Struct EcdhEsKeyWrapper 

pub struct EcdhEsKeyWrapper { /* private fields */ }

Available on crate features signatures and key-wrapping only.

ECDH-ES+A256KW key wrapper (sender side).

Generates an ephemeral P-256 keypair, performs ECDH to derive a shared secret, runs HKDF-SHA256 to derive a 256-bit KEK, then wraps the content encryption key with AES Key Wrap (RFC 3394).

Implementations

impl EcdhEsKeyWrapper

pub fn new(recipient_public_key: PublicKey) -> Self

Create a key wrapper for the given recipient public key.

The public key should be the recipient’s P-256 (secp256r1) public key.

pub fn wrap(&self, content_key: &[u8]) -> Result<WrappedKeyData>

Wrap a content encryption key for the recipient.

Performs ECDH-ES+A256KW:

1. Generate ephemeral P-256 keypair
2. ECDH key agreement with recipient’s public key
3. HKDF-SHA256 to derive a 256-bit KEK
4. AES Key Wrap (RFC 3394) the content encryption key

Errors

Returns an error if the content key length is not a multiple of 8 bytes (as required by AES Key Wrap), or if any cryptographic operation fails.