Struct EncryptedGroupInfoBlobV1 

pub struct EncryptedGroupInfoBlobV1 {
    pub nonce: Vec<u8>,
    pub ciphertext: Vec<u8>,
    pub epoch: u64,
    pub group_state_hash: Vec<u8>,
    pub expires_at_ns: u64,
}

v1 shape of the encrypted-GroupInfo envelope.

epoch and group_state_hash are plaintext metadata serving two distinct purposes:

• epoch provides a total ordering on uploads. The service accepts an upload iff upload.epoch > current.epoch (strictly newer); lower-epoch uploads are stale and rejected outright.

• group_state_hash is a consistency check at a single epoch. MLS is deterministic — every member that applies the same commit derives identical group state — so two correct uploads at the same epoch MUST carry the same hash. When upload.epoch == current.epoch: equal hashes mean an idempotent re-upload (no-op or duplicate-reject); different hashes mean the uploaders are on forked views of the group and the service must refuse to pick a winner.

The joiner additionally verifies on download that the blob’s epoch and group_state_hash match the decrypted GroupInfo before attempting to join — closes the “malicious service swapped ciphertext” gap.

Fields

nonce: Vec<u8>

12 bytes; ChaCha20Poly1305 nonce specific to this ciphertext.

ciphertext: Vec<u8>

wrap_payload_symmetric output: AEAD ciphertext over the serialized MlsMessageOut(GroupInfo).

epoch: u64

MLS group epoch of the wrapped GroupInfo. Plaintext; the service totally orders uploads by this value — strictly-newer wins, stale is rejected. Joiner verifies against the decrypted GroupInfo before joining.

group_state_hash: Vec<u8>

Tree-hash (or equivalent group-state digest) of the wrapped GroupInfo. Plaintext; the service uses this only at equal epochs to detect forks (same epoch + differing hash = forked uploaders). Not used for ordering. Joiner verifies against the decrypted GroupInfo before joining.

expires_at_ns: u64

Wall-clock expiry of this blob, in nanoseconds since UNIX epoch. 0 means no expiry. The service uses this as a TTL hint and MAY garbage-collect blobs past their expires_at_ns autonomously. The joining client also enforces this — refuses to join from an expired blob even if the service is still serving it. Admin bounds the campaign by setting this at upload time; extending an invite is a re-upload with a later value.

Trait Implementations

impl Clone for EncryptedGroupInfoBlobV1

fn clone(&self) -> EncryptedGroupInfoBlobV1

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptedGroupInfoBlobV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EncryptedGroupInfoBlobV1

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for EncryptedGroupInfoBlobV1

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for EncryptedGroupInfoBlobV1

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for EncryptedGroupInfoBlobV1

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl Name for EncryptedGroupInfoBlobV1

const NAME: &'static str = "EncryptedGroupInfoBlobV1"

Simple name for this Message. This name is the same as it appears in the source .proto file, e.g. FooBar.

const PACKAGE: &'static str = "xmtp.mls.message_contents"

Package name this message type is contained in. They are domain-like and delimited by ., e.g. google.protobuf.

fn full_name() -> String

Fully-qualified unique name for this Message. It’s prefixed with the package name and names of any parent messages, e.g. google.rpc.BadRequest.FieldViolation. By default, this is the package name followed by the message name. Fully-qualified names must be unique within a domain of Type URLs.

fn type_url() -> String

Type URL for this Message, which by default is the full name with a leading slash, but may also include a leading domain name, e.g. type.googleapis.com/google.profile.Person. This can be used when serializing into the google.protobuf.Any type.

impl PartialEq for EncryptedGroupInfoBlobV1

fn eq(&self, other: &EncryptedGroupInfoBlobV1) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for EncryptedGroupInfoBlobV1

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for EncryptedGroupInfoBlobV1

impl StructuralPartialEq for EncryptedGroupInfoBlobV1