Struct subtle::Choice

[+] Show declaration

pub struct Choice(_);

[−] Expand description

The Choice struct represents a choice for use in conditional assignment.

It is a wrapper around a u8, which should have the value either 1 (true) or 0 (false).

With the nightly feature enabled, the conversion from u8 to Choice passes the value through an optimization barrier, as a best-effort attempt to prevent the compiler from inferring that the Choice value is a boolean. This strategy is based on Tim Maclean's work on rust-timing-shield, which attempts to provide a more comprehensive approach for preventing software side-channels in Rust code.

The Choice struct implements operators for AND, OR, XOR, and NOT, to allow combining Choice values. These operations do not short-circuit.

Methods

impl Choice[−]

pub fn unwrap_u8(&self) -> u8[−]

Unwrap the Choice wrapper to reveal the underlying u8.

Note

This function only exists as an escape hatch for the rare case where it's not possible to use one of the subtle-provided trait impls.

Trait Implementations

impl BitAnd<Choice> for Choice[+]

[+] Show hidden undocumented items

type Output = Choice

The resulting type after applying the & operator.

fn bitand(self, rhs: Choice) -> Choice[−]

Performs the & operation.

impl BitAndAssign<Choice> for Choice[+]

[+] Show hidden undocumented items

fn bitand_assign(&mut self, rhs: Choice)[−]

Performs the &= operation.

impl BitOr<Choice> for Choice[+]

[+] Show hidden undocumented items

type Output = Choice

The resulting type after applying the | operator.

fn bitor(self, rhs: Choice) -> Choice[−]

Performs the | operation.

impl BitOrAssign<Choice> for Choice[+]

[+] Show hidden undocumented items

fn bitor_assign(&mut self, rhs: Choice)[−]

Performs the |= operation.

impl BitXor<Choice> for Choice[+]

[+] Show hidden undocumented items

type Output = Choice

The resulting type after applying the ^ operator.

fn bitxor(self, rhs: Choice) -> Choice[−]

Performs the ^ operation.

impl BitXorAssign<Choice> for Choice[+]

[+] Show hidden undocumented items

fn bitxor_assign(&mut self, rhs: Choice)[−]

Performs the ^= operation.

impl Clone for Choice[+]

[+] Show hidden undocumented items

fn clone(&self) -> Choice[−]

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)[−]

Performs copy-assignment from source.

impl Copy for Choice

impl Debug for Choice[+]

[+] Show hidden undocumented items

fn fmt(&self, f: &mut Formatter) -> Result[−]

Formats the value using the given formatter.

impl From<Choice> for bool[+]

fn from(source: Choice) -> bool[−]

Convert the Choice wrapper into a bool, depending on whether the underlying u8 was a 0 or a 1.

Note

This function exists to avoid having higher-level cryptographic protocol implementations duplicating this pattern.

The intended use case for this conversion is at the end of a higher-level primitive implementation: for example, in checking a keyed MAC, where the verification should happen in constant-time (and thus use a Choice) but it is safe to return a bool at the end of the verification.

impl From<u8> for Choice[+]

[+] Show hidden undocumented items

fn from(input: u8) -> Choice[−]

Performs the conversion.

impl Not for Choice[+]

[+] Show hidden undocumented items

type Output = Choice

The resulting type after applying the ! operator.

fn not(self) -> Choice[−]

Performs the unary ! operation.