Function open_ticket

src/pq.rs:264–273

Open a resumption ticket. Returns the recovered ticket plaintext, or an error on any failure (the caller MUST silently drop the query).

(tk: &TicketKey, ticket: &[u8])

/// Open a resumption ticket. Returns the recovered ticket plaintext, or an
/// error on any failure (the caller MUST silently drop the query).
pub fn open_ticket(tk: &TicketKey, ticket: &[u8]) -> Result<Vec<u8>, Error> {
    ensure!(
        ticket.len() > TICKET_KEY_ID_SIZE + TICKET_NONCE_SIZE + MAC_SIZE,
        "Short ticket"
    );
    ensure!(ticket[0..TICKET_KEY_ID_SIZE] == tk.id, "Unknown ticket key");
    let nonce = &ticket[TICKET_KEY_ID_SIZE..TICKET_KEY_ID_SIZE + TICKET_NONCE_SIZE];
    let sealed = &ticket[TICKET_KEY_ID_SIZE + TICKET_NONCE_SIZE..];
    tk.key.open_raw(nonce, sealed)
}

/// Build the response control block that carries a freshly issued ticket.
pub fn control_block(ticket_lifetime: u32, ticket: &[u8]) -> Vec<u8> {