Struct BootChainVerifier 

pub struct BootChainVerifier { /* private fields */ }

Boot chain verifier that checks invariants

Implementations

impl BootChainVerifier

pub fn new() -> Self

Create a new boot chain verifier

pub fn measure( &mut self, stage: BootStage, pcr_index: usize, digest: [u8; 32], component: MeasuredComponent, ) -> Result<(), BootVerifyError>

Record a boot measurement

pub fn set_expected_pcr(&mut self, pcr_index: usize, expected: [u8; 32])

Set an expected PCR value for policy checking

pub fn verify_pcr_monotonicity(&self) -> Result<(), BootVerifyError>

Verify PCR monotonicity: PCR values only change via extend, never reset

This is verified structurally: the PcrState API only allows extend(), and extend() always changes the value (unless the implementation is broken).

pub fn verify_measurement_completeness(&self) -> Result<(), BootVerifyError>

Verify measurement completeness: all boot stages have been measured

pub fn verify_hash_chain(&self) -> Result<(), BootVerifyError>

Verify hash chain integrity: each measurement properly chains

pub fn verify_boot_policy(&self) -> Result<PolicyDecision, BootVerifyError>

Verify boot policy: PCR values match expected values

pub fn verify_log_ordering(&self) -> Result<(), BootVerifyError>

Verify measurement log is chronologically ordered

pub fn verify_measurement_count(&self) -> Result<(), BootVerifyError>

Verify measurement count matches PCR extend counts

pub fn status(&self) -> BootStatus

Get current boot status

pub fn set_status( &mut self, new_status: BootStatus, ) -> Result<(), BootVerifyError>

Transition boot status

Trait Implementations

impl Debug for BootChainVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for BootChainVerifier

fn default() -> BootChainVerifier

Returns the “default value” for a type.