Skip to main content

Module xaes_256_gcm

bitwarden_crypto::hazmat::symmetric_encryption

Module xaes_256_gcm 

Source
Expand description

§XAES-256-GCM operations

Contains low-level XAES-256-GCM operations used by the rest of the crate. XAES-256-GCM uses a 256-bit key and a 192-bit nonce. According to the current C2SP specification, random nonces support approximately 2^80 messages under one key at collision risk 2^-32.

XAES-256-GCM is constructed from the SP 800-108r1 counter-mode KDF with CMAC-AES256 and AES-256-GCM. It is neither nonce-misuse-resistant nor key-committing.

In most cases, use higher-level APIs instead of this raw-key primitive when available.

Structs§

XAes256Gcm 🔒
XAES-256-GCM authenticated encryption with associated data.
XAes256GcmCiphertext 🔒
XAes256GcmNonce 🔒
A 192-bit XAES-256-GCM nonce.

Constants§

KEY_SIZE 🔒
NONCE_SIZE 🔒