Struct StreamSealer 

pub struct StreamSealer { /* private fields */ }

Incremental encryption of one file’s content stream.

Implementations

impl StreamSealer

pub fn begin( metadata: &FileMetadata, key: &SecureKey, kdf_params: KeyDerivationParams, salt: [u8; 16], nonce_prefix: [u8; 16], metadata_nonce: [u8; 24], ) -> Result<(FileHeader, StreamSealer), FileError>

Starts sealing a new v3 file: encrypts the metadata envelope, builds the header, and returns it together with the sealer for the content chunks. The caller supplies the derived key and fresh random salt/nonces, keeping this deterministic.

pub fn begin_with_chunk_size( metadata: &FileMetadata, key: &SecureKey, kdf_params: KeyDerivationParams, salt: [u8; 16], nonce_prefix: [u8; 16], metadata_nonce: [u8; 24], chunk_size: u32, ) -> Result<(FileHeader, StreamSealer), FileError>

StreamSealer::begin with an explicit chunk size, for callers with unusual chunking needs. The size must satisfy the same bounds the header enforces.

pub fn chunk_plaintext_len(&self) -> usize

Plaintext bytes to feed per StreamSealer::seal_chunk call; only the final chunk may be shorter.

pub fn seal_chunk( &mut self, plaintext: &[u8], is_last: bool, ) -> Result<Vec<u8>, FileError>

Seals the next chunk. Every chunk except the last must be exactly chunk_plaintext_len bytes; the last may be shorter (or empty).

pub fn finished(&self) -> bool

True once the final chunk has been sealed.