Module opdata 

AES-256-GCM “opdata” envelope with the tag appended after the ciphertext.

Built on the aes-gcm crate and validated below against the IEEE 802.1 GCM test vectors. The tag is the trailing 16 bytes of the ciphertext, exactly as aes-gcm lays it out.

Structs

AesKey 🔒

A symmetric AES-256-GCM key identified by its kid.

Encrypted 🔒

A decoded envelope: base64 fields turned into bytes.

Constants

CONTAINER_TYPE 🔒

ENCRYPTION_SCHEME 🔒

Functions

decode64_loose 🔒

Decodes URL-safe, standard, or mixed base64 with or without padding.

decrypt 🔒

AES-256-GCM decrypt of ciphertext || tag.

encrypt 🔒

AES-256-GCM encrypt, returning ciphertext || tag.