1 files changed, 29 insertions, 0 deletions

diff --git a/src/lib.rs b/src/lib.rs
index 8ba36eb..72fb58f 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -23,6 +23,35 @@ pub use view::*;
 
 pub use ipnet;
 
+#[doc(hidden)]
+pub const fn __decode_wg_key_const(
+    encoded: &str,
+) -> [u8; netlink_packet_wireguard::WireguardAttribute::WG_KEY_LEN] {
+    key::decode_wg_key_const(encoded)
+}
+
+/// Creates a [`Key`] from a canonical WireGuard base64 literal at compile time.
+///
+/// The literal must be exactly 44 characters of standard base64 and end with `=`.
+///
+/// ```
+/// use wireguard::{key, Key};
+///
+/// const PRIVATE_KEY: Key = key!("6F5rOtYE5A2KcXTKf9jdzWa9Y/kuV5gPS3LcKlxmOnY=");
+/// ```
+///
+/// ```compile_fail
+/// use wireguard::key;
+///
+/// const _BAD: wireguard::Key = key!("not-a-wireguard-key");
+/// ```
+#[macro_export]
+macro_rules! key {
+    ($value:literal) => {
+        $crate::Key::new_unchecked_from($crate::__decode_wg_key_const($value))
+    };
+}
+
 pub type Result<T, E = Error> = std::result::Result<T, E>;
 
 #[derive(Debug)]