Struct Aes256Gcm 

pub(crate) struct Aes256Gcm;

AES-256-GCM authenticated encryption with associated data.

See the module documentation for the security caveats (no key-commitment, short nonce) that apply to this cipher.

Trait Implementations

impl Aead for Aes256Gcm

type Key = [u8; 32]

Key material used by the cipher.

type Ciphertext = Aes256GcmCiphertext

Authenticated ciphertext (the encrypted bytes). The nonce is tracked separately, by the caller.

type Nonce = Aes256GcmNonce

The per-message nonce. A fresh nonce must be supplied for every encryption under a given key.

fn encrypt( key: &Self::Key, nonce: &Self::Nonce, plaintext: &[u8], associated_data: &[u8], ) -> Self::Ciphertext

Encrypts plaintext under key with nonce, authenticating associated_data along with the ciphertext.

fn decrypt( key: &Self::Key, nonce: &Self::Nonce, ciphertext: &Self::Ciphertext, associated_data: &[u8], ) -> Result<Vec<u8>, CryptoError>

Authenticates and decrypts ciphertext under key with nonce, verifying associated_data.

impl CoseEncryptCipher for Aes256Gcm

const COSE_ALGORITHM: Algorithm

The COSE algorithm identifier for this content-encryption cipher. It is written to the protected header by the encrypt_* methods and validated by the decrypt_* methods.

fn encrypt_cose( builder: CoseEncryptBuilder, protected_header: Header, plaintext: &[u8], cek: &Self::Key, ) -> CoseEncrypt

Encrypts plaintext under cek into a [CoseEncrypt], declaring COSE_ALGORITHM in the (authenticated) protected header and storing the freshly generated nonce in the unprotected iv header.

fn decrypt_cose( cose_encrypt: &CoseEncrypt, cek: &Self::Key, ) -> Result<Vec<u8>, CryptoError>

Authenticates and decrypts the ciphertext of cose_encrypt under cek, reading the nonce from the unprotected iv header.

fn encrypt_cose0( builder: CoseEncrypt0Builder, protected_header: Header, plaintext: &[u8], cek: &Self::Key, ) -> CoseEncrypt0

Encrypts plaintext under cek into a [CoseEncrypt0]. Behaves like encrypt_cose, but produces a single-recipient message.

fn decrypt_cose0( cose_encrypt0: &CoseEncrypt0, cek: &Self::Key, ) -> Result<Vec<u8>, CryptoError>

Authenticates and decrypts the ciphertext of cose_encrypt0 under cek. Behaves like decrypt_cose, but for a single-recipient message.