Struct MeshEncryptionKey 

pub struct MeshEncryptionKey { /* private fields */ }

Mesh-wide encryption key for HIVE documents

All nodes sharing the same formation secret derive the same key, enabling encrypted communication across the mesh.

Implementations

impl MeshEncryptionKey

pub fn from_shared_secret(mesh_id: &str, secret: &[u8; 32]) -> Self

Derive a mesh encryption key from a shared secret

Uses HKDF-SHA256 with the mesh ID as salt and a fixed info string to derive a unique 256-bit key for this mesh.

Arguments

• mesh_id - The mesh identifier (e.g., “DEMO”, “ALPHA”)
• secret - 32-byte shared secret known to all mesh participants

Example

let secret = [0x42u8; 32]; // In practice, a securely shared secret
let key = MeshEncryptionKey::from_shared_secret("DEMO", &secret);

pub fn encrypt( &self, plaintext: &[u8], ) -> Result<EncryptedDocument, EncryptionError>

Encrypt plaintext document bytes

Generates a random 12-byte nonce and encrypts using ChaCha20-Poly1305. The resulting ciphertext includes a 16-byte authentication tag.

Arguments

• plaintext - Raw document bytes to encrypt

Returns

• Ok(EncryptedDocument) - Encrypted document with nonce and ciphertext
• Err(EncryptionError) - If encryption fails (should not happen in practice)

pub fn decrypt( &self, encrypted: &EncryptedDocument, ) -> Result<Vec<u8>, EncryptionError>

Decrypt encrypted document bytes

Verifies the authentication tag and decrypts the ciphertext.

Arguments

• encrypted - Encrypted document with nonce and ciphertext

Returns

• Ok(Vec<u8>) - Decrypted plaintext document bytes
• Err(EncryptionError) - If decryption fails (wrong key or corrupted data)

pub fn encrypt_to_bytes( &self, plaintext: &[u8], ) -> Result<Vec<u8>, EncryptionError>

Encrypt and encode in one step

Convenience method that encrypts plaintext and returns wire-format bytes.

pub fn decrypt_from_bytes( &self, data: &[u8], ) -> Result<Vec<u8>, EncryptionError>

Decode and decrypt in one step

Convenience method that decodes wire-format bytes and decrypts.

Trait Implementations

impl Clone for MeshEncryptionKey

fn clone(&self) -> MeshEncryptionKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MeshEncryptionKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.