Struct fog_crypto::lock::ContainedLockKey

pub struct ContainedLockKey { /* private fields */ }

A self-contained implementor of LockInterface. It’s expected this will be used unless the decryption key is being managed by the OS or a hardware module.

Implementations

impl ContainedLockKey

pub fn generate<R>(csprng: &mut R) -> Selfwhere R: CryptoRng + RngCore,

Generate a new key given a cryptographic random number generator.

pub fn with_version<R>(csprng: &mut R, version: u8) -> Result<Self, CryptoError>where R: CryptoRng + RngCore,

Generate a new key with a specific version, given a cryptographic random number generator. Fails if the version isn’t supported.

pub fn encode_vec(&self, buf: &mut Vec<u8>)

Encode directly to a byte vector. The resulting vector should be zeroized or overwritten before being dropped.

Trait Implementations

impl LockInterface for ContainedLockKey

fn id(&self) -> &LockId

Get the corresponding LockId for the private key.

fn decrypt_lock_key( &self, lockbox: &LockLockboxRef ) -> Result<LockKey, CryptoError>

Decrypt an exported LockKey.

fn decrypt_identity_key( &self, lockbox: &IdentityLockboxRef ) -> Result<IdentityKey, CryptoError>

Decrypt an exported IdentityKey.

fn decrypt_stream_key( &self, lockbox: &StreamLockboxRef ) -> Result<StreamKey, CryptoError>

Decrypt an exported StreamKey.

fn decrypt_data(&self, lockbox: &DataLockboxRef) -> Result<Vec<u8>, CryptoError>

Decrypt encrypted data.

fn self_export_lock( &self, csprng: &mut dyn CryptoSrc, receive_lock: &LockId ) -> Option<LockLockbox>

Export the decryption key in a LockLockbox, with receive_lock as the recipient. If the key cannot be exported, this should return None.

fn self_export_stream( &self, csprng: &mut dyn CryptoSrc, receive_stream: &StreamKey ) -> Option<LockLockbox>

Export the decryption key in a LockLockbox, with receive_stream as the recipient. If the key cannot be exported, this should return None.

impl TryFrom<&[u8]> for ContainedLockKey

fn try_from(value: &[u8]) -> Result<Self, Self::Error>

Try to decode a raw byte sequence into a private

type Error = CryptoError

The type returned in the event of a conversion error.