Struct ShieldChannel 

pub struct ShieldChannel<S> { /* private fields */ }

Shield secure channel for encrypted communication.

Provides TLS-like security using only symmetric cryptography:

• PAKE handshake establishes shared key from password
• RatchetSession provides forward secrecy
• All messages authenticated with HMAC

Implementations

impl<S: Read + Write> ShieldChannel<S>

pub fn connect(stream: S, config: &ChannelConfig) -> Result<Self>

Connect as client (initiator).

Performs PAKE handshake and establishes encrypted channel.

Arguments

• stream - Underlying transport (TCP, etc.)
• config - Channel configuration with shared password

pub fn accept(stream: S, config: &ChannelConfig) -> Result<Self>

Accept connection as server.

Waits for client handshake and establishes encrypted channel.

Arguments

• stream - Underlying transport (TCP, etc.)
• config - Channel configuration with shared password

pub fn send(&mut self, data: &[u8]) -> Result<()>

Send encrypted message.

Message is encrypted with current ratchet key, then key advances.

pub fn recv(&mut self) -> Result<Vec<u8>>

Receive and decrypt message.

Verifies authentication and advances receive ratchet.

pub fn service(&self) -> &str

Get service identifier.

pub fn messages_sent(&self) -> u64

Get send message count.

pub fn messages_received(&self) -> u64

Get receive message count.

pub fn into_inner(self) -> S

Get underlying stream (for shutdown, etc.)

impl ShieldChannel<TcpStream>

pub fn connect_tcp(stream: TcpStream, config: &ChannelConfig) -> Result<Self>

Connect as client with handshake timeout enforcement.

Sets socket read/write timeouts during handshake, then clears them so post-handshake messaging is not affected.

pub fn accept_tcp(stream: TcpStream, config: &ChannelConfig) -> Result<Self>

Accept connection as server with handshake timeout enforcement.

Sets socket read/write timeouts during handshake, then clears them so post-handshake messaging is not affected.