Struct PaseSessionKeys 

pub struct PaseSessionKeys {
    pub ke: [u8; 16],
    pub i2r_key: [u8; 16],
    pub r2i_key: [u8; 16],
    pub attestation_key: [u8; 16],
}

Session keys produced by a completed PASE handshake (spec §3.10.7).

Contains the 16-byte shared secret Ke (TT_HASH[16..32]) and the three per-session keys derived from it via HKDF "SessionKeys".

Key layout (matter.js NodeSession.ts, commissioner = initiator)

blob = HKDF-SHA256(Ke, salt=[], "SessionKeys", 48)
i2r_key  = blob[0..16]   (initiator→responder; encrypt for commissioner)
r2i_key  = blob[16..32]  (responder→initiator; decrypt for commissioner)
attestation_key = blob[32..48]

Secret hygiene

This type carries live symmetric key material. It implements zeroize::ZeroizeOnDrop so the key bytes are wiped from memory when the value is dropped, and its Debug impl redacts every field (printing PaseSessionKeys { .. }) so key bytes never reach logs. Equality is intentionally not derived: comparing session keys with the variable-time == would be a timing side-channel, and no caller needs it (tests compare individual byte-array fields directly).

Fields

ke: [u8; 16]

Shared symmetric secret (Ke): TT_HASH[16..32].

This is the raw SPAKE2+ session secret. Higher layers can re-derive i2r_key, r2i_key, and attestation_key from this alone.

i2r_key: [u8; 16]

Initiator-to-responder (commissioner → device) encryption key.

r2i_key: [u8; 16]

Responder-to-initiator (device → commissioner) decryption key.

attestation_key: [u8; 16]

Attestation challenge key (used for device attestation in commissioning).

Trait Implementations

impl Clone for PaseSessionKeys

fn clone(&self) -> PaseSessionKeys

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PaseSessionKeys

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Redacts all key material; never prints key bytes.

impl Drop for PaseSessionKeys

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.