Struct Pbes2KeyUnwrapper 

pub struct Pbes2KeyUnwrapper { /* private fields */ }

Available on crate features signatures and key-wrapping-pbes2 only.

PBES2-HS256+A256KW key unwrapper (password-based).

Derives the same KEK from the password and salt/iterations stored in the wrapped data, then unwraps the content encryption key.

Implementations

impl Pbes2KeyUnwrapper

pub fn new(password: impl AsRef<[u8]>) -> Self

Create a key unwrapper with the given password.

pub fn unwrap(&self, data: &Pbes2WrappedKeyData) -> Result<Vec<u8>>

Unwrap a content encryption key.

Uses the salt and iteration count from the wrapped data to derive the KEK, then unwraps the content key.

Errors

Returns an error if the password is wrong, the wrapped data is tampered, or the iteration count is outside the allowed range.