equal tkn1 tkn2 checks if two encrypted tokens tkn1 and tkn2 are equal.

to_uri_safe_string tkn turns an encrypted token tkn into a URI-safe base64 string. Used to make sure CSRF works with all encodings.

of_uri_safe_string tkn turns a URI-safe string tkn into an encrypted token. Attempts to parse the base64 input tkn, which can fail. This does not perform any cryptographic operation to ensure tkn can be decrypted.

to_struct tkn turns an encrypted token tkn to a raw format.

from_struct ~with_secret tkn encrypts a raw token tkn using AES in ECB mode given a secret with_secret.

from_struct_random ~with_secret tkn encrypts a raw token tkn. Additionally the encrypted result is scrambled with a random salt (IV) using AES in CBC mode given a secret with_secret.