Struct DecodedBuffer 

pub struct DecodedBuffer<const CAP: usize> { /* private fields */ }

Stack-backed decoded Base64 output.

This type is intended for short decoded values where heap allocation would be unnecessary but manually sizing and passing a separate output slice is noisy. Decoded data may be binary or secret-bearing, so formatting is redacted and contents are exposed only through explicit byte accessors.

The backing array is cleared when the value is dropped. This is best-effort data-retention reduction and is not a formal zeroization guarantee.

On wasm32 targets, the wipe barrier uses only a compiler fence. The wasm runtime JIT may still optimize or retain cleared bytes in ways this crate cannot control. wasm32 builds fail closed by default; enable allow-wasm32-best-effort-wipe only when the deployment explicitly accepts this limitation and applies its own memory strategy around stack-backed buffers.

Implementations

impl<const CAP: usize> DecodedBuffer<CAP>

pub const fn new() -> Self

Creates an empty decoded buffer.

pub const fn len(&self) -> usize

Returns the number of visible decoded bytes.

pub const fn is_empty(&self) -> bool

Returns whether the buffer has no visible decoded bytes.

pub const fn is_full(&self) -> bool

Returns whether the visible decoded bytes fill the stack backing array.

pub const fn capacity(&self) -> usize

Returns the stack capacity in bytes.

pub const fn remaining_capacity(&self) -> usize

Returns the number of unused bytes in the stack backing array.

pub fn as_bytes(&self) -> &[u8]

Returns the visible decoded bytes.

pub fn as_utf8(&self) -> Result<&str, Utf8Error>

Returns the visible decoded bytes as UTF-8 text.

Decoded Base64 output is arbitrary bytes, so this method is fallible. Use Self::as_bytes when the decoded payload is binary or when text validation belongs to a higher protocol layer.

pub fn constant_time_eq_public_len(&self, other: &[u8]) -> bool

Compares this decoded output to other without short-circuiting on the first differing byte.

Length and the final equality result remain public. Different lengths return false immediately; use this helper only when the compared lengths are public protocol facts or have been normalized by the caller. For equal-length inputs, this helper scans every byte before returning. It is constant-time-oriented best effort, not a formal cryptographic constant-time guarantee. This comparison is deliberately explicit: redacted buffer types do not implement PartialEq because == would make a best-effort helper look like a formal token/MAC comparison primitive.

Do not use this helper as the sole MAC, bearer-token, password-hash, or authentication-secret comparison primitive in high-assurance systems. Applications that can admit dependencies should use a reviewed constant-time comparison primitive, such as subtle, at the protocol boundary.

pub fn into_exposed_array(self) -> ExposedDecodedArray<CAP>

Consumes the wrapper and returns the backing array plus visible length inside a drop-wiping exposed wrapper.

This is an explicit escape hatch for no-alloc interop with APIs that require ownership of a fixed array. The returned ExposedDecodedArray remains redacted by formatting and clears its backing array on drop.

pub fn clear(&mut self)

Clears the visible bytes and the full backing array.

pub fn clear_tail(&mut self)

Clears bytes after the visible prefix.

Trait Implementations

impl<const CAP: usize> AsRef<[u8]> for DecodedBuffer<CAP>

fn as_ref(&self) -> &[u8]

Converts this type into a shared reference of the (usually inferred) input type.

impl<const CAP: usize> Clone for DecodedBuffer<CAP>

fn clone(&self) -> Self

Clones the visible decoded bytes into a second stack-backed buffer.

Security note: cloning duplicates decoded bytes in memory. Both the original and the clone must be dropped or explicitly cleared before the duplicated bytes are gone on the crate’s best-effort cleanup path. The compiler may also create temporary stack copies while performing the copy; those intermediates are outside this crate’s cleanup boundary. For high-assurance applications, avoid cloning decoded key material and use SecretBuffer for heap-owned secrets without a Clone implementation.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<const CAP: usize> Debug for DecodedBuffer<CAP>

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<const CAP: usize> Default for DecodedBuffer<CAP>

fn default() -> Self

Returns the “default value” for a type.

impl<const CAP: usize> Drop for DecodedBuffer<CAP>

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl<const CAP: usize> From<DecodedBuffer<CAP>> for SecretBuffer

Available on crate feature alloc only.

fn from(buffer: DecodedBuffer<CAP>) -> Self

Copies visible decoded bytes from a stack-backed buffer into an owned redacted buffer.

