Struct UnboundCipherKey 

pub struct UnboundCipherKey {
    algorithm: &'static Algorithm,
    key_bytes: Buffer<'static, &'static [u8]>,
}

A key bound to a particular cipher algorithm.

Fields

algorithm: &'static Algorithm

key_bytes: Buffer<'static, &'static [u8]>

Implementations

impl UnboundCipherKey

pub fn new( algorithm: &'static Algorithm, key_bytes: &[u8], ) -> Result<Self, Unspecified>

Constructs an UnboundCipherKey.

Errors

• Unspecified if key_bytes.len() does not match the length required by algorithm.

pub fn algorithm(&self) -> &'static Algorithm

Returns the algorithm associated with this key.

fn validate_key_material(&self) -> Result<(), KeyRejected>

Validates the key material against algorithm-specific constraints beyond the length check performed by UnboundCipherKey::new.

For DES algorithms (behind legacy-des), this rejects weak DES subkeys and degenerate key configurations (e.g. K1 == K2 for 2TDEA). For other algorithms this is a no-op since the only constraint is key length.

The streaming cipher constructors call this because they pass raw key bytes directly to the EVP API rather than going through SymmetricCipherKey construction, which would otherwise perform these checks. This is necessary because the EVP layer internally uses DES_set_key_unchecked, which skips weak-key detection.

Trait Implementations

impl Debug for UnboundCipherKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl From<Okm<'_, &'static Algorithm>> for UnboundCipherKey

fn from(okm: Okm<'_, &'static Algorithm>) -> Self

Converts to this type from the input type.

impl TryInto<SymmetricCipherKey> for UnboundCipherKey

type Error = KeyRejected

The type returned in the event of a conversion error.

fn try_into(self) -> Result<SymmetricCipherKey, Self::Error>

Performs the conversion.