Struct S2vState 

pub struct S2vState<'a, C: AesCipher> { /* private fields */ }

Incremental RFC 5297 §2.4 S2V state.

Associated-data components are absorbed one at a time with push_component; the final vector component (the plaintext) is supplied to finalize, which returns the synthetic IV V. The state borrows a single keyed cipher, so one key schedule serves every CMAC in the computation.

Implementations

impl<'a, C: AesCipher> S2vState<'a, C>

pub fn new(cipher: &'a C) -> Self

Initialize the running value: D = CMAC(K, <zero>).

pub fn push_component(&mut self, feed: impl FnOnce(&mut CmacState<&'a C>))

Absorb one associated-data component S_i, streamed through feed: D = dbl(D) xor CMAC(K, S_i).

pub fn finalize(self, last: &[u8]) -> [u8; 16]

Finish with the final component S_n and return V.

Per RFC 5297: V = CMAC(K, S_n xorend D) when S_n fills a block, otherwise V = CMAC(K, dbl(D) xor pad(S_n)).