Module crypto_box 

Public-key authenticated encryption

Implements libsodium’s crypto_box_* functions. A sender encrypts with the recipient’s public key and the sender’s secret key. The recipient decrypts with the sender’s public key and the recipient’s secret key.

Nonces are public, but a nonce must never repeat for the same sender and recipient keypair. See the libsodium documentation for details.

Classic API example

use dryoc::classic::crypto_box::*;
use dryoc::constants::CRYPTO_BOX_MACBYTES;
use dryoc::types::*;

// Create a random sender keypair
let (sender_pk, sender_sk) = crypto_box_keypair();

// Create a random recipient keypair
let (recipient_pk, recipient_sk) = crypto_box_keypair();

// Generate a random nonce
let nonce = Nonce::generate();

let message = "hello".as_bytes();
// Encrypt message
let mut ciphertext = vec![0u8; message.len() + CRYPTO_BOX_MACBYTES];
crypto_box_easy(&mut ciphertext, message, &nonce, &recipient_pk, &sender_sk)
    .expect("encrypt failed");

// Decrypt message
let mut decrypted_message = vec![0u8; ciphertext.len() - CRYPTO_BOX_MACBYTES];
crypto_box_open_easy(
    &mut decrypted_message,
    &ciphertext,
    &nonce,
    &sender_pk,
    &recipient_sk,
)
.expect("decrypt failed");

assert_eq!(message, decrypted_message);

Functions

crypto_box_beforenm

Computes a shared secret for the given public_key and secret_key. Resulting shared secret can be used with the precalculation interface.

crypto_box_detached

Detached variant of crypto_box_easy.

crypto_box_detached_afternm

Precalculation variant of crypto_box_detached.

crypto_box_detached_afternm_inplace

In-place variant of crypto_box_detached_afternm.

crypto_box_detached_inplace

In-place variant of crypto_box_detached.

crypto_box_easy

Encrypts a message in a box.

crypto_box_easy_afternm

Encrypts a message using a key computed by crypto_box_beforenm.

crypto_box_easy_inplace

Encrypts a message in-place in a box.

crypto_box_keypair

Generates a public/secret key pair from OS-provided random data, using copy_randombytes.

crypto_box_keypair_inplace

In-place variant of crypto_box_keypair

crypto_box_open_detached

Detached variant of crypto_box_open_easy: decrypts ciphertext with the sender’s public key sender_public_key, the recipient’s secret key recipient_secret_key, nonce, and the detached mac.

crypto_box_open_detached_afternm

Precalculation variant of crypto_box_open_detached.

crypto_box_open_detached_afternm_inplace

In-place variant of crypto_box_open_detached_afternm.

crypto_box_open_detached_inplace

In-place variant of crypto_box_open_detached: decrypts data with the sender’s public key sender_public_key and the recipient’s secret key recipient_secret_key.

crypto_box_open_easy

Decrypts ciphertext with recipient’s secret key recipient_secret_key and sender’s public key sender_public_key using nonce.

crypto_box_open_easy_afternm

Decrypts a box using a key computed by crypto_box_beforenm.

crypto_box_open_easy_inplace

Decrypts a box in-place.

crypto_box_seal

Encrypts and seals a message in a box.

crypto_box_seal_open

Decrypts a sealed box.

crypto_box_seed_keypair

Deterministically derives a keypair from a 32-byte seed.

crypto_box_seed_keypair_inplace

In-place variant of crypto_box_seed_keypair

Type Aliases

Mac

Crypto box message authentication code.

Nonce

Nonce for crypto boxes.

PublicKey

Public key for public key authenticated crypto boxes.

SecretKey

Secret key for public key authenticated crypto boxes.