Enum CmpProtectionType 

pub enum CmpProtectionType {
    Signature {
        algorithm: String,
        cert_der: Vec<u8>,
    },
    Mac {
        algorithm: String,
    },
}

CMP message protection mechanism.

RFC 9810 §5.1.3: PKIMessage protection is computed over the header and body fields. Two modes are defined:

• Signature-based: the sender signs with a certificate-bound key.
• MAC-based: a shared secret protects the message; used for initial enrollment when no certificate exists yet.

Variants

Signature

Signature-based protection (RFC 9810 §5.1.3.3).

The sender’s certificate is included in the extraCerts field of the PKIMessage.

Fields

algorithm: String

Signature algorithm OID or name.

cert_der: Vec<u8>

DER-encoded signer certificate.

Mac

MAC-based protection (RFC 9810 §5.1.3.1).

Uses a shared secret (reference number + passphrase) to compute a MAC over the message. Typically used for initial enrollment (ir) before the client has a certificate.

Fields

algorithm: String

MAC algorithm name (e.g., "hmac-sha256").

Trait Implementations

impl Clone for CmpProtectionType

fn clone(&self) -> CmpProtectionType

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CmpProtectionType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.