Struct ffsend_api::reader::EncryptedFileWriter

pub struct EncryptedFileWriter { /* private fields */ }

A lazy file writer, that decrypt the file with the given cipher and verifies it with the tag appended to the end of the input data.

This writer is lazy because the input data is decrypted and written to the specified file on the fly, instead of buffering all the data first. This greatly reduces memory usage for large files.

The length of the input data (including the appended tag) must be given when this reader is initialized. When all data including the tag is read, the decrypted data is verified with the tag. If the tag doesn’t match the decrypted data, a write error is returned on the last write. This writer will never write more bytes than the length initially specified.

This reader encrypts the input data with the given key and input vector.

A failed writing implies that no data could be written, or that the data wasn’t successfully decrypted because of an decryption or tag matching error. Such a fail means that the file will be incomplete or corrupted, and should therefore be removed from the disk.

It is highly recommended to invoke the verified() method after writing the file, to ensure the written file is indeed complete and fully verified.

Implementations

impl EncryptedFileWriter

pub fn new(
    file: File,
    len: usize,
    cipher: Cipher,
    key: &[u8],
    iv: &[u8]
) -> Result<Self, Error>

Construct a new encrypted file writer.

The file to write to must be given to file, which must be open for writing. The total length of the input data in bytes must be given to len, which includes both the file bytes and the appended tag.

For decryption, a cipher, key and iv must also be given.

pub fn has_tag(&self) -> bool

Check wheher the complete tag is buffered.

pub fn verified(&self) -> bool

Check whether the decrypted data is succesfsully verified.

If this method returns true the following is implied:

• The complete file has been written.
• The complete file was successfully decrypted.
• The included tag matches the decrypted file.

It is highly recommended to invoke this method and check the verification after writing the file using this writer.

Trait Implementations

impl ExactLengthReader for EncryptedFileWriter

fn len(&self) -> Result<u64, IoError>

Get the exact length of the reader in bytes.

fn is_empty(&self) -> Result<bool, Error>

Check whehter this extact length reader is emtpy.

impl Write for EncryptedFileWriter

The writer trait implementation.

fn write(&mut self, buf: &[u8]) -> Result<usize, Error>

Write a buffer into this writer, returning how many bytes were written.

fn flush(&mut self) -> Result<(), Error>

Flush this output stream, ensuring that all intermediately buffered contents reach their destination.

fn write_vectored(&mut self, bufs: &[IoSlice<'_>]) -> Result<usize, Error>

Like write, except that it writes from a slice of buffers.

fn is_write_vectored(&self) -> bool

🔬This is a nightly-only experimental API. (can_vector)

Determines if this Writer has an efficient write_vectored implementation.

fn write_all(&mut self, buf: &[u8]) -> Result<(), Error>

Attempts to write an entire buffer into this writer.

fn write_all_vectored(&mut self, bufs: &mut [IoSlice<'_>]) -> Result<(), Error>

🔬This is a nightly-only experimental API. (write_all_vectored)

Attempts to write multiple buffers into this writer.

fn write_fmt(&mut self, fmt: Arguments<'_>) -> Result<(), Error>

Writes a formatted string into this writer, returning any error encountered.

fn by_ref(&mut self) -> &mut Selfwhere
    Self: Sized,

Creates a “by reference” adapter for this instance of Write.