Struct Rfc5077Ticketer

struct Rfc5077Ticketer {
    aes_encrypt_key: PaddedBlockEncryptingKey,
    aes_decrypt_key: PaddedBlockDecryptingKey,
    hmac_key: Key,
    key_name: [u8; 16],
    lifetime: u32,
    maximum_ciphertext_len: AtomicUsize,
}

An RFC 5077 “Recommended Ticket Construction” implementation of a Ticketer.

Fields

aes_encrypt_key: PaddedBlockEncryptingKey

aes_decrypt_key: PaddedBlockDecryptingKey

hmac_key: Key

key_name: [u8; 16]

lifetime: u32

maximum_ciphertext_len: AtomicUsize

Implementations

impl Rfc5077Ticketer

fn new() -> Result<Self, Error>

Trait Implementations

impl Debug for Rfc5077Ticketer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ProducesTickets for Rfc5077Ticketer

fn encrypt(&self, message: &[u8]) -> Option<Vec<u8>>

Encrypt message and return the ciphertext.

fn enabled(&self) -> bool

Returns true if this implementation will encrypt/decrypt tickets. Should return false if this is a dummy implementation: the server will not send the SessionTicket extension and will not call the other functions.

fn lifetime(&self) -> u32

Returns the lifetime in seconds of tickets produced now. The lifetime is provided as a hint to clients that the ticket will not be useful after the given time.

fn decrypt(&self, ciphertext: &[u8]) -> Option<Vec<u8>>

Decrypt cipher, validating its authenticity protection and recovering the plaintext. cipher is fully attacker controlled, so this decryption must be side-channel free, panic-proof, and otherwise bullet-proof. If the decryption fails, return None.