Struct Session 

pub struct Session<S> { /* private fields */ }

Secure-channel session state.

Implementations

impl Session<Disconnected>

pub fn new(scbk: [u8; 16]) -> Self

Begin a new session, holding the SCBK we will use.

pub fn challenge(self, rnd_a: [u8; 8]) -> Session<Challenged>

Move to Challenged by capturing the RND.A we are about to send.

impl Session<Challenged>

pub fn receive_ccrypt( self, ccrypt: &CCrypt, ) -> Result<Session<Cryptogrammed>, (Session<Disconnected>, SecureSessionError)>

Verify the PD’s CCrypt and move to Cryptogrammed.

impl Session<Cryptogrammed>

pub fn server_cryptogram(&self) -> [u8; 16]

Compute the server cryptogram to ship in osdp_SCRYPT.

pub fn initial_rmac(&self) -> [u8; 16]

Initial R-MAC, computed from S-MAC1/S-MAC2 over the server cryptogram.

pub fn confirm_rmac_i( self, their_rmac_i: &[u8; 16], ) -> Result<Session<Secure>, (Session<Disconnected>, SecureSessionError)>

PD echoed back our initial R-MAC; advance to fully Secure.

impl Session<Secure>

pub fn mac(&mut self, bytes: &[u8]) -> [u8; 16]

Compute the MAC trailer for an outgoing packet body.

bytes is the SOM..end-of-DATA region (as per super::mac::cbc_mac).

pub fn verify( &mut self, bytes: &[u8], wire_mac: &[u8; 4], ) -> Result<(), SecureSessionError>

Verify a received MAC against our locally-computed value.

pub fn keys(&self) -> &SessionKeys

Borrow the derived session keys (for AES-CBC DATA encryption).

pub fn last_other_mac(&self) -> &[u8; 16]

Last MAC the other end produced (used as encryption ICV per Annex D).

pub fn seal_data(&self, data: &[u8]) -> Vec<u8>

Encrypt data for an SCS_17/SCS_18 payload using the current ICV (!last_other_mac). Returns the ciphertext (always padded to a 16-byte multiple).

Spec: Annex D.5

pub fn open_data(&self, ct: &[u8]) -> Result<Vec<u8>, SecureSessionError>

Decrypt a payload received in an SCS_17/SCS_18 packet, validating the 0x80 padding.

Spec: Annex D.5

Trait Implementations

impl<S: Clone> Clone for Session<S>

fn clone(&self) -> Session<S>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<S: Debug> Debug for Session<S>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.