Struct ManagedSa 

pub struct ManagedSa {
    pub sa: SecurityAssociation,
    pub state: SaState,
    pub key_id: Option<u16>,
}

A managed Security Association with lifecycle state.

Fields

sa: SecurityAssociation

The underlying SA parameters.

state: SaState

Current lifecycle state.

key_id: Option<u16>

Assigned encryption key ID (if keyed).

Implementations

impl ManagedSa

pub fn new(spi: u16, service_type: ServiceType) -> Result<Self, Error>

Creates a new SA in UNKEYED state.

pub fn rekey(&mut self, key_id: u16) -> Result<(), Error>

Assign a key to this SA (UNKEYED → KEYED).

Per Section 3.3.3.3.4: SA must be in the Unkeyed state.

pub fn start(&mut self) -> Result<(), Error>

Activate the SA for operations (KEYED → OPERATIONAL).

pub fn stop(&mut self) -> Result<(), Error>

Deactivate the SA (OPERATIONAL → KEYED).

pub fn expire(&mut self) -> Result<(), Error>

Expire the SA, removing its key association (KEYED → UNKEYED).

Per Section 3.3.3.4.2: SA must be in the Keyed state.

pub fn set_arsn(&mut self, arsn: u64)

Set the Anti-Replay Sequence Number.

pub fn read_arsn(&self) -> u64

Read the current ARSN.