1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
// SPDX-FileCopyrightText: 2026 ReallyMe LLC
//
// SPDX-License-Identifier: MIT OR Apache-2.0
/// HPKE KEM identifier for DHKEM(P-256, HKDF-SHA256).
pub const HPKE_KEM_DHKEM_P256_HKDF_SHA256: u16 = 0x0010;
/// HPKE KEM identifier for DHKEM(P-384, HKDF-SHA384).
pub const HPKE_KEM_DHKEM_P384_HKDF_SHA384: u16 = 0x0011;
/// HPKE KEM identifier for DHKEM(P-521, HKDF-SHA512).
pub const HPKE_KEM_DHKEM_P521_HKDF_SHA512: u16 = 0x0012;
/// HPKE KEM identifier for DHKEM(CP-256, HKDF-SHA256).
pub const HPKE_KEM_DHKEM_CP256_HKDF_SHA256: u16 = 0x0013;
/// HPKE KEM identifier for DHKEM(CP-384, HKDF-SHA384).
pub const HPKE_KEM_DHKEM_CP384_HKDF_SHA384: u16 = 0x0014;
/// HPKE KEM identifier for DHKEM(CP-521, HKDF-SHA512).
pub const HPKE_KEM_DHKEM_CP521_HKDF_SHA512: u16 = 0x0015;
/// HPKE KEM identifier for DHKEM(secp256k1, HKDF-SHA256).
pub const HPKE_KEM_DHKEM_SECP256K1_HKDF_SHA256: u16 = 0x0016;
/// HPKE KEM identifier for DHKEM(X25519, HKDF-SHA256).
pub const HPKE_KEM_DHKEM_X25519_HKDF_SHA256: u16 = 0x0020;
/// HPKE KEM identifier for DHKEM(X448, HKDF-SHA512).
pub const HPKE_KEM_DHKEM_X448_HKDF_SHA512: u16 = 0x0021;
/// HPKE KEM identifier for DHKEM(X25519+Elligator, HKDF-SHA256).
pub const HPKE_KEM_DHKEM_X25519_ELLIGATOR_HKDF_SHA256: u16 = 0x0022;
/// HPKE KEM identifier for the historical X25519Kyber768Draft00 construction.
pub const HPKE_KEM_X25519_KYBER768_DRAFT00: u16 = 0x0030;
/// HPKE KEM identifier for ML-KEM-512.
pub const HPKE_KEM_ML_KEM_512: u16 = 0x0040;
/// HPKE KEM identifier for ML-KEM-768.
pub const HPKE_KEM_ML_KEM_768: u16 = 0x0041;
/// HPKE KEM identifier for ML-KEM-1024.
pub const HPKE_KEM_ML_KEM_1024: u16 = 0x0042;
/// HPKE KEM identifier for MLKEM768-P256.
pub const HPKE_KEM_ML_KEM_768_P256: u16 = 0x0050;
/// HPKE KEM identifier for MLKEM1024-P384.
pub const HPKE_KEM_ML_KEM_1024_P384: u16 = 0x0051;
/// HPKE KEM identifier for X-Wing.
pub const HPKE_KEM_X_WING: u16 = 0x647a;
/// HPKE KDF identifier for HKDF-SHA256.
pub const HPKE_KDF_HKDF_SHA256: u16 = 0x0001;
/// HPKE KDF identifier for HKDF-SHA384.
pub const HPKE_KDF_HKDF_SHA384: u16 = 0x0002;
/// HPKE KDF identifier for HKDF-SHA512.
pub const HPKE_KDF_HKDF_SHA512: u16 = 0x0003;
/// HPKE KDF identifier for SHAKE128.
pub const HPKE_KDF_SHAKE128: u16 = 0x0010;
/// HPKE KDF identifier for SHAKE256.
pub const HPKE_KDF_SHAKE256: u16 = 0x0011;
/// HPKE KDF identifier for TurboSHAKE128.
pub const HPKE_KDF_TURBO_SHAKE128: u16 = 0x0012;
/// HPKE KDF identifier for TurboSHAKE256.
pub const HPKE_KDF_TURBO_SHAKE256: u16 = 0x0013;
/// HPKE AEAD identifier for AES-128-GCM.
pub const HPKE_AEAD_AES_128_GCM: u16 = 0x0001;
/// HPKE AEAD identifier for AES-256-GCM.
pub const HPKE_AEAD_AES_256_GCM: u16 = 0x0002;
/// HPKE AEAD identifier for ChaCha20-Poly1305.
pub const HPKE_AEAD_CHACHA20_POLY1305: u16 = 0x0003;
/// HPKE export-only AEAD identifier.
pub const HPKE_AEAD_EXPORT_ONLY: u16 = 0xffff;
/// AES-GCM and ChaCha20-Poly1305 authentication tag length in HPKE.
pub const HPKE_AEAD_TAG_LEN: usize = 16;
/// Nonce length derived by each supported HPKE encrypting AEAD.
pub const HPKE_AEAD_NONCE_LEN: usize = 12;
/// Minimum entropy-bearing PSK byte length required by RFC 9180.
pub const HPKE_MIN_PSK_LEN: usize = 32;
/// Maximum combined `info`, PSK identifier, and fixed-label length.
pub const HPKE_LABELED_CONTEXT_LIMIT: usize = 1 << 16;
/// Fixed label bytes included in the key-schedule context length check.
pub const HPKE_KEY_SCHEDULE_LABEL_OVERHEAD: usize = 5;
/// Maximum registered encapsulated-key length exposed by this package.
pub const HPKE_ENCAPSULATED_KEY_MAX_LEN: usize = 1_665;
/// Maximum public-key length exposed by this package.
pub const HPKE_PUBLIC_KEY_MAX_LEN: usize = 1_665;
/// Maximum private-key or deterministic IKM length exposed by this package.
pub const HPKE_PRIVATE_KEY_MAX_LEN: usize = 66;
/// SEC1 uncompressed P-256 HPKE public key length.
pub const HPKE_P256_PUBLIC_KEY_LEN: usize = 65;
/// P-256 scalar private key length.
pub const HPKE_P256_PRIVATE_KEY_LEN: usize = 32;
/// SEC1 uncompressed P-384 HPKE public key length.
pub const HPKE_P384_PUBLIC_KEY_LEN: usize = 97;
/// P-384 scalar private key length.
pub const HPKE_P384_PRIVATE_KEY_LEN: usize = 48;
/// SEC1 uncompressed P-521 HPKE public key length.
pub const HPKE_P521_PUBLIC_KEY_LEN: usize = 133;
/// P-521 scalar private key length.
pub const HPKE_P521_PRIVATE_KEY_LEN: usize = 66;
/// SEC1 uncompressed secp256k1 HPKE public key length.
pub const HPKE_SECP256K1_PUBLIC_KEY_LEN: usize = 65;
/// secp256k1 scalar private key length.
pub const HPKE_SECP256K1_PRIVATE_KEY_LEN: usize = 32;
/// X25519 HPKE public key length.
pub const HPKE_X25519_PUBLIC_KEY_LEN: usize = 32;
/// X25519 HPKE private key length.
pub const HPKE_X25519_PRIVATE_KEY_LEN: usize = 32;
/// X448 HPKE public key length.
pub const HPKE_X448_PUBLIC_KEY_LEN: usize = 56;
/// X448 HPKE private key length.
pub const HPKE_X448_PRIVATE_KEY_LEN: usize = 56;