Expand description
The aead primitive kind: single-message authenticated encryption with
associated data.
This is deliberately a single-message primitive, mirroring
crypto.subtle.encrypt/decrypt: one nonce, one tag, and memory
proportional to the message somewhere in the implementation. The bulk
data paths use streaming transport, but open never releases unverified
plaintext, so it buffers the whole message internally before its result
resolves. Content too large for that contract is outside this kind’s
scope; the contract is never relaxed to stream unverified plaintext.
seal and open are stateless per call; the key resource carries the
operations directly.
Structs§
- AeadKey
- An AEAD key: an unforgeable capability, bound to one algorithm at
creation. The streaming, extractability, and getter contracts in
README.mdapply. - Aead
KeyOptions - Mint-time policy for an
aead-key. Grants nothing by default; seeREADME.md, “Key-options contract”.