Expand description
Provider-neutral cryptographic operations.
XML parsing and protocol orchestration depend on this contract rather than concrete cryptographic crates. Secret-bearing keys remain opaque behind operation-specific handles; this provider owns primitive dispatch and randomness.
Structs§
- Encapsulated
Key - One encapsulation result. The secret is always exactly 32 bytes and erased on drop.
- KdfParameters
- Provider-neutral parameters for a key-derivation operation.
- KeyAgreement
Parameters - Provider-neutral parameters for an asymmetric key-agreement operation.
- Provider
Binding - Caller-owned identity for external-provider handles, independent of engine name.
- Recovered
Content Key - Secret candidate whose recovery validity is retained until content work ends. Debug output never exposes key bytes or padding validity.
- Rust
Crypto DhKey - Finite-field DH handle with validated prime-order domain parameters. Private scalars and shared secrets are never exposed by Debug.
- Rust
Crypto Ecdh Key - Opaque RustCrypto ECDH key with a fixed named-curve domain.
- Rust
Crypto Provider - Pure-Rust provider backed by RustCrypto crates.
- Rust
Crypto RsaPrivate Key - Opaque RSA private-key handle for the built-in RustCrypto provider.
- Rust
Crypto RsaPublic Key - Opaque RSA public-key handle for the built-in RustCrypto provider.
- Rust
Crypto X448 Key - Opaque RustCrypto X448 private key, zeroized on drop without secret export.
- Rust
Crypto X25519 Key - Opaque RustCrypto X25519 private key. Its scalar is zeroized on drop and is never exposed through Debug or a byte-export accessor.
- Signature
Verification Input - Borrowed input to one original signature verification, never a second pass.
Enums§
- Ecdh
Curve - Named curve used by an ECDH-ES private key. The peer must use this same curve.
- External
Provider Error - Operational failure classes for an explicitly selected external provider.
- KdfContext
- Provider-neutral context octets or significant bits for key derivation.
- KeyAssociation
- Public-key association established by the originally selected provider.
- KeyEncapsulation
Algorithm - Experimental libxmlsec1 ML-KEM parameter sets (not signature algorithms).
- KeyVerification
Event - Provider observations; only a successful leaf can supply key evidence.
- Provider
Capability - One exact provider capability, including operation-specific parameters.
- Provider
Error - Failure returned by a cryptographic provider.
- Provider
Input Error - Structured invalid-input reasons returned by cryptographic providers.
- Provider
Operation - A cryptographic operation advertised by a provider.
- X509
Signature Algorithm - Provider-neutral X.509 certificate and CRL signature parameters.
Statics§
- RUST_
CRYPTO_ PROVIDER - Process-wide immutable default provider. It contains no mutable state or keys.
Traits§
- Content
Decryption Key - Non-exportable symmetric key used for content decryption.
- Crypto
Provider - Provider operations used by the XML Security pipelines.
- KeyAgreement
Key - Opaque private-key handle used for provider-defined key agreement.
- KeyDecapsulation
Key - Opaque recipient private key. Valid-size ciphertext rejection stays implicit.
- KeyEncapsulation
Key - Opaque recipient public key. The selected provider supplies randomness.
- KeyRecovery
Key - Opaque private-key handle used to recover transported key bytes.
- KeyTransport
Key - Opaque public-key handle used for asymmetric key transport.
- KeyUnwrapping
Key - An opaque KEK that unwraps directly into a non-exportable content key.
Functions§
- default_
provider - Borrow the pure-Rust default provider.