&mut self, self_: Resource<CipherKey>) -> Result<u32>

The algorithm’s IV size in bytes, e.g. 16 for the AES modes (the CBC IV, or the CTR initial counter block). encrypt and decrypt accept exactly this length.

fn extractable(&mut self, self_: Resource<CipherKey>) -> Result<bool>

Whether the key material may be exported.

fn can_encrypt(&mut self, self_: Resource<CipherKey>) -> Result<bool>

Whether this key permits encrypt. A refused operation fails error.not-permitted.

fn can_decrypt(&mut self, self_: Resource<CipherKey>) -> Result<bool>

Whether this key permits decrypt. See can-encrypt.

fn can_wrap(&mut self, self_: Resource<CipherKey>) -> Result<bool>

Whether this key permits wrap. A refused operation fails error.not-permitted.

fn can_unwrap(&mut self, self_: Resource<CipherKey>) -> Result<bool>

Whether this key permits unwrap. See can-wrap.

impl HostCipherKeyOptions for WasiWebcryptoCtxView<'_>

fn new(&mut self) -> Result<Resource<CipherKeyOptions>>

fn can_encrypt( &mut self, self_: Resource<CipherKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may encrypt. Disabled by default.

fn can_decrypt( &mut self, self_: Resource<CipherKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may decrypt. Disabled by default.

fn can_wrap( &mut self, self_: Resource<CipherKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may wrap key material. Disabled by default.

fn can_unwrap( &mut self, self_: Resource<CipherKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may unwrap key material (see can-wrap). Disabled by default.

fn extractable( &mut self, self_: Resource<CipherKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key’s material may be exported. Disabled by default.

impl HostDecryptionKey for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<DecryptionKey>) -> Result<String>

See encryption-key.algorithm-name.

fn algorithm_hash( &mut self, self_: Resource<DecryptionKey>, ) -> Result<Option<String>>

See encryption-key.algorithm-hash.

fn algorithm_length( &mut self, self_: Resource<DecryptionKey>, ) -> Result<Option<u32>>

See encryption-key.algorithm-length.

fn algorithm_public_exponent( &mut self, self_: Resource<DecryptionKey>, ) -> Result<Option<Vec<u8>>>

See encryption-key.algorithm-public-exponent.

fn can_decrypt(&mut self, self_: Resource<DecryptionKey>) -> Result<bool>

Whether this key may decrypt. See decryption-key-options.can-decrypt.

fn can_unwrap(&mut self, self_: Resource<DecryptionKey>) -> Result<bool>

Whether this key may unwrap. See decryption-key-options.can-unwrap.

fn extractable(&mut self, self_: Resource<DecryptionKey>) -> Result<bool>

Whether the export functions may return this key’s material. See decryption-key-options.extractable.

impl HostDecryptionKeyOptions for WasiWebcryptoCtxView<'_>

fn new(&mut self) -> Result<Resource<DecryptionKeyOptions>>

fn can_decrypt( &mut self, self_: Resource<DecryptionKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may decrypt. Disabled by default.

fn can_unwrap( &mut self, self_: Resource<DecryptionKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may unwrap. Disabled by default.

fn extractable( &mut self, self_: Resource<DecryptionKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key’s material may be exported (decryption-key.export-key-jwk/-pkcs8 and the to-wrap-input-* functions). Disabled by default.

impl HostDeriveInput for WasiWebcryptoCtxView<'_>

fn can_derive_bits(&mut self, self_: Resource<DeriveInput>) -> Result<bool>

Whether derive-bits (and minting extractable keys) is permitted. See derive-options.can-derive-bits.

fn can_derive_key(&mut self, self_: Resource<DeriveInput>) -> Result<bool>

Whether the target interfaces’ derive-key is permitted. See derive-options.can-derive-key.

impl HostDeriveOptions for WasiWebcryptoCtxView<'_>

fn new(&mut self) -> Result<Resource<DeriveOptions>>

fn can_derive_bits( &mut self, self_: Resource<DeriveOptions>, allowed: bool, ) -> Result<()>

Whether inputs built on this base secret may yield raw bits through derive-input.derive-bits, and — because an extractable key is bits disclosure by other means — whether they may mint extractable keys. Disabled by default.

fn can_derive_key( &mut self, self_: Resource<DeriveOptions>, allowed: bool, ) -> Result<()>

Whether inputs built on this base secret may mint keys through the target interfaces’ derive-key. Disabled by default.

impl HostDigest for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<Digest>) -> Result<String>

The registry name of the algorithm this resource is bound to, e.g. "SHA-256" (as crypto.subtle.digest spells it). For a digest the algorithm is the hash, so there is no separate algorithm-hash getter.

