Struct TransportKey 

pub struct TransportKey(/* private fields */);

Single-use transport encryption key derived from the ECDH shared secret.

Wraps a 32-byte key in Zeroizing and enforces single use via move semantics. encrypt() takes self by value — a second call is a compile error.

Implementations

impl TransportKey

pub fn new(key: [u8; 32]) -> Self

pub fn encrypt(self, plaintext: &[u8]) -> Result<Vec<u8>, ProtocolError>

Encrypt plaintext with ChaCha20-Poly1305. Consumes the key (single use).

Output format: [nonce:12][ciphertext+tag]

pub fn as_bytes(&self) -> &[u8; 32]

Access the raw key bytes (for the responder side that needs them for decryption).