Enum Recipient 

pub enum Recipient<'a> {
    Transport {
        version: u64,
        identifier: SignerIdentifier<'a>,
        algorithm: AlgorithmIdentifier<'a>,
        encrypted: Octets<'a>,
    },
    Agreement {
        originator: Originator<'a>,
        ukm: Option<Octets<'a>>,
        algorithm: AlgorithmIdentifier<'a>,
        keys: OwnedVec<RecipientKey<'a>>,
    },
    Kek {
        identifier: KeyIdentifier<'a>,
        algorithm: AlgorithmIdentifier<'a>,
        encrypted: Octets<'a>,
    },
    Password {
        derivation: Option<AlgorithmIdentifier<'a>>,
        algorithm: AlgorithmIdentifier<'a>,
        encrypted: Octets<'a>,
    },
    Other {
        kind: Oid<'a>,
        value: EncodedValue<'a>,
    },
}

All five CMS RecipientInfo alternatives, without engine dispatch or key lookup.

Variants

Transport

Public-key transport (§6.2.1); version is 0 for issuer/serial, 2 for SKI.

Fields

version: u64

Declared version, checked against the identifier alternative.

identifier: SignerIdentifier<'a>

Original selected recipient identity; never an implicit key hint.

algorithm: AlgorithmIdentifier<'a>

Actual key-encryption algorithm and original parameters.

encrypted: Octets<'a>

Original encrypted content-encryption key.

Agreement

Key agreement (§6.2.2), always version3.

Fields

originator: Originator<'a>

Original sender-key alternative.

ukm: Option<Octets<'a>>

Optional explicit user-keying material; absence stays distinct.

algorithm: AlgorithmIdentifier<'a>

Original key-encryption algorithm.

keys: OwnedVec<RecipientKey<'a>>

All original recipient encrypted keys, not just the first.

Kek

Pre-distributed symmetric KEK (§6.2.3), always version4.

Fields

identifier: KeyIdentifier<'a>

Original KEK identifier, date and additional open value.

algorithm: AlgorithmIdentifier<'a>

Original key-encryption algorithm.

encrypted: Octets<'a>

Original encrypted content-encryption key.

Password

Password/shared-secret recipient (§6.2.4), always version0.

Fields

derivation: Option<AlgorithmIdentifier<'a>>

Optional original [0] IMPLICIT key derivation algorithm. Absence means externally supplied KEK, not an invented default KDF.

algorithm: AlgorithmIdentifier<'a>

Original key-encryption algorithm.

encrypted: Octets<'a>

Original encrypted content-encryption key.

Other

Named open key-management format (§6.2.5), including RFC9629 KEM.

Fields

kind: Oid<'a>

Exact format OID. Unknown is not absence or key-transport fallback.

value: EncodedValue<'a>

Whole original open value, to be interpreted by its actual owner.

Trait Implementations

impl<'a> Debug for Recipient<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.