Struct EncryptedSecretKeyFile 

pub struct EncryptedSecretKeyFile {
    box_primitive: String,
    pw_primitive: String,
    nonce: Base58String,
    pwsalt: Base58String,
    pwdiff: (u32, u32),
    ciphertext: Base58String,
}

Represents the JSON structure of an encrypted secret key file.

This structure defines the format used to store encrypted secret keys on disk, compatible with the Mina Protocol’s key file format. The file contains all necessary cryptographic parameters for decryption.

JSON Format

When serialized, this structure produces a JSON file with the following format:

{
  "box_primitive": "xsalsa20poly1305",
  "pw_primitive": "argon2i",
  "nonce": "base58-encoded-nonce-with-version-byte",
  "pwsalt": "base58-encoded-salt-with-version-byte",
  "pwdiff": [memory_cost_in_bytes, time_cost_iterations],
  "ciphertext": "base58-encoded-encrypted-key-with-version-byte"
}

Security Considerations

• The nonce must be unique for each encryption operation
• The pwsalt should be cryptographically random
• The pwdiff parameters determine the computational cost of key derivation
• All Base58-encoded fields include version bytes for format validation

Fields

box_primitive: String

Symmetric encryption algorithm identifier. Always “xsalsa20poly1305” for compatibility.

pw_primitive: String

Password-based key derivation function identifier. Always “argon2i” for compatibility.

nonce: Base58String

Encryption nonce encoded in Base58 with version byte. Used once per encryption to ensure semantic security.

pwsalt: Base58String

Argon2 salt encoded in Base58 with version byte. Random value used in password-based key derivation.

pwdiff: (u32, u32)

Argon2 parameters as (memory_cost_bytes, time_cost_iterations). Determines computational difficulty of key derivation.

ciphertext: Base58String

Encrypted secret key encoded in Base58 with version byte. Contains the actual encrypted key data with authentication tag.

Implementations

impl EncryptedSecretKeyFile

pub fn new(path: impl AsRef<Path>) -> Result<Self, EncryptionError>

Trait Implementations

impl Debug for EncryptedSecretKeyFile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EncryptedSecretKeyFile

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EncryptedSecretKeyFile

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.