impl HostEncryptionKey for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<EncryptionKey>) -> Result<String>

The registry name of the algorithm family this key is bound to, e.g. "RSA-OAEP" (WebCrypto’s KeyAlgorithm.name).

fn algorithm_hash( &mut self, self_: Resource<EncryptionKey>, ) -> Result<Option<String>>

The digest bound at mint, e.g. "SHA-256".

fn algorithm_length( &mut self, self_: Resource<EncryptionKey>, ) -> Result<Option<u32>>

The key’s length in bits for algorithms parameterized by one (the RSA modulus length).

fn algorithm_public_exponent( &mut self, self_: Resource<EncryptionKey>, ) -> Result<Option<Vec<u8>>>

The public exponent for RSA-family keys, as WebCrypto’s RsaKeyAlgorithm.publicExponent denominates it: the exponent’s big-endian bytes ([1, 0, 1] for 65537). none for algorithms without one.

impl HostIkm for WasiWebcryptoCtxView<'_>

fn can_derive_bits(&mut self, self_: Resource<Ikm>) -> Result<bool>

Whether inputs prepared from this material may yield raw bits.

fn can_derive_key(&mut self, self_: Resource<Ikm>) -> Result<bool>

Whether inputs prepared from this material may mint keys.

impl HostKwKey for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<KwKey>) -> Result<String>

The registry name of the algorithm family this key is bound to, e.g. "AES-KW" (WebCrypto’s KeyAlgorithm.name). Parameters are separate getters, as for mac-key.algorithm-name.

fn algorithm_length(&mut self, self_: Resource<KwKey>) -> Result<u32>

The key length in bits, e.g. 256 (WebCrypto’s AesKeyAlgorithm.length).

fn extractable(&mut self, self_: Resource<KwKey>) -> Result<bool>

Whether the key material may be exported.

fn can_wrap(&mut self, self_: Resource<KwKey>) -> Result<bool>

Whether this key permits wrap. A refused operation fails error.not-permitted.

fn can_unwrap(&mut self, self_: Resource<KwKey>) -> Result<bool>

Whether this key permits unwrap. See can-wrap.

impl HostKwKeyOptions for WasiWebcryptoCtxView<'_>

fn new(&mut self) -> Result<Resource<KwKeyOptions>>

fn can_wrap( &mut self, self_: Resource<KwKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may wrap. Disabled by default.

fn can_unwrap( &mut self, self_: Resource<KwKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may unwrap. Disabled by default.

fn extractable( &mut self, self_: Resource<KwKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key’s material may be exported. Disabled by default.

impl HostMacKey for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<MacKey>) -> Result<String>

The registry name of the algorithm family this key is bound to, e.g. "HMAC" (WebCrypto’s KeyAlgorithm.name). The algorithm’s parameters are separate getters (algorithm-hash, algorithm-length), so future parameters are new getters rather than changes to a shared type.

fn algorithm_hash(&mut self, self_: Resource<MacKey>) -> Result<Option<String>>

The registry name of the digest this key’s algorithm is parameterized over, if any: e.g. "SHA-256" for HMAC-SHA-256 (WebCrypto’s HmacKeyAlgorithm.hash). none for MAC algorithms not built on a digest.

fn algorithm_length(&mut self, self_: Resource<MacKey>) -> Result<u32>

The key length in bits (WebCrypto’s HmacKeyAlgorithm.length).

fn extractable(&mut self, self_: Resource<MacKey>) -> Result<bool>

Whether the key material may be exported.

fn can_sign(&mut self, self_: Resource<MacKey>) -> Result<bool>

Whether this key permits sign. A refused operation fails error.not-permitted.

fn can_verify(&mut self, self_: Resource<MacKey>) -> Result<bool>

Whether this key permits verify. See can-sign.

impl HostMacKeyOptions for WasiWebcryptoCtxView<'_>

fn new(&mut self) -> Result<Resource<MacKeyOptions>>

fn can_sign( &mut self, self_: Resource<MacKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may sign. Disabled by default.

fn can_verify( &mut self, self_: Resource<MacKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may verify. Disabled by default.

fn extractable( &mut self, self_: Resource<MacKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key’s material may be exported. Disabled by default.

impl HostPassword for WasiWebcryptoCtxView<'_>

fn can_derive_bits(&mut self, self_: Resource<Password>) -> Result<bool>

Whether inputs prepared from this password may yield raw bits.

fn can_derive_key(&mut self, self_: Resource<Password>) -> Result<bool>

Whether inputs prepared from this password may mint keys.

