Struct SecretKey1024 

pub struct SecretKey1024 { /* private fields */ }

ML-KEM-1024 decapsulation key (secret key) as defined in FIPS 203.

A key is created with SecretKey1024::generate (fresh random key) or SecretKey1024::generate_derand (deterministic, for test vectors).

Example

use crypto::mlkem::SecretKey1024;

let (secret_key, public_key) = SecretKey1024::generate_derand(&[0u8; 64]);
let (shared_secret, ciphertext) = public_key.encapsulate_derand(&[0u8; 32]);
let decapsulated = secret_key.decapsulate(&ciphertext).unwrap();
assert_eq!(shared_secret, decapsulated);

Implementations

impl SecretKey1024

pub fn from_bytes(bytes: &[u8; 3168]) -> Self

Creates a decapsulation key from its FIPS 203 encoding.

The key is not validated here; use SecretKey1024::decapsulate, which performs the FIPS 203 decapsulation-key check.

pub fn to_bytes(&self) -> [u8; 3168]

Returns the FIPS 203 encoding of this decapsulation key.

pub fn generate() -> Result<(Self, PublicKey1024), MlKemError>

Generates a fresh random keypair.

Returns MlKemError::Random when the operating system’s random number generator is unavailable or fails.

pub fn generate_derand(coins: &[u8; 64]) -> (Self, PublicKey1024)

Generates a keypair deterministically from 64 bytes of coins.

The first 32 bytes seed the key generation matrix and the last 32 bytes become the implicit-rejection secret. Useful for reproducing FIPS 203 / ACVP test vectors; the same coins must not be reused for a real key.

pub fn decapsulate( &self, ciphertext: &[u8; 1568], ) -> Result<[u8; 32], MlKemError>

Decapsulates ciphertext, recovering the shared secret encapsulated in it.

Implements the FIPS 203 implicit-rejection transform: a ciphertext that does not re-encrypt to itself does not produce an error, but instead yields a pseudorandom shared secret derived from the key and ciphertext.

Returns MlKemError::InvalidKey if this key fails the FIPS 203 decapsulation-key check, i.e. the hash of its embedded encapsulation key does not match the hash stored in the key.

pub fn public_key(&self) -> PublicKey1024

Returns the encapsulation key embedded in this decapsulation key.

Trait Implementations

impl Clone for SecretKey1024

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Drop for SecretKey1024

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Eq for SecretKey1024

impl From<&[u8; 3168]> for SecretKey1024

fn from(bytes: &[u8; 3168]) -> Self

Converts to this type from the input type.

impl PartialEq for SecretKey1024

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SecretKey1024

impl TryFrom<&[u8]> for SecretKey1024

type Error = MlKemError

The type returned in the event of a conversion error.

fn try_from(bytes: &[u8]) -> Result<Self, Self::Error>

Performs the conversion.

impl Zeroize for SecretKey1024

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.