Struct JvckCbcCodec 

pub struct JvckCbcCodec;

Default JVCK suite codec: AES-256-CBC EncryptedMetadata, keys derived via HKDF-SHA256 (Volume ID ‖ salt), authenticated with HMAC-SHA256. Delegates to the reference functions in crate::jvck::metadata (which operate on the full 512-byte block).

Trait Implementations

impl MetadataCodec for JvckCbcCodec

fn unseal(&self, ctx: &ReplicaCtx<'_>, vmk: &[u8]) -> VckResult<Unsealed>

Authenticate + decrypt the EncryptedMetadata of ctx’s replica. A wrong vmk (or a replica that does not belong to this codec) must error so the reader can try the next replica.

fn seal( &self, header: &JvckHeader, secrets: &JvckSecrets, encrypted_offset: u64, state: VolumeState, salt: &[u8; 16], vmk: &[u8], out: &mut [u8; 512], ) -> VckResult<()>

Serialize header + the sensitive secrets/encrypted_offset/state into a 512-byte out block (encrypting the inner payload, computing auth). salt is the per-write random salt.

fn read_offset(&self, ctx: &ReplicaCtx<'_>, vmk: &[u8]) -> VckResult<u64>

Read only encrypted_offset (recovery scan) without retaining the FVEK. Default: unseal then drop the secrets.