Enum EncryptionRecipient 

pub enum EncryptionRecipient {
    RsaOaep {
        public_key: Arc<dyn KeyTransportKey>,
        parameters: RsaOaepParameters,
        recipient: Option<String>,
        key_name: Option<String>,
    },
    AesKeyWrap {
        kek: Vec<u8>,
        algorithm: KeyWrapAlgorithm,
        recipient: Option<String>,
        key_name: Option<String>,
    },
}

One recipient of a generated content-encryption key.

Variants

RsaOaep

Wrap the content key with an RSA public key and OAEP.

Fields

public_key: Arc<dyn KeyTransportKey>

Opaque recipient public-key handle.

parameters: RsaOaepParameters

OAEP algorithm parameters.

recipient: Option<String>

Optional Recipient attribute.

key_name: Option<String>

Optional key hint inside the encrypted key’s KeyInfo.

AesKeyWrap

Wrap the content key with a pre-shared AES KEK.

Fields

kek: Vec<u8>

AES key-encryption key, zeroized on drop (including cloned owners).

algorithm: KeyWrapAlgorithm

RFC 3394 key-wrap variant.

recipient: Option<String>

Optional Recipient attribute.

key_name: Option<String>

Optional key hint inside the encrypted key’s KeyInfo.

Implementations

impl EncryptionRecipient

pub fn rsa_oaep(public_key: RsaPublicKey) -> Self

Create an RSA-OAEP recipient using SHA-256 and MGF1-SHA-256.

XMLEnc 1.1 assigns SHA-1 and MGF1-SHA-1 when these parameters are omitted. Serialized keys therefore include both algorithm values explicitly instead of relying on the specification’s legacy defaults.

pub fn provider_key_transport(public_key: Arc<dyn KeyTransportKey>) -> Self

Create an RSA-OAEP recipient from an opaque provider key handle.

pub fn aes_key_wrap( kek: impl Into<Vec<u8>>, algorithm: KeyWrapAlgorithm, ) -> Self

Create an AES Key Wrap recipient.

pub fn oaep_parameters(self, parameters: RsaOaepParameters) -> Self

Override RSA-OAEP parameters.

pub fn recipient(self, value: impl Into<String>) -> Self

Set the recipient identifier emitted on EncryptedKey.

pub fn key_name(self, value: impl Into<String>) -> Self

Set the key name emitted inside the encrypted key’s KeyInfo.

Trait Implementations

impl Clone for EncryptionRecipient

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptionRecipient

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for EncryptionRecipient

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Zeroize for EncryptionRecipient

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.

impl ZeroizeOnDrop for EncryptionRecipient