Struct AesCipher 

pub struct AesCipher { /* private fields */ }

AES-256-GCM page cipher over an (unwrapped) per-run DEK. Per-page nonces are derived outside and passed in.

Implementations

impl AesCipher

pub fn new(key: &[u8]) -> Result<Self>

key must be exactly 32 bytes (the unwrapped DEK).

Trait Implementations

impl Cipher for AesCipher

fn encrypt_page(&self, nonce: &[u8; 12], plaintext: &[u8]) -> Result<Vec<u8>>

Encrypt a page payload. nonce is the deterministic per-page nonce.

fn decrypt_page(&self, nonce: &[u8; 12], ciphertext: &[u8]) -> Result<Vec<u8>>

Decrypt a page payload.

fn encrypt_page_with_aad( &self, nonce: &[u8; 12], plaintext: &[u8], aad: &[u8], ) -> Result<Vec<u8>>

fn decrypt_page_with_aad( &self, nonce: &[u8; 12], ciphertext: &[u8], aad: &[u8], ) -> Result<Vec<u8>>