Struct PasswordOwnerEnvelopeV1 

pub struct PasswordOwnerEnvelopeV1 {
    pub format_version: u32,
    pub account_uuid: Vec<u8>,
    pub owner_public_key: Vec<u8>,
    pub owner_id: Vec<u8>,
    pub kdf_id: u32,
    pub memory_kib: u32,
    pub iterations: u32,
    pub parallelism: u32,
    pub wrap_salt: Vec<u8>,
    pub nonce: Vec<u8>,
    pub ciphertext_and_tag: Vec<u8>,
}

Encrypted 32-byte Ed25519 owner seed. The server stores and returns these opaque bytes, never a password, KEK, auth seed, or decrypted owner seed. Reject unknown versions/KDFs before use. Discard unknown protobuf fields and persist only the canonical re-encoding of known fields (<= 4096 bytes). AES-GCM AAD is ASCII(“heddle-owner-wrap-aad-v1”) || 0x00 || u32be(version) || account_uuid || owner_public_key || owner_id || u32be(kdf_id) || u32be(memory_kib) || u32be(iterations) || u32be(parallelism) || wrap_salt.

Fields

format_version: u32

Exactly 1; reject any other value.

account_uuid: Vec<u8>

Exactly 16 bytes, non-nil.

owner_public_key: Vec<u8>

Exactly 32 bytes; canonical, decompressible, non-small-order Ed25519 key.

owner_id: Vec<u8>

Exactly 32 bytes; digest of the accepted root.

kdf_id: u32

Exactly 1 = Argon2id; reject unknown KDFs.

memory_kib: u32

Exactly 65536 in v1; reject other costs.

iterations: u32

Exactly 3 in v1.

parallelism: u32

Exactly 4 in v1.

wrap_salt: Vec<u8>

Exactly 16 independent random bytes.

nonce: Vec<u8>

Exactly 12 fresh random AES-256-GCM bytes.

ciphertext_and_tag: Vec<u8>

Exactly 48 bytes (32-byte seed + 16-byte tag).

Trait Implementations

impl Clone for PasswordOwnerEnvelopeV1

fn clone(&self) -> PasswordOwnerEnvelopeV1

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PasswordOwnerEnvelopeV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for PasswordOwnerEnvelopeV1

fn default() -> PasswordOwnerEnvelopeV1

Returns the “default value” for a type.

impl Eq for PasswordOwnerEnvelopeV1

impl Hash for PasswordOwnerEnvelopeV1

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for PasswordOwnerEnvelopeV1

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for PasswordOwnerEnvelopeV1

fn eq(&self, other: &PasswordOwnerEnvelopeV1) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PasswordOwnerEnvelopeV1