Struct Spake2Output 

pub struct Spake2Output {
    pub session_key: SharedSecret,
    pub confirmation_mac: Vec<u8>,
    /* private fields */
}

Output of a completed SPAKE2 protocol run.

Contains the session key and confirmation MACs.

Fields

session_key: SharedSecret

The session key (Ke, first half of the hash).

confirmation_mac: Vec<u8>

This party’s confirmation MAC to send to the peer.

Implementations

impl Spake2Output

pub fn verify_peer_confirmation( &self, peer_mac: &[u8], ) -> Result<(), Spake2Error>

Verify the peer’s confirmation MAC in constant time.

pub fn into_session_key(self) -> SharedSecret

Consume the output and yield the session key.

Because Spake2Output derives ZeroizeOnDrop, it cannot be pattern-destructured by the caller. This consumer extracts the session key cleanly without the boilerplate mem::replace shim users would otherwise have to write themselves.

Both pub fields remain accessible; clone the one you want to keep before calling the consumer that takes the other:

output.verify_peer_confirmation(peer_mac)?;
let confirmation_mac = output.confirmation_mac.clone();
let session_key = output.into_session_key();

pub fn into_confirmation_mac(self) -> Vec<u8>

Consume the output and yield this party’s confirmation MAC.

Mirror of Self::into_session_key.

Trait Implementations

impl Drop for Spake2Output

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Zeroize for Spake2Output

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.