Struct KwKey 

pub struct KwKey { /* private fields */ }

A key-wrapping key: an unforgeable capability, bound to one algorithm at creation. The extractability and getter contracts in README.md apply.

Implementations

impl KwKey

pub async fn wrap(&self, input: WrapInput) -> Result<Vec<u8>, Error>

Encrypt serialized key material. The minting interface documents the wrapped wire format and the algorithm’s input domain; material whose serialization falls outside that domain fails error.invalid-key.

input is consumed.

Requires can-wrap, else error.not-permitted.

impl KwKey

pub async fn unwrap(&self, wrapped: Vec<u8>) -> Result<UnwrapInput, Error>

Decrypt and integrity-check wrapped key material, as produced by wrap under the same algorithm. The result awaits a typed mint (see unwrap-input, including the verification-timing latitude); the material never reaches the caller.

Security:

• Any failure of the integrity check — including input that cannot carry the algorithm’s wrapped form (the minting interface documents the domain) — reports error.authentication-failed with no detail.

Requires can-unwrap, else error.not-permitted.

impl KwKey

pub fn algorithm_name(&self) -> String

The registry name of the algorithm family this key is bound to, e.g. "AES-KW" (WebCrypto’s KeyAlgorithm.name). Parameters are separate getters, as for mac-key.algorithm-name.

impl KwKey

pub fn algorithm_length(&self) -> u32

The key length in bits, e.g. 256 (WebCrypto’s AesKeyAlgorithm.length).

impl KwKey

pub fn extractable(&self) -> bool

Whether the key material may be exported.

impl KwKey

pub fn can_wrap(&self) -> bool

Whether this key permits wrap. A refused operation fails error.not-permitted.

impl KwKey

pub fn can_unwrap(&self) -> bool

Whether this key permits unwrap. See can-wrap.

impl KwKey

pub async fn export_key_raw(&self) -> Result<Vec<u8>, Error>

The raw key material. Fails with error.not-extractable unless the key was created with extractable true.

impl KwKey

pub async fn export_key_jwk(&self) -> Result<String, Error>

The key as an RFC 7517 JSON Web Key, behind the same extractability gate as export-key-raw. See README.md, “JWK contract”.

impl KwKey

pub async fn to_wrap_input_raw(&self) -> Result<WrapInput, Error>

This key’s raw material as a wrap-input, for wrapping under another key. Behind the same extractability gate as export-key-raw; the material itself never reaches the caller.

impl KwKey

pub async fn to_wrap_input_jwk(&self) -> Result<WrapInput, Error>

The JWK serialization as a wrap-input, behind the same gate. See README.md, “JWK contract”.

Trait Implementations

impl Debug for KwKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<KwKey> for KwKey

fn from(raw: KwKey) -> Self

Converts to this type from the input type.