Expand description
Implementations of the HybridEncrypt and HybridDecrypt primitives.
The functionality of Hybrid Encryption is represented as a pair of primitives (interfaces):
- HybridEncrypt for encryption of data
- HybridDecrypt for decryption of data
Implementations of these interfaces are secure against adaptive chosen ciphertext attacks. In
addition to plaintext the encryption takes an extra parameter contextInfo, which usually is
public data implicit from the context, but should be bound to the resulting ciphertext, i.e. the
ciphertext allows for checking the integrity of context_info (but there are no guarantees wrt.
the secrecy or authenticity of context_info).
Modules§
- subtle
- This module provides subtle implementations of hybrid encryption primitives.
Structs§
- Ecies
Aead Hkdf DemHelper - Generator for
tink_core::Aeadortink_core::DeterministicAeadprimitives for the specifiedtink_proto::KeyTemplateand key material.
Constants§
- ECIES_
AEAD_ HKDF_ PRIVATE_ KEY_ KEY_ VERSION - Maximal version of ECIES-AEAD-HKDF private keys.
- ECIES_
AEAD_ HKDF_ PRIVATE_ KEY_ TYPE_ URL - Type URL of ECIES-AEAD-HKDF private keys that Tink supports.
- ECIES_
AEAD_ HKDF_ PUBLIC_ KEY_ KEY_ VERSION - Maximal version of ECIES-AEAD-HKDF public keys.
- ECIES_
AEAD_ HKDF_ PUBLIC_ KEY_ TYPE_ URL - Type URL of ECIES-AEAD-HKDF public keys that Tink supports.
- UPSTREAM_
VERSION - The upstream Tink version that this Rust port is based on.
Functions§
- ecies_
hkdf_ aes128_ ctr_ hmac_ sha256_ key_ template aead - Return a
KeyTemplatethat generates an ECDH P-256 and decapsulation key AES128-CTR-HMAC-SHA256 with the following parameters: - ecies_
hkdf_ aes128_ gcm_ key_ template aead - Return a
KeyTemplatethat generates an ECDH P-256 and decapsulation key AES128-GCM key with the following parameters: - init
- Initialize the
tink-hybridcrate, registering its primitives so they are available via Tink. - new_
decrypt - Returns a
tink_core::HybridDecryptprimitive from the given keyset handle. - new_
encrypt - Returns a
tink_core::HybridEncryptprimitive from the given keyset handle.