Module dispatch 

Algorithm-selected dispatch: keygen, sign/verify, key agreement, KEM, AEAD, hashing, and multikey binding routed by an core::Algorithm selector. Root dispatch facade.

Structs

AeadParams

Borrowed AEAD inputs for the root operation-backed dispatch facade.

GeneratedKeypair

A generated keypair together with the multikey-encoded public key.

MacParams

Borrowed MAC inputs for the root operation-backed dispatch facade.

ProviderDecision

Complete, non-secret provider decision produced before dispatch executes.

Enums

AlgorithmError

Error returned by algorithm dispatch operations.

FallbackPolicy

Explicit fallback policy attached to every provider decision.

KeyCopyBoundary

Secret-input copy behavior at the provider boundary.

KeyResidency

Residency of secret key material used by this dispatch package.

ProviderDisposition

Whether dispatch selected or rejected the requested provider.

ProviderKind

Concrete implementation class selected by dispatch.

ProviderLane

Runtime lane in which the provider executes.

ProviderOperation

Operation requested from the dispatch provider.

ProviderOutputPolicy

Sensitivity and cleanup contract for the provider result.

ProviderPolicyReason

Fixed provider-policy reason recorded for a decision.

Functions

aead_decrypt

Decrypts with an AEAD through the operation-layer semantic owner.

aead_encrypt

Encrypts with an AEAD through the operation-layer semantic owner.

derive_keypair

Reconstruct a raw keypair for the given algorithm from existing secret material.

derive_shared_secret

Derive a Diffie–Hellman shared secret. The returned secret zeroizes on drop.

generate_keypair

Generate a raw keypair for the given algorithm.

generate_multikey_keypair

Generate a keypair and multikey-encode the public key

hash_digest

Compute a digest through the operation-layer semantic owner.

kem_decapsulate

Decapsulate a KEM ciphertext. The returned shared secret zeroizes on drop.

kem_encapsulate

Returns (shared_secret, ciphertext); the shared secret zeroizes on drop.

mac_authenticate

Computes a MAC tag through the operation-layer semantic owner.

mac_verify

Verifies a MAC tag through the operation-layer semantic owner.

provider_decision

Resolve one provider decision without executing cryptographic work.

public_key_to_multikey

Multicodec/multikey-encode a public key, canonicalizing P-256 to its compressed SEC1 form. Returns the z-prefixed multikey string.

sign

Sign msg with secret under the selected signature algorithm, returning the detached signature bytes.

validate_verification_method_multikey

Structural validation of a typed public-key binding.

verify

Verify a detached signature.