AES Key Wrap (KW) and Key Wrap with Padding (KWP), SP 800-38F, on the key-object path (#150) by roy-basmacier · Pull Request #160 · bcgit/bc-rust

Add KeyWrapper/KeyUnwrapper traits for SP 800-38F key wrap (#150)

royb

authored and

dghgit

committed

5ab0043

Add AES-KW and AES-KWP (SP 800-38F) over ElectronicCodeBook (#150)

royb

authored and

dghgit

committed

95f67d9

core: KeyWrapper/KeyUnwrapper are workers over a borrowed key state; KeyWrapMode/KeyUnwrapMode and the KeyWrappingKey/KeyUnwrappingKey roles

dghgit

committed

1362d0a

core-test-framework: the key-wrap suite runs a key object through the roles and its workers

dghgit

committed

02e8652

cipher: KW and KWP as mode types over the key path; Kw and Kwp borrow the keyed permutation

dghgit

committed

60d41f7

aes: AESKey<KW> and AESKey<KWP> wrap keys; the AES_KW_* / AES_KWP_* aliases name the workers

dghgit

committed

56e43eb

cli: the aes-kw and aes-kwp commands take -d encrypt|decrypt and build key objects

dghgit

committed

dc47bf5

cipher: the key-wrap workers' bare constructors leave the public API

dghgit

committed

c0da939

150-key-wrap: the merge-time adaptations to feature/key-rework-memory, carried over the rebase onto its release-based history

dghgit

committed

1c45b85

150-key-wrap: the adaptations to release/0.1.4alpha, carried over the rebase from feature/key-rework-memory

dghgit

committed

38427f5

core: KeyWrapper and KeyUnwrapper are dyn-compatible, as the other worker traits are

dghgit

committed

9857503

cipher: the key-wrap `_out` methods zeroize the whole output buffer before any check

dghgit

committed

e09776d

core-test-framework: the key-wrap suite checks that a refused `_out` call left the buffer zeroed

dghgit

committed

1a5de48

cipher: the key-wrap length helpers leave the public API; the modes doc matches SP 800-38F Sec 3.1

dghgit

committed

6672352

core: the key-wrap roles gain the allocating `wrap` / `unwrap` one-shots under `std`

dghgit

committed

687c21e

core-test-framework: the key-wrap suite covers the allocating `wrap` / `unwrap`

dghgit

committed

81d0949

aes: the AES_KW_128 run-time-length example uses the allocating pair

dghgit

committed

6ffae4c

cli: the aes-kw and aes-kwp commands call the key's `wrap` / `unwrap`

dghgit

committed

198577a

Navigation Menu

Repository navigation

AES Key Wrap (KW) and Key Wrap with Padding (KWP), SP 800-38F, on the key-object path (#150) - #160

AES Key Wrap (KW) and Key Wrap with Padding (KWP), SP 800-38F, on the key-object path (#150)#160
roy-basmacier wants to merge 18 commits into
bcgit:release/0.1.4alphafrom
roy-basmacier:feature/150-key-wrap

Commits on Nov 5, 2026

Add KeyWrapper/KeyUnwrapper traits for SP 800-38F key wrap (#150)

Add AES-KW and AES-KWP (SP 800-38F) over ElectronicCodeBook (#150)

core: KeyWrapper/KeyUnwrapper are workers over a borrowed key state; KeyWrapMode/KeyUnwrapMode and the KeyWrappingKey/KeyUnwrappingKey roles

core-test-framework: the key-wrap suite runs a key object through the roles and its workers

cipher: KW and KWP as mode types over the key path; Kw and Kwp borrow the keyed permutation

aes: AESKey<KW> and AESKey<KWP> wrap keys; the AES_KW_* / AES_KWP_* aliases name the workers

cli: the aes-kw and aes-kwp commands take -d encrypt|decrypt and build key objects

cipher: the key-wrap workers' bare constructors leave the public API

150-key-wrap: the merge-time adaptations to feature/key-rework-memory, carried over the rebase onto its release-based history

150-key-wrap: the adaptations to release/0.1.4alpha, carried over the rebase from feature/key-rework-memory

core: KeyWrapper and KeyUnwrapper are dyn-compatible, as the other worker traits are

cipher: the key-wrap `_out` methods zeroize the whole output buffer before any check

core-test-framework: the key-wrap suite checks that a refused `_out` call left the buffer zeroed

cipher: the key-wrap length helpers leave the public API; the modes doc matches SP 800-38F Sec 3.1

core: the key-wrap roles gain the allocating `wrap` / `unwrap` one-shots under `std`

core-test-framework: the key-wrap suite covers the allocating `wrap` / `unwrap`

aes: the AES_KW_128 run-time-length example uses the allocating pair

cli: the aes-kw and aes-kwp commands call the key's `wrap` / `unwrap`