Struct AesGcmCrypter 

pub struct AesGcmCrypter { /* private fields */ }

AES-256-GCM crypter (cryptographically secure).

Uses the AES-256-GCM AEAD algorithm and generates a random 12-byte nonce on each encryption. Ciphertext format: nonce(12) || ciphertext || tag(16) (handled internally by the aes-gcm crate).

Implementations

impl AesGcmCrypter

pub fn new(key: &[u8; 32]) -> Self

Create from a 32-byte key.

pub fn from_key_str(key: &str) -> Self

Create from a key string of arbitrary length (derives a 32-byte key via SHA-256).

impl AesGcmCrypter

pub fn encrypt_with_aad( &self, plaintext: &[u8], aad: &[u8], ) -> Result<Vec<u8>, CryptoError>

AES-GCM authenticated encryption (with Additional Authenticated Data, AAD).

Ciphertext format: nonce(12) || ciphertext || tag(16). AAD (Additional Authenticated Data) is not included in the ciphertext but participates in the authentication tag computation; the same AAD must be provided during decryption to succeed.

pub fn decrypt_with_aad( &self, ciphertext: &[u8], aad: &[u8], ) -> Result<Vec<u8>, CryptoError>

AES-GCM authenticated decryption (with Additional Authenticated Data, AAD).

The same AAD used during encryption must be provided, otherwise the authentication tag verification fails.

Trait Implementations

impl Crypter for AesGcmCrypter

fn encrypt(&self, plaintext: &[u8]) -> Result<Vec<u8>, CryptoError>

fn decrypt(&self, ciphertext: &[u8]) -> Result<Vec<u8>, CryptoError>