Module key_establishment 

Shared operation-wide key establishment accounting and KEM dispatch.

Requests supply keys; the immutable policy supplies permission. Keep one usage value across every key source and retry, including failed attempts.

Structs

EncapsulationMechanism

Owned experimental mechanism retained by parsed XML Encryption input.

KeyEstablishmentUsage

Monotonic reservations shared by KDF, agreement, and encapsulation.

ParsedEncapsulation

Borrowed, fully framed mechanism. Public ciphertext is decoded into fixed storage, so parsing cannot allocate an attacker-selected temporary buffer.

Enums

KeyEstablishmentError

Failures at the shared policy/provider boundary.

Constants

ENCAPSULATION_NS

libxmlsec1’s experimental namespace, distinct from the W3C namespaces.

Functions

direct_encapsulation

Find a single direct mechanism, rejecting ambiguity rather than choosing one.

parse_encapsulation

Validate the experimental ordered grammar and decode into fixed storage.