Struct DecryptionKey 

pub struct DecryptionKey { /* private fields */ }

A private key. decrypt and unwrap are one-shot on the immutable key; the extractability contract in README.md applies.

Implementations

impl DecryptionKey

pub async fn decrypt( &self, label: Option<Vec<u8>>, ciphertext: Vec<u8>, ) -> Result<Vec<u8>, Error>

Decrypt a ciphertext produced by the matching public key under the same label. Fails error.not-permitted without the can-decrypt grant; every decryption failure is the one detail-free error.authentication-failed (see the interface doc).

impl DecryptionKey

pub async fn unwrap( &self, label: Option<Vec<u8>>, ciphertext: Vec<u8>, ) -> Result<UnwrapInput, Error>

Decrypt a wrapped key into an unwrap-input for a typed unwrap mint (see the wrapping interface): the material never reaches the caller. Fails error.not-permitted without the can-unwrap grant; failures are otherwise as decrypt.

impl DecryptionKey

pub fn algorithm_name(&self) -> String

See encryption-key.algorithm-name.

impl DecryptionKey

pub fn algorithm_hash(&self) -> Option<String>

See encryption-key.algorithm-hash.

impl DecryptionKey

pub fn algorithm_length(&self) -> Option<u32>

See encryption-key.algorithm-length.

impl DecryptionKey

pub fn algorithm_public_exponent(&self) -> Option<Vec<u8>>

See encryption-key.algorithm-public-exponent.

impl DecryptionKey

pub fn can_decrypt(&self) -> bool

Whether this key may decrypt. See decryption-key-options.can-decrypt.

impl DecryptionKey

pub fn can_unwrap(&self) -> bool

Whether this key may unwrap. See decryption-key-options.can-unwrap.

impl DecryptionKey

pub fn extractable(&self) -> bool

Whether the export functions may return this key’s material. See decryption-key-options.extractable.

impl DecryptionKey

pub async fn export_key_jwk(&self) -> Result<String, Error>

The private key as a JWK, behind the extractability gate and fallible beyond it like every export (README.md, “Extractability”).

impl DecryptionKey

pub async fn export_key_pkcs8(&self) -> Result<Vec<u8>, Error>

The private key as a PKCS#8 PrivateKeyInfo (DER), behind the same gate.

impl DecryptionKey

pub async fn to_wrap_input_jwk(&self) -> Result<WrapInput, Error>

The private-key JWK serialization as a wrap-input, for wrapping under another key. Behind the extractability gate.

impl DecryptionKey

pub async fn to_wrap_input_pkcs8(&self) -> Result<WrapInput, Error>

The PKCS#8 serialization as a wrap-input, behind the same gate.

Trait Implementations

impl Debug for DecryptionKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<DecryptionKey> for DecryptionKey

fn from(raw: DecryptionKey) -> Self

Converts to this type from the input type.