Struct RustCryptoProvider 

pub struct RustCryptoProvider { /* private fields */ }

Default crypto provider built on the in-crate crate::crypto::Crypto (RustCrypto-backed AES + RSA).

Despite the historical “Openssl” name in the design doc, the implementation uses the workspace’s RustCrypto stack. Recorded as a Deviation in docs/parity.md.

Implementations

impl RustCryptoProvider

pub fn new(crypto: Crypto) -> Self

Wrap an existing crate::crypto::Crypto.

Examples

use dynomite::embed::hooks::{CryptoProvider, RustCryptoProvider};
use dynomite::crypto::Crypto;
// Production embedders load the key from disk:
let crypto = Crypto::from_pem("/etc/dynomite/dynomite.pem").unwrap();
let p = RustCryptoProvider::new(crypto);
assert!(p.rsa_size() >= 128);

pub fn from_arc(crypto: Arc<Crypto>) -> Self

Construct from an Arc-shared crypto bundle.

Trait Implementations

impl CryptoProvider for RustCryptoProvider

fn rsa_size(&self) -> usize

Modulus length in bytes for the configured RSA key.

fn aes_key(&self) -> [u8; 32]

Borrow the AES key buffer used by the DNODE handshake.

fn aes_encrypt(&self, plaintext: &[u8]) -> Result<Vec<u8>, CryptoProviderError>

AES-encrypt plaintext under the provider’s key.

fn aes_decrypt(&self, ciphertext: &[u8]) -> Result<Vec<u8>, CryptoProviderError>

AES-decrypt ciphertext under the provider’s key.

fn rsa_encrypt(&self, plaintext: &[u8]) -> Result<Vec<u8>, CryptoProviderError>

RSA-encrypt plaintext under the provider’s public key.

fn rsa_decrypt(&self, ciphertext: &[u8]) -> Result<Vec<u8>, CryptoProviderError>

RSA-decrypt ciphertext under the provider’s private key.

impl Debug for RustCryptoProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.