DAT Rust Library
GitHub crates.ioInstallation
Quick start
This complete flow retrieves certificates from CMS, creates a DAT containing JSON data, and verifies it.
Step by step
1. Connect to CMS
An issuing service uses a token for full certificates. Synchronizing immediately at startup prevents issuance before certificates are available.
2. Issue a DAT
This example puts public JSON in plain and protected user information as JSON in secure.
3. Verify a DAT
parse checks expiration and the signature, then decrypts secure. Use only a payload returned after successful verification.
Key functions
| Function | Purpose |
|---|---|
sync().await | Synchronizes certificates immediately. |
issue(plain, secure) | Creates a DAT with the current issuing certificate. |
parse(dat) | Verifies a DAT and returns its payload. |
last_error().await | Returns the last synchronization error. |
Data regions
plain: bytes that are signed but not encrypted.secure: encrypted bytes.payload: trust it only afterparsesucceeds.
Options beyond JSON
The examples use familiar JSON. For faster processing, binary data can avoid JSON serialization and parsing while reducing data size.
Store simple values as text, or place structured data in binary formats such as Protobuf or MessagePack in plain and secure.
Because issue currently accepts strings, encode arbitrary bytes as Base64Url or Hex, then decode them again after verification.
Verify-only services
A service that does not issue DATs uses the verify-only option and a verify-only token, and calls only parse.
Shutdown and errors
The automatic synchronization task ends when the final Arc is dropped.
Use error codes and retry classifications instead of error messages.