Struct RecipientPrivateKey 

pub struct RecipientPrivateKey(/* private fields */);

A 32-byte X25519 recipient private key.

The bytes are zeroed on drop. The type implements a sanitizing Debug impl that only prints RecipientPrivateKey(<redacted>) — the raw bytes are never disclosed via formatting. Display is intentionally not implemented for the same reason.

Implementations

impl RecipientPrivateKey

pub fn generate() -> (RecipientPrivateKey, RecipientPublicKey)

Generate a fresh X25519 keypair using the operating system RNG.

pub fn from_bytes(b: [u8; 32]) -> Self

Construct a recipient private key directly from its 32 raw bytes.

pub fn from_base64(s: &str) -> Result<Self, SealedError>

Decode a recipient private key from a standard-base64 (padded) string.

Errors

Returns SealedError::Decode if the string is not valid base64, or SealedError::InvalidLength if it does not decode to exactly 32 bytes.

pub fn to_base64(&self) -> String

Encode this private key as standard-base64 (with padding).

Use with extreme care — exposing this string is equivalent to disclosing the key. Prefer keeping the key in memory and zeroing it on drop.

pub fn public_key(&self) -> RecipientPublicKey

Derive the matching X25519 public key for this private key.

Trait Implementations

impl Clone for RecipientPrivateKey

fn clone(&self) -> RecipientPrivateKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RecipientPrivateKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for RecipientPrivateKey

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Zeroize for RecipientPrivateKey

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.