Struct EncryptedEnvelope 

pub struct EncryptedEnvelope {
    pub id: String,
    pub sender_did: Did,
    pub recipient_did: Did,
    pub ephemeral_public_key: [u8; 32],
    pub kdf_version: Option<u16>,
    pub ciphertext: Vec<u8>,
    pub content_type: ContentType,
    pub signature: Signature,
    pub release_on_death: bool,
    pub release_delay_hours: u32,
    pub created: Timestamp,
}

An encrypted message envelope — the complete wire format.

The ciphertext is produced by X25519 ECDH + HKDF + XChaCha20-Poly1305. Format: [24-byte nonce][ciphertext][16-byte Poly1305 tag] (same layout as VaultEncryptor in exo-identity).

Fields

id: String

Unique message ID.

sender_did: Did

Sender’s DID.

recipient_did: Did

Recipient’s DID.

ephemeral_public_key: [u8; 32]

Ephemeral X25519 public key used for this message’s ECDH.

kdf_version: Option<u16>

KDF version used to derive the symmetric key.

None means the envelope was created before KDF versioning existed. New envelopes must set KDF_VERSION_TRANSCRIPT_SALTED.

ciphertext: Vec<u8>

Encrypted payload: [nonce][ciphertext][tag].

content_type: ContentType

Content type classification.

signature: Signature

Ed25519 signature over the canonical envelope bytes (excl. signature field).

release_on_death: bool

Whether this message should be released after the sender’s death.

release_delay_hours: u32

Delay in hours after death verification before release (0 = immediate).

created: Timestamp

Creation timestamp (hybrid logical clock).

Implementations

impl EncryptedEnvelope

pub fn signing_payload(&self) -> Result<Vec<u8>, MessagingError>

Compute the domain-separated canonical CBOR payload for signing.

The payload covers every envelope field except the signature itself.

Errors

Returns MessagingError::EnvelopeSigningPayloadEncoding if the CBOR encoder rejects the payload.

Trait Implementations

impl Clone for EncryptedEnvelope

fn clone(&self) -> EncryptedEnvelope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptedEnvelope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EncryptedEnvelope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EncryptedEnvelope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.