Struct hpke::AeadCtxS

pub struct AeadCtxS<A: Aead, Kdf: KdfTrait, Kem: KemTrait>(_);

The HPKE senders's context. This is what you use to seal plaintexts.

Implementations

impl<A: Aead, Kdf: KdfTrait, Kem: KemTrait> AeadCtxS<A, Kdf, Kem>

pub fn seal(
    &mut self,
    plaintext: &mut [u8],
    aad: &[u8]
) -> Result<AeadTag<A>, HpkeError>

Does a "detached seal in place", meaning it overwrites plaintext with the resulting ciphertext, and returns the resulting authentication tag

Return Value

Returns Ok(tag) on success. If this context has been used for so many encryptions that the sequence number overflowed, returns Err(HpkeError::SeqOverflow). If this happens, plaintext will be unmodified. If an unspecified error happened during encryption, returns Err(HpkeError::Encryption). If this happens, the contents of plaintext is undefined.

pub fn export(&self, info: &[u8], out_buf: &mut [u8]) -> Result<(), HpkeError>

Fills a given buffer with secret bytes derived from this encryption context. This value does not depend on sequence number, so it is constant for the lifetime of this context.

Return Value

Returns Ok(()) on success. If the buffer length is more than 255x the digest size of the underlying hash function, returns an Err(HpkeError::InvalidKdfLength).