Struct AesGcmCrypto 

pub struct AesGcmCrypto { /* private fields */ }

AES-GCM authenticated encryption provider.

Supports 128-bit and 256-bit keys with 12-byte nonces per CCSDS 355.0-B-2 Table 6-1. The GCM tag (16 bytes) is used as the MAC in the SDLS Security Trailer.

Implementations

impl AesGcmCrypto

pub fn new_128(key: &[u8; 16]) -> Self

Create a provider with a 128-bit key.

pub fn new_256(key: &[u8; 32]) -> Self

Create a provider with a 256-bit key.

Trait Implementations

impl CryptoProvider for AesGcmCrypto

fn encrypt( &self, _sa: &SecurityAssociation, iv: &[u8], aad: &[u8], data: &mut [u8], tag_out: &mut [u8], ) -> Result<usize, Error>

Encrypt data in place (AEAD). aad is additional authenticated data (frame headers). The authentication tag is written to tag_out. Returns padding byte count (0 for GCM/CTR).

fn decrypt( &self, _sa: &SecurityAssociation, iv: &[u8], aad: &[u8], data: &mut [u8], tag: &[u8], ) -> Result<usize, Error>

Decrypt data in place (AEAD). Verifies the authentication tag against aad and ciphertext. Returns padding byte count.

fn compute_mac( &self, _sa: &SecurityAssociation, _iv: &[u8], _payload: &[u8], _mac_out: &mut [u8], ) -> Result<(), Error>

Compute a MAC for authentication-only mode. The iv is passed for algorithms that need it (e.g. GMAC).