Enum Secrecy 

pub enum Secrecy {
    TransportOnly,
    Psk([u8; 32]),
    Static {
        our_secret: [u8; 32],
        peer_public: [u8; 32],
    },
}

End-to-end payload confidentiality, layered inside whatever the transport already provides.

Variants

TransportOnly

No extra layer. Payloads are protected only by the transport (QUIC/TLS 1.3). Correct when both endpoints terminate their own TLS and you trust every hop; wrong if traffic crosses a relay you do not control.

Psk([u8; 32])

Ephemeral X25519 with a pre-shared key mixed into the KDF. Both sides must hold the same 32-byte secret; it authenticates the exchange and gives forward secrecy for recorded traffic.

Static

Static X25519 identity with the peer’s public key pinned, plus an ephemeral share. Mutual authentication without a PSK.

Fields

our_secret: [u8; 32]

peer_public: [u8; 32]

Trait Implementations

impl Clone for Secrecy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Secrecy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.