Struct OtpGenerator 

pub struct OtpGenerator { /* private fields */ }

Generates cryptographically random OTP tokens.

Uses OsRng (FIPS-approved on supported platforms) to produce tokens with at least 128 bits of entropy (RHELBU-3536 R7).

Implementations

impl OtpGenerator

pub fn new(config: OtpGeneratorConfig) -> OtpResult<Self>

Create a generator with the given configuration.

Errors

Returns OtpError::GenerationError if entropy_bytes < 16 (below the 128-bit minimum required by RHELBU-3536 R7).

pub fn generate( &self, entity_id: &str, label: &str, profile: &str, ) -> OtpResult<GeneratedOtp>

Generate a new OTP for the given entity and profile.

Returns a GeneratedOtp containing the plaintext token (for delivery to the enrollee) and the SHA-256 hash (for storage). The plaintext must not be persisted by the caller.

pub fn generate_with_options( &self, entity_id: &str, label: &str, profile: &str, ttl_seconds: i64, max_uses: u32, ) -> OtpResult<GeneratedOtp>

Generate an OTP with explicit TTL and max-use overrides.

pub fn hash_token(plaintext: &str) -> Vec<u8>

Hash a plaintext token for lookup.

Used during validation to compute the hash from the client-supplied token before querying the store.