Struct SealingKey

pub struct SealingKey { /* private fields */ }

A key for sealing packets.

Implementations

impl SealingKey

pub fn new(key_material: &[u8; 64]) -> Self

Constructs a new SealingKey.

pub fn seal_in_place( &self, sequence_number: u32, plaintext_in_ciphertext_out: &mut [u8], tag_out: &mut [u8; 16], )

Seals (encrypts and signs) a packet.

On input, plaintext_in_ciphertext_out must contain the unencrypted packet_length||plaintext where plaintext is the padding_length||payload||random padding. It will be overwritten by encrypted_packet_length||ciphertext, where encrypted_packet_length is encrypted with K_1 and ciphertext is encrypted by K_2.

Panics

Panics if plaintext_in_ciphertext_out.len() < PACKET_LENGTH_LEN.

Panics if plaintext_in_ciphertext_out is longer than the maximum input size for ChaCha20-Poly1305. Note that this limit is much, much larger than SSH’s 256KB maximum record size.