Struct Hmac 

pub struct Hmac<H: HashFunction + Clone + Zeroize> { /* private fields */ }

HMAC implementation with constant-time tag-byte comparison.

Implementations

impl<H> Hmac<H>

where H: HashFunction + Clone + Zeroize, H::Output: AsRef<[u8]> + Clone + Zeroize,

pub fn new(key: &[u8]) -> Result<Self>

Create a new HMAC instance from key.

pub fn update(&mut self, data: &[u8]) -> Result<()>

Feed additional data into the MAC.

pub fn finalize(&mut self) -> Result<ZeroizingBytes>

Finalise and return the tag.

pub fn mac(key: &[u8], data: &[u8]) -> Result<ZeroizingBytes>

One-shot MAC helper.

pub fn verify(key: &[u8], data: &[u8], tag: &[u8]) -> Result<bool>

Fixed-width verification of tag against key / data.

Tag bytes are accumulated without an early exit. Public lengths, hash errors, allocation, and the returned boolean still have ordinary control flow, so this is not a whole-operation constant-time guarantee.

Trait Implementations

impl<H: Clone + HashFunction + Clone + Zeroize> Clone for Hmac<H>

fn clone(&self) -> Hmac<H>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<H: HashFunction + Clone + Zeroize> Drop for Hmac<H>

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl<H> SecureZeroingType for Hmac<H>

where H: HashFunction + Default + Clone + Zeroize,

fn zeroed() -> Self

Create a zeroed instance

fn secure_clone(&self) -> Self

Create a clone with the same owned-storage cleanup behavior.

impl<H: HashFunction + Clone + Zeroize> Zeroize for Hmac<H>

fn zeroize(&mut self)

impl<H: HashFunction + Clone + Zeroize> ZeroizeOnDrop for Hmac<H>