Enum rustls::ConnectionTrafficSecrets

#[non_exhaustive]
pub enum ConnectionTrafficSecrets {
    Aes128Gcm {
        key: [u8; 16],
        salt: [u8; 4],
        iv: [u8; 8],
    },
    Aes256Gcm {
        key: [u8; 32],
        salt: [u8; 4],
        iv: [u8; 8],
    },
    Chacha20Poly1305 {
        key: [u8; 32],
        iv: [u8; 12],
    },
}

Secrets used to encrypt/decrypt data in a TLS session.

These can be used to configure kTLS for a socket in one direction. The only other piece of information needed is the sequence number, which is in ExtractedSecrets.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Aes128Gcm

Fields

key: [u8; 16]

key (16 bytes)

salt: [u8; 4]

salt (4 bytes)

iv: [u8; 8]

initialization vector (8 bytes, chopped from key block)

Secrets for the AES_128_GCM AEAD algorithm

Aes256Gcm

Fields

key: [u8; 32]

key (32 bytes)

salt: [u8; 4]

salt (4 bytes)

iv: [u8; 8]

initialization vector (8 bytes, chopped from key block)

Secrets for the AES_256_GCM AEAD algorithm

Chacha20Poly1305

Fields

key: [u8; 32]

key (32 bytes)

iv: [u8; 12]

initialization vector (12 bytes)

Secrets for the CHACHA20_POLY1305 AEAD algorithm