Struct StreamingAes256CbcHmacEncryptor 

pub struct StreamingAes256CbcHmacEncryptor {
    ciphertext_buffer: CiphertextBuffer,
    plaintext_buffer: Vec<u8>,
    encryptor_state: EncryptorState,
}

Streaming AES-256-CBC + HMAC-SHA256 encryptor. The IV is generated at construction time and the HMAC is computed over IV || ciphertext, matching the wire format consumed by StreamingAes256CbcHmacDecryptor. Because the MAC depends on the entire ciphertext, the complete wire stream (IV, ciphertext) is only emitted once update is called with last_block = true, as a single ChunkEncryptionResult::FinalEncryptedChunk.

Fields

ciphertext_buffer: CiphertextBuffer

plaintext_buffer: Vec<u8>

encryptor_state: EncryptorState

Implementations

impl StreamingAes256CbcHmacEncryptor

pub(crate) fn try_new( key: &SymmetricCryptoKey, plaintext_size: usize, ) -> Result<Self, StreamCreationError>

Creates a new encryptor with a fresh random IV. plaintext_size is the total number of plaintext bytes that will be fed to the encryptor; it is used to pre-allocate the ciphertext buffer to its exact final size so it never has to be resized.

Trait Implementations

impl StreamingEncryptor for StreamingAes256CbcHmacEncryptor

fn update( &mut self, plaintext_chunk: &[u8], last_block: bool, ) -> ChunkEncryptionResult

Pass in a chunk of any size of the stream. The encryptor buffers and emits as much ciphertext as it can. The caller signals the end of the stream by calling update with last_block = true.