Security

OPC UA for Rust supports encrypted communication between client and server, pki trust between client & server, and anonymous and user/password user identity tokens.

All of these are defined on a per-endpoint basis, either programmatically or via configuration.

Encryption

The server supports endpoints with the standard message security modes:

• None - no encryption
• Sign - no encryption but messages are digitally signed to ensure integrity
• SignAndEncrypt - signed messages which are then encrypted

The following security policies are supported.

• None, i.e. no encryption or signing
• Basic128Rsa15
• Basic256
• Basic256Rsa256

User identities

The server supports the following user identities

1. Anonymous, i.e. no authentication
2. User/password - plaintext password only