Struct Sealer 

pub struct Sealer { /* private fields */ }

Per-worker AEAD handle. Holds a small cache of per-file subkeys so a multi-file transfer does not run HKDF on every chunk.

Implementations

impl Sealer

pub fn seal( &mut self, file_id: u32, chunk: u64, epoch: u32, aad: &[u8], buf: &mut [u8], ) -> Result<[u8; 16]>

Encrypt buf in place and return the authentication tag.

aad must be the exact frame header bytes: the header is authenticated but not encrypted, so a peer cannot redirect a chunk to a different file or offset without the tag failing.

pub fn open( &mut self, file_id: u32, chunk: u64, epoch: u32, aad: &[u8], buf: &mut [u8], tag: &[u8; 16], ) -> Result<()>

Decrypt buf in place, verifying tag against aad.

pub fn is_passthrough(&self) -> bool

pub fn overhead(&self) -> usize

Trait Implementations

impl Clone for Sealer

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.