Struct ResumptionTicket 

pub struct ResumptionTicket {
    pub resumption_secret: [u8; 32],
    pub cipher_suite: CipherSuite,
    pub created_at: Instant,
    pub expires_at: Instant,
}

Resumption ticket — stored after a successful handshake. Single-use: SessionCache::try_resume removes the ticket on the first lookup, which is the one-shot anti-replay guarantee for 0-RTT early-data (Phase 4.1).

Fields

resumption_secret: [u8; 32]

Resumption secret — stored verbatim, byte-identical to the value Session::resumption_hint() hands the client. Both peers feed it into crypto::kdf::derive_early_data_keying, so the stored bytes MUST equal the client’s hint — no extra derivation layer here.

cipher_suite: CipherSuite

Negotiated cipher suite

created_at: Instant

When the ticket was created

expires_at: Instant

When the ticket expires

Implementations

impl ResumptionTicket

pub fn new( resumption_secret: &[u8; 32], cipher_suite: CipherSuite, lifetime: Duration, ) -> Self

Create a ticket holding resumption_secret verbatim.

The caller passes the already-HKDF-derived resumption_secret (the same value the client’s Session::resumption_hint() exposes). No further derivation happens here — an extra derivation layer would desync the server’s stored secret from the client’s hint and break early-data key agreement.

pub fn is_valid(&self) -> bool

Check if ticket is still valid

Trait Implementations

impl Clone for ResumptionTicket

fn clone(&self) -> ResumptionTicket

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.