Struct X25519HkdfSha256 

pub struct X25519HkdfSha256;

Diffie-Hellman KEM(X25519, HKDF-SHA256) (KEM id 0x0020).

Provided for interoperability with existing RFC 9180 deployments. It is not post-quantum; new deployments SHOULD prefer the hybrid post-quantum MLKEM768X25519 KEM.

Trait Implementations

impl Clone for X25519HkdfSha256

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for X25519HkdfSha256

impl Debug for X25519HkdfSha256

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for X25519HkdfSha256

impl Kem for X25519HkdfSha256

const HPKE_KEM_ID: u16 = 0x0020

The HPKE KEM identifier (draft-ietf-hpke-hpke-05 Section 7.1, IANA “HPKE KEM Identifiers”), used to build the ciphersuite suite_id.

const SHARED_SECRET_SIZE: usize = <HkdfSha256 as Kdf>::OUTPUT_SIZE

The size of the shared secret produced by this KEM.

const ENCAPPED_KEY_SIZE: usize = <X25519Group as DiffieHellmanGroup>::PUBLIC_KEY_SIZE

The size of an encapsulated key.

const PUBLIC_KEY_SIZE: usize = <X25519Group as DiffieHellmanGroup>::PUBLIC_KEY_SIZE

The size of a serialized public key.

const SECRET_KEY_SIZE: usize = <X25519Group as DiffieHellmanGroup>::SECRET_KEY_SIZE

The size of a serialized secret key.

type PublicKey = PublicKey

The public (encapsulation) key type.

type SecretKey = SecretKey

The secret (decapsulation) key type.

type EncappedKey = PublicKey

The encapsulated key type (the KEM ciphertext sent alongside the first encrypted message).

fn derive_keypair( input_keying_material: &[u8], ) -> Result<(Self::SecretKey, Self::PublicKey), HpkeError>

Deterministically derives a key pair from input keying material.

fn derive_public_key(secret_key: &Self::SecretKey) -> Self::PublicKey

Derives the public key of a secret key.

fn public_key_to_bytes( out: &mut [u8], public_key: &Self::PublicKey, ) -> Result<(), HpkeError>

Serializes a public key into out, which must be exactly Kem::PUBLIC_KEY_SIZE bytes long.

fn public_key_from_bytes(bytes: &[u8]) -> Result<Self::PublicKey, HpkeError>

Deserializes a public key from bytes, which must be exactly Kem::PUBLIC_KEY_SIZE bytes long and a valid, fully validated public key.

fn secret_key_to_bytes( out: &mut [u8], secret_key: &Self::SecretKey, ) -> Result<(), HpkeError>

Serializes a secret key into out, which must be exactly Kem::SECRET_KEY_SIZE bytes long.

fn secret_key_from_bytes(bytes: &[u8]) -> Result<Self::SecretKey, HpkeError>

Deserializes a secret key from bytes, which must be exactly Kem::SECRET_KEY_SIZE bytes long.

fn encapped_key_to_bytes( out: &mut [u8], encapped_key: &Self::EncappedKey, ) -> Result<(), HpkeError>

Serializes an encapsulated key into out, which must be exactly Kem::ENCAPPED_KEY_SIZE bytes long.

fn encapped_key_from_bytes(bytes: &[u8]) -> Result<Self::EncappedKey, HpkeError>

Deserializes an encapsulated key from bytes, which must be exactly Kem::ENCAPPED_KEY_SIZE bytes long.

fn encap_with_ephemeral( ephemeral_secret_key: &Self::SecretKey, recipient_public_key: &Self::PublicKey, ) -> Result<(Hash, Self::EncappedKey), HpkeError>

Encapsulates a shared secret against recipient_public_key, using the given ephemeral secret key ephemeral_secret_key.

fn decap( encapped_key: &Self::EncappedKey, recipient_secret_key: &Self::SecretKey, ) -> Result<Hash, HpkeError>

Recovers the shared secret encapsulated in encapped_key with the secret key recipient_secret_key.

const RANDOMNESS_SIZE: usize = Self::SECRET_KEY_SIZE

The size of the randomness consumed by Kem::encap_deterministic.

fn generate_keypair() -> Result<(Self::SecretKey, Self::PublicKey), HpkeError>

Generates a fresh random key pair using the operating system’s random number generator.

fn encap( recipient_public_key: &Self::PublicKey, ) -> Result<(Hash, Self::EncappedKey), HpkeError>

Encapsulates a fresh shared secret against recipient_public_key using a freshly generated ephemeral key pair.

fn encap_deterministic( recipient_public_key: &Self::PublicKey, randomness: &[u8], ) -> Result<(Hash, Self::EncappedKey), HpkeError>

Encapsulates a shared secret against recipient_public_key from caller-provided randomness (EncapDerand).

impl PartialEq for X25519HkdfSha256

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for X25519HkdfSha256