Stdlib module crypto/symmetric.vitl

This page is a wiki-style reference for one concrete stdlib file. It explains what the file owns, where it fits in the family, and how to decide whether this is the right surface to depend on.

Visual portrait of crypto/symmetric.vitl
Wiki-style portrait for crypto/symmetric.vitl.

Family: crypto

Kind: public stdlib surface

Page style: this reference follows the same “encyclopedic card + portrait + usage contract” logic as the keyword pages, but for stdlib modules.

Summary

Overview

FieldValue
Pathcrypto/symmetric.vitl
Familycrypto
Kindpublic stdlib surface
Line count47
Declared procedures10
Declared forms/picks0

`crypto/symmetric.vitl` is a public stdlib surface inside the `crypto` family. It should be read as one focused slice of the broader family responsibility: Hashing, HMAC, randomness, key derivation, symmetric primitives, and asymmetric primitives.

Purpose

This file should be chosen because of responsibility, not because its name “sounds close enough”. Inside the crypto family, it carries one focused part of the contract and keeps that responsibility separate from neighboring concerns.

  • A package manifest can be serialized first, then hashed, then optionally signed.
  • A token flow can derive a key in one boundary and use it in another without mixing concerns.

Taxonomy

Think of this page as a generated encyclopedia entry rather than a hand-written tutorial. The goal is to show what kind of module this is, how dense it is, and what reading strategy makes sense before depending on it.

  • Medium procedure surface: this file groups several related operations behind one namespace.
  • Minimal top-level dependencies: the module reads as mostly self-contained from its opening declarations.

Implementation profile

This profile is inferred directly from the source text. It does not replace reading the file, but it tells you quickly whether the module is mostly declarative, loop-heavy, branch-heavy, or organized around many small exits.

SignalCountWhat it suggests
if0Branching density and local decision-making.
while0Loop-heavy or iterative implementation style.
for0Collection-style traversal at source level.
match0Variant-driven branching or grammar-style decoding.
let0Local state and intermediate value density.
give10Number of explicit exit points and result shaping.

Top-level API inventory

SurfaceItems
Proceduresaes_encrypt, aes_decrypt, des_encrypt, des_decrypt, chacha20_encrypt, chacha20_decrypt, generate_iv, gcm_mode_encrypt, cbc_mode_encrypt, ctr_mode_encrypt
Formsnone declared at top level
Picksnone declared at top level
Constantsnone declared at top level
Exportsnone declared at top level

Imported surfaces

This file does not advertise a top-level `use` surface in its opening declarations. That often means it is either self-contained or an aggregation layer.

Position in family

This file is module 8 of 9 in the crypto family when ordered by path. By procedure count it ranks 7, and by line count it ranks 9. Those ranks are useful as rough signals of breadth, not as quality judgments.

Declaration map

The declaration map turns raw source into a scan-friendly catalog. It is useful when the file is large enough that a reader wants to orient by kinds of surfaces first.

LineNameKindRole
1vitte/stdlib_checked/crypto_symmetricspaceDeclares the namespace that anchors this file in the stdlib tree.
9aes_encryptprocImplements a security-sensitive transformation in the crypto boundary.
13aes_decryptprocImplements a security-sensitive transformation in the crypto boundary.
17des_encryptprocImplements a security-sensitive transformation in the crypto boundary.
21des_decryptprocImplements a security-sensitive transformation in the crypto boundary.
25chacha20_encryptprocImplements a security-sensitive transformation in the crypto boundary.
29chacha20_decryptprocImplements a security-sensitive transformation in the crypto boundary.
33generate_ivprocRepresents one top-level surface in the file contract and should be read as part of the module boundary.
37gcm_mode_encryptprocImplements a security-sensitive transformation in the crypto boundary.
41cbc_mode_encryptprocImplements a security-sensitive transformation in the crypto boundary.
45ctr_mode_encryptprocImplements a security-sensitive transformation in the crypto boundary.

The table is exhaustive for top-level declarations of the selected kinds. This file declares 11 matching surfaces.

Representative signatures

These signatures are shown in source order so the page keeps the feel of a reference manual, not just a keyword cloud.

  • proc aes_encrypt() -> int { (line 9)
  • proc aes_decrypt() -> int { (line 13)
  • proc des_encrypt() -> int { (line 17)
  • proc des_decrypt() -> int { (line 21)
  • proc chacha20_encrypt() -> int { (line 25)
  • proc chacha20_decrypt() -> int { (line 29)
  • proc generate_iv() -> int { (line 33)
  • proc gcm_mode_encrypt() -> int { (line 37)
  • proc cbc_mode_encrypt() -> int { (line 41)
  • proc ctr_mode_encrypt() -> int { (line 45)

How to use this module

Start by reading the file as an ownership boundary. Ask three questions: what enters this module, what stable types or procedures it exports, and what adjacent module should stay outside of it.

  1. Read space and top-level imports first so the ownership boundary of crypto/symmetric.vitl is explicit.
  2. Traverse procedures in source order; the early helpers usually explain the naming and numeric conventions used later.
  3. Only after that compare neighbor modules, because the right boundary choice matters more than memorizing one helper name.

