Struct CachedIdentity 

pub struct CachedIdentity { /* private fields */ }

Zero-KDF identity for session reads.

Returns the cached FileKey directly without any cryptographic operations.

Implementations

impl CachedIdentity

pub fn new(material: &CachedMaterial) -> Self

Create a new cached identity from previously captured key material.

Trait Implementations

impl Drop for CachedIdentity

fn drop(&mut self)

Executes the destructor for this type.

impl Identity for CachedIdentity

fn unwrap_stanza( &self, stanza: &Stanza, ) -> Option<Result<FileKey, DecryptError>>

Return the cached FileKey for any matching stanza.

This intentionally skips body verification: the cached file key was already authenticated during the initial full-KDF Argon2idIdentity decryption. If the file key is wrong (e.g. corrupted keychain), the age STREAM layer will detect it via its per-chunk Poly1305 MAC and return a decryption error — no silent data corruption is possible.

fn unwrap_stanzas( &self, stanzas: &[Stanza], ) -> Option<Result<FileKey, DecryptError>>

Attempts to unwrap any of the given stanzas, which are assumed to come from the same age file header, and therefore contain the same file key.