Struct CipherSuiteCommon

pub struct CipherSuiteCommon {
    pub suite: CipherSuite,
    pub hash_provider: &'static dyn Hash,
    pub confidentiality_limit: u64,
}

Common state for cipher suites (both for TLS 1.2 and TLS 1.3)

Fields

suite: CipherSuite

The TLS enumeration naming this cipher suite.

hash_provider: &'static dyn Hash

Which hash function the suite uses.

confidentiality_limit: u64

Number of TCP-TLS messages that can be safely encrypted with a single key of this type

Once a MessageEncrypter produced for this suite has encrypted more than confidentiality_limit messages, an attacker gains an advantage in distinguishing it from an ideal pseudorandom permutation (PRP).

This is to be set on the assumption that messages are maximally sized – at least 2 ** 14 bytes. It does not consider confidentiality limits for QUIC connections - see the [quic::KeyBuilder.confidentiality_limit] field for this context.

Implementations

impl CipherSuiteCommon

pub fn fips(&self) -> bool

Return true if this is backed by a FIPS-approved implementation.

This means all the constituent parts that do cryptography return true for fips().