Struct RecipientPrivateKey 

pub struct RecipientPrivateKey(/* private fields */);

A 32-byte X25519 recipient private key.

The bytes are zeroed on drop. The type intentionally does not implement Debug or Display to prevent accidental disclosure via logging.

Implementations

impl RecipientPrivateKey

pub fn generate() -> (RecipientPrivateKey, RecipientPublicKey)

Generate a fresh X25519 keypair using the operating system RNG.

pub fn from_bytes(b: [u8; 32]) -> Self

Construct a recipient private key directly from its 32 raw bytes.

pub fn from_base64(s: &str) -> Result<Self, SealedError>

Decode a recipient private key from a standard-base64 (padded) string.

Errors

Returns SealedError::Decode if the string is not valid base64, or SealedError::InvalidLength if it does not decode to exactly 32 bytes.

pub fn to_base64(&self) -> String

Encode this private key as standard-base64 (with padding).

Use with extreme care — exposing this string is equivalent to disclosing the key. Prefer keeping the key in memory and zeroing it on drop.

pub fn public_key(&self) -> RecipientPublicKey

Derive the matching X25519 public key for this private key.

Trait Implementations

impl Clone for RecipientPrivateKey

fn clone(&self) -> RecipientPrivateKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Drop for RecipientPrivateKey

fn drop(&mut self)

Executes the destructor for this type.

impl Zeroize for RecipientPrivateKey

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.