Struct RecvCipher 

pub struct RecvCipher { /* private fields */ }

Decrypts incoming messages with an auto-incrementing nonce.

Implementations

impl RecvCipher

pub fn new(rng: impl CryptoRngCore) -> Self

Creates a new receiving cipher with a random key.

pub fn recv_in_place( &mut self, encrypted_data: &mut [u8], ) -> Result<usize, Error>

Decrypts encrypted_data in-place and returns the plaintext length.

The buffer must contain ciphertext with the authentication tag appended (last TAG_SIZE bytes). After decryption, the plaintext is in encrypted_data[..returned_len].

Errors

Returns an error if:

• encrypted_data.len() < TAG_SIZE
• Too many messages have been received with this cipher
• The ciphertext was corrupted or tampered with

In the last two cases, the RecvCipher will no longer be able to return valid ciphertexts, and will always return an error on subsequent calls to Self::recv. Terminating (and optionally reestablishing) the connection is a simple (and safe) way to handle this scenario.

pub fn recv(&mut self, encrypted_data: &[u8]) -> Result<Vec<u8>, Error>

Decrypts ciphertext and returns the original data.

Errors

This function will return an error in the following situations:

• Too many messages have been received with this cipher.
• The ciphertext was corrupted in some way.

In both cases, the RecvCipher will no longer be able to return valid ciphertexts, and will always return an error on subsequent calls to Self::recv. Terminating (and optionally reestablishing) the connection is a simple (and safe) way to handle this scenario.