The consumed stack-backed buffer clears its backing array when it is dropped at the end of the conversion.

impl<const CAP: usize> FromStr for DecodedBuffer<CAP>

fn from_str(input: &str) -> Result<Self, Self::Err>

Decodes strict standard padded Base64 text into a stack-backed buffer.

Use crate::Engine::decode_buffer or crate::Profile::decode_buffer when a different alphabet, padding mode, or line-wrapping profile is required. These conversions always use crate::STANDARD; URL-safe, bcrypt, crypt, MIME, PEM, and custom alphabets must use an explicit engine or profile.

Security

This idiomatic conversion uses the strict standard decoder, not the constant-time-oriented decoder. It may branch or return early on malformed input and reports exact DecodeError positions. For secret-bearing tokens or key material where malformed-input timing matters, use crate::ct::CtEngine::decode_buffer through crate::ct::STANDARD instead.

type Err = DecodeError

The associated error which can be returned from parsing.

impl<const CAP: usize, const N: usize> TryFrom<&[u8; N]> for DecodedBuffer<CAP>

fn try_from(input: &[u8; N]) -> Result<Self, Self::Error>

Decodes a strict standard padded Base64 byte array into a stack-backed buffer.

Use crate::Engine::decode_buffer or crate::Profile::decode_buffer when a different alphabet, padding mode, or line-wrapping profile is required. These conversions always use crate::STANDARD; URL-safe, bcrypt, crypt, MIME, PEM, and custom alphabets must use an explicit engine or profile.

Security

This idiomatic conversion uses the strict standard decoder, not the constant-time-oriented decoder. It may branch or return early on malformed input and reports exact DecodeError positions. For secret-bearing tokens or key material where malformed-input timing matters, use crate::ct::CtEngine::decode_buffer through crate::ct::STANDARD instead.

type Error = DecodeError

The type returned in the event of a conversion error.

impl<const CAP: usize> TryFrom<&[u8]> for DecodedBuffer<CAP>

fn try_from(input: &[u8]) -> Result<Self, Self::Error>

Decodes strict standard padded Base64 into a stack-backed buffer.

Use crate::Engine::decode_buffer or crate::Profile::decode_buffer when a different alphabet, padding mode, or line-wrapping profile is required. These conversions always use crate::STANDARD; URL-safe, bcrypt, crypt, MIME, PEM, and custom alphabets must use an explicit engine or profile.

Security

This idiomatic conversion uses the strict standard decoder, not the constant-time-oriented decoder. It may branch or return early on malformed input and reports exact DecodeError positions. For secret-bearing tokens or key material where malformed-input timing matters, use crate::ct::CtEngine::decode_buffer through crate::ct::STANDARD instead.

type Error = DecodeError

The type returned in the event of a conversion error.

impl<const CAP: usize> TryFrom<&str> for DecodedBuffer<CAP>

fn try_from(input: &str) -> Result<Self, Self::Error>

Decodes strict standard padded Base64 text into a stack-backed buffer.

Use crate::Engine::decode_buffer or crate::Profile::decode_buffer when a different alphabet, padding mode, or line-wrapping profile is required. These conversions always use crate::STANDARD; URL-safe, bcrypt, crypt, MIME, PEM, and custom alphabets must use an explicit engine or profile.

Security

This idiomatic conversion uses the strict standard decoder, not the constant-time-oriented decoder. It may branch or return early on malformed input and reports exact DecodeError positions. For secret-bearing tokens or key material where malformed-input timing matters, use crate::ct::CtEngine::decode_buffer through crate::ct::STANDARD instead.

type Error = DecodeError

The type returned in the event of a conversion error.