Struct TransportKey 

pub struct TransportKey(/* private fields */);

Single-use transport encryption key derived from the ECDH shared secret.

Wraps a 32-byte key in Zeroizing and enforces single use via move semantics. encrypt() takes self by value — a second call is a compile error.

Invariants (enforced by fn-128.T5’s Secret marker machinery — see auths-crypto::secret):

• Zeroized on drop (via the inner Zeroizing<[u8; 32]> Drop + the outer ZeroizeOnDrop marker impl below).
• No Clone, Copy, Debug, Display, Serialize, Deserialize — a leaked Debug impl would defeat the entire zeroize ceremony.
• No derived PartialEq / Eq; constant-time comparison only.

Implementations

impl TransportKey

pub fn new(key: [u8; 32]) -> Self

pub fn encrypt(self, plaintext: &[u8]) -> Result<Vec<u8>, ProtocolError>

Encrypt plaintext with ChaCha20-Poly1305. Consumes the key (single use).

Output format: [nonce:12][ciphertext+tag]

pub fn as_bytes(&self) -> &[u8; 32]

Access the raw key bytes (for the responder side that needs them for decryption).

Trait Implementations

impl Sealed for TransportKey

impl Secret for TransportKey

impl ZeroizeOnDrop for TransportKey