Struct aes_kw::Kek

pub struct Kek<Aes>
where
    Aes: KeyInit + BlockCipher + BlockSizeUser<BlockSize = U16> + BlockEncrypt + BlockDecrypt,
{
    pub(crate) cipher: Aes,
}

A Key-Encrypting-Key (KEK) that can be used to wrap and unwrap other keys.

Fields

cipher: Aes

Initialized cipher

Implementations

impl<Aes> Kek<Aes>

where Aes: KeyInit + BlockCipher + BlockSizeUser<BlockSize = U16> + BlockEncrypt + BlockDecrypt,

pub fn new(key: &GenericArray<u8, Aes::KeySize>) -> Self

Constructs a new Kek based on the appropriate raw key material.

pub fn wrap(&self, data: &[u8], out: &mut [u8]) -> Result<()>

AES Key Wrap, as defined in RFC 3394.

The out buffer will be overwritten, and must be exactly IV_LEN bytes (i.e. 8 bytes) longer than the length of data.

pub fn wrap_vec(&self, data: &[u8]) -> Result<Vec<u8>>

Computes Self::wrap, allocating a Vec for the return value.

pub fn unwrap(&self, data: &[u8], out: &mut [u8]) -> Result<()>

AES Key Unwrap, as defined in RFC 3394.

The out buffer will be overwritten, and must be exactly IV_LEN bytes (i.e. 8 bytes) shorter than the length of data.

pub fn unwrap_vec(&self, data: &[u8]) -> Result<Vec<u8>>

Computes Self::unwrap, allocating a Vec for the return value.

pub fn wrap_with_padding(&self, data: &[u8], out: &mut [u8]) -> Result<()>

AES Key Wrap with Padding, as defined in RFC 5649.

The out buffer will be overwritten, and must be the smallest multiple of SEMIBLOCK_SIZE (i.e. 8) which is at least IV_LEN bytes (i.e. 8 bytes) longer than the length of data.

pub fn wrap_with_padding_vec(&self, data: &[u8]) -> Result<Vec<u8>>

Computes Self::wrap, allocating a Vec for the return value.

pub fn unwrap_with_padding<'a>( &self, data: &[u8], out: &'a mut [u8], ) -> Result<&'a [u8]>

AES Key Wrap with Padding, as defined in RFC 5649.

The out buffer will be overwritten, and must be exactly IV_LEN bytes (i.e. 8 bytes) shorter than the length of data. This method returns a slice of out, truncated to the appropriate length by removing the padding.

pub fn unwrap_with_padding_vec(&self, data: &[u8]) -> Result<Vec<u8>>

Computes Self::unwrap, allocating a Vec for the return value.

Trait Implementations

impl<Aes> Clone for Kek<Aes>

where Aes: KeyInit + BlockCipher + BlockSizeUser<BlockSize = U16> + BlockEncrypt + BlockDecrypt + Clone,

fn clone(&self) -> Kek<Aes>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<Aes> Debug for Kek<Aes>

where Aes: KeyInit + BlockCipher + BlockSizeUser<BlockSize = U16> + BlockEncrypt + BlockDecrypt + Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<Aes> PartialEq for Kek<Aes>

where Aes: KeyInit + BlockCipher + BlockSizeUser<BlockSize = U16> + BlockEncrypt + BlockDecrypt + PartialEq,

fn eq(&self, other: &Kek<Aes>) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<Aes> TryFrom<&[u8]> for Kek<Aes>

where Aes: KeyInit + BlockCipher + BlockSizeUser<BlockSize = U16> + BlockEncrypt + BlockDecrypt,

type Error = Error

The type returned in the event of a conversion error.

fn try_from(value: &[u8]) -> Result<Self>

Performs the conversion.

impl<Aes> Copy for Kek<Aes>

where Aes: KeyInit + BlockCipher + BlockSizeUser<BlockSize = U16> + BlockEncrypt + BlockDecrypt + Copy,

impl<Aes> StructuralPartialEq for Kek<Aes>

where Aes: KeyInit + BlockCipher + BlockSizeUser<BlockSize = U16> + BlockEncrypt + BlockDecrypt,