Struct Token 

pub struct Token<const LEN: usize>(/* private fields */);

Cryptographically-random, fixed-size token material.

Security notes

• Intended for high-entropy secrets such as session IDs, API tokens, CSRF tokens, and refresh tokens.
• NOT suitable for passwords or other low-entropy user-provided secrets.
• Should never be stored directly; store only a cryptographic hash (e.g. BLAKE3 with a server-side pepper).

Equality comparison should be performed on hashes, not tokens. Original token material cannot be recovered.

Implementations

impl<const LEN: usize> Token<LEN>

pub fn random() -> Result<Self>

pub fn from_bytes(data: [u8; LEN]) -> Self

pub fn to_base64(&self) -> String

pub fn as_bytes(&self) -> &[u8]

pub fn from_base64(data: &str) -> Result<Self>

Decodes a URL-safe, unpadded base64 token.

Fails if the decoded byte length does not exactly match LEN, preventing truncated or partially-zeroed secrets.

pub fn encrypt( &self, key: &[u8], algo: CipherSuite, ) -> Result<EncryptedToken<LEN>>

pub fn to_default_hash(&self, pepper: &[u8]) -> TokenHash

Hashes the token using the currently selected default hashing algorithm.

This method exists as a stable indirection point:

• New tokens should always be hashed using this function.
• The underlying algorithm may change over time (e.g. when introducing a new hash version), without requiring call-site changes.
• Existing stored hashes remain verifiable via TokenHash.

The pepper must be a secret value stored separately from the database, typically in configuration or a secret manager. Compromise of both database and pepper allows token forgery.

The default algorithm MUST remain suitable only for high-entropy, randomly generated tokens.

pub fn to_blake3(&self, pepper: &[u8]) -> TokenHash

Hashes the token using BLAKE3 with an external pepper.

Warning

This is NOT a password hashing function. BLAKE3 is intentionally fast and must only be used with high-entropy, randomly generated secrets.

Trait Implementations

impl<const LEN: usize> Clone for Token<LEN>

fn clone(&self) -> Token<LEN>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<const LEN: usize> Debug for Token<LEN>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<const LEN: usize> Display for Token<LEN>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<const LEN: usize> Drop for Token<LEN>

fn drop(&mut self)

Executes the destructor for this type.