Struct StaticSecret 

pub struct StaticSecret(/* private fields */);

A Diffie-Hellman secret key that can be used to compute multiple SharedSecrets.

This type is identical to the EphemeralSecret type, except that the StaticSecret::diffie_hellman method does not consume the secret key, and the type provides serialization methods to save and load key material. This means that the secret may be used multiple times (but does not have to be).

Warning

If you’re uncertain about whether you should use this, then you likely should not be using this. Our strongly recommended advice is to use EphemeralSecret at all times, as that type enforces at compile-time that secret keys are never reused, which can have very serious security implications for many protocols.

Implementations

impl StaticSecret

pub fn diffie_hellman(&self, their_public: &PublicKey) -> SharedSecret

Perform a Diffie-Hellman key agreement between self and their_public key to produce a SharedSecret.

pub fn new<T>(csprng: T) -> StaticSecret

where T: RngCore + CryptoRng,

Generate an x25519 key.

pub fn to_bytes(&self) -> [u8; 32]

Extract this key’s bytes for serialization.

Trait Implementations

impl Clone for StaticSecret

fn clone(&self) -> StaticSecret

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'de> Deserialize<'de> for StaticSecret

fn deserialize<__D>( __deserializer: __D, ) -> Result<StaticSecret, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<'a> From<&'a StaticSecret> for PublicKey

fn from(secret: &'a StaticSecret) -> PublicKey

Given an x25519 StaticSecret key, compute its corresponding PublicKey.

impl From<[u8; 32]> for StaticSecret

fn from(bytes: [u8; 32]) -> StaticSecret

Load a secret key from a byte array.

impl Serialize for StaticSecret

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StaticSecretExt for StaticSecret

fn verify_file<P>(file: P) -> bool

where P: AsRef<Path>,

Check whether there is a file containing the crypto keys.

fn new_with_os_rand() -> StaticSecret

Generate a new secret key with the OS random number generator.

fn from_file<P>(file: P) -> Result<StaticSecret>

where P: AsRef<Path>,

Try to load the crypto keys from our file on the disk.

fn save<P>(&self, file: P) -> Result<()>

where P: AsRef<Path>,

Save the crypto keys to the file on the disk.

fn from_file_or_generate<P>(file: P) -> Result<StaticSecret>

where P: AsRef<Path>,

Try to load the crypto key or generate a new one.

impl Zeroize for StaticSecret

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.