Struct EnvelopeKeypair 

pub struct EnvelopeKeypair {
    pub public: [u8; 32],
    pub secret: [u8; 32],
}

An X25519 envelope keypair for a party (the owner, or an agent). The secret opens sealed DEKs; the public is what a DEK is sealed to.

Fields

public: [u8; 32]

secret: [u8; 32]

Implementations

impl EnvelopeKeypair

pub fn generate() -> Result<Self, String>

Generate a fresh keypair (real X25519, OS randomness).

pub fn public_hex(&self) -> String

pub fn secret_hex(&self) -> String

pub fn from_hex(public_hex: &str, secret_hex: &str) -> Result<Self, String>

Reconstruct from stored hex (e.g. an agent keypair supplied for opening).

pub fn derive(root_secret: &[u8; 32], domain: &[u8]) -> Self

Derive a keypair deterministically from a root secret (the owner’s ed25519 signing-key seed) and a domain tag, so the owner envelope keypair is re-derivable and NEVER stored at rest — no plaintext X25519 secret on disk. The derivation is SHA-256(domain ‖ 0x1f ‖ root_secret) → X25519 secret; it is stable, so seals to this public key open with the re-derived secret across sessions.

Trait Implementations

impl Clone for EnvelopeKeypair

fn clone(&self) -> EnvelopeKeypair

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnvelopeKeypair

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for EnvelopeKeypair

fn eq(&self, other: &EnvelopeKeypair) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for EnvelopeKeypair

impl StructuralPartialEq for EnvelopeKeypair