Struct rustls::Tls12CipherSuite

pub struct Tls12CipherSuite {
    pub common: CipherSuiteCommon,
    pub kx: KeyExchangeAlgorithm,
    pub sign: &'static [SignatureScheme],
    pub fixed_iv_len: usize,
    pub explicit_nonce_len: usize,
    /* private fields */
}

A TLS 1.2 cipher suite supported by rustls.

Fields

common: CipherSuiteCommon

Common cipher suite fields.

kx: KeyExchangeAlgorithm

How to exchange/agree keys.

sign: &'static [SignatureScheme]

How to sign messages for authentication.

fixed_iv_len: usize

How long the fixed part of the ‘IV’ is.

This isn’t usually an IV, but we continue the terminology misuse to match the standard.

explicit_nonce_len: usize

This is a non-standard extension which extends the key block to provide an initial explicit nonce offset, in a deterministic and safe way. GCM needs this, chacha20poly1305 works this way by design.

Implementations

impl Tls12CipherSuite

pub fn resolve_sig_schemes(
    &self,
    offered: &[SignatureScheme]
) -> Vec<SignatureScheme>

Resolve the set of supported SignatureSchemes from the offered SupportedSignatureSchemes. If we return an empty set, the handshake terminates.

pub fn hash_algorithm(&self) -> &'static Algorithm

Which hash function to use with this suite.

Trait Implementations

impl Debug for Tls12CipherSuite

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<&'static Tls12CipherSuite> for SupportedCipherSuite

fn from(s: &'static Tls12CipherSuite) -> Self

Converts to this type from the input type.

impl PartialEq<Tls12CipherSuite> for Tls12CipherSuite

fn eq(&self, other: &Self) -> bool

This method tests for self and other values to be equal, and is used by ==.

const fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.