Struct HmacAuth 

pub struct HmacAuth { /* private fields */ }

HMAC authentication key for tls-auth

Implementations

impl HmacAuth

pub const KEY_SIZE: usize = 32usize

Key size in bytes

pub const HMAC_SIZE: usize = 32usize

HMAC output size in bytes

pub fn new(tx_key: [u8; 32], rx_key: [u8; 32]) -> Self

Create from separate TX and RX keys

pub fn from_single_key(key: [u8; 32]) -> Self

Create from a single key (same key for both directions)

pub fn from_ta_key( ta_key: &[u8; 256], is_server: bool, key_direction: Option<u8>, ) -> Self

Create from OpenVPN ta.key format (2048-bit / 256 bytes)

OpenVPN ta.key contains 4 keys:

• Bytes 0-63: Client HMAC key (encrypt direction)
• Bytes 64-127: Server HMAC key (encrypt direction)
• Bytes 128-191: Client HMAC key (decrypt direction)
• Bytes 192-255: Server HMAC key (decrypt direction)

pub fn authenticate(&self, data: &[u8]) -> [u8; 32]

Compute HMAC for an outgoing packet

pub fn verify(&self, data: &[u8], expected_hmac: &[u8; 32]) -> Result<()>

Verify HMAC for an incoming packet (constant-time)

pub fn wrap(&self, data: &[u8]) -> Vec<u8>

Wrap a packet with HMAC (prepends HMAC to data)

pub fn unwrap(&self, packet: &[u8]) -> Result<Vec<u8>>

Unwrap a packet and verify HMAC

Trait Implementations

impl Drop for HmacAuth

fn drop(&mut self)

Executes the destructor for this type.