Struct Aes256Kw 

pub struct Aes256Kw;

SP 800-38F KW with AES-32*8.

Implementations

impl Aes256Kw

pub const KEY_LEN: usize = 32

Key-encryption key length.

pub fn wrap(kek: &[u8], plaintext: &[u8], out: &mut [u8]) -> Result<()>

Wrap plaintext, writing plaintext.len() + 8 bytes.

The input must be a whole number of 64-bit blocks and at least two of them. A single block is refused: RFC 3394’s loop degenerates there, and RFC 5649 exists to cover it.

pub fn unwrap(kek: &[u8], ciphertext: &[u8], out: &mut [u8]) -> Result<()>

Unwrap, writing ciphertext.len() - 8 bytes.

Fails if the recovered check value is wrong, which is the only integrity signal the construction has.

Trait Implementations

impl Algorithm for Aes256Kw

const ID: &'static str = "aes-256-kw"

Stable ontology identifier for this algorithm.

const NAME: &'static str = "aes-256-kw"

Human-facing display name (for example "SHA-256").

impl SelfTest for Aes256Kw

fn self_test() -> Result<()>

RFC 3394 section 4.6: a 256-bit key under a 256-bit KEK.