Struct EncryptedBlobs 

pub struct EncryptedBlobs { /* private fields */ }

A BlobStore that seals payloads under a scope’s data key.

One instance per erasure scope — a case, a tenant, whatever the deployment destroys as a unit. The scope is fixed at construction on purpose: a store that took it per call would let one payload land in the wrong erasure unit, and the mistake would only surface when an erasure came back incomplete.

Implementations

impl EncryptedBlobs

pub fn new( inner: Arc<dyn BlobStore>, keys: Arc<dyn KeyRing>, scope: impl Into<String>, ) -> Self

Seal everything written through this store under scope’s data key.

Trait Implementations

impl BlobStore for EncryptedBlobs

fn put<'life0, 'life1, 'async_trait>( &'life0 self, bytes: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<Digest, BlobError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Store bytes and return the address they landed at.

fn get<'life0, 'async_trait>( &'life0 self, digest: Digest, ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>, BlobError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Fetch bytes, verifying them against the address before returning.

fn put_at<'life0, 'life1, 'async_trait>( &'life0 self, digest: Digest, _bytes: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<(), BlobError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Store bytes at an address that is not their own digest.

fn get_raw<'life0, 'async_trait>( &'life0 self, digest: Digest, ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>, BlobError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Fetch exactly what is stored, without verifying it against the address.

fn expire<'life0, 'life1, 'async_trait>( &'life0 self, digest: Digest, at: Timestamp, reason: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<(), BlobError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Drop a blob’s bytes, leaving a tombstone that says it was deliberate.

fn has<'life0, 'async_trait>( &'life0 self, digest: Digest, ) -> Pin<Box<dyn Future<Output = Result<bool, BlobError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Whether anything is stored at that address.

fn tenant(&self) -> &str

Whose bytes this handle can reach.

impl Debug for EncryptedBlobs

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.