Module stream 

Payload chunking discipline: one loop for every host. Streaming payload encryption shared by native and WASM hosts.

Source and sink are closures; randomness is supplied by the caller. Empty input produces one authenticated, zero-length chunk. Nonces use hedging, and Merkle leaves bind each chunk’s index, nonce, tag, and ciphertext in stream order. Keeping this loop shared preserves the same bytes across host adapters.

Structs

Sealed

Result of processing a stream.

Enums

StreamError

Stream failure: ours or the host’s.

Functions

seal_chunks

Encrypt a stream in chunks and deliver frames to the sink.