Struct DryocSealedBox 

pub struct DryocSealedBox<EncapsulatedKey: ByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES> + Zeroize, Mac: ByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES> + Zeroize, Data: Bytes + Zeroize> { /* private fields */ }

A post-quantum sealed box: an HPKE-encrypted message for one recipient.

Refer to crate::dryocsealedbox for the byte format and sample usage.

Implementations

impl<EncapsulatedKey: NewByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES> + Zeroize, Mac: NewByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES> + Zeroize, Data: NewBytes + ResizableBytes + Zeroize> DryocSealedBox<EncapsulatedKey, Mac, Data>

pub fn seal<Message: Bytes + ?Sized, RecipientPublicKey: ByteArray<CRYPTO_KEM_XWING_PUBLICKEYBYTES>>( message: &Message, recipient_public_key: &RecipientPublicKey, ) -> Result<Self, Error>

Encrypts message for recipient_public_key, returning a new DryocSealedBox.

Errors

Returns an error if the message is too long or recipient_public_key is not a valid X-Wing public key.

Panics

Panics if the operating system’s random number generator fails.

impl<'a, EncapsulatedKey: ByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES> + TryFrom<&'a [u8]> + Zeroize, Mac: ByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES> + TryFrom<&'a [u8]> + Zeroize, Data: Bytes + From<&'a [u8]> + Zeroize> DryocSealedBox<EncapsulatedKey, Mac, Data>

pub fn from_bytes(bytes: &'a [u8]) -> Result<Self, Error>

Reads a sealed box from its wire format: the X-Wing ciphertext, the encrypted message, then the tag.

Errors

Returns an error if bytes is shorter than SEALBYTES or a field cannot be converted to its target type.

impl<EncapsulatedKey: ByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES> + Zeroize, Mac: ByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES> + Zeroize, Data: Bytes + Zeroize> DryocSealedBox<EncapsulatedKey, Mac, Data>

pub fn from_parts(enc: EncapsulatedKey, tag: Mac, data: Data) -> Self

Returns a new box from its parts, consuming each.

pub fn enc(&self) -> &EncapsulatedKey

Returns the X-Wing ciphertext (HPKE enc).

pub fn tag(&self) -> &Mac

Returns the authentication tag.

pub fn data(&self) -> &Data

Returns the encrypted message.

pub fn into_parts(self) -> (EncapsulatedKey, Mac, Data)

Moves the X-Wing ciphertext, tag and encrypted message out of this box.

pub fn to_vec(&self) -> Vec<u8>

Available on crate feature alloc only.

Copies the box’s wire format into a new Vec.

pub fn to_bytes<Bytes: NewBytes + ResizableBytes>(&self) -> Bytes

Copies the box’s wire format into new Bytes.

pub fn open<Output: ResizableBytes + NewBytes + Zeroize, RecipientPublicKey: ByteArray<CRYPTO_KEM_XWING_PUBLICKEYBYTES> + Zeroize, RecipientSecretKey: ByteArray<CRYPTO_KEM_XWING_SECRETKEYBYTES> + Zeroize>( &self, recipient_keypair: &KeyPair<RecipientPublicKey, RecipientSecretKey>, ) -> Result<Output, Error>

Decrypts this box with recipient_keypair, returning the message.

Errors

Returns Error::AuthenticationFailed if the box was not sealed for this key pair or was modified, or an error if the X-Wing ciphertext carries a low-order X25519 point.

impl DryocSealedBox<EncapsulatedKey, Mac, Vec<u8>>

pub fn seal_to_vecbox<Message: Bytes + ?Sized, RecipientPublicKey: ByteArray<CRYPTO_KEM_XWING_PUBLICKEYBYTES>>( message: &Message, recipient_public_key: &RecipientPublicKey, ) -> Result<Self, Error>

Available on crate feature alloc only.

Encrypts message for recipient_public_key into a VecBox. Provided for convenience.

Errors

Returns the same errors as DryocSealedBox::seal.

pub fn open_to_vec<RecipientPublicKey: ByteArray<CRYPTO_KEM_XWING_PUBLICKEYBYTES> + Zeroize, RecipientSecretKey: ByteArray<CRYPTO_KEM_XWING_SECRETKEYBYTES> + Zeroize>( &self, recipient_keypair: &KeyPair<RecipientPublicKey, RecipientSecretKey>, ) -> Result<Vec<u8>, Error>

Available on crate feature alloc only.

Decrypts this box with recipient_keypair into a Vec. Provided for convenience.

Errors

Returns the same errors as DryocSealedBox::open.

Trait Implementations

impl<EncapsulatedKey: Clone + ByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES> + Zeroize, Mac: Clone + ByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES> + Zeroize, Data: Clone + Bytes + Zeroize> Clone for DryocSealedBox<EncapsulatedKey, Mac, Data>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<EncapsulatedKey: Debug + ByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES> + Zeroize, Mac: Debug + ByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES> + Zeroize, Data: Debug + Bytes + Zeroize> Debug for DryocSealedBox<EncapsulatedKey, Mac, Data>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de, EncapsulatedKey, Mac, Data> Deserialize<'de> for DryocSealedBox<EncapsulatedKey, Mac, Data>

where EncapsulatedKey: Deserialize<'de> + ByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES> + Zeroize, Mac: Deserialize<'de> + ByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES> + Zeroize, Data: Deserialize<'de> + Bytes + Zeroize,

Available on crate feature serde only.

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<EncapsulatedKey, Mac, Data> Serialize for DryocSealedBox<EncapsulatedKey, Mac, Data>

where EncapsulatedKey: Serialize + ByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES> + Zeroize, Mac: Serialize + ByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES> + Zeroize, Data: Serialize + Bytes + Zeroize,

Available on crate feature serde only.

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl<EncapsulatedKey, Mac, Data> Zeroize for DryocSealedBox<EncapsulatedKey, Mac, Data>

where EncapsulatedKey: Zeroize + ByteArray<CRYPTO_KEM_XWING_CIPHERTEXTBYTES>, Mac: Zeroize + ByteArray<CRYPTO_AEAD_CHACHA20POLY1305_IETF_ABYTES>, Data: Zeroize + Bytes,

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.