Struct ClientKeyPair 

pub struct ClientKeyPair { /* private fields */ }

A participant’s per-round X25519 key pair.

The secret half never leaves the client. There is intentionally no accessor for it and no Debug output that could print it: the whole point of this type is that the aggregation server cannot obtain it.

Implementations

impl ClientKeyPair

pub fn generate() -> Self

Generate a fresh key pair from operating-system entropy.

A new pair per round is what makes the masks of different rounds independent; reusing one across rounds would let a server that observes two rounds cancel the shared structure.

pub fn from_secret_bytes(bytes: [u8; 32]) -> Self

Build a key pair from explicit secret bytes.

Intended for reproducible protocol transcripts in tests and for callers that already derive client secrets from their own key hierarchy. Production clients should prefer Self::generate.

pub fn public_key(&self) -> ClientPublicKey

The public half, to be published to the aggregation server.

pub fn shared_seed_with( &self, peer: &ClientPublicKey, round_seed: u64, ) -> Result<[u8; 32]>

Derive the 32-byte seed shared with peer for round_seed.

Symmetric: a.shared_seed_with(b.public, r) == b.shared_seed_with(a.public, r).

Errors when peer is this client’s own key (a client has no pairwise mask with itself) or when the Diffie-Hellman exchange yields the all-zero shared secret, which is what a low-order (small-subgroup) public key produces and would make the mask predictable.

Trait Implementations

impl Debug for ClientKeyPair

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.