Method derive

src/pq.rs:192–200

Derive the server-wide ticket key from the provider signing key, so it is stable across restarts without being persisted.

(provider_sk: &[u8])

    /// Derive the server-wide ticket key from the provider signing key, so it
    /// is stable across restarts without being persisted.
    pub fn derive(provider_sk: &[u8]) -> Self {
        let mut input = Vec::with_capacity(25 + provider_sk.len());
        input.extend_from_slice(b"DNSCrypt-PQ-ticket-key-v1");
        input.extend_from_slice(provider_sk);
        TicketKey {
            id: [0x00, 0x00, 0x00, 0x01],
            key: SharedKey::from_bytes(sha256(&input)),
        }
    }
}

/// The plaintext sealed inside a resumption ticket.