Module provider 

Provider-neutral cryptographic operations.

XML parsing and protocol orchestration depend on this contract rather than concrete cryptographic crates. Secret-bearing keys remain opaque behind operation-specific handles; this provider owns primitive dispatch and randomness.

Structs

EncapsulatedKey

One encapsulation result. The secret is always exactly 32 bytes and erased on drop.

KdfParameters

Provider-neutral parameters for a key-derivation operation.

KeyAgreementParameters

Provider-neutral parameters for an asymmetric key-agreement operation.

ProviderBinding

Caller-owned identity for external-provider handles, independent of engine name.

RecoveredContentKey

Secret candidate whose recovery validity is retained until content work ends. Debug output never exposes key bytes or padding validity.

RustCryptoDhKey

Finite-field DH handle with validated prime-order domain parameters. Private scalars and shared secrets are never exposed by Debug.

RustCryptoEcdhKey

Opaque RustCrypto ECDH key with a fixed named-curve domain.

RustCryptoProvider

Pure-Rust provider backed by RustCrypto crates.

RustCryptoRsaPrivateKey

Opaque RSA private-key handle for the built-in RustCrypto provider.

RustCryptoRsaPublicKey

Opaque RSA public-key handle for the built-in RustCrypto provider.

RustCryptoX25519Key

Opaque RustCrypto X25519 private key. Its scalar is zeroized on drop and is never exposed through Debug or a byte-export accessor.

Enums

EcdhCurve

Named curve used by an ECDH-ES private key. The peer must use this same curve.

ExternalProviderError

Operational failure classes for an explicitly selected external provider.

KdfContext

Provider-neutral context octets or significant bits for key derivation.

KeyEncapsulationAlgorithm

Experimental libxmlsec1 ML-KEM parameter sets (not signature algorithms).

ProviderCapability

One exact provider capability, including operation-specific parameters.

ProviderError

Failure returned by a cryptographic provider.

ProviderInputError

Structured invalid-input reasons returned by cryptographic providers.

ProviderOperation

A cryptographic operation advertised by a provider.

X509SignatureAlgorithm

Provider-neutral X.509 certificate and CRL signature parameters.

Statics

RUST_CRYPTO_PROVIDER

Process-wide immutable default provider. It contains no mutable state or keys.

Traits

ContentDecryptionKey

Non-exportable symmetric key used for content decryption.

CryptoProvider

Provider operations used by the XML Security pipelines.

KeyAgreementKey

Opaque private-key handle used for provider-defined key agreement.

KeyDecapsulationKey

Opaque recipient private key. Valid-size ciphertext rejection stays implicit.

KeyEncapsulationKey

Opaque recipient public key. The selected provider supplies randomness.

KeyRecoveryKey

Opaque private-key handle used to recover transported key bytes.

KeyTransportKey

Opaque public-key handle used for asymmetric key transport.

KeyUnwrappingKey

An opaque KEK that unwraps directly into a non-exportable content key.

Functions

default_provider

Borrow the pure-Rust default provider.