Module keyring 

Structs

Keyring

Holds decrypted API keys in memory. Keys are mlock’d and zeroized on drop.

Enums

KeyringError

Functions

encrypt_keyring

Encrypt a keyring (for keygen tooling / orchestrator). Returns the encrypted blob: [12-byte nonce][ciphertext+tag]

generate_session_key

Generate a random 256-bit session key.