Struct PsaProvider 

pub struct PsaProvider<B> { /* private fields */ }

Adapts a concrete backend into a stable PSA provider API.

Implementations

impl<B> PsaProvider<B>

pub fn new(backend: B) -> Self

Constructs a provider from a concrete backend implementation.

Arguments

• backend - Backend implementation used by provider operations.

Returns

A new PsaProvider owning the backend.

impl<B: PsaCryptoBackend> PsaProvider<B>

pub fn sign(&self, request: &KeySignRequest<'_>) -> Result<Vec<u8>>

Dispatches signing requests to the configured backend.

Arguments

• self - Provider dispatching to backend.
• request - Signing request to execute.

Returns

Signature bytes produced by backend.

Errors

Returns backend-provided Error on failures.

pub fn decrypt(&self, request: &KeyDecryptRequest<'_>) -> Result<Vec<u8>>

Dispatches decrypt requests with uniform decrypt failure posture.

Arguments

• self - Provider dispatching to backend.
• request - Decrypt request to execute.

Returns

Plaintext bytes returned by backend.

Errors

Returns Error::CryptoFailure for decrypt failures to avoid oracle leakage.

pub fn derive(&self, request: &KeyDeriveRequest<'_>) -> Result<Vec<u8>>

Dispatches derive requests to the configured backend.

Arguments

• self - Provider dispatching to backend.
• request - Derive request to execute.

Returns

Shared secret bytes produced by backend.

Errors

Returns backend-provided Error on failures.

pub fn random(&self, out: &mut [u8]) -> Result<()>

Fills output bytes with backend-provided random data.

Arguments

• self - Provider dispatching to backend.
• out - Mutable output buffer to fill.

Returns

Ok(()) when random output was written to the caller buffer.

Errors

Returns backend-provided Error when random generation fails.

pub fn sha256(&self, input: &[u8]) -> Result<[u8; 32]>

Computes SHA-256 using backend digest implementation.

Arguments

• self - Provider dispatching to backend.
• input - Bytes to hash.

Returns

32-byte SHA-256 digest bytes.

Errors

Returns backend-provided Error on hashing failures.

pub fn aes_gcm_encrypt( &self, request: &AeadEncryptRequest<'_>, ) -> Result<AeadEncryptResponse>

Encrypts plaintext with backend AES-GCM implementation.

Arguments

• self - Provider dispatching to backend.
• request - AES-GCM request with key/nonce/aad/plaintext.

Returns

Ciphertext bytes plus a 16-byte authentication tag.

Errors

Returns backend-provided Error when encryption fails.

Trait Implementations

impl<B: Clone> Clone for PsaProvider<B>

fn clone(&self) -> PsaProvider<B>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<B: Debug> Debug for PsaProvider<B>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.