impl HostPublicKey for WasiWebcryptoCtxView<'_>

fn algorithm_name( &mut self, self_: Resource<AgreementPublicKey>, ) -> Result<String>

The registry name of the algorithm family this key is bound to, e.g. "X25519" (the Web Cryptography API’s KeyAlgorithm.name).

impl HostSecretKey for WasiWebcryptoCtxView<'_>

fn algorithm_name( &mut self, self_: Resource<AgreementSecretKey>, ) -> Result<String>

See public-key.algorithm-name.

fn can_derive_bits( &mut self, self_: Resource<AgreementSecretKey>, ) -> Result<bool>

Whether inputs agreed by this key may yield raw bits. See agreement-key-options.can-derive-bits.

fn can_derive_key( &mut self, self_: Resource<AgreementSecretKey>, ) -> Result<bool>

Whether inputs agreed by this key may mint keys. See agreement-key-options.can-derive-key.

fn extractable(&mut self, self_: Resource<AgreementSecretKey>) -> Result<bool>

Whether the export functions may return this key’s material. See agreement-key-options.extractable.

impl HostSigningKey for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<SigningKey>) -> Result<String>

See verifying-key.algorithm-name.

fn algorithm_curve( &mut self, self_: Resource<SigningKey>, ) -> Result<Option<String>>

See verifying-key.algorithm-curve.

fn algorithm_hash( &mut self, self_: Resource<SigningKey>, ) -> Result<Option<String>>

See verifying-key.algorithm-hash.

fn algorithm_length( &mut self, self_: Resource<SigningKey>, ) -> Result<Option<u32>>

See verifying-key.algorithm-length.

fn algorithm_public_exponent( &mut self, self_: Resource<SigningKey>, ) -> Result<Option<Vec<u8>>>

See verifying-key.algorithm-public-exponent.

fn extractable(&mut self, self_: Resource<SigningKey>) -> Result<bool>

Whether the export functions may return this key’s material. Mint-time recorded policy, which platform-backed key storage also honors.

fn can_sign(&mut self, self_: Resource<SigningKey>) -> Result<bool>

Whether this key permits sign. A refused operation fails error.not-permitted.

impl HostSigningKeyOptions for WasiWebcryptoCtxView<'_>

fn new(&mut self) -> Result<Resource<SigningKeyOptions>>

fn can_sign( &mut self, self_: Resource<SigningKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key may sign. Disabled by default, and it is the sole usage, so it must be enabled for the mint to succeed (an untouched options resource fails error.not-permitted).

fn extractable( &mut self, self_: Resource<SigningKeyOptions>, allowed: bool, ) -> Result<()>

Whether the minted key’s material may be exported (signing-key.export-key-jwk/-pkcs8 and the to-wrap-input-* functions). Disabled by default.

impl HostVerifyingKey for WasiWebcryptoCtxView<'_>

fn algorithm_name(&mut self, self_: Resource<VerifyingKey>) -> Result<String>

The registry name of the algorithm family this key is bound to, e.g. "Ed25519" or "ECDSA" (WebCrypto’s KeyAlgorithm.name).

fn algorithm_curve( &mut self, self_: Resource<VerifyingKey>, ) -> Result<Option<String>>

The registry name of the curve for algorithms parameterized by one, e.g. "P-256" (WebCrypto’s EcKeyAlgorithm.namedCurve). none for Ed25519, whose curve is implied by the name.

fn algorithm_hash( &mut self, self_: Resource<VerifyingKey>, ) -> Result<Option<String>>

The digest bound at mint, e.g. "SHA-256". none for Ed25519: RFC 8032 fixes SHA-512 internally, so it is not a parameter.

fn algorithm_length( &mut self, self_: Resource<VerifyingKey>, ) -> Result<Option<u32>>

The key’s length in bits for algorithms parameterized by one — the RSA modulus length (WebCrypto’s RsaKeyAlgorithm.modulusLength). none for Ed25519 and ECDSA, whose key size is fixed by the algorithm or curve.

fn algorithm_public_exponent( &mut self, self_: Resource<VerifyingKey>, ) -> Result<Option<Vec<u8>>>

The public exponent for RSA-family keys, as WebCrypto’s RsaKeyAlgorithm.publicExponent denominates it: the exponent’s big-endian bytes ([1, 0, 1] for 65537). none for algorithms without one (Ed25519, ECDSA).

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl Host for WasiWebcryptoCtxView<'_>

impl HostUnwrapInput for WasiWebcryptoCtxView<'_>

impl HostWrapInput for WasiWebcryptoCtxView<'_>