Struct holochain::prelude::kitsune_p2p::dependencies::kitsune_p2p_types::dependencies::rustls::quic::PacketKey

pub struct PacketKey { /* private fields */ }

Keys to encrypt or decrypt the payload of a packet

Implementations

impl PacketKey

pub fn encrypt_in_place( &self, packet_number: u64, header: &[u8], payload: &mut [u8] ) -> Result<Tag, Error>

Encrypt a QUIC packet

Takes a packet_number, used to derive the nonce; the packet header, which is used as the additional authenticated data; and the payload. The authentication tag is returned if encryption succeeds.

Fails iff the payload is longer than allowed by the cipher suite’s AEAD algorithm.

pub fn decrypt_in_place<'a>( &self, packet_number: u64, header: &[u8], payload: &'a mut [u8] ) -> Result<&'a [u8], Error>

Decrypt a QUIC packet

Takes the packet header, which is used as the additional authenticated data, and the payload, which includes the authentication tag.

If the return value is Ok, the decrypted payload can be found in payload, up to the length found in the return value.

pub fn confidentiality_limit(&self) -> u64

Number of times the packet key can be used without sacrificing confidentiality

See https://www.rfc-editor.org/rfc/rfc9001.html#name-confidentiality-limit.

pub fn integrity_limit(&self) -> u64

Number of times the packet key can be used without sacrificing integrity

See https://www.rfc-editor.org/rfc/rfc9001.html#name-integrity-limit.

pub fn tag_len(&self) -> usize

Tag length for the underlying AEAD algorithm

Trait Implementations

impl PacketKey for PacketKey

fn encrypt(&self, packet: u64, buf: &mut [u8], header_len: usize)

Encrypt the packet payload with the given packet number

fn decrypt( &self, packet: u64, header: &[u8], payload: &mut BytesMut ) -> Result<(), CryptoError>

Decrypt the packet payload with the given packet number

fn tag_len(&self) -> usize

The length of the AEAD tag appended to packets on encryption

fn confidentiality_limit(&self) -> u64

Maximum number of packets that may be sent using a single key

fn integrity_limit(&self) -> u64

Maximum number of incoming packets that may fail decryption before the connection must be abandoned