Struct Pkcs12KdfBuilder 

pub struct Pkcs12KdfBuilder<'a> { /* private fields */ }

PKCS#12 (RFC 7292 Appendix B) key/IV/MAC derivation builder.

Legacy — only needed for interoperability with PKCS#12 files encrypted with deprecated algorithms such as PBEWithSHAAnd3-KeyTripleDES-CBC. New PKCS#12 files should use PBES2/PBKDF2 instead.

let sha1 = DigestAlg::fetch(c"SHA1", None).unwrap();
let key = Pkcs12KdfBuilder::new(&sha1, b"password", &salt, Pkcs12KdfId::Key)
    .iterations(2048)
    .derive_to_vec(24)?;

Implementations

impl<'a> Pkcs12KdfBuilder<'a>

pub fn new( md: &'a DigestAlg, password: &'a [u8], salt: &'a [u8], id: Pkcs12KdfId, ) -> Self

Create a PKCS#12 KDF builder.

• md — hash algorithm (SHA-1 for legacy 3DES; SHA-256 for PBES2).
• password — UTF-8 passphrase bytes.
• salt — random salt (typically 8 bytes per RFC 7292).
• id — output type: Key, Iv, or Mac.

The iteration count defaults to 2048.

pub fn iterations(self, n: u32) -> Self

Override the iteration count.

pub fn derive(&self, out: &mut [u8]) -> Result<(), ErrorStack>

Derive key material into out.

Panics

Panics if the password, salt, or output buffer length exceeds i32::MAX bytes, which is not a practical concern for cryptographic inputs.

Errors

pub fn derive_to_vec(&self, len: usize) -> Result<Vec<u8>, ErrorStack>

Derive len bytes of key material, returning them in a freshly allocated Vec<u8>.

Errors