Struct EncryptedPayload 

pub struct EncryptedPayload {
    pub ciphertext: Vec<u8>,
    pub salt: [u8; 16],
    pub nonce: [u8; 12],
}

An encrypted payload: the ciphertext plus the salt and nonce needed to decrypt it (§1.2 — a represented state, not a bag of bytes).

The salt and nonce are generated fresh per encryption call (§1.3.1 — GCM nonce reuse is catastrophic), so two encryptions of the same plaintext with the same password yield different payloads.

Fields

ciphertext: Vec<u8>

The AES-256-GCM ciphertext (includes the GCM authentication tag).

salt: [u8; 16]

The PBKDF2 salt — 16 random bytes, unique per encryption.

nonce: [u8; 12]

The GCM nonce — 12 random bytes, unique per encryption.

Implementations

impl EncryptedPayload

pub fn to_base64(&self) -> String

Encode the payload as base64 of salt || nonce || ciphertext — a single self-contained string the browser fetch monkeypatch can decode and decrypt.

The format is: first 16 bytes = salt, next 12 bytes = nonce, rest = ciphertext (including GCM tag). This is NOT valid JSON, so serde_json::from_str fails on it (the JSON-bypass guard).

pub fn from_base64(s: &str) -> Result<Self, CryptoError>

Decode a base64 payload (salt || nonce || ciphertext) back into an EncryptedPayload.

Trait Implementations

impl Clone for EncryptedPayload

fn clone(&self) -> EncryptedPayload

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptedPayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.