Module sealed_stream 

Canonical 64-KiB sealed streams used by slots, snapshots and floors.

Structs

StreamObjectLayout

Delimits sealed stream chunks without buffering the object. The caller reserves the final 64 bytes for the whole-object signature. Acceptance also requires that signature and the plaintext decoder’s end-marker check.

Functions

plaintext_length

Recover plaintext size from a complete stream’s encrypted size.