Struct IpcryptNdx 

pub struct IpcryptNdx { /* private fields */ }

A structure representing the IPCrypt context for non-deterministic XTS mode encryption.

This struct provides methods for encrypting and decrypting IP addresses using AES-XTS mode with a 16-byte tweak. The key is 32 bytes (two AES-128 keys).

Implementations

impl IpcryptNdx

pub const KEY_BYTES: usize = 32usize

The number of bytes required for the encryption key (two AES-128 keys).

pub const TWEAK_BYTES: usize = 16usize

The number of bytes required for the tweak.

pub const NDIP_BYTES: usize = 32usize

The number of bytes of the encrypted IP address.

pub fn generate_key() -> [u8; 32]

Generates a new random key for encryption.

pub fn new(key: [u8; 32]) -> Self

Creates a new IpcryptNdx instance with the given key.

Arguments

• key - A 32-byte array containing two AES-128 keys.

pub fn new_random() -> Self

Creates a new IpcryptNdx instance with a random key.

pub fn generate_tweak() -> [u8; 16]

Generates a random tweak.

pub fn encrypt_ipaddr(&self, ip: IpAddr, tweak: Option<[u8; 16]>) -> [u8; 32]

Encrypts an IP address using XTS mode.

Arguments

• ip - The IP address to encrypt
• tweak - Optional tweak to use. If None, a random tweak will be generated.

Returns

The encrypted IP address, as a byte array of length 32.

pub fn decrypt_ipaddr(&self, encrypted: &[u8; 32]) -> IpAddr

Decrypts an IP address using XTS mode.

Arguments

• encrypted - The encrypted IP address as a byte array of length 32.
• tweak - The tweak used for encryption

Returns

The decrypted IP address