Struct Cipher 

pub struct Cipher { /* private fields */ }

AEAD cipher for encrypting/decrypting data channel packets

Implementations

impl Cipher

pub fn new(key: &[u8; 32], suite: CipherSuite) -> Self

Create a new cipher instance

pub fn encrypt( &self, nonce: &[u8; 12], plaintext: &[u8], aad: &[u8], ) -> Result<Vec<u8>>

Encrypt plaintext with associated data

Returns ciphertext with authentication tag appended.

pub fn encrypt_into( &self, nonce: &[u8; 12], plaintext: &[u8], aad: &[u8], out: &mut Vec<u8>, ) -> Result<usize>

Encrypt plaintext into pre-allocated buffer

Returns the number of bytes written. Buffer must have capacity for plaintext + TAG_SIZE bytes.

pub fn decrypt( &self, nonce: &[u8; 12], ciphertext: &[u8], aad: &[u8], ) -> Result<Vec<u8>>

Decrypt ciphertext with associated data

Verifies authentication tag and returns plaintext.

pub fn generate_nonce(&self) -> [u8; 12]

Generate a random nonce using OsRng

Note: For high-throughput scenarios, consider using counter-based nonces via PacketCipher which avoids syscall overhead.

pub fn suite(&self) -> CipherSuite

Get the cipher suite