pub enum KemSharedKeySpec {
Symmetric(SymmetricKeySpec),
Hkdf {
key: HkdfKeySpec,
current: CurrentKeyProtection,
history: HistoryObservationPlan,
},
}Expand description
Typed usage of the 32-byte native shared secret. No KDF is added implicitly.
For a caller-defined destination template, use crate::Session::encapsulate_native
or crate::Session::decapsulate_native with crate::NativeKemParameters::MlKem
and the same key’s managed reference. That route accepts crate::GenerationTemplate
without converting its attributes into this convenience catalogue.
Variants§
Symmetric(SymmetricKeySpec)
Any symmetric selection requesting exactly 32 key bytes: AES256, ChaCha20 or an HMAC hash with an explicit 32-byte key. No KDF is added.
Hkdf
Derive-only32-byte base through the existing explicit HKDF operations.
Fields
key: HkdfKeySpecNative destination identity and key type.
current: CurrentKeyProtectionNative SENSITIVE/EXTRACTABLE request, separate from admission.
history: HistoryObservationPlanExplicit native history and protection observations for the destination.