Struct Aes256Kwp 

pub struct Aes256Kwp;

SP 800-38F KWP with AES-32*8, per RFC 5649.

Implementations

impl Aes256Kwp

pub const KEY_LEN: usize = 32

Key-encryption key length.

pub const fn wrapped_len(plaintext_len: usize) -> usize

Output length for a given input length: padded up to a multiple of eight, plus the eight-byte header.

pub fn wrap(kek: &[u8], plaintext: &[u8], out: &mut [u8]) -> Result<()>

Wrap data of any length from one byte upwards.

The length is carried in the check value, so unwrapping recovers it exactly. It is not hidden: an observer learns the length to within eight bytes from the ciphertext size alone.

pub fn unwrap(kek: &[u8], ciphertext: &[u8], out: &mut [u8]) -> Result<usize>

Unwrap, returning the recovered length.

out must be large enough for the padded data; the return value says how much of it is real.

Trait Implementations

impl Algorithm for Aes256Kwp

const ID: &'static str = "aes-256-kwp"

Stable ontology identifier for this algorithm.

const NAME: &'static str = "aes-256-kwp"

Human-facing display name (for example "SHA-256").

impl SelfTest for Aes256Kwp

fn self_test() -> Result<()>

No published RFC 5649 vector uses a 256-bit KEK, so this checks the round trip and the rejection of tampering at that size. The padded construction itself is vector-tested through Aes192Kwp, which shares every line of it but the cipher.