User example

This example is generated from the actual stdlib module surface. Its job is not to be the smallest snippet possible; its job is to show a realistic consumer-shaped file that exercises the module and mirrors the language keywords the module itself relies on.

space demo/crypto_symmetric
proc run_example() -> string {
    give "ok"
}

Keyword coverage

This table makes the “all keywords of the module” requirement auditable. It compares the detected Vitte keywords in the source file with the generated consumer example above.

KeywordPresent in module sourceUsed in generated user example
spaceyesyes
procyesyes
giveyesyes

The generated snippet exercises every detected Vitte keyword used by this module.

Source shape

space vitte/stdlib_checked/crypto_symmetric
proc aes_encrypt() -> int {
  give 0
}
proc aes_decrypt() -> int {
  give 0
}
proc des_encrypt() -> int {
  give 0
}

The excerpt is not meant to replace the file. It exists to make the module recognizable at first glance, the same way a Wikipedia infobox helps the reader orient before reading the whole article.

Source landmarks

Large files are easier to retain when they have visible landmarks. When the source contains explicit section banners, they are surfaced here; otherwise the first major declarations are used as anchors.

  • Line 1: space vitte/stdlib_checked/crypto_symmetric
  • Line 9: proc aes_encrypt() -> int {
  • Line 13: proc aes_decrypt() -> int {
  • Line 17: proc des_encrypt() -> int {
  • Line 21: proc des_decrypt() -> int {
  • Line 25: proc chacha20_encrypt() -> int {
  • Line 29: proc chacha20_decrypt() -> int {
  • Line 33: proc generate_iv() -> int {

Source organization

When a file carries its own internal chaptering, those chapters usually reveal the intended reading order better than a flat symbol list. This section reconstructs that organization from the source itself.

File surfaces

Top-level items: 11. Procedures: 10. Data surfaces: 0. Constants: 0.

First visible names: vitte/stdlib_checked/crypto_symmetric, aes_encrypt, aes_decrypt, des_encrypt, des_decrypt, chacha20_encrypt, chacha20_decrypt, generate_iv, gcm_mode_encrypt, cbc_mode_encrypt

Complete API catalog

This catalog is the exhaustive file-level index for the module. It is intentionally closer to a generated encyclopedia appendix than to a tutorial summary.

Procedures

LineNameSignatureRole
9aes_encryptproc aes_encrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.
13aes_decryptproc aes_decrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.
17des_encryptproc des_encrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.
21des_decryptproc des_decrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.
25chacha20_encryptproc chacha20_encrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.
29chacha20_decryptproc chacha20_decrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.
33generate_ivproc generate_iv() -> int {Represents one top-level surface in the file contract and should be read as part of the module boundary.
37gcm_mode_encryptproc gcm_mode_encrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.
41cbc_mode_encryptproc cbc_mode_encrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.
45ctr_mode_encryptproc ctr_mode_encrypt() -> int {Implements a security-sensitive transformation in the crypto boundary.

Integration boundaries

Within crypto, this file should remain focused. If a future helper changes the host boundary, scheduling boundary, or data-shape boundary, it probably belongs in a neighbor module instead of being added here by convenience.

  • Family responsibility: Hashing, HMAC, randomness, key derivation, symmetric primitives, and asymmetric primitives.
  • Family architecture role: Use `crypto` when integrity, secrecy, or key management is the feature. This family should never be presented as generic formatting or utility code.

Composition guidance

Choose this module when

  • Choose crypto/symmetric.vitl when the main question is owned by this module rather than by transport, storage, orchestration, or user-interface code.
  • A package manifest can be serialized first, then hashed, then optionally signed.
  • A token flow can derive a key in one boundary and use it in another without mixing concerns.

Pause before extending it when

  • Avoid extending this file when the new helper mostly changes the boundary to host I/O, runtime coordination, or foreign integration instead of staying inside crypto.
  • Check nearby modules such as crypto/asymmetric.vitl, crypto/hash.vitl, crypto/hashing.vitl before adding convenience wrappers here.

Relationship table

This table keeps the page closer to a real encyclopedia entry: a module is easier to understand when compared with its nearest alternatives in the same family.

NeighborProceduresData surfacesWhy compare it
crypto/asymmetric.vitl100Shares the same family boundary but carries a distinct slice of responsibility.
crypto/hash.vitl222Shares the same family boundary but carries a distinct slice of responsibility.
crypto/hashing.vitl100Shares the same family boundary but carries a distinct slice of responsibility.
crypto/hmac.vitl82Shares the same family boundary but carries a distinct slice of responsibility.
crypto/keyderivation.vitl71Shares the same family boundary but carries a distinct slice of responsibility.
crypto/random.vitl131Shares the same family boundary but carries a distinct slice of responsibility.
crypto/utils.vitl111Shares the same family boundary but carries a distinct slice of responsibility.
crypto.vitl446Shares the same family boundary but carries a distinct slice of responsibility.

Neighbor modules