kcenon::network::protocols::quic::quic_keys Struct Reference

QUIC encryption keys for a single encryption level (RFC 9001 Section 5) More...

#include <keys.h>

Collaboration diagram for kcenon::network::protocols::quic::quic_keys:

Public Member Functions
auto	is_valid () const noexcept -> bool
	Check if keys are initialized (non-zero)
void	clear () noexcept
	Clear all key material securely.
auto	operator== (const quic_keys &other) const noexcept -> bool
	Equality comparison.
auto	operator!= (const quic_keys &other) const noexcept -> bool
	Inequality comparison.

Public Attributes
std::array< uint8_t, secret_size >	secret {}
	Traffic secret (used for key updates)
std::array< uint8_t, aes_128_key_size >	key {}
	AEAD encryption key (AES-128-GCM by default)
std::array< uint8_t, aead_iv_size >	iv {}
	AEAD initialization vector.
std::array< uint8_t, hp_key_size >	hp_key {}
	Header protection key.

Detailed Description

QUIC encryption keys for a single encryption level (RFC 9001 Section 5)

Contains all the cryptographic material needed for packet protection:

• Traffic secret: Used for key derivation and key updates
• AEAD key: Used for payload encryption (AES-128-GCM or AES-256-GCM)
• IV: Initialization vector XORed with packet number for nonce
• HP key: Header protection key for protecting header bytes

Definition at line 91 of file keys.h.

Member Function Documentation

clear()

void kcenon::network::protocols::quic::quic_keys::clear ( )

noexcept

Clear all key material securely.

Definition at line 36 of file keys.cpp.

{
    // Use volatile to prevent compiler optimization
    volatile uint8_t* p;
 
    p = secret.data();
    std::memset(const_cast<uint8_t*>(p), 0, secret.size());
 
    p = key.data();
    std::memset(const_cast<uint8_t*>(p), 0, key.size());
 
    p = iv.data();
    std::memset(const_cast<uint8_t*>(p), 0, iv.size());
 
    p = hp_key.data();
    std::memset(const_cast<uint8_t*>(p), 0, hp_key.size());
}

References hp_key, iv, key, and secret.

Referenced by kcenon::network::protocols::quic::key_pair::clear().

Here is the caller graph for this function:

is_valid()

auto kcenon::network::protocols::quic::quic_keys::is_valid ( ) const -> bool

nodiscardnoexcept

Check if keys are initialized (non-zero)

Returns

true if any key material is non-zero

Definition at line 30 of file keys.cpp.

{
    // Check if key is non-zero
    return std::any_of(key.begin(), key.end(), [](uint8_t b) { return b != 0; });
}

References key.

Referenced by kcenon::network::protocols::quic::key_pair::is_valid().

Here is the caller graph for this function:

operator!=()

auto kcenon::network::protocols::quic::quic_keys::operator!= ( const quic_keys & other ) const -> bool

nodiscardnoexcept

Inequality comparison.

Definition at line 60 of file keys.cpp.

{
    return !(*this == other);
}

operator==()

auto kcenon::network::protocols::quic::quic_keys::operator== ( const quic_keys & other ) const -> bool

nodiscardnoexcept

Equality comparison.

Parameters

other

Keys to compare with

Returns

true if all key material matches

Definition at line 54 of file keys.cpp.

{
    return secret == other.secret && key == other.key && iv == other.iv &&
           hp_key == other.hp_key;
}

Member Data Documentation

hp_key

std::array<uint8_t, hp_key_size> kcenon::network::protocols::quic::quic_keys::hp_key {}

Header protection key.

Definition at line 103 of file keys.h.

{};

Referenced by clear(), and kcenon::network::protocols::quic::initial_keys::derive_keys().

iv

std::array<uint8_t, aead_iv_size> kcenon::network::protocols::quic::quic_keys::iv {}

AEAD initialization vector.

Definition at line 100 of file keys.h.

{};

Referenced by clear(), and kcenon::network::protocols::quic::initial_keys::derive_keys().

key

std::array<uint8_t, aes_128_key_size> kcenon::network::protocols::quic::quic_keys::key {}

AEAD encryption key (AES-128-GCM by default)

Definition at line 97 of file keys.h.

{};

Referenced by clear(), kcenon::network::protocols::quic::initial_keys::derive_keys(), and is_valid().

secret

std::array<uint8_t, secret_size> kcenon::network::protocols::quic::quic_keys::secret {}

Traffic secret (used for key updates)

Definition at line 94 of file keys.h.

{};

Referenced by clear().

---

The documentation for this struct was generated from the following files:

• src/internal/protocols/quic/keys.h
• src/protocols/quic/keys.cpp