Struct PacketSecurityBox 

pub struct PacketSecurityBox<A, C> { /* private fields */ }

Bounded packet security helper combining nonce allocation, authentication, optional encryption, and replay checks.

Implementations

impl<A, C> PacketSecurityBox<A, C>

pub fn new(config: PacketSecurityConfig, authenticator: A, cipher: C) -> Self

Creates a packet security box.

pub const fn config(&self) -> PacketSecurityConfig

Returns configuration.

pub const fn stats(&self) -> PacketSecurityStats

Returns statistics.

pub const fn replay(&self) -> &PacketReplayWindow

Borrows the replay window.

pub fn into_inner(self) -> (A, C, PacketReplayWindow)

Consumes the box and returns its components.

impl<A, C> PacketSecurityBox<A, C>

where A: PacketAuthenticator, C: PacketCipher,

pub fn seal( &mut self, key_id: u32, payload: &[u8], ) -> Result<Vec<u8>, PacketSecurityError<A::Error, C::Error>>

Seals and encodes one payload.

pub fn seal_with_key_ring( &mut self, key_ring: &PacketKeyRing, payload: &[u8], now: Tick, ) -> Result<Vec<u8>, PacketSecurityError<A::Error, C::Error>>

Selects a send key from key_ring, then seals and encodes one payload.

pub fn seal_with_nonce( &mut self, key_id: u32, nonce: u64, payload: &[u8], ) -> Result<Vec<u8>, PacketSecurityError<A::Error, C::Error>>

Seals and encodes one payload with an explicit nonce.

pub fn seal_into( &mut self, key_id: u32, payload: &[u8], out: &mut Vec<u8>, scratch: &mut PacketSecurityScratch, ) -> Result<u64, PacketSecurityError<A::Error, C::Error>>

Seals and appends one payload using an allocated nonce and reusable storage.

pub fn seal_with_key_ring_into( &mut self, key_ring: &PacketKeyRing, payload: &[u8], now: Tick, out: &mut Vec<u8>, scratch: &mut PacketSecurityScratch, ) -> Result<(u32, u64), PacketSecurityError<A::Error, C::Error>>

Selects a key and appends one sealed payload using reusable storage.

pub fn seal_with_nonce_into( &mut self, key_id: u32, nonce: u64, payload: &[u8], out: &mut Vec<u8>, scratch: &mut PacketSecurityScratch, ) -> Result<(), PacketSecurityError<A::Error, C::Error>>

Seals and appends one payload with an explicit nonce and reusable storage.

pub fn open( &mut self, input: &[u8], ) -> Result<Vec<u8>, PacketSecurityError<A::Error, C::Error>>

Decodes, authenticates, replay-checks, and opens one payload.

pub fn open_with_key_ring( &mut self, key_ring: &PacketKeyRing, input: &[u8], now: Tick, ) -> Result<Vec<u8>, PacketSecurityError<A::Error, C::Error>>

Decodes an envelope, validates its key against key_ring, then opens it.

pub fn open_with_scratch<'a>( &mut self, input: &[u8], scratch: &'a mut PacketSecurityOpenScratch, ) -> Result<PacketSecurityOpenView<'a>, PacketSecurityError<A::Error, C::Error>>

Opens one envelope into caller-owned reusable payload storage.

pub fn open_with_key_ring_and_scratch<'a>( &mut self, key_ring: &PacketKeyRing, input: &[u8], now: Tick, scratch: &'a mut PacketSecurityOpenScratch, ) -> Result<PacketSecurityOpenView<'a>, PacketSecurityError<A::Error, C::Error>>

Validates a key-ring entry and opens into caller-owned reusable storage.

Trait Implementations

impl<A: Clone, C: Clone> Clone for PacketSecurityBox<A, C>

fn clone(&self) -> PacketSecurityBox<A, C>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<A: Debug, C: Debug> Debug for PacketSecurityBox<A, C>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.