Struct RecordWithNonce 

pub struct RecordWithNonce {
    pub record: EncryptedRecord,
    pub selector: [u8; 16],
}

A Decryptable pairing an EncryptedRecord with the tokenized selector that binds it.

The SteVec envelope wire format stores one key header per document and ties each entry to its stored selector instead of the data key’s IV. A consumer decrypting such an entry reconstructs the record from the header + the entry’s ciphertext and pairs it with the entry’s 16-byte selector here. The selector is the single source of both bindings: the AEAD nonce is its first 12 bytes (Decryptable::nonce_override) and the full 16 bytes are bound into the AAD (Decryptable::aad_selector), so the ciphertext is authenticated against the entire selector. Every decrypt pipeline honours both.

Fields

record: EncryptedRecord

selector: [u8; 16]

Trait Implementations

impl Debug for RecordWithNonce

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Decryptable for RecordWithNonce

type Error = Infallible

fn keyset_id(&self) -> Option<Uuid>

The keyset ID associated with the record, if any.

fn retrieve_key_payload<'a>( &'a self, ) -> Result<RetrieveKeyPayload<'a>, Self::Error>

The payload used to retrieve the key for decryption.

fn into_encrypted_record(self) -> Result<EncryptedRecord, Self::Error>

Convert the record into an EncryptedRecord.

fn nonce_override(&self) -> Option<[u8; 12]>

The explicit AEAD nonce for this record, when the wire format derives it from something other than the data key’s IV. SteVec entries under the envelope wire format derive it from the entry’s stored selector (nonce = selector_bytes[..12]); classic records return None and decrypt with the IV-derived nonce.

fn aad_selector(&self) -> Option<[u8; 16]>

The full 16-byte tokenized selector to bind into the AEAD AAD, when the wire format ties the ciphertext to a selector. The nonce only covers the first 12 selector bytes, so binding all 16 here authenticates the whole selector — a stored selector cannot be mutated (even in its last 4 bytes) without the entry failing to decrypt. SteVec entries return their selector; classic records return None and add nothing to the AAD.