Struct Aes256Gcm 

pub struct Aes256Gcm(/* private fields */);

AES-256-GCM authenticated cipher.

Create a new cipher with new. encrypt_in_place and decrypt_in_place for authenticated encryption.

Implementations

impl Aes256Gcm

pub const KEY_SIZE: usize = 32

pub fn new(key: &[u8; 32]) -> Aes256Gcm

Create a new AES-256-GCM instance from a 32-byte key.

Precomputes the target-specific round keys and GHASH powers (H, H², H³, H⁴) using software GF(2¹²⁸) multiplication, so new() is safe on any CPU and does not require hardware feature detection.

Trait Implementations

impl Aead for Aes256Gcm

const KEY_SIZE: usize = 32

const TAG_SIZE: usize = 16

const NONCE_SIZE: usize = 12

fn encrypt_in_place(&self, in_out: &mut [u8], nonce: &[u8], aad: &[u8]) -> Hash

fn decrypt_in_place( &self, in_out: &mut [u8], nonce: &[u8], aad: &[u8], tag: &[u8], ) -> Result<(), AeadError>

fn encrypt(&self, plaintext: &[u8], nonce: &[u8], aad: &[u8]) -> Vec<u8>

fn decrypt( &self, ciphertext: &[u8], nonce: &[u8], aad: &[u8], ) -> Result<Vec<u8>, AeadError>

impl Aead for Aes256Gcm

AES-256-GCM (AEAD id 0x0002).

const HPKE_AEAD_ID: u16 = 0x0002

The HPKE AEAD identifier (draft-ietf-hpke-hpke-05 Section 7.3, IANA “HPKE AEAD Identifiers”), used to build the ciphersuite suite_id.

const MAX_PLAINTEXT_SIZE: u64 = AES_GCM_MAX_PLAINTEXT_SIZE

Maximum length, in bytes, of a plaintext passed to Aead::seal, i.e. P_MAX ([RFC 5116]).

const MAX_CIPHERTEXT_SIZE: u64 = AES_GCM_MAX_CIPHERTEXT_SIZE

Maximum length, in bytes, of a ciphertext passed to Aead::open, i.e. C_MAX ([RFC 5116]).

fn new(key: &[u8]) -> Result<Self, HpkeError>

Instantiates the cipher from KEY_SIZE raw key bytes, as produced by the HPKE key schedule.

fn seal( &self, in_out: &mut [u8], nonce: &[u8], associated_data: &[u8], ) -> Result<Hash, HpkeError>

Encrypts in_out in place and returns the detached authentication tag, forwarding to [crypto::Aead::encrypt_in_place].

fn open( &self, in_out: &mut [u8], nonce: &[u8], associated_data: &[u8], tag: &[u8], ) -> Result<(), HpkeError>

Decrypts in_out in place using the detached authentication tag, forwarding to [crypto::Aead::decrypt_in_place].

impl Drop for Aes256Gcm

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Zeroize for Aes256Gcm

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.