Struct KekDecryptor 

pub struct KekDecryptor { /* private fields */ }

Resolver backed by a pre-shared AES key-encryption key (KEK).

Implementations

impl KekDecryptor

pub fn new(kek: impl Into<Vec<u8>>) -> Self

Create a resolver for RFC 3394 AES key-wrap EncryptedKey elements.

Trait Implementations

impl Clone for KekDecryptor

fn clone(&self) -> KekDecryptor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KekDecryptor

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl DecryptionKeyResolver for KekDecryptor

fn resolve_key( &self, provider: &dyn CryptoProvider, algorithm: DataEncryptionAlgorithm, encrypted_key: Option<&EncryptedKey>, ) -> Result<Vec<u8>, XmlEncError>

Resolve the symmetric key for algorithm, optionally unwrapping encrypted_key.

fn resolve_key_candidates( &self, provider: &dyn CryptoProvider, algorithm: DataEncryptionAlgorithm, encrypted_key: Option<&EncryptedKey>, budget: &mut KeyCandidateBudget, ) -> Result<Vec<Vec<u8>>, XmlEncError>

Resolve ordered candidate keys for one prepared decryption operation.