Struct AesKeyWrap 

pub struct AesKeyWrap<C> { /* private fields */ }

AES Key Wrap (RFC 3394) over 64-bit semiblocks with the default IV.

This is the no-padding variant standardized in RFC 3394 and SP 800-38F. Inputs must be a multiple of 8 bytes and at least 16 bytes long.

Implementations

impl<C> AesKeyWrap<C>

pub fn new(cipher: C) -> Self

Wrap an AES cipher instance for RFC 3394 key wrap operations.

pub fn cipher(&self) -> &C

Borrow the wrapped AES cipher.

impl<C: BlockCipher> AesKeyWrap<C>

pub fn wrap_key(&self, key_data: &[u8]) -> Option<Vec<u8>>

Wrap key material with the RFC 3394 default IV (A6A6A6A6A6A6A6A6).

Returns None when key_data is not a multiple of 8 bytes or is shorter than 16 bytes.

pub fn wrap_key_with_iv(&self, key_data: &[u8], iv: &[u8; 8]) -> Option<Vec<u8>>

Wrap key material with an explicit 64-bit initial register value.

Returns None when key_data is not a multiple of 8 bytes or is shorter than 16 bytes.

pub fn unwrap_key(&self, wrapped: &[u8]) -> Option<Vec<u8>>

Unwrap RFC 3394 key material and verify the default IV integrity check.

Returns None when input length is invalid or the integrity check fails.

pub fn unwrap_key_with_iv( &self, wrapped: &[u8], iv: &[u8; 8], ) -> Option<Vec<u8>>

Unwrap RFC 3394 key material and verify against an explicit IV value.

Returns None when input length is invalid or the integrity check fails.