Struct ReplicaSecretPayload 

pub struct ReplicaSecretPayload {
    pub secret: Option<Secret>,
    pub shares: Vec<ChannelShare>,
    pub shared_key: Vec<u8>,
}

The composite payload sent to each Replica Destination on a ProtectSecret round. Carries the full Secret plus the map of (channel_id → committed_share) for the same round, so the Destination can recover via either path — read the secret directly, or contact each helper using secret.helpers[i].shared_key and request their stored share.

Group-key handover

All replica channels for a given secret_id converge on a single symmetric “group” key. The shared_key field carries that group key inside the encrypted payload only when the sender knows the receiver doesn’t have it yet — i.e. on the first round to a newly paired Destination. Both sides swap their stored channel key ((secret_id, channel_id) in crate::protocol::DeRecSecretStore) from the per-pair ephemeral handshake key to the group key:

• Sender: swap immediately after the request envelope is sent. The ack response from the new joiner will already be encrypted with the group key.
• Receiver: swap before encrypting the ack response, so the ack uses the group key and matches what the sender expects.

On the first-ever replica pair, the group key is implicitly the pair-handshake key — shared_key is left empty, no swap happens, and the channel-key entry both sides already saved is the group key.

Fields

secret: Option<Secret>

The full secret the sender is committing to this version.

shares: Vec<ChannelShare>

One entry per helper that received a VSS share on this round.

shared_key: Vec<u8>

32-byte replica-group key. Present only on the first-sync round to a newly-paired Destination; empty on every subsequent round (since the receiving channel already holds the group key) and empty when the receiving Destination is the very first pair for this secret_id (the pair-handshake key is implicitly the group key). See type-level docs for the swap protocol.

Trait Implementations

impl Clone for ReplicaSecretPayload

fn clone(&self) -> ReplicaSecretPayload

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ReplicaSecretPayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ReplicaSecretPayload

fn default() -> Self

Returns the “default value” for a type.

impl Message for ReplicaSecretPayload

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for ReplicaSecretPayload

fn eq(&self, other: &ReplicaSecretPayload) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ReplicaSecretPayload