Struct HeaderProtector 

pub struct HeaderProtector { /* private fields */ }

Available on crate feature std only.

Per-direction, session-stable header-protection keys plus the negotiated cipher suite (which selects AES-256-ECB vs ChaCha20 for the mask). Derived once from the initial session secret and held for the session’s lifetime; see the module docs for why this does not rotate with the AEAD epoch.

Implementations

impl HeaderProtector

pub fn derive(suite: CipherSuite, initial_secret: &[u8; 32], swap: bool) -> Self

Derive the per-direction HP keys from the initial session secret. swap (= the session’s is_server flag) swaps send/recv so one peer’s send key equals the other peer’s recv key — mirroring the AEAD key layout in CryptoSession::build.

pub fn cipher_suite(&self) -> CipherSuite

The negotiated cipher suite (drives the mask primitive). Exposed for diagnostics / tests.

pub fn mask_send(&self, sample: &[u8; 16]) -> Result<[u8; 16], CoreError>

Compute the mask for an outbound packet from its ciphertext sample.

pub fn mask_recv(&self, sample: &[u8; 16]) -> Result<[u8; 16], CoreError>

Compute the mask for an inbound packet from its ciphertext sample.

Trait Implementations

impl Drop for HeaderProtector

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.