Struct tink_aead::subtle::EncryptThenAuthenticate

pub struct EncryptThenAuthenticate { /* fields omitted */ }

EncryptThenAuthenticate performs an encrypt-then-MAC operation on plaintext and additional authenticated data (aad). The MAC is computed over (aad || ciphertext || size of aad). This implementation is based on http://tools.ietf.org/html/draft-mcgrew-aead-aes-cbc-hmac-sha2-05.

Implementations

impl EncryptThenAuthenticate

pub fn new(
    ind_cpa_cipher: Box<dyn IndCpaCipher>,
    mac: Box<dyn Mac>,
    tag_size: usize
) -> Result<EncryptThenAuthenticate, TinkError>

Return a new instance of EncryptThenAuthenticate.

Trait Implementations

impl Aead for EncryptThenAuthenticate

fn encrypt(
    &self,
    plaintext: &[u8],
    additional_data: &[u8]
) -> Result<Vec<u8>, TinkError>

Encrypt plaintext with additional_data as additional authenticated data. The resulting ciphertext allows for checking authenticity and integrity of additional data, but does not guarantee its secrecy.

The plaintext is encrypted with an IndCpaCipher, then MAC is computed over (additional_data || ciphertext || n) where n is additional_data's length in bits represented as a 64-bit bigendian unsigned integer. The final ciphertext format is (IND-CPA ciphertext || mac).

fn decrypt(
    &self,
    ciphertext: &[u8],
    additional_data: &[u8]
) -> Result<Vec<u8>, TinkError>

Decrypt ciphertext with additional_data as additional authenticated data.

impl Clone for EncryptThenAuthenticate

Manual implementation of Clone relying on the trait bounds for primitives to provide .box_clone() methods.

fn clone(&self) -> Self

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.