Raw single-block / stream cipher primitives for the OxiCrypto stack.
These are deliberately low-level building blocks, distinct from the
authenticated oxicrypto-aead ciphers.
They exist for QUIC header protection (RFC 9001 §5.4), which masks packet
headers with a 5-byte sample of either an AES-ECB single-block encryption
(§5.4.3) or a ChaCha20 keystream block (§5.4.4).
| Primitive | Function | Notes |
|---|---|---|
| AES-128 single block | [aes128_encrypt_block] |
one 16-byte ECB block |
| AES-256 single block | [aes256_encrypt_block] |
one 16-byte ECB block |
| ChaCha20 keystream block | [chacha20_keystream_block] |
RFC 8439 / RFC 9001 §5.4.4 |
All wrappers are #![forbid(unsafe_code)]; the underlying aes / chacha20
crates provide safe constructors (KeyInit::new, KeyIvInit::new) and
operations (BlockEncrypt::encrypt_block, StreamCipher::apply_keystream).